Skip to content

Approaching: Nov 20, 2026 — HCS 2024 Deadline. Get ready →

Free OSHA Tool

OSHA Defense Package Readiness

Score how complete and organized your compliance evidence is before a citation lands — the documented-program basis for OSHA's good-faith penalty reduction. No login. No data stored. Runs in your browser.

Verified vs OSHA sources · 2026-10-05

Free tool — no login. HazComFast app is our paid product.

Do you keep each of these — and could you produce it today?

Answer for each evidence category. “Partial” means it exists but is scattered, undocumented, or out of date.

1. Written safety & health programs

That the hazards of your work are addressed by a real program, not improvised. This is the single largest driver of the good-faith reduction.

HazCom 29 CFR 1910.1200(e); Respiratory 1910.134(c)(1); LOTO 1910.147(c)(4); Fall Protection plan 1926.502 — a written, implemented program is the core good-faith criterion (FOM CPL 02-00-164 Ch.6)

2. Training records (dates, topics, workers, trainer)

That each affected worker was trained on the specific hazard before the work — with a signed, dated record. Where no standard requires the record, it is how you show an inspector that the training happened.

HazCom training 29 CFR 1910.1200(h)(1) (no record required); fall-protection training certification 1926.503(b)(1) (written certification record required); some other standards also require a record

3. Corrective-action / CAPA log (dated, owner, completion proof)

That when a hazard or near-miss was found, it was assigned, fixed, and verified — the proof an inspector and an attorney both look for.

29 CFR 1903.19 is the abatement-verification rule (certification of abatement, abatement plans and dates); a good-faith penalty reduction rests on an effective program (FOM chapter 6), and a working corrective-action loop evidences one

4. Self-inspection logs (scheduled, competent person)

That you look for hazards proactively on a schedule — a documented, recurring self-inspection record.

29 CFR 1926.20(b)(2) — frequent and regular inspections of the jobsite, materials, and equipment by competent persons

5. Job Hazard Analyses (JHAs) for your tasks

That each task's steps, hazards, and controls were identified before work began — the document that shows you recognized and controlled the risk.

Recommended practice, OSHA Publication 3071; operationalizes the General Duty Clause (OSH Act 5(a)(1)) and 1926.20(b)(2)

6. SDS library, chemical inventory & container labels

That every chemical on site has a current, reachable SDS, is on your inventory, and is properly labeled — the most-cited HazCom pillars.

SDS readily accessible 29 CFR 1910.1200(g)(8); chemical list 1910.1200(e)(1)(i); labels 1910.1200(f)

7. Competent-person designations

That a qualified, authorized person was named for the activities that require one — with the record to show who and when.

Competent person defined at 29 CFR 1926.32(f); required by the applicable subpart (e.g. scaffolds 1926.451, excavation 1926.651, fall protection 1926.502)

8. Equipment & scaffold inspection records

That the gear that fails most — scaffolds, ladders, PIT/vehicles, cranes — was inspected and tagged out when defective, on a dated log.

Scaffold inspection by a competent person before each shift (29 CFR 1926.451(f)(3)); equipment/vehicle checks (1926.601/1926.602)

9. Near-miss reporting & investigation

That you capture and investigate the free warnings before they become injuries — the mark of a program that manages risk, not just paperwork.

Leading-indicator best practice; root-cause analysis of near-misses evidences a proactive program (supports good faith)

10. OSHA 300 / 300A / 301 recordkeeping

That injuries are recorded correctly and the log is defensible — the record insurers, primes, and OSHA all read.

29 CFR 1904 — injury & illness recordkeeping for covered employers (partial exemptions apply)

11. Organized, timestamped, retrievable on demand

That everything above can be assembled and exported as one dated, organized package — the litigation-ready evidence file, not a scramble through binders.

The difference between having records and having a defense package — records must be producible when a compliance officer or an attorney asks

11 of 11 left to answer.

Free tool — no signup, no account. Want to centralize SDSs and proof? HazComFast (the app) is our paid product.

