Ongoing EHS Compliance Management Services in California

If you’re searching for ongoing EHS compliance management, you already know what the alternative looks like: scrambling every time the CUPA calls, every time a Cal/OSHA inspector pulls up, every time a permit renewal sneaks past. This page covers what ongoing compliance management actually looks like at a California facility, how CDMS structures the work, and how to tell whether your facility needs it.

If you’re not yet sure whether your facility needs this, here’s the short version. Most California industrial and commercial facilities carry obligations across five overlapping regulatory areas. Those areas are workplace safety (Cal/OSHA), air quality (your local air district), wastewater discharge, stormwater (SMARTS, the state’s online portal for the industrial general permit), and hazardous materials and waste (your CUPA, which may be a county environmental health department, fire department, or another local agency depending on jurisdiction, with DTSC overseeing certain hazardous waste requirements at the state level). Each program has its own deadlines, its own plans, and its own training requirements. Ongoing compliance management is the work of keeping all of them current at the same time, on a regular cadence, so the answer to “are we ready for an inspection?” is always yes.

The Mini-Audit Cadence

Every CDMS site visit covers two things: one environmental topic and one safety topic. We walk those areas, review the documentation, check the inspection logs, and write up what we find. Over a two-year rotation, every applicable program at your facility gets a full audit. The next year, the cycle starts again.

This is the most concrete difference between ongoing compliance management and “we’ll come when you call us.” Vendors who do retainer work for a single program (stormwater only, training only) leave gaps in everything else. A regular visit that rotates through topics catches drift before an inspector does.

A typical visit looks like this. Our consultant arrives at your facility. We walk the area we’re auditing on this visit, for example hazardous waste storage on the environmental side and forklift safety on the safety side. We check that accumulation containers are dated, labeled, and closed. We pull a forklift inspection log off the wall and verify operators are completing it daily. We review training records for anyone who’s started since our last visit. We update your compliance binder with anything new. Before we leave, we check the compliance calendar for the next submittal that’s due, often a quarterly stormwater report, an annual fee payment, or a permit renewal that’s coming up.

You get a written summary of what we found, what was handled during the visit, and what’s scheduled for follow-up. For a fuller walkthrough of what a site visit involves, see what happens during an EHS site visit.

Does Your Facility Need This?

Most facilities don’t think about ongoing compliance management until something pushes them. If any of these apply, it’s worth a conversation:

• You just acquired or built the facility. EPA ID numbers, CERS accounts (CERS is the state’s online environmental reporting portal), air permits, and hazardous waste authorizations all need to be updated or re-filed when ownership changes. Stormwater permit coverage doesn’t transfer at all. The new owner needs new coverage. None of this happens automatically. We’ve walked into acquired facilities that sat months out of compliance because nobody had filed the change-of-ownership paperwork.
• One person is handling EHS plus three other jobs. The plant manager who also runs safety. The HR person who got handed the HMBP. They know enough to worry and not enough to act with confidence.
• An inspector showed up and found gaps. The CUPA visit, the Cal/OSHA complaint inspection, the fire department walkthrough that turned into a list of corrections. Fixing the immediate issue is one thing. Making sure it doesn’t happen again is another.
• You have a vendor for one program but nothing for the rest. A stormwater consultant who handles SWPPP but not haz waste. A training company that runs IIPP refreshers but not HMBP updates. Single-program coverage leaves the other four pillars exposed.
• You’re overdue on something and don’t know what. Biennial reports, annual stormwater reports, AER filings, fee payments, training renewals. The calendar is the first thing to slip when nobody owns it.

If you read that list and recognized your facility, the next step is figuring out what programs apply, what’s already in place, and what’s missing. A starting point is our EHS compliance checklist for California industrial facilities, or for a structured review, the EHS gap assessment is the entry point for most ongoing engagements.

What’s Included: The Five Pillars

CDMS organizes ongoing compliance management around five program areas. Most California facilities have requirements in three or more.

Alongside the five program areas, every ongoing engagement carries three managed deliverables.

The compliance calendar. A facility-specific calendar of every regulatory deadline that applies: CERS submittals, biennial reports, stormwater annual reports, training renewals, fee payments, permit renewals. Updated annually with a cover letter. A managed compliance calendar is what separates facilities that file on time from facilities that find out they missed something when the agency sends a notice.

The compliance library. A binder, physical or digital, kept at the facility. It contains every current plan, permit, inspection log, training record, and reporting submittal. Any staff member can walk up and find what they need. Any inspector who shows up can be handed it. The 2026 CUPA Conference inspection-readiness session made this an explicit recommendation: maintain a binder for the inspector. Our clients have been doing it for years.

Posted inspection logs. Weekly hazardous waste storage. Weekly hazardous materials storage. Monthly facility walks. Tiered permitting daily logs. Forklift daily logs. Stormwater rain logs. We provide customized templates from a library of more than eleven log types, printed and posted at the facility, updated when regulations change. The master inspection workbook behind those logs has been refined since 2004.

How an Engagement Starts

The first phase is setup. We send a data collection sheet with about forty items: current HMBP, SDS inventory, emergency coordinators, tank lists, waste manifests, all environmental and safety permits, inspection logs, facility drawings, DOT registration, hazardous waste fee documentation, biennial reports, stormwater annual reports. We review what you send. Then a consultant comes out to walk the facility and establish a baseline.

From there, regular site visits begin. Visit frequency is typically every one to two months, with the exact cadence set during the proposal based on facility size, program count, and risk profile. Each visit handles one environmental topic and one safety topic.

