Trade guide · NAICS 31-33

Safety program requirements for manufacturing

What OSHA requires of a manufacturing operation's written safety program — obligation by obligation, what a compliant program contains, and what your records have to show.

15 min read Reviewed against current CFR text Sep 2026 By Chip Irek 7 obligation areas
OBLIGATION 01 29 CFR 1910.119(e)

Process Safety Management (if handling highly hazardous chemicals)

What the rule requires

Manufacturing facilities that handle, store, or process highly hazardous chemicals above threshold quantities must implement Process Safety Management (PSM). This includes a written program covering process hazard analysis, operating procedures, mechanical integrity, management of change, and incident investigation. The standard applies to facilities with threshold quantities of listed chemicals such as ammonia, chlorine, or flammable liquids.

What a compliant program contains
  • Process Hazard Analysis (PHA) completed by a qualified team and updated every five years
  • Written operating procedures for each covered process including startup, normal operations, shutdown, and emergency operations
  • Mechanical integrity program for pressure vessels, storage tanks, piping systems, relief and vent systems, and emergency shutdown systems
  • Management of change procedures to review and authorize changes before implementation
Where companies slip

The most common failure is treating PSM as a documentation exercise rather than an operational system. Companies complete the initial PHA but fail to update it when processes change, fail to implement PHA recommendations, or fail to maintain mechanical integrity inspection schedules. An inspector can tell in one question whether your PSM program is real or filed: show me the last three mechanical integrity inspections and what you did when something failed.

What your record has to show
  1. Current PHA for each covered process, dated within the last five years, with team members identified
  2. PHA recommendation tracking showing what was implemented, when, and who authorized any recommendations not implemented
  3. Written operating procedures for each covered process, current and accessible to operators
  4. Mechanical integrity records showing inspection schedules were met and deficiencies corrected before return to service
  5. Management of change approvals for any changes to processes, equipment, or procedures since the last PHA
PSM citations carry among the highest penalties in manufacturing. OSHA's PSM compliance directive is the enforcement reference.
OBLIGATION 02 29 CFR 1910.147

Lockout/Tagout (Control of Hazardous Energy)

What the rule requires

Manufacturing operations must implement a lockout/tagout program whenever employees perform servicing or maintenance on machines or equipment that could unexpectedly start up or release stored energy. The standard requires written, machine-specific procedures for isolating energy sources, training for authorized and affected employees, and periodic inspections of the energy control procedures.

What a compliant program contains
  • Written program documenting the energy control procedures for each piece of equipment requiring lockout
  • Machine-specific procedures identifying energy sources (electrical, hydraulic, pneumatic, thermal, chemical) and isolation steps
  • Sufficient locks and tags for all authorized employees, uniquely identified and not used for other purposes
  • Annual certification of periodic inspections for each procedure, documenting deficiencies and corrective actions
Where companies slip

The most frequent violation is relying on "de-energize and check" rather than written procedures. A general lockout policy is not the same as machine-specific procedures. An inspector will ask to see the lockout procedure for a specific machine, then watch an employee perform it. If the written steps don't match what the machine actually requires, both the procedure and the training are deficient.

What your record has to show
  1. Written energy control procedures for each machine or equipment, current and accessible to authorized employees
  2. Training records for all authorized employees (those who perform lockout) and affected employees (those who operate the equipment)
  3. Annual periodic inspection certifications for each energy control procedure, dated and signed by an inspector other than the authorized employee
  4. Group lockout procedures if multiple employees are working on the same equipment simultaneously
Not sure which of these obligations apply to your operation?

Run the free assessment. Ten minutes of questions about your work, and you get a named list of the programs, trainings, and inspections you're required to hold — not a score out of a hundred.

See what you're missing
OBLIGATION 03 29 CFR 1910.1200

Hazard Communication (HazCom)

What the rule requires

All manufacturing employers with hazardous chemicals in the workplace must implement a written Hazard Communication program. The program must describe how the facility will meet the requirements for labels, Safety Data Sheets (SDS), and employee training. This applies to every facility with chemicals — cleaners, lubricants, solvents, process chemicals — not just facilities handling obviously hazardous materials.