Next step (recommended)

Turn a citation into a corrective action plan

Use case: Citation defense

Learn more

The OSHA Citation Defense Package: What Evidence Wins a Contest

Related tools

Build the evidence this checklist scores with these free tools:

Need more than free tools? Get inspection-ready SDS management, chemical inventory, and training records with HazComFast—from $69/mo, or start on the free plan.

View plans & start trial

This tool provides general information and is not legal advice.

What is an OSHA defense package?

A defense package is the organized, timestamped body of evidence that proves your safety program is real — the file you can hand a compliance officer at the informal conference or an attorney in a contest. It is not one document; it is the assembled record of your written programs, training, hazard analyses, inspections, corrective actions, and chemical safety data. The difference between havingrecords and having a defense package is whether you can produce them, complete and current, on the day you are asked. This assessment scores that readiness before a citation — the proactive companion to the reactive Inspection Action Plan Builder.

The evidence a defense package is built from

Each category below is something an inspector requests and a well-run program can produce. The tool weights them by defense value; the CFR or recommended-practice basis is noted for each.

EvidenceWhat it provesBasis
Written safety & health programsThat the hazards of your work are addressed by a real program, not improvised. This is the single largest driver of the good-faith reduction.HazCom 29 CFR 1910.1200(e); Respiratory 1910.134(c)(1); LOTO 1910.147(c)(4); Fall Protection plan 1926.502 — a written, implemented program is the core good-faith criterion (FOM CPL 02-00-164 Ch.6)
Training records (dates, topics, workers, trainer)That each affected worker was trained on the specific hazard before the work — with a signed, dated record. Where no standard requires the record, it is how you show an inspector that the training happened.HazCom training 29 CFR 1910.1200(h)(1) (no record required); fall-protection training certification 1926.503(b)(1) (written certification record required); some other standards also require a record
Corrective-action / CAPA log (dated, owner, completion proof)That when a hazard or near-miss was found, it was assigned, fixed, and verified — the proof an inspector and an attorney both look for.29 CFR 1903.19 is the abatement-verification rule (certification of abatement, abatement plans and dates); a good-faith penalty reduction rests on an effective program (FOM chapter 6), and a working corrective-action loop evidences one
Self-inspection logs (scheduled, competent person)That you look for hazards proactively on a schedule — a documented, recurring self-inspection record.29 CFR 1926.20(b)(2) — frequent and regular inspections of the jobsite, materials, and equipment by competent persons
Job Hazard Analyses (JHAs) for your tasksThat each task's steps, hazards, and controls were identified before work began — the document that shows you recognized and controlled the risk.Recommended practice, OSHA Publication 3071; operationalizes the General Duty Clause (OSH Act 5(a)(1)) and 1926.20(b)(2)
SDS library, chemical inventory & container labelsThat every chemical on site has a current, reachable SDS, is on your inventory, and is properly labeled — the most-cited HazCom pillars.SDS readily accessible 29 CFR 1910.1200(g)(8); chemical list 1910.1200(e)(1)(i); labels 1910.1200(f)
Competent-person designationsThat a qualified, authorized person was named for the activities that require one — with the record to show who and when.Competent person defined at 29 CFR 1926.32(f); required by the applicable subpart (e.g. scaffolds 1926.451, excavation 1926.651, fall protection 1926.502)
Equipment & scaffold inspection recordsThat the gear that fails most — scaffolds, ladders, PIT/vehicles, cranes — was inspected and tagged out when defective, on a dated log.Scaffold inspection by a competent person before each shift (29 CFR 1926.451(f)(3)); equipment/vehicle checks (1926.601/1926.602)
Near-miss reporting & investigationThat you capture and investigate the free warnings before they become injuries — the mark of a program that manages risk, not just paperwork.Leading-indicator best practice; root-cause analysis of near-misses evidences a proactive program (supports good faith)
OSHA 300 / 300A / 301 recordkeepingThat injuries are recorded correctly and the log is defensible — the record insurers, primes, and OSHA all read.29 CFR 1904 — injury & illness recordkeeping for covered employers (partial exemptions apply)
Organized, timestamped, retrievable on demandThat everything above can be assembled and exported as one dated, organized package — the litigation-ready evidence file, not a scramble through binders.The difference between having records and having a defense package — records must be producible when a compliance officer or an attorney asks

How the package maps to a lower penalty

OSHA prices a violation with a Gravity-Based Penalty, then applies serial reductions for size, good faith, and history (CPL 02-00-164 Ch.6 (rev. July 14, 2025)). The good-faith reduction — up to 25% (15% with minor program deficiencies) — is the one an employer directly controls, and it is earned by exactly the documented, implemented program this checklist measures. It is combined with the size reduction (up to 70% for 1–25 employees) and history (20% for a clean five-year record).

