Subcontractor compliance: W-9, OSHA & mandatory docs

Construction supply chains in the United States involve multiple tiers of subcontractors, each carrying distinct legal obligations around tax, health and safety, competence, and worker welfare. For general contractors and project owners, verifying subcontractor compliance is not discretionary good practice. It is a legal requirement enforced through the IRS, the Occupational Safety and Health Administration (OSHA), state licensing boards, and local building authorities, with penalties that range from back taxes and civil fines to criminal prosecution.

According to OSHA's 2024 census data, the construction sector accounted for the highest number of fatal workplace injuries of any industry in the United States — 1,069 deaths — despite representing only about 5% of the total workforce (Bureau of Labor Statistics — Census of Fatal Occupational Injuries 2024). The "Fatal Four" hazards (falls, struck-by, electrocution, caught-in/between) continue to account for over 60% of construction fatalities. Rigorous subcontractor vetting is the primary mechanism to reduce these figures and ensure regulatory compliance across the supply chain.

The regulatory framework for construction subcontracting in the US

Multiple federal and state regulatory pillars govern how general contractors and subcontractors interact in the US construction industry.

IRS independent contractor classification and Form W-9

The IRS requires general contractors to verify the tax identification of every subcontractor before making payments using Form W-9. The W-9 collects the subcontractor's Taxpayer Identification Number (TIN) — either a Social Security Number (SSN) or Employer Identification Number (EIN) — which is used for 1099-NEC reporting.

General contractors must issue Form 1099-NEC to any subcontractor paid $600 or more in a calendar year. Failure to obtain a valid W-9 before payment triggers backup withholding at 24% of the payment amount. The IRS worker classification rules (common law test, behavioral control, financial control, type of relationship) determine whether a worker is an employee or independent contractor — misclassification carries severe penalties.

OSHA safety requirements

OSHA's construction standards (29 CFR 1926) place explicit duties on employers — including general contractors exercising control over a worksite — to ensure safe working conditions for all workers on site (OSHA — Construction Standards). Under the multi-employer citation policy, OSHA can cite a general contractor for hazardous conditions created by a subcontractor if the general contractor had the authority to control the hazard or the responsibility to ensure compliance.

This means general contractors cannot simply delegate safety responsibility to subcontractors. They must verify that subcontractors have adequate safety programs, training documentation, and the competence to perform work safely.

State contractor licensing requirements

Unlike the UK's national framework, US contractor licensing is governed at the state and municipal level. Most states require general contractors and many specialty subcontractors to hold a valid state license. Requirements vary significantly:

• California (CSLB): Mandatory licensing for all contractors performing work valued above $500, with trade-specific classifications
• Florida (DBPR): State certification or county registration required, with continuing education mandates
• Texas: No statewide general contractor license, but specialty trades (electrical, plumbing, HVAC) require state licensing
• New York: Licensing requirements vary by city and county; NYC requires a DOB license for general contractors

Hiring an unlicensed subcontractor exposes the general contractor to liability, potential voiding of the construction contract, and fines in most jurisdictions.

Mandatory documents for construction subcontractors

The table below summarizes the core documents that general contractors must collect and verify for each subcontractor operating on US construction sites.

W-9 and 1099 compliance: the tax cornerstone

Form W-9 must be collected before making the first payment to any subcontractor. The form provides the TIN that the general contractor uses to report payments on Form 1099-NEC. If a subcontractor refuses to provide a W-9 or provides an incorrect TIN, the general contractor must withhold 24% of all payments as backup withholding and remit it to the IRS.

Common pitfall: Many general contractors collect a W-9 once and never update it. If the subcontractor changes their business structure (sole proprietorship to LLC, for example), the original W-9 is invalid. The IRS can issue B-Notices requiring TIN verification, and penalties of $50 to $280 per incorrect 1099 filing add up quickly across large subcontractor rosters.

Worker misclassification is an even larger exposure. The IRS, the Department of Labor, and state agencies actively audit construction companies for misclassifying employees as independent contractors. Penalties include back employment taxes (employer's share of FICA), penalties of up to 100% of unpaid taxes, and potential criminal prosecution for willful violations (IRS — Independent Contractor or Employee).

OSHA training and safety documentation

OSHA requires that construction workers receive training appropriate to their job hazards. The OSHA 10-Hour (for workers) and 30-Hour (for supervisors) Outreach Training Programs are the industry baseline, though they are not strictly mandated by federal OSHA — several states and many project owners require them by contract or local ordinance.

Subcontractors must also maintain written safety programs (hazard communication, fall protection, scaffolding, excavation, electrical safety), conduct regular toolbox talks, and document all training. The general contractor must verify this documentation exists and is current before allowing a subcontractor on site.

OSHA penalties as of 2025: up to $16,131 per serious violation and up to $161,323 per willful or repeated violation. In 2024, OSHA's Severe Violator Enforcement Program (SVEP) in construction resulted in average penalties exceeding $250,000 for companies with multiple serious violations (OSHA — Penalties).