What a compliant program contains
  • Written HazCom program specific to your facility, describing your labeling system, SDS management, and training procedures
  • Chemical inventory list of all hazardous chemicals present in the workplace
  • SDS for every listed chemical, readily accessible to employees during all workshifts
  • Container labels with product identifier, hazard pictograms, signal word, hazard statements, and precautionary statements
Where companies slip

The most common deficiency is incomplete chemical inventory. Companies track obvious chemicals but miss cleaning supplies, maintenance solvents, and incidental materials. If a chemical container is present in the facility and an SDS exists for it, it must be on your inventory and the SDS must be accessible. Secondary containers (spray bottles, smaller containers transferred from bulk) must be labeled unless used immediately by the person who filled it.

What your record has to show
  1. Written Hazard Communication program, facility-specific and dated
  2. Current chemical inventory listing all hazardous chemicals in the workplace
  3. SDS binder or electronic system with sheets for every chemical on the inventory, accessible to all employees
  4. Training records showing employees were trained at hire, when new chemicals are introduced, and when new hazards are identified
OBLIGATION 04 29 CFR 1910.1904

Injury and Illness Recordkeeping (OSHA 300 Log)

What the rule requires

Manufacturing establishments with more than 10 employees at any point during the previous calendar year must maintain OSHA 300, 300A, and 301 forms. The 300 Log records all recordable injuries and illnesses. The 300A Summary must be posted from February 1 to April 30 each year and, for establishments with 250+ employees or 20-249 in certain high-hazard industries, electronically submitted to OSHA.

What a compliant program contains
  • OSHA 300 Log recording each recordable injury or illness within 7 calendar days of learning about it
  • OSHA 301 Incident Reports for each entry on the 300 Log, or an equivalent form capturing the same information
  • OSHA 300A Summary posted conspicuously from February 1 through April 30, signed by a company executive
  • Five-year retention of all 300, 300A, and 301 forms
Where companies slip

The most frequent error is misclassifying recordable injuries as first aid only. Any work-related injury requiring medical treatment beyond first aid is recordable, even if it occurred offsite and even if the employee continued working. Stitches, prescription medications, physical therapy, diagnostic X-rays, and any days away from work or restricted duty trigger recordability. An employee's opinion about whether it's "serious" is not the test.

What your record has to show
  1. Current year 300 Log with all entries made within 7 calendar days
  2. Prior year 300A Summary still posted (or evidence it was posted through April 30)
  3. Five years of 300, 300A, and 301 forms retained and available for inspection
  4. Privacy case list if any cases were recorded as privacy concern cases
Need help determining recordability? Walk through the decision tree at /tools/recordable — free, no account, and you keep the output.

Common questions

Do smaller manufacturing operations really need all these written programs?

Yes, with one threshold exception. Most program requirements scale by hazard, not headcount. If you have hazardous chemicals, you need HazCom. If you have machines with stored energy, you need lockout/tagout. If you handle highly hazardous chemicals above threshold quantities, you need PSM. The one threshold is recordkeeping — the 300 Log requirement applies only if you had more than 10 employees at any point in the previous calendar year.

What's the difference between a policy and a program?

A policy is a statement of intention. A program is a documented system that includes procedures, responsibilities, training, and records. When OSHA requires a "written program," they mean the complete operational system, not a policy statement. The written program is the proof that the system exists and is being implemented.

Can I use a template for these written programs?

You can start with a template, but it must be customized to your facility. A program that says "insert facility name here" or lists equipment you don't have will not pass inspection. The written program must be specific to your actual hazards, your equipment, your procedures, and your workforce. Evidence it's been communicated and implemented is what makes it compliant.

How often do these programs need to be updated?

At minimum, review annually. More importantly, update whenever your work changes — new equipment, new chemicals, new processes, or after an incident that reveals a gap. The regulation doesn't specify a review frequency for most programs, but an outdated program that doesn't reflect current operations is the same as not having one.

Who can write these programs? Do I need a consultant?

You don't need a consultant, but you need someone who understands both the regulations and your operations. The person writing the program should be able to explain how it works to an inspector. Many companies use consultants to draft the initial program, then maintain it internally. Safety Sherpa can generate the first draft from your NAICS code and equipment list — you review and adopt it.

Safety Sherpa is software, not a consultancy. Our tools walk you through the decisions the regulations require and record your reasoning. The determination is yours to make. We don't write your program for you, we don't certify a program, and no software should.

Guides for other trades

All guides →