VCA for ZZP: Which Certificate Do You Actually Need?

Why a client asks a zzp'er for VCA at all

You get hired for the work. You get stopped at the gate for the paperwork.

For most self-employed contractors in the Netherlands, VCA shows up as a line in the purchase order or a question from the site manager: do you have a valid certificate, and can we see it. It is rarely explained, so it gets treated as a hurdle instead of a requirement with a logic behind it.

The logic is simple. A client who runs a VCA certified site has to be able to demonstrate that everyone working there, including people who are not on their payroll, has been examined on basic safety. You are not part of their induction programme, their toolboxes or their line management. The certificate is the substitute for all of that.

VCA is not law. It is a condition of entry.

That distinction matters, because it tells you who to ask when the requirement is unclear: not the Nederlandse Arbeidsinspectie, but the client who wrote the requirement into the contract.

B-VCA or VOL-VCA: which one for a zzp'er

There are two personal certificates you will run into, and the names do the work.

• B-VCA (Basisveiligheid VCA) is aimed at people who carry out the work under someone else's operational supervision.
• VOL-VCA (Veiligheid voor Operationeel Leidinggevenden) is aimed at people who direct work on site, which includes planning, instructing others and making the call when conditions change.

As a zzp'er you have no supervisor on site. You plan your own work, you judge your own conditions, and you are the one who decides to stop. That is why most clients ask a self-employed contractor for VOL-VCA, even for a one-person job. If you are unsure, ask before you book the exam: the requirement comes from the client, not from you, and VOL-VCA covers the ground that B-VCA covers.

A third certificate, VIL-VCU, exists for staffing intermediaries. If you place people rather than do the work yourself, that is the one to look into. For a working zzp'er it is almost never relevant.

If the abbreviation itself is new to you, we unpacked it separately in what VCA stands for.

How to arrange it, in order

1. Confirm which certificate the client requires. Ask for it in writing, in the same message where you confirm the job. It takes one line and saves a wasted exam fee.
2. Pick an exam centre recognised by SSVV, the scheme owner. Exams are offered in several languages, so you do not have to sit it in Dutch if that is not your working language.
3. Study the exam material rather than the internet. The exam is multiple choice and follows the published terminal objectives closely. Most centres sell a course, a book or an e-learning package; any of the three works.
4. Bring valid ID. No ID, no exam, and no exception.
5. Check that your result lands in the Centraal Diploma Register. That register is how a client verifies you without you emailing a scan. If it is not in there, you will be explaining yourself at every new gate.
6. Diarise the expiry. A personal VCA certificate runs for ten years, which is exactly long enough to forget about it. Put the date in whatever system you actually look at.

Can a one-person business be VCA certified?

This is where the confusion usually sits, because clients sometimes write "VCA certified" when they mean "VCA certificate".

Company certification, VCA* and VCA** and the petrochemical variant, is an audit of an organisation: a safety management system, a risk inventory, incident handling, training records, toolboxes, demonstrable follow-up. It is built around a company with employees and a management line. For a business where the owner is the only worker, there is usually no such line to audit, and a certification body will tell you so.

So in practice: the personal certificate is your route, and your safety obligations on site run through the client's system while you are inside their fence. If a client insists on company level certification from a one-person business, that is a conversation to have with the certification body before you spend money on it. Ask them what they would actually audit.

If you do grow past yourself and take on staff, the picture changes, and company certification becomes a real question rather than a theoretical one. We wrote about what that audit asks of you in the VCA internal audit guide.

What the certificate does not cover

A VCA certificate is not proof that you work safely, but proof that you have been examined on the basics. The rest still has to exist:

• Your own equipment inspections and their certificates, including ladders, harnesses, lifting gear and power tools.
• Task specific training and authorisations: confined space, hot work, working at height, specific installations.
• The site's own rules: work permits, Last Minute Risk Analysis, PPE requirements, lockout procedures.
• Insurance and liability, which have nothing to do with VCA and are checked separately.

And the moment the site is a higher hazard one, the demands around you tighten considerably. On Seveso sites, every contractor activity is part of a safety management system that an inspector will test as a whole, which is why generic tooling tends to come up short there. That is the subject of our pillar piece on why generic safety management software falls short for Seveso III companies.

If you are the one hiring zzp'ers

The mirror image of this article is the contractor manager with forty self-employed people on three sites, a spreadsheet of certificate numbers and no reliable way to know which ones expired last month. The certificates are not the problem. The traceability is.

That is the side of the fence we work on: custom forms and workflows for site access and contractor checks, inspection and audit records that stay linked to the person and the asset, and corrective actions that do not quietly die in an inbox. Clara, our assistant inside the platform, helps find what is already there instead of asking you to remember where it was filed. None of it makes anyone compliant by itself. It makes what you already do provable.

If VCA keeps landing on your desk as an administrative question rather than a safety one, have a look at how we approach it in VCA as a service, or send us a message and tell us what the gate actually asks for. We would rather hear the real requirement than guess at it.