In-House Inspectors vs Third-Party Inspection Firms: Trade-Offs for Owners

Short answer: most operators run a hybrid. They keep a small core of their own API-certified inspectors who own the inspection plan, the data, the acceptance decisions and supplier oversight. Contractors supply the volume: NDE crews, turnaround surge, offshore campaign labour and source inspectors at fabricator shops. The codes allow either model, but they hold the owner responsible for controlling contract inspectors. Whatever you outsource, the accountability stays with you.

This guide is written for owners and operators: mechanical-integrity managers, QA/QC leads, and HSE functions on capital projects, including offshore. It sets out what API 510, API 570 and API 653 actually allow, what OSHA and other regulators expect when contractors do the work, and how to decide which roles to staff. It also covers the narrower question many project teams ask: should a spec name a recognized source inspector certification, or accept a vendor's own internal qualification? Code references are described in our own words. Confirm the wording against the current edition and your jurisdiction before you write policy around it.

Weighing a hybrid model for your next campaign? Talk to us about contract NDE crews working under your programme. We send a quote within 24 hours.

What the codes allow: owner inspectors, contract inspectors, or both

Direct answer: API's in-service inspection codes do not require you to employ your inspectors. They define an authorized inspection agency broadly enough to cover the owner's own organization or an independent contractor working under the owner's direction. When contract inspectors are used, the owner's inspection programme has to supply the controls.

API 510 is a good example. The 2006 edition, which was incorporated by reference in federal rules and can be read publicly, lists four kinds of authorized inspection agency. They are the jurisdiction's own inspection organization, a licensed insurer's inspection organization, the owner/user's inspection organization, and an independent organization or individual under contract to the owner/user and directed by them. The same edition says the owner/user's programme shall provide the controls needed when contract inspectors are used. API 570 for piping and API 653 for tanks follow the same logic. Each has an authorized inspector, certified by API, who is answerable to the owner/user. Later editions changed wording and numbering, so read your licensed current edition (API 570 is in its 5th edition, February 2024) before quoting a clause.

Some US jurisdictions add another layer for boilers and pressure vessels. The National Board recognizes Owner-User Inspection Organizations (OUIOs). An OUIO is an owner-user with an established inspection programme that meets the National Board's NB-371 accreditation requirements and is acceptable to the jurisdiction. In a state that uses this route, an in-house organization may need accreditation and commissioned inspectors to inspect its own pressure equipment. Without that, the work goes to the state or an insurer's inspectors. Our comparison of API 510 and NBIC commissioned inspectors explains the split. The point for staffing is simple: "in-house" can mean API-certified staff, a National Board-accredited organization, or both. Which one you need depends on where the equipment sits.

None of this changes who is accountable. The owner's programme sets the intervals, accepts the results and approves repairs, whoever holds the probe. Contracting moves labour off your payroll. It does not move responsibility off your organization.

The regulatory overlay when contractors do inspection work

Direct answer: under OSHA process safety management, using contractors creates duties of its own. You must evaluate a contractor's safety performance before selecting it, make sure its people are trained and informed, and keep inspection records that name whoever did the work. The regulator looks at the owner's programme, not the contractor's brochure.

For US onshore facilities covered by OSHA's PSM standard, 29 CFR 1910.119, two paragraphs matter most. Paragraph (h) covers contractors. When selecting one, the employer must obtain and evaluate information about the contractor's safety performance and programmes, and must periodically evaluate how the contractor performs its duties. Paragraph (j) covers mechanical integrity. Inspections and tests must follow recognized and generally accepted good engineering practice, and the inspection record must identify the person who performed the inspection or test. That applies whether the person is your employee or a contractor's. EPA's Risk Management Program rule, 40 CFR Part 68, mirrors these requirements for covered processes. Our page on OSHA PSM mechanical integrity and NDT covers the documentation side in more detail.

Offshore, the framework is different. On the US outer continental shelf, BSEE's Safety and Environmental Management Systems rule (30 CFR 250, Subpart S) requires operators to have contractor selection and contractor-safety elements in their SEMS programme. Classification society rules and flag-state requirements may add to that for floating units. Canadian offshore areas are regulated by the federal-provincial offshore boards. Onshore, provincial pressure-equipment regulators such as ABSA in Alberta and TSSA in Ontario set their own owner-user programme expectations. ABSA's owner-user quality management system requirements are a well-known example. The common thread holds everywhere: regulators audit whether the operator controls its contractors. A large contractor organization is not a substitute for that control. Confirm the exact rules with your jurisdiction and regulator.

