The Specialist Contractor's Guide to the Golden Thread

Here is the uncomfortable truth about the golden thread: it doesn't care how well you built the building. It cares whether you can prove it.

That distinction now decides whether packages get approved, whether buildings get occupied, and, under a liability regime that reaches back decades, who ends up answering questions in a courtroom long after the scaffold came down. If you're a specialist contractor working on higher-risk buildings, the golden thread is not a document management problem someone upstream owns. A strand of it is yours, and this guide explains exactly which strand, under which law, and how to hold it properly.

What the golden thread actually is, and what it isn't

The phrase comes from Dame Judith Hackitt's 2018 review, Building a Safer Future, written after Grenfell exposed how completely information about a building can decay: drawings that didn't match what was installed, products swapped without record, nobody able to say what was behind the cladding. Her answer was a "golden thread": an unbroken, digital record of a building's safety-critical information, from first design intent through construction to the day it's demolished.

The Building Safety Act 2022 turned that idea into law. Government guidance defines the standard the information must meet: it must be accurate and up to date, easily understandable, accessible to the people who need it, and held securely and digitally.

Read that list again, because it quietly kills the most common assumption in the industry. A common data environment full of PDFs is storage. The golden thread is a capability: the capability to answer a question about the building, with evidence, quickly, in a form the asker can understand. Your CDE can hold ten thousand documents and still fail every one of those four tests.

A working test I use: can you take a question shaped like a building ("show me the fire-stopping evidence for level 9, elevation B: current revision, who installed it, when, and their competence record for that date") and answer it in minutes rather than mounting an archaeology project? If yes, you have a thread. If no, you have a filing system.

Where the golden thread lives in law

Most guides hand-wave this part. Precision matters, because different duties bite different people at different stages.

During design and construction, two instruments do the work:

• The dutyholder regime: Part 2A of the Building Regulations 2010, inserted by the Building Regulations etc. (Amendment) (England) Regulations 2023, in force since 1 October 2023. It creates duties for the client, principal designer and principal contractor, and (this is the part specialist contractors miss) for every designer and contractor on the project. That includes you. The duties cover planning and managing your work to comply with building regulations, cooperating and sharing information, and only taking on work you are competent to do (the "skills, knowledge, experience and behaviours" test for individuals, organisational capability for companies).
• The Building (Higher-Risk Buildings Procedures) (England) Regulations 2023: the Gateway regime. For higher-risk buildings, construction cannot lawfully begin until the Building Safety Regulator grants building control approval (Gateway 2), the golden thread must be created and maintained throughout the works, changes are controlled through a formal regime, and a completion certificate (Gateway 3) is required before occupation. I've broken down what a Gateway 2 application must actually contain in a separate post.

During occupation, the thread transfers. Part 4 of the Building Safety Act, most famously section 88, puts the duty to keep the building's golden thread on the accountable person, for the life of the building. If you've ever wondered why a clause about "section 88 information" appears in a subcontract when section 88 doesn't name subcontractors at all, the short version is that the information they must keep for the building's whole life is the information you hand over this year.

Does this apply to your project?

The statutory regime applies to higher-risk buildings: under section 65 of the Act, buildings at least 18 metres tall or with at least 7 storeys, containing at least two residential units. During design and construction, care homes and hospitals meeting the height threshold are also brought into scope.

Two practical warnings before you relax about a building that misses the definition. First, the height is measured to rules with real edge cases (mezzanines, roof plant, storeys below ground), so scope should be confirmed, not assumed, at tender. Second, and more importantly: the golden thread is escaping its statutory cage. Clients and Tier 1 contractors are writing golden-thread information requirements into contracts on buildings that are nowhere near 18 metres, because the commercial logic, evidence that survives handover, applies everywhere. Treat the HRB regime as the floor, not the boundary.

Your strand: what a specialist contractor actually owes

You don't own the golden thread. The client, principal dutyholders and eventually the accountable person do. What you own is a strand, and the thread is only as strong as its weakest contributor. In practice, your obligations arrive through two channels: the statutory duties above, and contractual flow-down from the principal contractor, who cannot discharge their own duties without disciplined information from you.

Here is what that means stage by stage.

At tender. Information production is scope. Read the employer's information requirements and the golden-thread clauses the way you read the technical spec, and price them. A package that includes competence declarations, element-level installation records and structured as-built data is more expensive to deliver than one that ends with a box of O&M binders; if you don't price the difference, you'll donate it.

During design. Revision control is the foundation of everything that follows. Every drawing must be able to prove it is the current revision and show when, and why, it changed. "Why" matters more than people think: the change-control regime under the Procedures Regulations distinguishes routine changes from notifiable ones (recorded and reported) and major ones (requiring BSR approval before the work proceeds). A specialist who redlines a detail on site without triggering that process isn't being pragmatic; they're breaking the thread, and potentially the law.

