VCA Internal Audit: A Practical Guide for EHS Teams

What Is a VCA Internal Audit and Why It Matters

VCA (Veiligheid, Gezondheid en Milieu Checklist Aannemers) is a widely used safety certification scheme in the Netherlands and Belgium, mainly for contractors working in higher-risk environments such as construction, industrial maintenance, and process industries. To keep VCA certification, companies need to show that their safety management system actually works in daily practice, not just on paper.

That is where the internal audit comes in. A VCA internal audit is a structured, self-organized check of your own safety processes, carried out before the external certification or surveillance audit. It is your chance to find gaps, fix them, and walk into the official audit with confidence instead of surprises.

Done well, an internal audit is also simply good EHS practice. It gives management a realistic picture of where safety performance stands, independent of what the paperwork says.

Who Needs to Run One

If your organization holds or is working toward VCA certification (VCA*, VCA**, or VCA Petrochemie), you are expected to run internal audits as part of your management system. This typically applies to:

• Contractors and subcontractors in construction, installation, and industrial services
• Companies supplying personnel or services to sites where clients require VCA
• Organizations preparing for their first VCA certification audit
• Certified companies preparing for a periodic surveillance audit

Even if VCA is not mandatory for your sector, the same audit discipline is useful for any company that wants a clear, repeatable way to check whether safety procedures are actually followed on the shop floor or on site.

How to Prepare a VCA Internal Audit

Build Your Audit Checklist

Start from the VCA checklist elements relevant to your certification level, and translate them into concrete, checkable questions. Avoid vague items like "safety culture is good." Instead, ask things you can verify:

• Is the risk inventory and evaluation (RI&E) up to date and signed off?
• Are toolbox meetings documented, with attendance and topics recorded?
• Are permits to work completed correctly before high-risk tasks start?
• Is personal protective equipment available, in good condition, and actually worn?
• Are incidents and near misses logged and followed up?
• Are training certificates for employees and subcontractors current?

A digital checklist makes this easier to keep consistent across sites and audit rounds. If you already use, or are considering, audit software for other compliance checks, the same tool can usually handle VCA audits as a separate template.

Schedule and Assign Responsibilities

Decide who audits what, and how often. Larger organizations often split internal audits by department, site, or project. Make sure the person doing the audit is not the same person responsible for the day-to-day process being checked, this keeps findings honest.

Set a realistic frequency, quarterly or twice a year is common, so that issues are caught well before the external audit rather than right before it.

Running the Audit: What to Check

During the audit itself, focus on evidence, not intentions. Typical areas auditors look at include:

• Documentation: RI&E, safety instructions, permits, training records, incident logs
• Site conditions: housekeeping, signage, emergency exits, storage of hazardous substances
• Behavior: correct use of PPE, adherence to procedures, toolbox participation
• Follow-up: whether previous findings were actually closed, not just noted

Take photos where useful, note exact locations, and record who was involved. This level of detail matters later when someone has to fix the issue and when you need to show the external auditor that findings are tracked, not ignored.

Turning Findings into Corrective Actions

An internal audit is only worth the effort if findings lead to action. For every gap identified, define:

1. What needs to change
2. Who is responsible
3. By what date
4. How completion will be verified

This is where many companies lose track, especially when audits happen across multiple sites or projects. Corrective actions get noted in a spreadsheet, assigned informally, and then forgotten until the next audit surfaces the same problem again.

A structured corrective-action process, ideally one that automatically reminds owners and flags overdue items, keeps findings from disappearing between audits. Some companies have significantly reduced the time spent chasing paperwork this way. Ardagh Group, for example, describes how structured audit software cut their audit time considerably by moving from manual checklists to a digital process with clear follow-up.

How Digital Tools Support VCA Internal Audits

Running VCA internal audits on paper or in scattered spreadsheets works, but it makes trends and repeat issues hard to spot, and it puts extra admin work on whoever is responsible for pulling everything together before the certification audit.

Inspection and audit software like Capptions can support this process by letting you:

• Build and reuse digital VCA checklists across sites and audit rounds
• Capture findings with photos and notes directly from a phone or tablet, even offline
• Automatically generate corrective actions from findings, with owners and deadlines
• Track open, in-progress, and closed actions in one dashboard, so nothing gets forgotten before the next audit
• Use the Clara AI assistant to summarize audit results or draft follow-up questions, saving time on reporting

None of this replaces the judgment of your auditor or guarantees certification outcomes, but it does remove a lot of the manual tracking that makes internal audits harder than they need to be.

If your organization operates under Seveso obligations alongside VCA, it is worth understanding where generic safety software tends to fall short for that added layer of complexity: our article on why generic safety management software falls short for Seveso III companies covers this in more detail.

Getting Started

If you are preparing for your first VCA internal audit or looking to tighten up an existing process, start small: digitize one checklist, run one audit cycle, and see how much easier follow-up becomes when findings and corrective actions live in one place. Capptions' team is happy to walk through how our inspection and corrective-action tools fit into a VCA audit workflow, without pressure and without overpromising what software can do for your certification.