PSM splits contractor safety duties between the host employer (1910.119(h)(2)) and the contract employer (1910.119(h)(3)). The host must evaluate contractors before and during the work, inform them of known fire, explosion, and toxic release hazards, explain the emergency action plan, control their entrance, presence, and exit, evaluate their performance periodically, and keep a contract employee injury and illness log. The letters below show where OSHA draws the line between the two employers.

What OSHA Has Said

Feb 16, 2022
Host-provided training for contract employees
A host employer can deliver the hazard and emergency-plan training required by (h)(3)(ii) and prepare the records, but the contract employer must make sure that training and documentation are adequate, including how understanding was verified, keep the records (employee identity, training date, and means used to verify understanding), train new employees before they work, and still provide job-skills training under (h)(3)(i). The contract employer also remains responsible under (h)(3)(iv) for making sure its people follow the facility's safety rules.
Read OSHA Letter ↗
Mar 16, 2005
Controlling who enters the process area
OSHA said the safe work practices required by (f)(4) must control entry into a facility by maintenance, contractor, laboratory, and other support personnel, including supervisors and people only planning future work, so operators know who is in their area and everyone can be accounted for in an emergency. Under (h)(2)(iv), the host must also control the entrance, presence, and exit of contractors. OSHA enforces the procedure the employer writes, and recommends one consistent entry practice for all groups.
Read OSHA Letter ↗
Jan 26, 1993
Shared responsibility, and how to evaluate a contractor
In a letter about ammonia refrigeration maintenance, OSHA described responsibility for contractor safety as shared: the host creates and controls the hazards and has primary responsibility, while the contractor trains its own people. Under PSM, the host must give the contract employer process information and periodically evaluate how the contractor is meeting its training duties. For managers without PSM experience, OSHA suggested training, an outside consultant, or a designated manager, and pointed to its compliance directive.
Read OSHA Letter ↗

⚡ Key Compliance Takeaway

As the host, you own the hazards, so you own the information, the entry controls, and the oversight. You can deliver training and keep records for contractors, but the contract employer still has to confirm it's adequate and keep its own copies. Put each party's duties in writing in the contract, and run all contractors through the same entry and permit practices your own maintenance people use.