Skip to content

Evidence request lists

UK Building Safety Act 2022

Evidence request list. 26 controls, 26 carrying auditor artefact guidance. Generated from the compliance knowledge graph on 12 September 2026. Published by The Art of Service.

AP

UKBSA-2
Accountable Person and Principal Accountable Person

Per UK Building Safety Act 2022: Accountable Person and Principal Accountable Person. Source-grounded summary control covering authoritative framework structure + key obligations. See manifest + log for detailed mapping.

Artefacts an auditor will ask for
  • Authoritative source-grounded evidence for UKBSA-2
Where this commonly fails
  • see authoritative source for detailed gap analysis

BSR

UKBSA-1
Building Safety Regulator and Higher-Risk Building Identification

Per UK Building Safety Act 2022: Building Safety Regulator and Higher-Risk Building Identification. Source-grounded summary control covering authoritative framework structure + key obligations. See manifest + log for detailed mapping.

Artefacts an auditor will ask for
  • Authoritative source-grounded evidence for UKBSA-1
Where this commonly fails
  • see authoritative source for detailed gap analysis

Construction Products and Fire Safety

BSA-CMP
Construction Products Regime and Product Safety

Construction products used in higher risk buildings must comply with applicable product safety requirements, with traceability and supplier obligations under the Construction Products Regulation as amended.

Artefacts an auditor will ask for
  • Product specification register
  • Declaration of Performance documents
  • UKCA or CE marking evidence
  • Substitution control procedure
  • Product recall and incident response procedure
Where this commonly fails
  • Specifications generic, not product specific
  • DoP documents missing or out of date
  • Substitutions made on site without engineering review
  • Recall process untested
BSA-FS
Fire Safety Regulations Compliance Integration

Higher risk buildings must integrate Fire Safety (England) Regulations 2022 obligations and the Regulatory Reform (Fire Safety) Order 2005 with Building Safety Act duties, including external wall, evacuation and PEEP requirements.

Artefacts an auditor will ask for
  • Fire Risk Assessment for residential common parts
  • External wall information (PAS 9980 assessment)
  • Evacuation strategy documentation
  • Personal Emergency Evacuation Plan arrangements
  • Fire safety instructions for residents
  • Secure information box
Where this commonly fails
  • FRA covers internal parts but not external wall
  • PAS 9980 assessment outdated
  • PEEP arrangements absent for disabled residents
  • Resident fire safety instructions not provided in accessible format

Duty Holders and Competence

BSA-COM
Competence Frameworks for Building Sector

Persons carrying out work on higher risk buildings must have the necessary competence (skills, knowledge, experience and behaviours) with employers responsible for verification, supported by sector competence frameworks.

Artefacts an auditor will ask for
  • Competence framework adoption by role
  • Competence assessment records per individual
  • CPD records
  • Third party accreditation evidence
  • Competence verification at appointment
Where this commonly fails
  • Competence assessed via qualifications only
  • CPD records not maintained
  • Verification at appointment is paper only
  • Behavioural competence not assessed
BSA-PC
Principal Contractor Duties

The Principal Contractor for a higher risk building project must plan, manage and monitor the construction work to ensure compliance with Building Regulations and coordinate other contractors.

Artefacts an auditor will ask for
  • PC appointment letter with scope
  • PC competence assessment
  • Construction phase plan covering Building Regulations compliance
  • Site inspection and quality records
  • PC declaration at Gateway 3
  • Subcontractor competence verification
Where this commonly fails
  • PC competence demonstrated only via accreditation, not skills
  • Construction phase plan generic
  • Subcontractor competence accepted at face value
  • PC declaration formality without underlying evidence
BSA-PD
Principal Designer Duties

The Principal Designer for a higher risk building project must plan, manage and monitor the design work to ensure compliance with Building Regulations and coordinate other designers.

