The hardest question prospective clients ask isn’t whether they need outsourced EHS services. It’s “what do you actually do once we sign?” Most facilities have worked with a single-program vendor (a stormwater consultant, a training company) and know what that engagement looks like. A full outsourced compliance team is a different shape, and the unfamiliarity is what slows down decisions.
This piece walks through an outsourced EHS engagement at a California facility, from the first phone call through steady-state ongoing service. If you’re still weighing internal versus external, see in-house EHS staff vs. outsourced compliance. For the full overview, see our ongoing EHS compliance management guide.
What Outsourced EHS Actually Means in California
EHS outsourcing covers a wide range. At the low end, it’s a vendor who updates one plan once a year. At the high end, it’s a team that manages every compliance program at your facility on a regular cadence, owns the regulatory calendar, runs the training, and stands in front of inspectors when they arrive. What most facilities mean when they search for outsourced EHS services is closer to the high end.
In California, that work spans agencies that don’t coordinate with each other: your CUPA (which may be a county environmental health department, fire department, or another local agency depending on jurisdiction) for HMBP and hazardous waste, Cal/OSHA for workplace safety and the IIPP and the Workplace Violence Prevention Plan under SB553, DTSC for generator status and biennial reporting, the Regional Water Quality Control Board for stormwater (filed in SMARTS, the state’s online portal) and discharge permits, and your local air district for permits and the AER. Outsourced EHS is the function of keeping all of them current at once.
The Engagement Timeline
What follows is the typical sequence for a California facility coming on as a new outsourced client. Timelines vary by facility size and program count.
1. Discovery call
A phone or video call. We ask what you make or store, how many people are on site, what permits you hold, and what triggered the conversation. Common triggers are a missed inspection, a recent acquisition, an employee leaving who was running compliance, or the realization that a single-program vendor isn’t covering everything. By the end of the call, we have enough to know whether ongoing compliance management is a fit and, if it is, what scope to quote.
2. Proposal
A written proposal lays out the programs covered, the visit cadence, the annual deliverables (plan reviews, trainings, reports), and a fixed annual price billed monthly. The proposal names the California-specific programs that apply: HMBP and CERS, SWPPP if you’re under the Industrial General Permit, SPCC if you have qualifying aboveground tanks, IIPP, WVPP, heat illness, LOTO where applicable.
3. Setup and data collection
Once a proposal is signed, we send a data collection sheet. Roughly forty items: current HMBP, SDS inventory, emergency coordinators, tank lists, waste manifests, permits (wastewater, air, hazardous waste, hazardous materials, tiered permitting), inspection logs, facility drawings, DOT registration, hazardous waste fee records, biennial reports, stormwater annual reports.
The most common pattern at this stage: the documents that should exist are partly there, partly out of date, and partly unaccounted for. The setup phase is where we get a clean baseline.
4. Initial site walkthrough
A consultant comes to your facility and walks every area where regulated activity happens: hazardous waste accumulation, hazardous materials storage, tank areas, production floor, loading docks, lab spaces, outdoor storage. We compare what we see against the documents you sent and meet the people on site.
This walkthrough is also where deficiencies get identified for the first few months of work: a missing label, an out-of-date IIPP, a forklift log nobody updates, a stormwater BMP that’s degraded since the last inspection.
5. Baseline report and calendar
After the walkthrough, you receive a baseline summary: what’s current, what’s not, and what needs to happen first. Alongside it, we build your compliance calendar, a facility-specific list of every regulatory deadline with the program, the agency, and the lead time. The calendar and the baseline are what an outsourced engagement runs on for the rest of the year.
6. Regular site visits begin
From this point forward, our consultant comes to your facility on a regular cadence, typically every one to two months. Each visit covers one environmental topic and one safety topic, conducting a focused review of that area. Over two years, the rotation completes a full audit across every applicable program. The pillar page covers the mini-audit cadence in detail.
