Construction runs on paperwork. Before a single brick is laid there are risk assessments, method statements, drawings and permits; during the build there are inspections, certificates and test results; and at handover there are operation and maintenance manuals and as-built drawings that someone will need to find years later. On a good day it all flows. On a bad day the version on the site laptop is three revisions out of date, the certificate an inspector wants is in someone's inbox, and handover slips because the O&M pack is not ready.
Since the Building Safety Act 2022, that admin has stopped being just an inconvenience and become a matter of legal compliance. This is a practical look at the documents a construction project depends on, what the Act's golden thread now requires, and how to manage it all so the right record is always current, findable and provable.
The documents a construction project runs on
Every project generates a core set of records that have to be produced, controlled and kept. Lose control of these and you lose control of the job:
| Document | Why it matters | Kept |
|---|---|---|
| RAMS | Risk assessments and method statements set out how work is done safely. The version on site must always be the current one. | Life of the project, plus records of who was briefed |
| Construction phase plan | Required under CDM 2015; sets out how health and safety is managed during the build. | Throughout construction |
| Health & safety file | Required under CDM 2015 and handed to the client; holds the information needed for future maintenance, cleaning, refurbishment or demolition. | Life of the building |
| O&M manuals | Tell the building's operators how to run and maintain it safely and correctly. | Operational life of the building |
| As-built drawings | Record what was actually built, not just what was designed, essential for any later work. | Operational life of the building |
| Certificates & test results | Prove materials, systems and installations meet standards, from fire doors to electrical testing. | Life of the building / per standard |
| Subcontractor docs & insurances | Competence, qualifications and cover, needed to demonstrate a safe, compliant supply chain. | Duration of engagement, plus liability periods |
None of this is new work. What has changed is how well you are now expected to be able to prove you have it, and to produce the right version on demand.
The golden thread: what the Building Safety Act now demands
The golden thread came into force with the new building safety regime on 1 October 2023. It requires those involved in a building's life cycle to create and maintain a single, electronic record of its safety-critical information, kept secure, accessible and understandable to the people who need it, and kept up to date throughout the building's life. Named, accountable individuals are responsible for its accuracy, and in 2026 the emphasis has firmly shifted from understanding the rules to demonstrating compliance with them.
The duties apply to higher-risk buildings, defined as buildings at least 18 metres tall or with at least 7 storeys that contain at least two residential units. The client is ultimately responsible for the golden thread and for making sure the other dutyholders play their part, though it can delegate the day-to-day duties to the principal designer during design and the principal contractor during construction. Accountability for accurate, current information, however, does not go away.
Even if you never touch a higher-risk building, this matters. The golden thread is fast becoming the standard that clients, insurers and principal contractors expect across the whole industry. It builds directly on duties that already exist for every project under CDM 2015, such as the health and safety file. The bar for how construction records are managed has been raised for everyone.
Why shared drives and email don't cut it any more
Most of the real risk is not that the documents do not exist, it is that no one can trust which copy is current or prove its history. Managed on shared drives, email threads and site laptops, safety-critical records fail in predictable ways:
- Version chaos. Three copies of the same RAMS in three places, and no certainty which one the team on site is actually working to.
- No audit trail. When something goes wrong, you cannot show who had access to what, or when a document was issued, changed or superseded.
- Lost at handover. The O&M pack and as-builts are assembled in a panic at the end, and gaps only surface months later when someone needs them.
- Unprovable compliance. Having the document is not enough under the golden thread; you have to be able to demonstrate it is current, secure and accessible. A folder on a drive cannot do that.
The consequences are real: failed inspections, delayed handovers, disputes, and liability that can follow a building for its entire life.
What good construction document management looks like
Whether or not the golden thread applies to your projects, the qualities it demands are simply what good document control has always looked like, done properly:
- A single source of truth, so there is one current version of every document and everyone works from it.
- Version control, so superseded documents are retained but can never be mistaken for the live one.
- Controlled access, so the right people, including subcontractors, see exactly what they should and nothing they should not.
- A tamper-evident audit trail, so you can prove who did what, and when, to any record.
- Automatic retention, so records are kept for the right period and the health and safety file survives the life of the building.
- Fast retrieval and handover, so producing a certificate for an inspector, or a full O&M pack for the client, takes seconds rather than days.
Where DocFlow fits
DocFlow is built to be exactly that single source of truth. As documents come in, in whatever form, Aida captures and classifies them and extracts the key details automatically, so a RAMS, a test certificate or an as-built drawing is filed correctly the moment it arrives rather than dropped in a folder to sort out later. Workflow automation handles reviews, approvals and sign-offs, so nothing goes to site without the right authorisation, and every version is tracked. Behind every record sits a tamper-evident audit trail and automatic retention, so you can demonstrate a document is current, secure and accessible, which is precisely what the golden thread asks of you. And because DocFlow can be fully self-hosted, sensitive project information stays under your control with zero data egress.
If you are still moving projects off paper and shared drives, our guide on document digitisation is a good next step, and our overview of how long to keep business records covers the retention side. To see how it all comes together for a construction business, take a look at DocFlow for the construction sector.