What in-house inspectors do better

Direct answer: your own inspectors win on continuity, plant knowledge, data ownership and independence from commercial pressure. Those strengths matter most for inspection planning, acceptance decisions, damage-mechanism review and the long-term health of the equipment record.

• Continuity of judgment. An inspector who has seen the same column through three turnarounds knows which nozzle area pitted last time. They know which CMLs were moved and why, and which "anomaly" is a mill feature. That memory is hard to transfer to a rotating contract crew.
• Ownership of the inspection plan and data. The plan, circuit definitions, corrosion rates and recommendations are the owner's legal record. In-house staff keep them coherent across contractors, which our article on building a CML register that survives ten years explains in detail.
• Independence from the scope. A contractor paid by the job may lean, even unconsciously, toward recommending more work or toward finishing quickly. A staff inspector's incentive is the plant's integrity.
• Integration with operations. Staff inspectors sit in management-of-change reviews, integrity operating window discussions and incident investigations. They connect process changes to inspection consequences.
• Faster response. When a leak or upset happens at 2 a.m., an inspector on site is often worth more than a call-out clause.

The weaknesses are real too. Headcount is fixed while workload is lumpy. Turnarounds can need several times the steady-state inspection labour for a few weeks. Small teams create key-person risk. Certifications must be maintained, and the people who hold them are attractive to competitors. In-house NDE capability across many methods is also expensive to build. Most owners therefore employ inspectors rather than full NDE crews, a split discussed in building an in-house NDT team vs contracting it out.

What third-party inspection firms do better

Direct answer: contractors win on surge capacity, breadth of methods and equipment, geographic reach, and specialist skills you need only occasionally. They also give a visibly independent check, which matters for fabricators, insurers and partners on capital projects.

• Surge capacity. Turnarounds, offshore campaigns and project peaks need people for weeks, not years. Contractors carry that variability for you.
• Method breadth. Advanced techniques such as PAUT, TOFD, corrosion mapping, guided-wave screening and tank-floor MFL each need equipment, procedures and qualified technicians under Level III oversight. Few owners can keep all of that busy year-round.
• Reach. Source inspection at fabricator shops in other states or countries is usually cheaper to buy locally than to fly staff to.
• Independence for third parties. On projects with partners, lenders or insurers, an outside inspection organization can give an independence that an owner's own staff cannot.
• Fresh eyes. An outside team may catch a habit the site has normalized.

The risks mirror the strengths. Crews rotate, so plant knowledge leaks away. Data can end up in the contractor's format and systems unless the contract says otherwise. Quality varies by individual, not by logo. And the owner can slide into treating the contractor's sign-off as its own decision, which the codes do not allow. Each of these risks is manageable, but only if the owner builds the controls deliberately.

The hybrid most operators run: which roles to keep and which to buy

Direct answer: keep decisions, buy capacity. The owner holds the inspection plan, the authorized-inspector role for acceptance, the data and supplier oversight. Contractors provide NDE execution, turnaround surge, specialist techniques and much of the field source inspection, all under owner-written procedures and acceptance criteria.

A useful rule of thumb: if losing the person would erase knowledge you cannot rebuild from records, the role belongs inside. If losing the person means you need another qualified person next week, it can be bought. Owners who are just setting up an in-house function often start with a lead inspector per major site or asset group. That person writes the programme, owns the data and manages a panel of contractors. Headcount then grows only where the contract spend or the risk profile justifies it.

For offshore HSE functions the balance often tilts further toward contractors. Bed space is limited, campaigns are infrequent and travel overheads are high. The owner's in-house core is then onshore: an integrity lead who sets scope, reviews data and holds acceptance, plus contractors who mobilise per campaign. The controls in the next section matter even more there, because the owner is not physically present for much of the work.

Controls that make contract inspection defensible

Direct answer: name the certifications you require, verify them, own the procedures and acceptance criteria, require data in your format, and audit the work. A contractor's internal qualification is acceptable only if you have reviewed it against a written standard and documented that review.