Two honest limits this tool keeps, and you should too: good faith is not available for willful or repeated violations, and a complete package does not predict a specific dollar figure — it earns the credit and lets you produce the proof. A 2026 serious violation maxes at $16,550, a willful or repeated one at $165,514 (2026 amounts unchanged from 2025 (no CPI adjustment; OMB M-26-11). Not an increase.).

How to read your score

  • Answer honestly. “Partial” is the most important answer — records that exist but are scattered, undocumented, or stale will not produce on demand, and weaken the good-faith position.
  • Read your good-faith tier. The score maps to the OSHA good-faith reduction tier your evidence supports — up to 25% for an effective program, 15% with minor deficiencies, 0% for none — and each gap links to the free tool that builds that evidence.
  • Work the gap list first. Each missing category is both a compliance exposure and a hole in your defense.
  • Re-run it quarterly and before any anticipated inspection, so the score trends up and the improvement is itself documented.
  • Turn the checklist into a package. The goal is not a high score on paper — it is a producible, exportable file the day a citation lands.

Frequently asked questions

What is an OSHA defense package?

A defense package is an organized, timestamped file of the compliance evidence that demonstrates your program is real: written safety programs, dated training records, job hazard analyses, self-inspection and equipment logs, a corrective-action (CAPA) history, and your SDS library and chemical inventory. It is what you produce when a compliance officer or an attorney asks for proof — and it is the documented-program basis for OSHA's good-faith penalty reduction. It is proactive: assembled before a citation, not scrambled together after one.

How much can a defense package reduce an OSHA penalty?

A documented, implemented safety-and-health program is the basis for the good-faith reduction — up to 25% off the gravity-based penalty for a serious or other-than-serious violation (CPL 02-00-164 Ch.6 (rev. July 14, 2025)). It is combined serially with the size reduction (up to 70% for 1–25 employees) and history (20% for a clean five-year record). Two honest limits: good faith does not apply to willful or repeated violations, and no package predicts a specific dollar amount — it earns the credit and lets you produce the record. A serious violation maxes at $16,550 in 2026, willful/repeated at $165,514.

Is a defense package required by OSHA?

There is no single OSHA standard called a 'defense package,' but its individual parts are required: a written HazCom program (29 CFR 1910.1200(e)), worker training (1910.1200(h); for fall protection, with the written certification record of 1926.503(b)(1)), frequent and regular inspections by competent persons (1926.20(b)(2)), accessible SDSs (1910.1200(g)(8)), and injury recordkeeping (29 CFR 1904). The package is simply how you keep those producible on demand — which is where good-faith credit and a strong defense come from.

How is this different from the Inspection Action Plan tool?

This tool is proactive — it scores whether your evidence is complete and organized before any citation. The Inspection Action Plan Builder is reactive — after a citation, it turns it into a prioritized corrective-action plan and evidence checklist with the abatement deadlines. Use this one to prepare, and that one to respond.

Does OSHA accept digital records for a defense package?

Yes. OSHA requires records to be accessible and producible, not paper — for example, safety data sheets must be 'readily accessible' during each shift (29 CFR 1910.1200(g)(8)). A timestamped digital system with a backup satisfies accessibility and makes production fast, which is the difference between having records and having a defense package you can export on demand.

Sources & verification

Regulatory facts verified 2026-10-05 against eCFR, OSHA.gov, and the Federal Register. This tool produces a planning self-assessment; it is not legal advice or a prediction of any specific citation outcome. State-Plan states may set different penalty amounts and procedures.

OSHA inspection action plan →OSHA fine calculator →Respond to a citation →The defense package evidence guide →Assemble it automatically with HazComFast →