Artefacts an auditor will ask for
  • PD appointment letter with scope
  • PD competence assessment
  • Design coordination records
  • Design risk register
  • PD declaration at Gateway 2 and Gateway 3
  • PD insurance evidence
Where this commonly fails
  • PD appointed late in design
  • Competence assessed by self declaration only
  • Coordination across designers weak
  • Risk register not maintained

Funding, Ombudsman and Existing Buildings

BSA-BSL
Building Safety Levy and Funding for Remediation

Developers of certain residential buildings are required to pay the Building Safety Levy to fund cladding remediation, with related funding obligations through the Developer Remediation Contract for in scope developers.

Artefacts an auditor will ask for
  • BSL calculation methodology
  • Payment records and confirmation
  • Developer Remediation Contract execution (where applicable)
  • Provisions in financial statements
  • Annual reporting to government
Where this commonly fails
  • BSL applicability misjudged
  • Calculations underestimate floor area
  • Developer Remediation Contract obligations not tracked
  • Provisioning inadequate
BSA-EXP
Existing Building Compliance and Periodic Review

Accountable Persons must review building safety risk management arrangements periodically and after material changes, ensuring continued compliance with statutory duties and best practice.

Artefacts an auditor will ask for
  • Annual safety case review and update
  • Material change procedure and log
  • Internal audit of duty compliance
  • External assurance reports
  • BSR engagement record (assessments, inspections)
  • Continuous improvement plan
Where this commonly fails
  • Annual review not performed
  • Material change procedure absent
  • Internal audit not extended to building safety
  • BSR engagement reactive only
BSA-NHQ
New Homes Ombudsman and Developer Behaviour

Developers of new homes will be required to belong to the New Homes Ombudsman scheme providing redress for purchasers including in relation to building safety related defects.

Artefacts an auditor will ask for
  • Developer NHO membership confirmation
  • Complaint handling procedure aligned to NHO
  • Customer charter referencing NHO
  • Annual NHO performance reporting
  • Internal training on NHO process
Where this commonly fails
  • NHO membership relied on without internal alignment
  • Complaint procedure not updated
  • Customer charter silent on NHO
  • Performance reporting not used internally

Gateways

UKBSA-5
Gateways, Competence, Enforcement

Per UK Building Safety Act 2022: Gateways, Competence, Enforcement. Source-grounded summary control covering authoritative framework structure + key obligations. See manifest + log for detailed mapping.

Artefacts an auditor will ask for
  • Authoritative source-grounded evidence for UKBSA-5
Where this commonly fails
  • see authoritative source for detailed gap analysis

Gateways and Building Control

BSA-G2
Gateway 2 Building Control Approval Before Construction

Before construction work begins on a higher risk building project the Building Safety Regulator must give Building Control approval at Gateway 2, confirming the design meets Building Regulations.

Artefacts an auditor will ask for
  • Gateway 2 application package
  • Design documents including fire and structural strategy
  • Competence declarations for Principal Designer and Principal Contractor
  • BSR approval letter
  • Change control procedure for post approval design changes
  • Major change applications and approvals
Where this commonly fails
  • Gateway 2 application missing fire strategy detail
  • Competence declarations generic
  • Design changes proceeded without major change application
  • Approval letter conditions not tracked
BSA-G3
Gateway 3 Completion and Occupation

Before a higher risk building is occupied the Building Safety Regulator must give a completion certificate at Gateway 3 confirming that the work has been completed in accordance with Building Regulations.

Artefacts an auditor will ask for
  • Gateway 3 application package
  • As built information and golden thread handover
  • Competence declarations for Principal Designer and Principal Contractor
  • BSR completion certificate
  • Building handover protocol to AP
  • Defects log resolved before completion
Where this commonly fails
  • Gateway 3 sought without as built information complete
  • Golden thread handover incomplete
  • Occupation commenced before certificate issued
  • Defects deferred past completion

Golden Thread and Safety Case

BSA-S78
Golden Thread of Information

The Accountable Person must keep specified information and documents relating to the higher risk building, accessible, accurate and up to date, forming the golden thread that follows the building through its life cycle.

