bizSAFE Explained: Why the Level Matters More Than the Logo

bizSAFE is run by the Workplace Safety and Health Council, backed by the Ministry of Manpower. It is national, voluntary and built in steps. Firms join to get better at spotting and controlling risk in their work.

The duty underneath exists either way. Under the Workplace Safety and Health (Risk Management) Regulations, a risk assessment must be conducted in every workplace, falling on the employer, the self-employed person and the principal. Contractors and subcontractors are named in that last group.

So the programme does not create the obligation. It gives a company a route toward meeting one it already has, and gives outsiders a way to see how far along that route the company has travelled. That second function is what a facilities manager uses.

Hold the programme and the duty apart, because they answer differently. A firm without a certificate is not breaking any rule by lacking one. A firm that has never assessed its own risks sits elsewhere, and the certificate is one of the few ways an outsider can tell the two apart.

Capability here means the machinery a firm keeps for spotting hazards and controlling them. The Council presents the levels as building that capability and meeting what the Workplace Safety and Health Act and its subsidiary rules require. It is not a claim about any one job, and it grades nothing about the trade.

The programme runs through five levels, each certifying something different. Level 1 attaches to the top of a company: a chief executive or board director completes the entry workshop, and a policy is set. Level 2 attaches to a trained individual, a risk management champion for the business.

Level 3 is where somebody from outside enters the picture: risk management is audited by an auditor registered with the Ministry of Manpower, and only audits from approved auditing organisations count. It asks whether risk assessment reaches the company's work activities. Level 3 is the first rung where an outsider tests the claim rather than the firm making it.

Level 4 and bizSAFE Star continue into systems rather than any trade. Level 4 recognises a champion equipped to develop a safety and health management system. Star rests on certification against a recognised management-system standard, submitted with a risk management audit report. Both sit beyond what the legislation asks for.

A claim with no level attached is not a small omission: the level is the entire content of the claim. Level 1 and Level 3 are each described truthfully as bizSAFE certified. One describes a director setting a policy; the other, an audited implementation running across the work.

A level is not a record of a journey. The programme is structured in five steps, but a company may apply for a level directly if it meets that level's requirements. Level 3 therefore does not imply anyone passed through Levels 1 and 2 in order; it means the Level 3 requirements were met and audited.

The Level 3 threshold has a traceable source, and it is not a statute. The Council publishes guidance for management corporations, and one safe management practice it invites them to consider is an in-house requirement for all contractors to attain at least bizSAFE Level 3. In-house requirement is the guidance's own phrase.

A contractor turned away for lacking Level 3 has fallen foul of nothing. A building has applied a condition it chose. Both hold at once, and the second is why the condition is real rather than an obstacle.

Level 3 is a defensible place to draw that line. Below it, a building would be accepting a company's account of itself. At Level 3 an approved auditor has already examined whether risk management reaches the work activities, borrowing a check the building has no practical way of running on its own.

Households almost never meet the requirement. A flat has no access-control desk, so the question never arrives. Certification speaks to a company's safety system rather than whether a wall unit gets diagnosed correctly, and the second is what a household pays for. The requirement earns its keep in managed buildings, which carry an exposure a home does not.

A building's motive runs through occupier duties over common property, not what is owed to the contractor. That framework, and the signs of a job scoped before quoting, sit under aircon work at heights. Liability for a hurt worker or damage left behind is covered under contractor insurance for aircon work. The reach of a management corporation's authority is handled where what an MCST is gets explained.

bizSAFE certifies a safety and health capability, and it is silent on trade skill. No part of a risk management audit examines whether a coil came out clean, whether a diagnosis was right, or whether the part quoted was the failed one. A firm can hold Level 3 and still misread a fault; that was never the measurement.

It attaches to a registered company, not to whoever arrives at the door. Where the people on site are employed by another outfit, the certificate does not travel with them; which firm employs them settles that. Where the risk lands once something goes wrong runs on its own track, covered on the contractor insurance page.

It is a threshold, not a ranking. A company at Star has built a management system, but it has not been graded against other aircon contractors, and nothing in the programme compares one firm's workmanship with another's. Reading a higher level as a better tradesman reads a scale never printed on the certificate.

None of which makes it hollow, and dismissing it is the more expensive mistake. A company audited against its own work activities has done something a company writing its own assurances has not. That is real evidence, but not about aircon competence. For signals on how a company works, see the aircon company trust signals guide; legal requirements sit under aircon contractor credentials, and electrical work under licensed electrical worker.

The claim is checkable, and checking it is quick. The Council publishes a bizSAFE Self-Help listing showing whether a company is recognised, at which level, its status and the expiry date on its certificate. The lookup runs on a company's Unique Entity Number or registered name.

Ask for the UEN rather than the logo. The number is what the lookup takes, and it pins a certificate to a legal entity instead of a trading name. A certified firm gives up its UEN without friction, since the number already appears on everything it invoices.

A document by itself is the weakest version of this, and a decided case sits behind that sentence. In July 2025 a consultancy director was sentenced to imprisonment for issuing forged bizSAFE certificates. The Council recorded 17 recipient companies, with six more coming forward afterwards. Those companies were defrauded: they had paid for what they believed was genuine certification.

The Council's own response named the safeguards. Apply to the programme directly rather than a consultant, since consultancy services carry no accreditation. Engage only an auditing organisation the Ministry has registered. Then confirm the outcome against the Council's listing, not the paper you were handed: the listing is the record, a certificate is only a copy.