Records Retention Schedule for OSHA PSM
OSHA PSM names this requirement as "Records of equipment deficiencies outside acceptable limits and their correction before further use — 1910.119(j)(5)". The QA manager owns it, and a contracted Level III can author and sign it.
The finding auditors record against this document is: Contract employee training records showing attendance but not the means used to verify that the employee understood the training. PSM licenses nobody, but it is the reason most refinery and chemical inspection work exists and the reason your paperwork gets audited. The mechanical integrity element requires written procedures to maintain equipment integrity, training for maintenance personnel, inspections and tests performed on process equipment, inspection and testing procedures that follow recognized and generally accepted good engineering practices, frequencies consistent with manufacturers' recommendations and good engineering practices, and documentation of each inspection identifying the date, the name of the person who performed it, the equipment serial number or other identifier, a description of the test and the results. Every NDT report you issue into a PSM plant becomes the host employer's record under that documentation paragraph. Separately, the contractor paragraph puts training, documentation and site-rule duties directly on you.
Source: 29 CFR 1910.119 as published in the eCFR, text current to 1 August 2026 — verified verbatim for (a)(1)(i) and (a)(1)(ii) including the Category 1 flammable gas / flammable liquid with a flashpoint below 100 °F (37.8 °C) at 10,000 pounds (4535.9 kg) or more threshold; (d)(3)(ii) documentation that equipment complies with recognized and generally accepted good engineering practices; (e)(6) five-year process hazard analysis update and revalidation; (h)(1) application and the incidental-services exclusion; (h)(2)(i) through (vi) host duties; (h)(3)(i) through (v) contract employer duties including the training record contents; (j)(1) the six equipment categories; (j)(2) written procedures; (j)(3) training for process maintenance activities; (j)(4)(i) through (iv) inspection and testing and the five documentation items; (j)(5) equipment deficiencies; (j)(6) quality assurance; (k) hot work permits; and (o)(1) through (o)(5) compliance audits at least every three years with the two most recent reports retained. OSHA Instruction CPL 03-00-021, PSM Covered Chemical Facilities National Emphasis Program, information date 17 January 2017 — verified for the inspection process (opening conference, document requests before and after unit selection, PSM overview, initial walkaround, unit selection, Dynamic List questions, inspection of both host and contract employers, citations), for the emphasis on implementation over documentation, and for the specific request of contract employer safety programmes and contract worker training documentation. OSHA penalties page, osha.gov, accessed 21 August 2026, for $16,550 and $165,514. Percentage breakdowns of PSM citations by paragraph circulating online trace to a 1995 article and are not reproduced here.
| Item | What applies | Why it matters |
|---|---|---|
| Regime | OSHA Process Safety Management of Highly Hazardous Chemicals, 29 CFR 1910.119 — Mechanical Integrity and Contractor Requirements | Enforced by Occupational Safety and Health Administration, US Department of Labor; enforced through inspections under the PSM Covered Chemical Facilities National Emphasis Program and by State Plan agencies |
| Document | Records Retention Schedule | how long each record is kept, where, and who can retrieve it during an audit |
| Owner | the QA manager | The signature an auditor traces back |
| Where it is checked | Both the host employer and the contract employers are inspected; contractor safety programmes and contract-employee training records are. | Usually against a sampled job, not in isolation |
| Common failure | Inspection report missing one of the five items the documentation paragraph requires — most often the name of the person who performed the test, or the equipment identifier | The gap between the manual and the job file |
What must a records retention schedule contain under OSHA PSM?
It has to satisfy OSHA PSM as Occupational Safety and Health Administration, US Department of Labor; enforced through inspections under the PSM Covered Chemical Facilities National Emphasis Program and by State Plan agencies enforces it: how long each record is kept, where, and who can retrieve it during an audit. The test is not completeness on paper but traceability — an auditor picks a finished job and works backwards to this document, so anything it claims must be demonstrable on that job.
Who signs the records retention schedule for OSHA PSM?
The QA manager. Because this regime accepts employer-based certification, that role can be filled by a contracted Level III rather than a staff appointment, provided they are qualified in the methods they sign for.
How does a OSHA PSM auditor test this document?
By sampling. They take a completed job, find the technicians and equipment used, and trace each back through this document to the evidence behind it. A document that reads well but cannot survive that trace is the most common finding across every regime, not just this one.
How long must OSHA PSM records be kept?
No certificate, no expiry, nothing to renew. PSM obligations are continuous. The two recurring intervals that shape inspection demand are the process hazard analysis, which must be updated and revalidated at least every five years after completion of the initial analysis, and the compliance audit, where employers must certify at least every three years that they have evaluated compliance with the standard and must retain the two most recent compliance audit reports. Refresher training for employees operating a process is required at least every three years. Contract employer training records must be current for every person you put on site. Retention is set by the regime and by the client contract above it, and the longer of the two governs. Firms that set one retention period for everything and document it fare better at audit than firms tracking different periods per record type and losing track.
Does a generic template satisfy OSHA PSM?
No. A downloaded template describes a generic firm, and the first question an auditor asks is whether the document describes THIS firm — its methods, its equipment, its people, its actual workflow. Templates are a starting structure; the content has to be the firm's own or the trace fails immediately.
What happens if this document is missing at a OSHA PSM audit?
It is a finding, and depending on the regime it can suspend the certificate rather than merely generate a corrective action. The related finding auditors record most often is: Inspection report missing one of the five items the documentation paragraph requires — most often the name of the person who performed the test, or the equipment identifier
Where this sits in the OSHA PSM evidence pack
- Contract employer's safety information and programs, requested from the host employer during a National Emphasis Program inspection
- Contract employer's documentation that each contract employee has received and understood the required training, containing the employee's identity, the date of training and the means used to verify understanding — 1910.119(h)(3)(iii)
- Written procedures to maintain the on-going integrity of process equipment — 1910.119(j)(2)
- Documentation of each inspection and test identifying the date, the name of the person who performed it, the serial number or other identifier of the equipment, a description of the inspection or test, and the results — 1910.119(j)(4)(iv)
- The recognized and generally accepted good engineering practice basis for each inspection procedure and each inspection frequency — 1910.119(d)(3)(ii) and (j)(4)(ii) and (iii)
- Records of equipment deficiencies outside acceptable limits and their correction before further use — 1910.119(j)(5)
- OSHA 300 logs for the previous three years, for the employer and for process-related contractors
- Contract employee injury and illness log required by 1910.119(h)(2)(vi)
- Hot work permits where the contracted scope includes hot work — 1910.119(k)
Personnel certification context
OSHA specifies no certification scheme at all — there is no OSHA NDT certificate and no OSHA-approved certifying body. Qualification enters indirectly, through the requirement that equipment comply with recognized and generally accepted good engineering practices and that inspection and testing procedures follow RAGAGEP. In practice that means API 510, 570 and 653, ASME Section V and ASNT SNT-TC-1A, because those are what the industry recognises. Employer-based certification is therefore fully accepted, and an outsourced Level III who writes the written practice, approves the procedures and certifies the examiners is a defensible RAGAGEP basis. What OSHA does require of you as a contract employer is a record containing the identity of each contract employee, the date of training, and the means used to verify that the employee understood the training.
Related: the OSHA PSM overview, outsourced ASNT Level III cover, written practice development, NDT procedure development, a programme gap assessment, interim Level III cover.