Artefacts an auditor will ask for
  • Golden thread document specification matched to Schedule 1 of regulations
  • Document management system with version control and access controls
  • Information transfer log when AP changes
  • Periodic information audit
  • Resident access provisions for prescribed information
  • Format compliance (electronic, accessible)
Where this commonly fails
  • Golden thread limited to paper records
  • Versioning weak, latest version unclear
  • Information transfer at AP change is incomplete
  • Resident access not provided
BSA-S83
Safety Case Report Preparation and Maintenance

The Principal Accountable Person must prepare and keep updated a safety case report identifying building safety risks and demonstrating reasonable steps to control them.

Artefacts an auditor will ask for
  • Safety case report structured to BSR guidance
  • Building safety risk assessment covering fire spread and structural failure
  • Hazard identification log with severity, likelihood and control mapping
  • Reasonable steps justification per risk
  • Safety case review schedule and update log
  • Independent challenge or assurance over safety case
Where this commonly fails
  • Safety case is a compilation of existing documents without integrating narrative
  • Hazard identification limited to fire, structural risks omitted
  • Reasonable steps test not applied (cost benefit absent)
  • Updates triggered by inspection only, not material change

Higher Risk Buildings, Accountable Persons and Registration

BSA-CL
Client Duties for Higher Risk Buildings

The Client for a higher risk building project must make suitable arrangements for managing the project, including appointing competent dutyholders and providing pre construction information.

Artefacts an auditor will ask for
  • Client appointment of PD and PC with competence verification
  • Pre construction information pack
  • Adequate time and resource provision for project
  • Project arrangements review
  • Client declarations at gateways
Where this commonly fails
  • Competence verification of PD and PC superficial
  • PCI incomplete
  • Time and resource pressure compromising compliance
  • Client passive during construction
BSA-S31
Identification of Higher Risk Buildings

A building is a higher risk building if it is at least 18 metres in height or has at least 7 storeys, and contains at least 2 residential units (in occupation phase) or meets the criteria during design and construction.

Artefacts an auditor will ask for
  • Portfolio survey identifying all buildings against HRB criteria
  • Measurement methodology aligned to Higher Risk Buildings (Descriptions and Supplementary Provisions) Regulations 2023
  • Documentary evidence of height and storey count
  • Residential unit count records
  • HRB register submitted to Building Safety Regulator
  • Decision log where building falls just below threshold
Where this commonly fails
  • Measurement uses inconsistent methodology
  • Mezzanine and roof structures not included in storey count
  • Mixed use buildings assessed incorrectly
  • HRB register not refreshed after alterations
BSA-S72
Accountable Person Identification and Registration

An Accountable Person is the person who holds the legal estate in possession of the common parts of a higher risk building or has a repairing obligation. Each AP must be identified and registered with the Building Safety Regulator.

Artefacts an auditor will ask for
  • Legal analysis of estate ownership and repairing obligations
  • AP and Principal Accountable Person designation document
  • BSR registration confirmation
  • Multi AP coordination agreement (where multiple APs exist)
  • AP change notification records
  • Tenure and title document references
Where this commonly fails
  • AP identified by convention not legal analysis
  • PAP nominated without written agreement among APs
  • Registration not updated after corporate restructure
  • Coordination between multiple APs informal
BSA-S74
Building Registration with Building Safety Regulator

Each higher risk building in occupation must be registered with the Building Safety Regulator. Registration includes Key Building Information and confirmation of accountable person.

Artefacts an auditor will ask for
  • BSR registration submission and confirmation
  • Key Building Information data set
  • Refresh of KBI on material changes
  • Internal procedure for keeping KBI current
  • Evidence of fee payment to BSR
Where this commonly fails
  • Registration submitted but KBI fields incomplete
  • KBI refresh ad hoc, no defined trigger
  • Material changes not flagged to BSR
  • Internal owner of registration unclear

Mandatory Occurrence Reporting and Enforcement

BSA-S95
Mandatory Occurrence Reporting

Accountable Persons must report certain safety occurrences in or to higher risk buildings to the Building Safety Regulator within statutory timescales.

