Building Safety Act, golden thread, and what buyers are actually buying
Compliance moved from cost line to risk register. We map the regulatory shape and what an audit-ready posture means in practice.
The Building Safety Act 2022 didn’t introduce a new test for buildings. It introduced a new test for owners of buildings. Most of the technical requirements — compartmentation, fire stopping, suppression, detection — existed already in BS 9991, BS 9999, the Approved Documents. What the Act added was a question the regulator now puts to the duty-holder: can you evidence it?
That single shift moved compliance from cost line to risk register. And it changed what buyers are actually buying when they procure a fire-safety partner.
What “evidenced” means in practice
The Act introduced the concept of the golden thread — a single, continuously-maintained body of evidence that links every life-safety design decision through to every as-built reality and every subsequent change. In theory it’s a document. In practice it’s a workflow. A static PDF doesn’t survive a year of estate operations; the moment the first remedial happens, the document is wrong, and the duty-holder is exposed.
What a regulator expects to see — and what insurers are increasingly asking for too — is a system in which:
- Every asset is on a register, with its last service date and its next service date
- Every survey, inspection and remediation is timestamped and linked to the asset it affected
- Every drawing is the latest revision, with previous revisions retained and addressable
- The whole pack is exportable on demand, with no gaps a regulator can probe
This is the operational consequence of the Act. It’s not a writing exercise. It’s an operating-stack exercise.
What buyers are actually buying
The shift from “fire safety as a maintenance line” to “fire safety as a regulatory posture” has changed buyer behaviour in three concrete ways:
They’re consolidating suppliers
Estates teams that used to procure survey, remediation, maintenance and certification across three or four contractors are now looking for one party who can hold the whole thread. The maths is risk-asymmetric: every additional supplier is an additional seam in the evidence pack, and seams are where regulators find problems.
They’re asking operational questions on bid day
Where bid evaluation used to score on price, accreditations and references, it now scores on operating depth. What system holds your asset register? How do you evidence golden-thread completeness? Show us a sample audit pack. These are not aesthetic questions — they’re triage. A supplier who can’t show a live workflow has a price, but not a defensible price.
They’re paying for posture, not for work
The buyer’s job is to procure a position they can defend — to their insurer, their regulator, their board. The work itself is a means; the posture at the end of the work is the thing they’re buying. Suppliers who frame their offer as work-units price themselves into commodity. Suppliers who frame it as posture price themselves into the conversation that matters.
“Estates teams that used to procure across three or four contractors are now looking for one party who can hold the whole thread.”
Where this leaves the mid-market
Most mid-market contractors aren’t set up for this. They have the trades; they don’t have the operating stack to evidence them. The gap between a tier-one main contractor’s compliance arm and an SME compliance contractor used to be people. It’s now people and systems — and systems is the bigger half. A mid-market group that can deploy Uptick, Procore and M365 end-to-end carries an enterprise-grade posture into a mid-market deal, and that is exactly the place a procurement team weighting compliance is looking.
The bottom line
Compliance under the Building Safety Act is not a deliverable. It’s a state, continuously maintained, continuously evidenceable. Buyers know this. The procurement question has changed accordingly. The suppliers who’ll win the next three years of work are the ones who treat it as an operating commitment, not a project commitment.
Dan Small is Managing Director of AMPM Group. The group’s flagship trading subsidiary, Gemini AMPM, operates Uptick, Procore and Microsoft 365 end-to-end across its life-safety and compliance work.