Is a written IIPP legally required?

It depends on jurisdiction and industry. California employers must maintain a written IIPP (Cal. Title 8 §3203). Federal OSHA requires effective hazard programs and recordkeeping but does not prescribe one single named "IIPP" document for every employer.

Can the IIPP be signed electronically?

Yes. Electronic signatures are generally valid under the ESIGN Act (15 U.S.C. §7001) and UETA in adopted states, provided intent, consent, attribution, and retention requirements are met.

Who should sign the document?

An authorized company representative—typically senior management or the assigned safety coordinator—should sign, showing organizational approval and assignment of responsibility.

Do I need a notary or witnesses?

Most jurisdictions do not require notarization for an IIPP; specific state or contract conditions may require additional authentication—verify if a third party requires notarized acceptance.

How often must the IIPP be updated?

Update at least annually and after significant incidents, operational changes, or regulatory updates to ensure current hazard controls and training reflect site conditions.

How long should I keep IIPP records?

Maintain training and inspection records for a minimum of three years; retain OSHA-specific injury records per 29 CFR §1904.33 and HIPAA-related materials for six years (45 CFR §164.530(j)).

Electronic Signature
Templates
Miscellaneous
Business IIPP Document

Business IIPP Document

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

BUSINESS INJURY AND ILLNESS PREVENTION PROGRAM AGREEMENT

This Agreement is entered into between Client Name: and Provider Name: (together, the "Parties"), effective as of the Effective Date set forth below.

WHEREAS

WHEREAS, Client operates a business at Program Location: and seeks to implement and maintain a written Injury and Illness Prevention Program ("IIPP") to reduce workplace hazards, prevent occupational injuries and illnesses, and satisfy applicable legal obligations; and

WHEREAS, Provider is duly qualified and experienced in developing, delivering and administering workplace health and safety programs and agrees to provide services described in this Agreement; and

WHEREAS, the Parties desire to set forth the scope, payment terms, responsibilities, confidentiality, and other terms governing Provider's development, implementation, training, monitoring and recordkeeping for Client's IIPP.

SCOPE OF WORK

Services to be Provided

Provider shall perform the services described above, which shall include, at minimum: (a) a written hazard assessment and IIPP document tailored to Client operations; (b) on-site hazard inspections and corrective action recommendations; (c) development of written procedures for training, reporting, and incident investigation; (d) delivery of employee and supervisor training as specified; and (e) assistance with recordkeeping and periodic program reviews.

PAYMENT TERMS

Total Fee Payment Schedule Invoices and Due Date Late Fee

All payments are due in U.S. dollars. Client shall pay Provider the fees set forth above in accordance with the payment schedule. Provider may suspend services for failure to pay amounts due after written notice and a cure period of the number of days specified in Notice Period below.

TERM AND TERMINATION

Term Start Date: . Term End Date: .

Notice Period for Termination

Either Party may terminate this Agreement for material breach by the other Party if such breach is not cured within the notice period specified above after written notice. Either Party may terminate for convenience upon the same notice. Termination shall not relieve Client of the obligation to pay for services performed and reimbursable expenses incurred prior to termination.

INJURY AND ILLNESS PREVENTION PROGRAM COMPONENTS

1. Program Administration: Client designates the following Program Administrator who shall have responsibility and authority to implement and maintain the IIPP:

Program Administrator Name Administrator Contact Information

2. Hazard Assessment and Inspection: Provider shall conduct an initial hazard assessment and periodic inspections at the frequency specified below and shall document findings and recommended corrective actions.

Inspection and Assessment Frequency Inspection Documentation Location

3. Training: Provider shall prepare and deliver training for employees and supervisors addressing hazard recognition, safe work procedures, reporting requirements, and the procedures for return-to-work where applicable.

Training Frequency Training Record Retention

4. Incident Reporting and Investigation: All work-related injuries, illnesses, near misses and hazardous conditions must be reported to Program Administrator within Reporting Timeframe: . Provider will assist with investigation and root-cause analysis and will document corrective actions and completion dates.

Corrective Action Response Timeframe

5. Recordkeeping: Provider shall maintain program documents, inspection reports, training records, and investigation reports in the record location specified above and retain records for Record Retention Period: , unless otherwise required by law.