Artefacts an auditor will ask for
  • MOR procedure with examples and thresholds
  • MOR reporting log with BSR submission confirmations
  • Internal detection mechanisms (incidents, near misses)
  • Staff and contractor training on MOR triggers
  • Post report review and remediation
Where this commonly fails
  • MOR threshold misunderstood, reports late or missed
  • Detection relies on resident complaints
  • Contractors not aware of MOR obligations
  • No remediation after MOR submission
BSA-SP
Special Measures and Enforcement by Regulator

Where an Accountable Person fails to comply with duties the Building Safety Regulator can issue compliance notices, special measures orders and prosecution, with personal liability for senior managers in certain circumstances.

Artefacts an auditor will ask for
  • Compliance notice response procedure
  • Senior manager accountability documentation
  • Internal escalation on regulator engagement
  • Special measures readiness plan
  • Legal review on personal liability exposure
Where this commonly fails
  • No procedure for compliance notice response
  • Senior managers unaware of personal liability
  • Escalation routes not defined
  • No legal review of liability

Resident Engagement and Complaints

BSA-LLE
Leaseholder Protections and Service Charge Limits

Schedule 8 of the Act protects qualifying leaseholders from cladding remediation costs and limits other building safety costs that can be recovered through service charges, with landlord certificates and resident management responsibilities.

Artefacts an auditor will ask for
  • Landlord certificate for relevant buildings
  • Qualifying leaseholder determination
  • Service charge demands aligned to Schedule 8 caps
  • Information provision to leaseholders
  • Dispute and redress process
Where this commonly fails
  • Landlord certificate absent or expired
  • Qualifying lease determination relies on resident self declaration
  • Service charge demands exceed Schedule 8 caps
  • Information to leaseholders unclear
BSA-S88
Resident Engagement Strategy

Each Accountable Person must prepare and follow a residents' engagement strategy promoting participation in decisions on building safety. The strategy should be appropriate to the building and its occupants.

Artefacts an auditor will ask for
  • Residents' engagement strategy document
  • Consultation with residents on the strategy
  • Engagement activities log (meetings, newsletters, surveys)
  • Multi language and accessibility provision
  • Annual strategy review
  • Resident feedback log and response
Where this commonly fails
  • Strategy adopted without resident consultation
  • Single channel (notice board) used for all communication
  • No accessibility considerations
  • Strategy not reviewed annually
BSA-S92
Complaints Procedure

Each Accountable Person must establish a complaints procedure to handle complaints about a building safety risk or compliance with duties under the Act, with escalation to the Building Safety Regulator.

Artefacts an auditor will ask for
  • Documented complaints procedure
  • Complaints register with categorisation
  • Response time SLAs
  • Escalation route to BSR signposted
  • Annual complaints trend report
  • Resident notification of how to complain
Where this commonly fails
  • Generic complaints procedure not building safety specific
  • BSR escalation route not signposted to residents
  • Response times exceed reasonable expectations
  • Trend analysis not performed

Residents

UKBSA-4
Resident Engagement and Mandatory Reporting

Per UK Building Safety Act 2022: Resident Engagement and Mandatory Reporting. Source-grounded summary control covering authoritative framework structure + key obligations. See manifest + log for detailed mapping.

Artefacts an auditor will ask for
  • Authoritative source-grounded evidence for UKBSA-4
Where this commonly fails
  • see authoritative source for detailed gap analysis

Safety Case

UKBSA-3
Safety Case Report and Building Assessment Certificate

Per UK Building Safety Act 2022: Safety Case Report and Building Assessment Certificate. Source-grounded summary control covering authoritative framework structure + key obligations. See manifest + log for detailed mapping.

Artefacts an auditor will ask for
  • Authoritative source-grounded evidence for UKBSA-3
Where this commonly fails
  • see authoritative source for detailed gap analysis
Assembled from the framework's own control set. Every line traces to a control in the graph, so this pack is regenerated rather than written, and stays current as the graph does.

Assembled from the framework’s own control set, so this list is regenerated rather than written and stays current as the graph does.