Home / Insights / The Golden Thread: Why Document Control in Construction Is an IT Job Too

The Golden Thread: Why Document Control in Construction Is an IT Job Too

Construction has always run on documents: drawings, specifications, method statements, change logs and handover files. Under the Building Safety Act 2022, the way some of that information is kept is now a legal requirement as well as good practice. For higher-risk buildings in England, dutyholders must keep a “golden thread” of information, and golden thread document control depends on the IT systems behind it just as much as on the people filling it in.

This article explains what the official guidance asks for in plain terms, and the practical IT steps that help contractors and clients meet it.

What the golden thread is

GOV.UK guidance describes the golden thread as the information about a building that helps dutyholders comply with their legal duties and manage building safety. It applies to clients, principal designers and principal contractors working on projects involving a higher-risk building, and to accountable persons responsible for high-rise residential buildings once they are occupied.

A higher-risk building, as the guidance defines it, has at least 7 storeys or is at least 18 metres high, and has at least 2 residential units or is a hospital or care home. The thread is created before building work starts, updated through design and construction, and handed over to the accountable person when the work is complete.

What the rules say about how information is kept

This is where it becomes an IT matter. The Building (Higher-Risk Buildings Procedures) (England) Regulations 2023 say the client must ensure golden thread information is:

• kept in an electronic format
• capable of being transferred electronically without being lost or corrupted
• accurate and up to date
• available in a readable format that the intended readers can understand
• secure from unauthorised access
• only changed under procedures that record who made the change and when

GOV.UK guidance adds that the record-keeping system should have version control so users can see changes, and that policies and procedures should keep it secure and available for authorised access. The government has said the thread must be digital, but it can sit across more than one system.

Golden thread document control: the practical IT steps

None of this requires a particular product. It does require a deliberate setup rather than a shared drive that grew over time.

• Pick a single source of truth. Agree which system holds the master copy of each document type, whether that is a common data environment, a document management platform or a well-structured SharePoint site. Stop working copies living in email attachments and personal folders.
• Turn on versioning and audit logs. Most modern platforms record who changed a file and when. Make sure it is switched on, retained for long enough and not something users can quietly turn off.
• Control access by role. Designers, subcontractors and client teams need different levels of access. Grant it by role or group rather than one person at a time, and remove it promptly when people leave the project. Our guide to joiners, movers and leavers covers how to make that routine.
• Protect accounts. Information that must be secure from unauthorised access needs multi-factor authentication on every account that can reach it, including external partners.
• Plan for handover from day one. The regulations expect information to be handed over keeping its filing structure and in a format the recipient can read, keep and update. Agree folder structures, naming conventions and file formats at the start so handover is an export, not a rebuild.
• Back it up and test it. A single source of truth is only useful if it survives an outage, a mistake or a ransomware attack. See why a backup isn’t a plan until you’ve restored from it.

Make it easy for site teams

The best system fails if people on site cannot use it. Make sure field teams can reach current drawings on tablets and phones, that superseded versions are clearly marked, and that there is a simple way to log changes and issues from site rather than saving them up for the office. Good site connectivity helps here, as does choosing apps that work offline and sync when the signal returns.

Data quality matters too. Consistent naming, agreed terminology and clear ownership of each document make the thread usable years later, which echoes the regulations’ own wording about consistent language and terminology.

Takeaway

For higher-risk buildings, the golden thread turns good document control into a legal duty. Choose one source of truth, switch on versioning and audit trails, grant access by role with MFA, plan the handover structure from the start and test your backups. Even on projects outside the higher-risk regime, the same habits reduce rework, disputes and lost information.

If you would like help designing document control and access for your projects, KPCR’s IT consultancy and managed IT services can help. Get in touch for a no-pressure chat.

External references: GOV.UK, Keeping information about a higher-risk building: the golden thread; The Building (Higher-Risk Buildings Procedures) (England) Regulations 2023, Part 4; Building Safety Regulator, Understanding the golden thread.