The controls that hold up in audits and incident investigations tend to look like this:

1. A written qualification matrix. List each role (authorized inspector, NDE technician by method, source inspector, coating inspector, welding inspector) with the certification you accept. That might be API 510, 570 or 653 for inspectors, ASNT-based employer certification under SNT-TC-1A or CP-189 for NDE technicians, AWS CWI for welding inspection, or an API source inspector certification. Our guide to specifying API certifications in contractor RFPs gives sample clauses.
2. Verification before mobilisation. Check certificates against the issuing body's register rather than trusting a scanned copy. For API certificates, see how to verify an API inspector certificate. For NDE technicians, ask for the employer's written practice and the individual's certification records signed by the responsible Level III.
3. Owner procedures and acceptance criteria. The contractor's procedure can be used, but the owner should review and accept it before work starts. Acceptance criteria come from the code, the design and the owner's specification, not from the contractor's default.
4. Data format and ownership in the contract. Specify CML identifiers, file formats, raw-data retention and the deadline for delivery. Data that cannot be paired against history has little value.
5. Independent review. Have an owner inspector or an independent Level III review a sample of data and reports. Our article on independent inspection data review explains why owners do this.
6. Performance evaluation. Track findings missed and later found, report rejection rates and re-work. OSHA PSM expects periodic evaluation of contractors; this is how you show it.

Source inspection: recognized certification vs a vendor's in-house qualification

Direct answer: naming a recognized certification in the spec gives you an objective, verifiable baseline and a clean audit trail. Accepting a third-party firm's internal qualification can be fine, but only if you have reviewed that scheme and recorded why it meets your requirement. If a weld fails downstream, the defensible position is the one you can document.

Source inspection, also called vendor or shop inspection, is quality surveillance at the supplier's facility before equipment ships. API publishes API RP 588, Recommended Practice for Source Inspection and Quality Surveillance of Fixed Equipment (first edition July 2019). It covers how to plan risk-based source inspection for vessels, columns, heat exchangers, piping, valves, pressure-relief devices, tubulars and structural fabrications. API's Individual Certification Programs offer a Source Inspector suite. It includes Source Inspector Fixed Equipment (SIFE), Source Inspector Rotating Equipment (SIRE) and Source Inspector Electrical Equipment (SIEE). According to API's SIFE programme page, SIFE is open to applicants with any petroleum or petrochemical experience. It uses a closed-book, multiple-choice exam, and the certification term is three years. Check API's site for current eligibility and exam details.

The trade-off when you write the spec:

• Recognized certification named in the spec. Every bidder knows the requirement, you can verify it independently, and the body of knowledge is public. The downside is a narrower talent pool in some regions, and possibly higher rates where certified people are scarce. Certification also proves knowledge, not competence on a specific product. You still need product-specific experience requirements.
• Vendor in-house qualification accepted. This gives a wider pool and can reflect strong internal training. But the content varies by firm. It is not independently examined, and after an incident you would have to show what the scheme contained and why you accepted it.
• Common middle path. Require a recognized certification for the lead or coordinating source inspector and for hold-point witnessing on high-consequence items. Accept documented internal qualification for lower-risk surveillance, subject to owner approval of each scheme. Record the rationale in your qualification matrix.

Defensibility comes from three things. A clear written requirement, evidence you verified compliance, and an inspection and test plan that shows which hold points your inspector actually witnessed. A certificate alone does not defend a missed defect. A documented, reasonable process applied consistently is what matters. Welding-related hold points often call for a welding inspector certification as well, and NDE at the shop should be done by technicians certified under the fabricator's written practice to the method the code requires.

A worked example: building an in-house core for a mixed portfolio

Consider an operator with two onshore processing sites and a small offshore asset, planning a capital project over the next three years. It currently contracts almost all inspection. It wants more control without hiring a full department. The approach below is described qualitatively; the right numbers depend on your equipment count, risk profile and jurisdiction.

1. Map the work. List equipment by code (API 510 vessels, API 570 piping circuits, API 653 tanks), current intervals and planned turnarounds. Add the capital project's source inspection load by equipment package. This shows the steady-state workload and the peaks.
2. Decide what must be owned. The operator chooses to own the inspection plans, the data system, acceptance decisions and the source inspection coordination role. That points to an integrity lead plus one API-certified inspector per major site to start.
3. Develop the pipeline. Strong NDE technicians or operations staff can work toward API certification while the contractor panel carries the workload. API publishes the education and experience rules for each certification on its ICP pages. Building strong NDE fundamentals first, through ASNT-based training to Level II, makes later API study easier.
4. Restructure contracts. Contracts move from "provide inspection" to "provide NDE and inspection support under the owner's programme". They specify qualification, data format, procedures and performance metrics. A small panel of contractors per method keeps capacity without lock-in.
5. Review annually. Compare contract spend, finding quality and turnaround performance. Hire inward where spend is steady and judgment matters. Keep buying where work is lumpy or specialist.

The outcome is not a fixed ratio. It is a documented rationale for each role, which is exactly what an auditor, insurer or investigator will ask to see.