Annual deliverables run on their own schedule. IIPP and WVPP plan reviews. HMBP and CERS resubmittal. SPCC plan review and recertification. SWPPP annual report. Right-to-Know training (scheduled per regulatory triggers: at initial assignment and when new chemical hazards are introduced). Hazardous waste handler training where applicable. Training sequencing matters: handler training can’t happen until inventory and HMBP work is in place, so the order of operations is part of the setup conversation.

The work is delivered by an account manager who handles your communications and a technical specialist assigned to your facility. Every report runs through a review process called “two sets of eyes and one more senior set” before it goes to you. That QC layer catches the small errors that turn into citations when an inspector sees them first.

For a deeper look at how an outsourced engagement unfolds month by month, see outsourced EHS services: what to expect.

Services, Not Software

If you search for “EHS compliance management,” half the results are software platforms. These tools track tasks, store documents, and generate reminders. They are useful. They do not walk your facility. They do not update your HMBP when CERS changes the data fields. They do not stand in front of a Cal/OSHA inspector and explain what you did to close out a finding.

Ongoing EHS compliance management is people work. The software is a tool. CDMS is comfortable working alongside whatever platform you already have, but the work itself, the on-site walks, the plan updates, the training, the regulatory tracking, is done by our team. For a deeper look at where each fits, see EHS compliance software vs. services.

How This Compares to Other Options

Most facilities considering ongoing compliance management are weighing one of three alternatives: hiring an in-house EHS person, keeping the current single-program vendor, or doing nothing different and hoping. Each has tradeoffs.

A full-time EHS hire makes sense at larger facilities with daily on-site needs and a dedicated EHS budget. The cost is salary plus benefits plus the time of building knowledge across five regulatory programs. CDMS engagements typically run at a fraction of the loaded cost of a full-time EHS hire while bringing senior oversight on every report. For a side-by-side breakdown, see in-house EHS vs. outsourced compliance.

A single-program vendor (stormwater only, training only) costs less in the short term and leaves the other four pillars to figure out separately. The risk shows up when an inspection covers something the vendor doesn’t.

Doing nothing different works until it doesn’t. That’s usually when a CUPA inspection finds a gap, when a complaint triggers Cal/OSHA, or when a missed deadline turns into a violation notice. Once that happens, the cost of catching up is higher than the cost of staying current.

For more on evaluating options, see how to choose an EHS consulting partner and what drives EHS compliance costs.

Training Inside Ongoing Compliance

Training is one of the lines a Cal/OSHA inspector checks first. Every ongoing engagement includes the required recurring trainings (Right-to-Know at initial assignment and when new chemical hazards are introduced, hazardous waste handler where applicable) delivered in person during a site visit, plus year-round access to our online platform for new hires and refreshers. For a comparison of when each format fits, see LMS vs. in-person EHS training.

Industry-Specific Coverage

The same program framework applies across industries, but the weighting changes. Manufacturing facilities carry higher haz waste volumes, more air permits, and process safety considerations. Distribution and warehousing have HMBP, tiered permitting, forklift, and stormwater obligations but lighter air quality requirements. Food processors deal with wastewater discharge, refrigeration safety, and chemical handling. Labs carry chemical inventory, fire code classification, and lab safety programs.

For details on what ongoing compliance looks like in a manufacturing setting, see EHS compliance services for California manufacturing facilities.

What’s Current for California Facilities

A few items worth flagging:

• SB553 / Workplace Violence Prevention Plans. Most California employers have been required to maintain a WVPP since 2024. The plan needs annual review, training, incident logging, and updates after each incident.
• CERS as inspection roadmap. CUPA inspectors increasingly use CERS as their checklist when they arrive. If your CERS submittal is current and accurate, the inspection moves faster. Our ongoing clients have CERS reviewed against actual operations at every applicable visit.
• Air district reporting cycles. AER and AB 2588 toxic emissions reporting deadlines vary by district and inventory year. Missing them is a common source of penalties.

FAQ

What is EHS compliance management?

EHS compliance management is the work of keeping a facility’s environmental, health, and safety programs current and in line with California regulations. It covers planning documents (IIPP, WVPP, HMBP, SWPPP, SPCC), inspection logs, training, reporting deadlines, and program updates when regulations change. For a longer explanation, see what is EHS compliance management.

What’s the difference between EHS consulting and ongoing compliance management?

EHS consulting often refers to project work: writing a plan, conducting an audit, preparing a permit application. Ongoing compliance management is a continuing engagement that maintains those plans, files the reports, conducts the training, and keeps the facility ready for inspection. Most CDMS engagements start with a project and convert into ongoing management once the foundation is in place.

How often will someone visit our facility?

Visit frequency depends on facility size, program count, and risk profile. Most California facilities are on a regular cadence of every one to two months. Smaller facilities sometimes work on a longer rotation. We set the cadence during the proposal, and it can shift if scope changes.

Can we enroll in only certain services instead of the full package?

Yes. Some clients start with a single program (annual HMBP review, training only) and add others over time. Full coverage across the five pillars is the structure that catches the most drift, but partial enrollment is workable and common.

Are CDMS consultants on-site or remote?

CDMS is a field-service firm. Our team comes to your facility. Site work happens on-site. Reports, regulatory tracking, and follow-up happen off-site. Clients don’t come to a CDMS office; we come to you.

What happens if regulations change mid-year?

Regulatory updates are part of the engagement. When a rule changes (SB553 is the recent example), we update the affected plans, brief your team, and adjust the calendar. You don’t get a separate invoice for that. It’s what ongoing management is.

Get Started

If your facility carries multiple environmental and safety programs and you’d rather not run them alone, ongoing compliance management is what we do.