VPPVoluntary Protection Programs
Voluntary Protection Programs — OSHA's recognition scheme for US worksites with effective safety and health management systems and low injury rates.
Editorial definition: The QHSE Standard, updated 3 October 2026 · https://qhsetech.com/glossary/vpp
Scope: A US recognition scheme run by OSHA; it is not a legal requirement and not an ISO certificate.
Sources checked: . Examples are editorial illustrations.
What OSHA says about its Voluntary Protection Programs
VPP is the abbreviation for OSHA's Voluntary Protection Programs, a recognition scheme for United States workplaces. OSHA's overview says the programmes recognise employers and workers who have strong safety and health programmes and low injury rates, and that management, labour and OSHA establish cooperative relationships at workplaces with a comprehensive safety and health management system. It describes approval as OSHA's official recognition of exemplary occupational safety and health. According to OSHA, participants undergo onsite reviews, are reviewed every three to five years and are not subject to OSHA programmed inspections while they keep their status. The page says the programmes were designed primarily for fixed worksites, while mobile workforces and corporations can also take part.
OSHA says VPP sets performance-based criteria for a managed safety and health system, invites sites to apply and then assesses them through an application review and an onsite evaluation by a team of OSHA experts. Approval is to one of three categories. Star is for exemplary achievement, Merit is for good systems that need further steps to reach Star quality, and Demonstration is for effective systems that differ from current VPP requirements, so that OSHA can test other approaches. The site-based application page says eligible sites are private-sector fixed worksites in general industry and maritime, federal-sector fixed worksites and certain long-term construction worksites. Applicants submit three years of injury and illness data. For Star, both the three-year total case incidence rate and the three-year DART rate must be below at least one of the three most recent years of the national average for the site's industry that the page names, while Merit applicants commit to reducing their rates within two years.
The written system is described under four core elements: management leadership and employee involvement, worksite analysis, hazard prevention and control, and safety and health training. Applicants submit their most recent annual self-evaluation with current goals, union representatives sign the application or give a signed statement that they support or do not oppose participation, and at non-union sites OSHA checks employee support in interviews. OSHA also states that the average VPP worksite has a DART rate 52 per cent below its industry average, and adds that sites typically do not begin with such low rates. This page is general information, not advice on applying, and OSHA's own pages govern current requirements.
What a VPP record set looks like in software
- Three years of case counts and hours worked per year, with the formulas for total case and DART incidence rates, so the application figures can be reproduced.
- The industry average used for comparison, with its source and year, stored next to each rate.
- Written descriptions of the four core elements, each linked to the procedures, records and people that make it real.
- The annual self-evaluation, with goals, actions completed and improvement notes.
- Records of employee involvement, such as committee minutes, hazard reports raised by workers and the action taken.
- Hazard and worksite analysis records, including inspections, job hazard analyses and corrective actions with closure evidence.
- The application, the onsite evaluation findings, the response and the date of the next review.
VPP, ISO 45001 and other uses of the letters
VPP is OSHA's US recognition scheme, assessed by OSHA staff against its own criteria. ISO 45001 is an international standard for occupational health and safety management systems, and certification to it is carried out by a certification body, so the two differ in who assesses, what is assessed and where they apply. The same three letters stand for virtual power plant in the energy sector, which this page does not cover.
A hypothetical example: checking the rates before applying
This case is invented to illustrate the record and describes no real company. A chemical blending site is considering a Star application. Over three years it logged 12 total recordable cases and 3 DART cases on 1,200,000 hours worked in all. The total case rate is 12 times 200,000 divided by 1,200,000, which is 2.0, and the DART rate is 3 times 200,000 divided by 1,200,000, which is 0.5.
The site's records put the industry averages at 2.4 and 1.1, so both rates are below them and the rate test for Star is met. The team then turns to the written system: it maps each of the four elements to evidence, drafts the annual self-evaluation and checks that worker involvement is documented, because the rates alone do not make an application. It also records that a recordable case or a change in hours could move either rate before submission.
Common misunderstandings about VPP
- VPP is voluntary and is a recognition by OSHA, not a legal requirement and not an ISO certificate.
- Low rates are necessary for Star but are not enough. OSHA also assesses the written system and evaluates the site on the ground.
- The 52 per cent figure describes the average participant. OSHA's page says sites typically do not start with such low rates, so it is not a promised result.
- Participation is not permanent. OSHA's overview says participants are reviewed every three to five years.
- Recognition does not end OSHA's role at the site. The overview says participants are not subject to programmed inspections, which differs from being outside all OSHA requirements.
How VPP relates to other glossary terms
VPP draws on the same rate definitions and management system ideas as the neighbouring terms.
- ISO 45001: an international standard for occupational health and safety management systems, assessed by certification bodies.
- DART rate: one of the two rates a Star applicant must keep below its industry average.
- TRIR: the total recordable incident rate, closely related to the total case rate in a VPP application.
- Recordable incident: the recording criteria that decide which cases enter the counts.
Records and evidence that usually exist for VPP
- The OSHA injury and illness logs and summaries behind the three-year rates.
- Hours worked by year and the calculation sheets.
- Written descriptions of the four core elements.
- Annual self-evaluations and the actions that followed them.
- Employee involvement records and, at union sites, the signed support.
- The OSHA onsite evaluation report and the site's response.
What a software tool needs to capture for VPP
- Case-level records that roll up to total case and DART rates by year, with the hours used.
- A stored benchmark with source and year beside each rate.
- Links from each core element to its procedures, records and owners.