Common mistakes owners make

• Outsourcing the plan along with the labour. If only the contractor understands the circuit definitions, you have lost control of your own programme.
• Accepting "certified" without saying certified to what. A spec that says "qualified inspector" invites argument. Name the scheme.
• Not verifying certificates. Expired or misrepresented certifications do turn up. Verification takes minutes.
• Letting data live in the contractor's system. When the contract changes, the history should not leave with it.
• Treating the contractor's report as acceptance. The authorized inspector of record, acting for the owner, accepts results and sets the next inspection.
• Hiring certified inspectors without NDE support. An API-certified inspector still needs qualified NDE data. The inspector certification does not certify anyone to perform UT or RT.
• Ignoring knowledge transfer. Require contractors to brief your staff on findings and leave clear records, so experience accumulates with the owner.

How Atlantis supports this

Atlantis is a contract NDE provider. Our ASNT-certified technicians, working under ASNT Level III oversight, perform UT thickness and CML surveys, corrosion mapping, PAUT, TOFD, RT, MT, PT, VT, ET, tank-floor MFL and guided-wave screening. All of it is done under the owner's inspection programme, procedures and data format. We deliver results to your API-certified authorized inspector, who remains inspector of record; we are not an authorized inspection agency and we do not set intervals or approve repairs. For owners building an in-house core, we also offer ASNT SNT-TC-1A training (1,000+ technicians trained) and Level III consulting on written practices. See our inspection services, NDT consulting and ASNT Level III training. Request a quote for contract NDE support; we reply within 24 hours.

FAQ

Should we build an internal API-certified inspector pipeline or lean on third-party inspection firms for capital projects?

Most operators do both. Keep a core of your own certified inspectors to own the plan, the data and acceptance. Use contractors for surge, specialist NDE and remote source inspection. Grow the internal pipeline where spend is steady and plant knowledge matters most.

What are the strategic trade-offs for an offshore HSE function?

Offshore work is campaign-based, bed space is limited and travel overhead is high, so contractors usually supply most field labour. The owner's core sits onshore and controls scope, qualification, data review and acceptance. SEMS on the US outer continental shelf expects documented contractor selection and oversight.

How do peer operators balance in-house and third-party inspection?

The common pattern is "keep decisions, buy capacity". Owners hold the inspection plan, authorized-inspector acceptance and the data system. They contract NDE execution, turnaround surge and specialist techniques under owner procedures. The exact split depends on asset count, risk and how lumpy the workload is.

Is specifying a recognized source inspector certification more defensible than accepting a firm's in-house qualifications?

Usually, because it is objective and independently verifiable. An internal qualification can be acceptable if you reviewed it against a written requirement and recorded why you accepted it. Defensibility depends on documenting that decision and the hold points actually witnessed.

Which API certification covers source inspection?

API's Source Inspector suite: Source Inspector Fixed Equipment (SIFE), Rotating Equipment (SIRE) and Electrical Equipment (SIEE). The fixed-equipment body of knowledge draws on API RP 588. Check API's ICP pages for current eligibility and exam details.

Can a contract inspector be the API 510, 570 or 653 authorized inspector?

Yes. The codes allow an independent organization or individual under contract to the owner/user to act as the inspection agency. The owner's programme must provide the controls, and the owner remains accountable. Some jurisdictions add National Board or state requirements for pressure equipment.

Does OSHA PSM require in-house inspectors?

No. PSM requires the employer to evaluate contractors' safety performance, ensure inspections follow recognized good engineering practice, and keep records naming who performed each inspection. It does not say who must employ the inspector.

What is an Owner-User Inspection Organization?

A National Board term for an owner-user with an established inspection programme that meets NB-371 accreditation requirements and is acceptable to the jurisdiction. Where a state uses it, it lets the owner inspect its own pressure equipment with commissioned inspectors.

Who owns inspection data collected by a contractor?

The contract should say so explicitly: the owner. Specify CML identifiers, formats, raw-data retention and delivery deadlines. Without that, history may stay with the contractor when the contract changes.

Do NDE technicians need API certification?

No. API inspector certifications cover inspection judgment under the codes, not NDE technique. NDE technicians are normally certified by their employer under a written practice based on ASNT SNT-TC-1A or CP-189, with Level III oversight.

Planning your inspection staffing model for the next turnaround or project? Ask our Level III team about contract NDE support.

Related reading: outsourced vs in-house NDT Level III, which applies the same staff-or-contract logic to the Level III role.