CONFIDENTIALITY

Each Party acknowledges that in the course of performing this Agreement it may receive or have access to confidential, proprietary, or sensitive information of the other Party, including but not limited to workplace injury records, personnel medical information, corrective action plans, and internal safety analyses ("Confidential Information"). Each Party shall: (a) hold Confidential Information in strict confidence; (b) use such information solely for the purposes of performing its obligations under this Agreement; (c) restrict disclosure to its employees, agents or contractors who have a need to know and who are bound by confidentiality obligations no less protective than those herein; and (d) not disclose Confidential Information to any third party without prior written consent, except to the extent required by law, court order, or governmental agency, in which case the disclosing Party shall provide prompt notice to the other Party to permit a protective order or other appropriate remedy.

INSURANCE AND INDEMNITY

Provider shall maintain insurance customary for safety consulting services and shall provide certificates of insurance upon request. To the extent permitted by law, each Party shall indemnify, defend and hold harmless the other Party from and against claims arising from its own negligent acts or omissions in connection with performance under this Agreement.

GOVERNING LAW

This Agreement shall be governed by and construed in accordance with the laws of the State of , without regard to its conflict of laws principles. Any dispute arising under this Agreement shall be resolved in the courts located in the county where Client's principal place of business is located, unless the Parties agree in writing to an alternative dispute resolution process.

ENTIRE AGREEMENT

This Agreement, including all attachments and exhibits expressly incorporated herein, constitutes the entire agreement between the Parties with respect to the subject matter hereof and supersedes all prior and contemporaneous agreements, proposals, or understandings, whether written or oral. No modification, waiver or amendment shall be effective unless in writing and signed by authorized representatives of both Parties.

MISCELLANEOUS PROVISIONS

Severability: If any provision of this Agreement is held invalid or unenforceable, the remaining provisions shall remain in full force and effect. Assignment: Neither Party may assign this Agreement without the prior written consent of the other Party, except to a successor in interest to substantially all of its business. Notices: All notices under this Agreement shall be in writing and delivered to the addresses provided by the Parties.

ACKNOWLEDGMENT

The undersigned represent and warrant that they are authorized to execute this Agreement on behalf of the Party for whom they sign and that such Party agrees to be bound by the terms and conditions set forth herein.

Client Name:

Provider Name:

By:

Date:

What the Business IIPP Document Is and when it applies

A Business IIPP Document documents an employer's Injury and Illness Prevention Program (IIPP): a written workplace safety plan that identifies hazards, assigns responsibility, establishes training and inspection protocols, and records corrective actions. Employers use the document to demonstrate systematic risk management, comply with applicable workplace-safety rules, and maintain an auditable history of training, inspections, and incident responses. The IIPP is especially required or expected in jurisdictions and industries with higher hazard exposure and where regulators (for example, Cal/OSHA) mandate a written program.

Why a clear Business IIPP Document matters for operations

A documented IIPP reduces workplace injuries, clarifies legal responsibilities, standardizes training, and creates records needed for regulatory inspections and post-incident reviews. It supports consistent compliance across sites and helps demonstrate good-faith efforts to prevent harm to employees.

Which organizations and roles typically prepare the IIPP

Even when delegated, ultimate responsibility usually rests with senior management or the employer of record; documenting roles in the IIPP helps show accountability.

HR and Safety Managers who draft policies, coordinate training, and track compliance across locations.
Operations and Site Supervisors who perform inspections, record hazards, and assign corrective actions.
Small-business owners who combine policy, training, and recordkeeping into a single program document.

Core sections to include in a professional Business IIPP Document

A complete IIPP groups preventive measures, duties, and records so regulators and internal stakeholders can quickly verify compliance and follow up on incidents.

Policy statement

A concise declaration of the employer's commitment to safety, scope of the program, and reference to the governing rules that apply at each site or state.

Responsibilities

Named roles with contact details and clear duties for implementation, inspections, corrective actions, training, and record retention.

Hazard assessment

Methods and schedule for identifying hazards, risk-ranking criteria, and procedures for documenting identified hazards and control measures.

Training program

Training topics, frequency, delivery method, attendance tracking, and materials retained to demonstrate employees received and understood required safety training.

