The 4 Compliance Documents Every California Subcontractor Signs (and What's Hidden in Each)

Walk onto any California construction project as a subcontractor and you'll be handed the same four pieces of paperwork before you lift a tool: a lien waiver, a W-9, an ACORD 25 Certificate of Insurance, and one or more Safety Data Sheets for anything hazardous you're bringing on-site.

These four documents cover different risks — payment, tax, insurance, and worker safety — but they share one thing: getting them wrong is expensive. A mis-signed lien waiver can waive your right to be paid. A bad W-9 can trigger 24% backup withholding. A COI missing an endorsement can get you kicked off a project. A missing SDS section can result in a Cal/OSHA citation.

This is the hub guide. It explains what each document does and links to the deep-dive for each. If you're new to California contracting, start here.

1. The lien waiver

A mechanics lien is a California subcontractor's strongest payment remedy. A lien waiver is a voluntary release of that right, usually in exchange for payment. California only recognizes four statutory forms (Civil Code §§8132–8138). Every other form is legally suspect.

What you're protecting: the right to file a lien against the project property if you don't get paid.

Biggest risk: signing an unconditional waiver (§8134 or §8138) before the payment check actually clears your account.

Deep dive:

• California Lien Waiver: The Complete Guide (All 4 Statutory Forms)
• Conditional vs Unconditional Lien Waivers: What You Lose When You Sign the Wrong One

2. The W-9 form

IRS Form W-9 is how a general contractor captures your tax identification so they can issue a 1099-NEC at year-end. It is a short form, but five of its six fields are subtly easy to get wrong.

What you're protecting: timely payment and correct year-end 1099 reporting.

Biggest risk: a name/TIN mismatch or a missing signature that triggers 24% backup withholding on every payment until corrected.

Deep dive:

• 7 W-9 Mistakes That Delay Contractor Payments

3. The ACORD 25 Certificate of Insurance

The standardized one-page insurance summary that proves you have the coverage the project requires. Most California construction projects require a minimum of $1M general liability and current workers compensation with specific additional-insured endorsements.

What you're protecting: your seat on the project, and your insurance coverage when a claim hits.

Biggest risk: a COI that looks compliant but is missing the additional-insured endorsement (CG 20 10 / CG 20 37) — meaning your insurance won't defend the GC when they're named in a lawsuit, and the GC will remember.

Deep dive:

• How to Read an ACORD 25 Certificate of Insurance (Contractor's Checklist)

4. Safety Data Sheets

For every hazardous chemical you bring onto a jobsite, you must have a current OSHA-compliant 16-section Safety Data Sheet readily available to your crew.

What you're protecting: your crew's health and your Cal/OSHA compliance record.

Biggest risk: relying on a pre-2012 MSDS or an incomplete SDS that's missing Section 2 (Hazard Identification), 4 (First Aid), or 8 (Exposure Controls) — the three sections your crew actually needs in an emergency.

Deep dive:

• The 16 Sections of an OSHA Safety Data Sheet (and 3 That Must Never Be Missing)

Common threads

All four documents share patterns contractors should watch for:

• Outdated versions. Old W-9 revisions, pre-GHS MSDS, expired COI policies, and non-statutory lien waivers are all compliance failures.
• Missing signatures. Unsigned W-9s, unsigned lien waivers, and unsigned COI certificate holder blocks are all unusable.
• Mismatched legal names. The name on the W-9, the name on the COI, and the name on the lien waiver should all match the contractor's state license exactly.
• Date problems. Backdated waivers, expired insurance, outdated SDS — the dates matter everywhere.

Scan them all with PaidWrite

PaidWrite reads each of these four documents against the California statutes, IRS rules, ACORD standards, and OSHA requirements. Every scan returns a risk score, a plain-English summary, and a list of issues found — bilingually, in under 30 seconds, for $2 per page.