Employment eligibility verification: E-Verify and I-9

All US employers — including subcontractors — must verify the identity and employment authorization of every worker using Form I-9 before work begins. E-Verify is an internet-based system operated by USCIS that allows employers to confirm I-9 information electronically against federal databases (E-Verify — USCIS).

While E-Verify is voluntary for most private employers, it is mandatory for federal contractors and subcontractors under the FAR E-Verify clause (FAR 52.222-54). Many states — including Arizona, Mississippi, Alabama, and South Carolina — require all or most employers to use E-Verify. General contractors on federal projects must ensure subcontractors are enrolled in and using E-Verify.

Civil penalties for I-9 violations range from $252 to $2,507 per employee for first offenses, escalating to $2,507 to $6,269 for repeat violations. Criminal penalties for knowingly hiring unauthorized workers can reach $3,000 per employee and up to six months imprisonment.

Penalties for non-compliance

The enforcement landscape for construction subcontractor compliance involves multiple federal and state agencies, each with independent penalty powers.

IRS penalties for misclassification and reporting failures

Worker misclassification penalties include 1.5% of wages (income tax withholding), 20% of employee's share of FICA, plus the full employer's share of FICA. If the IRS determines willful misclassification, penalties double and criminal prosecution is possible. The Section 530 safe harbor defense may apply if the contractor had a reasonable basis for classification, but reliance on this defense requires specific documentation.

For 1099 reporting failures, penalties range from $50 per form (filed within 30 days of due date) to $310 per form (filed after August 1), with a maximum of $630 per form for intentional disregard.

OSHA enforcement

OSHA inspectors can issue citations for serious, other-than-serious, willful, and repeated violations. Serious violations carry a mandatory penalty of up to $16,131 each. Willful violations carry penalties of up to $161,323 each. Failure to abate a cited hazard results in penalties of up to $16,131 per day. In severe cases, OSHA refers matters to the DOJ for criminal prosecution, which can result in imprisonment for up to six months for a first offense if a willful violation causes a worker's death.

State licensing board enforcement

Operating without a required contractor's license can result in fines ranging from $500 to $15,000 or more depending on the state, criminal misdemeanor charges, voiding of the construction contract (the subcontractor may lose the right to payment), and debarment from future work. In California, the Contractors State License Board can impose penalties of up to $15,000 per violation and refer egregious cases for criminal prosecution.

Automating subcontractor compliance verification

Managing compliance across a construction supply chain manually is error-prone and resource-intensive. A general contractor working with 30 subcontractors faces approximately 250+ document checks per year, each requiring verification of authenticity, validity dates, and scope of coverage.

The case for automation

Manual processes create three structural risks: documents expire between scheduled reviews, forged or altered documents go undetected without systematic authenticity checks, and audit trails are incomplete when stored across emails and shared drives. A single expired workers' compensation certificate discovered during an OSHA inspection can trigger a project shutdown and penalties.

Document verification platforms like CheckFile.ai automate the collection, validation, and monitoring of subcontractor compliance documents. Automated expiry alerts, real-time authenticity checks, and centralized audit trails reduce the compliance burden from hours per subcontractor to minutes. Our data from over 180,000 documents processed monthly across regulated sectors confirms a 94.8% fraud detection rate and an 83% reduction in manual review time. View pricing plans designed for construction supply chains.

For a comprehensive overview, see our industry document verification guide.

Frequently asked questions

Does Form W-9 need to be collected for every subcontractor?

Yes. The IRS requires a valid W-9 from every subcontractor before the first payment. Without it, the general contractor must withhold 24% of all payments as backup withholding. The W-9 provides the TIN used for 1099-NEC reporting. A new W-9 should be requested whenever the subcontractor changes their legal name, business structure, or TIN.

Can a general contractor be cited by OSHA for a subcontractor's safety violations?

Yes. Under OSHA's multi-employer citation policy, a general contractor who has supervisory authority over a worksite can be cited as a "controlling employer" for hazardous conditions created by a subcontractor, even if the general contractor's own employees are not exposed. OSHA expects general contractors to exercise reasonable care in preventing and detecting violations by subcontractors on site.

What happens if a subcontractor is not properly licensed?

The consequences vary by state but typically include fines, criminal misdemeanor charges, and potential voiding of the construction contract. In many states, an unlicensed contractor cannot enforce payment for work performed. The general contractor may also face penalties for hiring an unlicensed subcontractor, including potential liability for the subcontractor's work quality and worker injuries.

How often should subcontractor compliance documents be reviewed?

W-9s should be verified at each new engagement. Insurance certificates should be checked at renewal (annually) and verified as current before each project. OSHA training cards should be verified at each site orientation. Safety plans should be reviewed before each new project. As a minimum, a full compliance review of each subcontractor should be conducted annually or at contract renewal, whichever comes first.

---

This article is for informational purposes only and does not constitute legal, financial, or regulatory advice. Consult an attorney specializing in construction law for advice tailored to your circumstances. Information current as of March 2026.

See also: Industry verification guide | Vendor compliance certificate verification | KYB: complete guide to business entity verification

---

Take action

CheckFile verifies 180,000 documents per month with 98.7% OCR accuracy. Test the platform with your own documents — results within 48h.

Request a free pilot