During construction. This is where competence meets evidence. It isn't enough that your installers were trained at some point; the thread should connect the person who installed each safety-critical element to their competence record for that date. Photographs and test records should attach to the element they evidence (grid line, level, elevation), not to a folder named after the month. A photo called IMG_4471 in someone's camera roll is not evidence; it's a rumour with metadata.

At handover. Gateway 3 is where the strand you've been spinning gets pulled. The completion certificate application requires the as-built information to reflect what was actually constructed, including every controlled change, and the building cannot be occupied without it. Whatever you hand over here becomes the accountable person's statutory record under section 88, potentially for the next half-century. Hand over information a stranger can navigate: named for someone who wasn't on the project, in formats that will still open in 2040, structured around the building rather than around your company's filing habits.

What failure looks like, from the public record

You don't need to take the risk on trust; the regime's first years documented it. Freedom-of-information disclosures showed that of 1,018 Gateway 2 applications received between October 2023 and September 2024, only 146 were approved, roughly 14%, while a separate FOI to the regulator put the average determination time at around 25 weeks, against a 12-week statutory target for new builds. The causes were a mix of regulator capacity and, in the regulator's own telling, application quality: packages that described an intention to comply rather than demonstrating compliance, with the evidence unable to carry the engineering.

The picture has since improved sharply (approval rates in mid-2026 are several times the early figures), but the recovery came from better applications as much as better processing, and the assessment bar did not drop. The one-line lesson is that the packs that fail still fail on evidence, not engineering.

Building your strand: a starting discipline

Strip away the statutory language and the practical programme for a specialist contractor is short:

1. One source of truth for revisions: a controlled register where the current revision is unambiguous and the history of every change, with its reason, is preserved. No parallel folders, no "final_v2_USE THIS ONE".
2. Competence tied to dates: a live matrix connecting operatives to qualifications, and installation records that capture who installed what, when, so competence-on-the-day is provable, not inferable.
3. Evidence tied to elements: photos, test certificates and inspection records attached to the piece of building they evidence, at the moment of capture, not reconstructed at handover.
4. Change control as reflex: every deviation from approved design triggers the question "is this notifiable or major?" before the work proceeds, and leaves a record either way.
5. Handover designed for strangers: information structured, named and formatted for a reader in 2040 who never met your project team.

None of this requires heroics. It requires the discipline to capture information once, at source, in a structure that answers questions shaped like a building. Do it with a spreadsheet regime if you must; the law is tool-agnostic. (Full disclosure: I'm building BrieXO because I think there's a far better way to hold a thread than spreadsheets, but the discipline above stands whatever tool you use, and no software makes you compliant. The Regulator judges compliance; tools just make the evidence easier to build and harder to lose.)

FAQ

Does the golden thread only apply to higher-risk buildings?

The statutory duties do. But golden-thread requirements are increasingly written into contracts on non-HRB projects, and the evidential logic, protecting yourself under a liability regime that now reaches back up to 30 years, applies to every building you touch.

Is our CDE our golden thread?

No. A CDE is where information lives; the golden thread is whether that information is accurate, current, understandable and accessible enough to answer safety questions on demand. Most CDEs fail the accessibility test the moment the one person who knows the folder structure leaves.

Who owns the golden thread on a project?

During design and construction, the client and principal dutyholders must ensure it exists and is maintained; every contractor and designer owes their contribution. From occupation, the accountable person holds it under Part 4 of the Act.

What format does it have to be in?

The law requires digital, secure, accessible and transferable; it doesn't mandate a platform. Open, durable formats and building-oriented structure matter more than any particular software.

When did all this start?

The dutyholder and Gateway regimes commenced on 1 October 2023. Buildings already under construction passed through transitional arrangements; everything entering the system since lives under the full regime.

Where BrieXO fits

BrieXO's FIELD bundle keeps site records, photo and inspection evidence, competence records and record-linked decisions in one living record, anchored to the building, so the golden-thread strand for your package accumulates as you work instead of being reconstructed under deadline. It supports your dutyholder duties; it doesn't discharge them. See how it maps to the Act on our Building Safety Act compliance software page.

Related reading:the evidence Gateway 2 asks subcontractors for, golden thread digital requirements, and what facade management software must prove.

George Sfica is a senior design manager at a specialist façade contractor, with 23 years in manufacturing and construction, eleven of them in façades and external envelopes, spanning fabrication, installation and design management, an MSc in Façade Engineering and an IFE Level 2 Certificate in Passive Fire Protection. He is the founder of BrieXO.