The day-of-visit pattern is consistent: walk the area being audited, review the documentation, update inspection logs, check the compliance calendar for upcoming deadlines, write up what was found, and follow up on items that need attention before the next visit.
7. Annual deliverables
Some work happens once a year on its own cycle. IIPP and WVPP get reviewed. The HMBP is recertified in CERS. The SWPPP annual report is filed in SMARTS by the due date. SPCC plans are reviewed on their cycle. Right-to-Know training (scheduled per regulatory triggers: at initial assignment and when new chemical hazards are introduced) and hazardous waste handler training (where applicable) are scheduled. The compliance calendar is reissued with a cover letter.
8. Steady-state ongoing service
After the first year, most engagements reach a rhythm. Plans are current. Training is documented. Inspection logs are being filled out. The calendar is reconciled at every visit. When an inspector shows up, the binder is ready, CERS is current, and there’s a record of every walkthrough we’ve done. This is the approach the 2026 CUPA Conference inspection-readiness session explicitly recommended: have programs current and the binder ready before the inspector arrives.
Curious what a visit involves? What happens during an EHS site visit →
Want to talk through what the first phase of an outsourced engagement would look like at your facility? Call (925) 551-7300 or request a consultation. A short call is enough to identify scope, programs, and a starting cadence.
What You Actually Receive
What’s in hand at any point during an ongoing engagement:
- Updated written programs. IIPP, WVPP, HMBP, SWPPP, SPCC, heat illness, and any other program your facility is required to maintain. Reviewed annually.
- The compliance binder. Physical or digital, kept on site, containing every current plan, permit, inspection log, training record, and reporting submittal. Any inspector can be handed it.
- Posted inspection logs. Customized templates: weekly hazardous waste storage, weekly hazardous materials storage, monthly facility walk, tiered permitting daily, forklift daily, stormwater rain log, universal waste.
- Visit reports. Written summary after each site visit: what was reviewed, what was found, what was corrected, what’s scheduled for follow-up.
- The compliance calendar. Current at all times, reconciled at every visit, reissued annually.
- Filings and submittals. CERS, biennial reports, SWPPP annual report, AER, fee payments tracked to confirmation.
- Training records. Annual recurring training delivered in person, plus year-round LMS access for new hires and refreshers, with completion logged per employee.
How Communication Works
An ongoing engagement has an assigned account manager handling communications and a technical specialist assigned to your facility. Routine questions get a same-day answer. When the CUPA shows up unannounced or the fire marshal calls, you have a person who knows your site. Reports run through an internal review before they reach you: two sets of eyes plus a senior reviewer.
Outsourced vs. Single-Program Vendor
A single-program vendor handles the work in front of them. An outsourced compliance team owns the calendar, the binder, the cadence, and the cross-program coordination.
When we walk a facility that’s been using single-program vendors for years, the most common finding isn’t a failure of any one program. It’s the gaps between them. The stormwater vendor never asks whether the HMBP is current. The training company doesn’t know which Cal/OSHA programs apply. The waste hauler doesn’t track whether the EPA ID number reflects current generator status.
Common Questions
Can we outsource only part of our EHS program? Yes. Some facilities enroll only for hazardous materials, or only for safety, and add the rest later. Full coverage is more efficient because the deliverables span all programs anyway.
Does outsourcing mean cutting internal EHS staff? Not usually. Facilities with internal EHS still outsource for senior oversight, regulatory tracking, and capacity that scales without hiring. The most common arrangement is an internal coordinator with an outside team doing the technical work.
Where to Start
A practical sequence for facilities weighing outsourced EHS services: identify which regulatory programs apply (the EHS compliance checklist is a starting tool), identify what’s already in place, identify the gap, and decide whether internal effort, a single-program vendor, or an outsourced team closes it.
Training part of your program? LMS vs. in-person EHS training →
Ready to talk about outsourced EHS services for your California facility? Call (925) 551-7300 or request a consultation. We’ll cover scope, cadence, deliverables, and what the early phase of the engagement looks like.