- A self-evaluation template with goals, completed actions and open items.
- Employee involvement records, such as hazard reports and committee actions, with outcomes.
- A calendar of review and reapplication dates.
Catalog profiles documenting hazard, risk-assessment, investigation or corrective-action workflows
The list comes from the ISO 45001 software rule. It does not show that a product supports VPP applications or self-evaluations, which should be checked with your own data.
Same rule for every product: tagged “EHS Management”, “Safety Management” or “ISO Management”, with a sourced hazard, risk-assessment, investigation or corrective-action capability in its record, or one the vendor stated to us, labelled as vendor-stated. Documented and conditional capabilities qualify; check the linked scope before treating a module as included.
Tekmon pays for a sponsored placement (above); its place in this list follows the same rule as every entry. How lists are ordered
EHS Insight · Incident reporting, investigation and regulatory records · Documented
Vendor source · Profile checked
Safesite · Hazard corrective action and resolution · Documented
Vendor source · Profile checked
1Life · Incident workflows, corrective actions and monitoring · Conditional
Vendor source · Profile checked
Emex · Incident investigations · Documented
Vendor source · Profile checked
SaferMe · API V4 · Conditional
Vendor source · Profile checked
Safetymint · Incident investigation · Documented
Vendor source · Profile checked
SafetyReports · Incident investigation · Documented
Vendor source · Profile checked
Synergi Life (DNV) · Incident investigation and corrective follow-up · Documented
Vendor source · Profile checked
Tekmon · Configurable risk assessments and matrices · Documented
Vendor source · Profile checked
Capptions · Incident, risk, observation and training processes · Conditional
Vendor source · Profile checked
Cority · Operational risk assessment and control verification · Documented
Vendor source · Profile checked
Enablon · Permit, isolation and risk-assessment workflows · Conditional
Vendor source · Profile checked
Evotix · EHS audit findings and corrective actions · Documented
Vendor source · Profile checked
IsoMetrix · Incident follow-up · Documented
Vendor source · Profile checked
ITRAK 365 · Incident and near-miss investigation · Documented
Vendor source · Profile checked
Origami Risk · Scheduled inspections and actions · Documented
Vendor source · Profile checked
Quartex InControl · Corrective actions to close-out · Documented
Vendor source · Profile checked
Quentic · Audit planning, findings and corrective actions · Documented
Vendor source · Profile checked
Safety Champion · Risk assessment and mitigation planning · Documented
Vendor source · Profile checked
SAP Environment, Health, and Safety · Incident investigation, notifications and corrective workflow · Conditional
Vendor source · Profile checked
Vatix · Incident reporting and investigation · Documented
Vendor source · Profile checked
VelocityEHS · Safety capture and corrective actions · Documented
Vendor source · Profile checked
EcoOnline · Permit to work and contractor control · Documented
Vendor source · Profile checked
ecoPortal · Task risk assessments and permits · Conditional
Vendor source · Profile checked
GOARC · Incident reporting, investigation and action-complete closure · Conditional
Vendor source · Profile checked
Intenseye · Corrective actions, routing and coaching · Conditional
Vendor source · Profile checked
Novara Flex · Incident investigation and OSHA recordkeeping · Documented
Vendor source · Profile checked
Optial · Incident capture and investigation · Documented
Vendor source · Profile checked
Procore Quality & Safety · Incident investigation records · Documented
Vendor source · Profile checked
Prometheus Group · Hazard identification and risk assessment · Documented
Vendor source · Profile checked
Protex AI · Event feed, real-time alerting and corrective actions · Conditional
Vendor source · Profile checked
Qavach.AI · Corrective action and effectiveness review · Documented
Vendor source · Profile checked
SafetyStratus · Incident reporting, investigation and recordkeeping · Documented
Vendor source · Profile checked
SciSure Health & Safety (EHS) · Inspections and audits · Documented
Vendor source · Profile checked
Effivity · Nonconformity to corrective action · Documented
Vendor source · Profile checked
Q-Hub · Incident reporting and investigation · Documented
Vendor source · Profile checked
ComplianceQuest · Connected QMS and EHS corrective-action records · Documented
Vendor source · Profile checked
isoTracker · CAPA and root cause analysis · Documented
Vendor source · Profile checked
SoftExpert · Nonconformities, root cause and corrective actions · Documented
Vendor source · Profile checked
BizzMine · CAPA across quality and EHS events · Documented
Vendor source · Profile checked
All 40 matching profiles are shown. Documentation review, not hands-on testing or a claim of compliance.
Related software
Frequently asked questions
Is VPP only for the United States?
OSHA runs it for US worksites. Its application page names private-sector fixed worksites in general industry and maritime, federal-sector fixed worksites and certain long-term construction worksites.
Does VPP replace inspections?
OSHA's overview says participants are not subject to programmed inspections while they keep their status, and that they are reviewed every three to five years. It does not describe VPP as removing OSHA's role.
Do low injury rates qualify a site for Star?
They are required but not sufficient. For Star, both the three-year total case rate and DART rate must be below at least one of the three most recent years of the national average for the site's industry, and OSHA also evaluates the written system and the site.
More safety terms
Related guides
- US OSHA 2026: Electronic Recordkeeping and PSM Changes
Article on US OSHA recordkeeping and PSM changes.
- TRIR / LTIFR / DART Calculator — OSHA Formula + BLS Benchmarks
Calculator for TRIR, LTIFR and DART.
- OSHA 300 (Injury and Illness Log) — definition, software & FAQs
Definition of the OSHA 300 injury and illness log.