Inspections & corrections

Routine inspection checklists, corrective-action tracking fields, timelines for remediation, and verification steps to close safety issues.

Recordkeeping

Templates for incident reports, training logs, inspection results, and a retention policy with references to legal retention requirements.

Security and compliance points to apply when storing the IIPP

Encryption in transit: TLS 1.2/1.3

Encryption at rest: AES-256

Audit trail: Timestamped activity log

Regulatory compliance: ESIGN and UETA

Healthcare addendum: HIPAA (BAA required)

Third-party certs: SOC 2 Type II / ISO 27001

Step-by-step: preparing and finalizing your Business IIPP Document

Follow a clear sequence to build a defensible program: collect inputs, assign responsibilities, document controls, train staff, and keep records.

01

Gather inputs: Collect injury history, hazard surveys, and regulatory requirements for each site.
02

Draft sections: Write policy, responsibilities, and hazard-assessment methods in plain language.
03

Approve and sign: Obtain authorized signatures and note effective date in the cover section.
04

Train and record: Deliver required training and retain attendance and materials in the program file.

Typical digital workflow settings for completing a Business IIPP Document

Configure an online workflow to collect signatures, attach inspection records, and archive training materials in a searchable way.

Field	Configuration
Responsible party	Use role-based signer order
Attachments	Permit PDF/Word/JPEG uploads
Authentication	Email + optional SMS code
Retention	Automatic archival after approval

Platform needs for secure eCompletion and long-term storage

Ensure the platform offers an audit trail, encryption, and defined retention controls to support compliance and inspections.

Integration: CRM, HRIS, or document storage connectors
Formats: PDF, DOCX, and export to archive formats
Authentication: Email, SMS, or advanced signer verification

Routine deadlines and timing commonly built into an IIPP

Set clear, recurring deadlines for inspections, training, incident documentation, and annual program review to ensure ongoing compliance.

Periodic inspections:

Monthly or quarterly inspections recorded with corrective-action deadlines

Training frequency:

Initial onboarding and at least annual refresher training

Incident documentation:

Complete internal incident reports within 24–72 hours of occurrence

Corrective-action targets:

Specify remediation timelines (for example, 30, 60, or 90 days) in the record

Annual review:

Conduct a full program review and update once per year

Common legal and financial risks from an incomplete or missing IIPP

OSHA citations: Increased inspection risk and citations

Civil liability: Greater exposure to lawsuits

Workers' comp impact: Higher premiums and claim costs

Regulatory fines: State or federal monetary penalties

Operational disruption: Work stoppages and project delays

Reputational harm: Loss of client or tenant confidence

Typical eSignature provider comparison for signing and managing IIPP documents

Compare core pricing and essential capabilities when choosing an eSignature platform to collect signatures, store records, and maintain audit trails.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day trial	Varies by plan	Varies by plan	Varies by plan	Varies by plan
Bulk Send	Yes (Business Premium)	Yes	Yes	Yes	Yes
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

FAQs and common questions about the Business IIPP Document

Answers to frequent questions about requirements, signatures, retention, and updates to help maintain an auditable program.

Need help? Contact support

Is a written IIPP legally required?
It depends on jurisdiction and industry. California employers must maintain a written IIPP (Cal. Title 8 §3203). Federal OSHA requires effective hazard programs and recordkeeping but does not prescribe one single named "IIPP" document for every employer.
Can the IIPP be signed electronically?
Yes. Electronic signatures are generally valid under the ESIGN Act (15 U.S.C. §7001) and UETA in adopted states, provided intent, consent, attribution, and retention requirements are met.
Who should sign the document?
An authorized company representative—typically senior management or the assigned safety coordinator—should sign, showing organizational approval and assignment of responsibility.
Do I need a notary or witnesses?
Most jurisdictions do not require notarization for an IIPP; specific state or contract conditions may require additional authentication—verify if a third party requires notarized acceptance.
How often must the IIPP be updated?
Update at least annually and after significant incidents, operational changes, or regulatory updates to ensure current hazard controls and training reflect site conditions.
How long should I keep IIPP records?
Maintain training and inspection records for a minimum of three years; retain OSHA-specific injury records per 29 CFR §1904.33 and HIPAA-related materials for six years (45 CFR §164.530(j)).

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now