VCA/SCC Certification: What General Contractors Expect from Subcontractors

Why VCA/SCC Has Become a Hard Entry Requirement

General contractors across Germany, the Netherlands, Austria, and Poland no longer treat VCA (Veiligheid, Gezondheid en Milieu Checklist Aannemers) or its German equivalent SCC (Sicherheits Certifikat Contraktoren) as a preference. They treat it as a gate. No certificate, no access to site. This shift happened gradually between 2015 and 2022, driven by stricter enforcement of the EU Temporary and Mobile Construction Sites Directive (92/57/EEC) and insurance pressure on principal contractors.

For a sandwich panel subcontractor, this means the certificate must be valid before the pre-qualification questionnaire is even submitted. Not before mobilisation. Before qualification. Procurement teams at tier-one contractors routinely run automated checks against certification databases. An expired certificate — even by two weeks — disqualifies a bid automatically in many ERP systems.

VCA exists at two levels. VCA* covers smaller companies with fewer than 35 employees working in hazardous environments. VCA** is mandatory for companies that manage or coordinate subcontractors themselves. If you run a sandwich panel crew of eight and subcontract the sealing or crane work to others, you need VCA**, not VCA*. The audit scope changes accordingly: VCA** requires evidence of contractor management procedures, not just personal safety protocols.

The Audit Scope in Practice

The VCA audit covers 17 elements in the standard checklist. Relevant ones for panel installation include:

• Working at height procedures — scaffolding, fall arrest systems, MEWP inspections
• Toolbox meeting records — frequency must typically be at least once per week on active sites
• Personal protective equipment registers — documented issue, inspection, and replacement cycles
• Incident and near-miss reporting — auditors look for a realistic ratio; zero near-misses over 12 months is a red flag, not a positive
• Competency records — crane operator certificates, forklift licences, first aid qualifications
• Risk assessment documentation (RI&E in Dutch, Gefährdungsbeurteilung in German) — must be task-specific, not generic

SCC audits in Germany and Austria follow the same framework but use the German-language checklist version and are conducted by accredited certification bodies such as TÜV, DEKRA, or Bureau Veritas. The pass threshold is 80 percent across all elements, with no single critical element below 50 percent. Critical elements include working at height, chemical hazard management, and emergency procedures.

What General Contractors Actually Check Beyond the Certificate

Holding a valid certificate satisfies the legal and contractual minimum. It does not satisfy an experienced HSE manager on a complex logistics or industrial project. After pre-qualification, expect the following additional scrutiny.

Safety Performance Data

Most tier-one contractors request three years of lost-time injury frequency (LTIF) and total recordable incident rate (TRIR) data. Industry benchmarks for specialist facade and cladding subcontractors typically sit between 3.0 and 6.0 LTIF per million hours worked. A figure above 8.0 triggers further investigation. A figure of 0.0 over three years also triggers questions — it suggests underreporting.

Prepare a structured safety statistics sheet that shows hours worked per year, number of incidents by severity, and trend direction. A downward trend with honest data is more credible than a clean sheet that nobody believes.

Method Statements and Risk Assessments Aligned to the Specific Project

Generic RAMS (Risk Assessment and Method Statements) submitted at tender stage are rejected by most Dutch and German principal contractors. The document must reference the specific panel system being installed — whether that is a PIR-core panel with a typical thickness of 100 to 200mm and a declared thermal transmittance (U-value) of 0.20 to 0.10 W/(m²K) depending on core thickness, or a mineral wool panel used in fire-rated applications to EN 14509.

Reference the actual lifting equipment, the site-specific access constraints, and the sequence of panel installation relative to structural frame completion. A method statement that could apply to any project on any site demonstrates that your safety management is administrative, not operational.

Subcontractor Management Records (VCA** Requirement)

If you hold VCA**, auditors and general contractors expect documented evidence that you apply the same standard to your own subcontractors. This includes signed pre-start declarations, competency verification for specialist trades, and records of safety inspections conducted by your site supervision. Absent these records, your VCA** status becomes difficult to defend in the event of an incident involving a sub-tier supplier.

Common mistake to avoid: Many smaller panel installers obtain VCA* and then take on crane hire or sealant contractors without recognising that this arrangement triggers the VCA** requirement. The legal and contractual exposure is significant. If you coordinate the work of others on site, regardless of how that relationship is documented commercially, you are functioning as a VCA** entity. Get the certificate that matches your actual operations, not the one that was easier to obtain.

Maintaining Certification Between Audit Cycles

VCA and SCC certificates are valid for three years. The renewal audit typically takes place in the final quarter of the certification period. However, the work that determines whether you pass happens continuously, not in the three months before the audit.

Auditors request toolbox meeting records from the full certification period. They review incident logs, PPE inspection sheets, and training records. A company that runs genuine weekly toolboxes generates 150 or more signed records over three years. A company that prepopulates records three months before the audit generates recognisable patterns in dates, handwriting, and attendance that experienced auditors identify immediately.

Practical tip: Assign toolbox documentation to a consistent process — same form, same filing location, same person responsible per site — from the first day of a new certification period. Digital toolbox platforms (several are available that integrate with Dutch NEN-EN-ISO 45001 management systems) automate the audit trail and reduce administrative burden at renewal time.

Internal pre-audits conducted six months before the renewal date are standard practice among panel installation subcontractors that consistently pass first time. Use the published VCA checklist — it is publicly available from SSVV in the Netherlands — and score your own organisation against it honestly. Address the gaps before the external auditor does.

The certificate gets you into the room. Your safety data, your method statements, and your incident records determine whether you stay there and get the order.

If your VCA or SCC certificate expires within the next six months, initiate the renewal process now. Certification bodies in Germany and the Netherlands are running eight to twelve week lead times for audit scheduling. A lapse in certification during an active project creates immediate contractual default risk under most standard subcontract terms, including FIDIC Yellow Book and the Dutch UAV-GC 2005 framework. That is a commercial problem that no amount of good site performance can offset.