The Worksheet Is a Claim, Not a Record: Verifying That PPM Actually Happened

Planned preventative maintenance occupies an awkward position in most compliance files. It is simultaneously the largest body of evidence a facilities team holds and the least examined. A monthly pack arrives, the worksheets are signed, the completion figure is reported at 97 per cent, and the bundle is filed. Nobody asks the obvious question: does the paperwork describe work that took place, or work that was recorded?

The distinction matters because PPM records are relied upon by insurers, enforcing authorities and, in higher-risk buildings, by the golden thread itself. If a record cannot survive a modest challenge, it is not evidence. It is an assertion with a letterhead.

Why a completion percentage proves very little

A PPM completion rate measures the closure of work orders. It does not measure the execution of tasks. The two diverge for entirely ordinary reasons: a job is closed at the end of a shift from memory, a visit is split across two engineers and only one signs, a subcontractor returns a batch of sheets a fortnight later and they are uploaded as a block.

None of these behaviours is necessarily dishonest. All of them degrade the file. The practical task for a facilities manager is therefore not to assume fraud, but to establish which records are corroborated and which are merely attested. That requires a deliberate method rather than a general sense of trust in the contractor.

An evidence hierarchy worth applying

It helps to sort PPM evidence into four broad tiers before deciding how much scrutiny each record deserves.

• Attested only. A job sheet carrying a signature, with no independent trace of attendance or work.
• Corroborated. The worksheet is supported by an access control event, a site sign-in, a lone worker check-in or a dated delivery note for consumables.
• Asset-level. The asset itself shows evidence of intervention: a changed filter and a recorded differential pressure, fresh grease at the correct points, a photographed drop test with the damper in both positions.
• Independently verified. A third party has seen the work or its result, as with a LOLER thorough examination, an insurer's inspection or a client-side witness.

Most PPM files are weighted heavily towards the first tier and described as though they were the fourth. Rebalancing that distribution is the substance of the exercise.

What the asset can tell you that the sheet cannot

Asset-level corroboration is unglamorous but reliable. Legionella control under L8 offers a straightforward example: a sentinel tap temperature recorded at the outlet, with the same reading appearing in the water treatment log and the building management system trend, is difficult to fabricate consistently over twelve months. A worksheet showing 55°C with no corresponding log entry is an invitation to ask a further question.

Similar logic applies across the plant room. F-gas records can be reconciled against refrigerant top-up quantities and leak history: an asset requiring repeated recharge is either leaking or the logs are being rounded. Air handling units on belt drive leave observable traces in dust and wear, and filter changes should correlate with a differential pressure reading taken before and after. Grease consumption can be reconciled against the number of lubrication points on the asset register, which is a useful test of whether the contractor's asset list matches yours.

Where the work is safety-critical, the standard is higher. Fire damper testing, for instance, should produce a photographic record of the damper in the open and closed positions, with the asset identification label visible in frame. A sheet listing forty dampers tested in a single morning, with no photographs and no access arrangements recorded, is not a record of testing; it is a record of a claim.

Attendance trails and the limits of tracking

Access control data is often the quickest corroboration available. A card event at the plant room door ten minutes before the worksheet timestamp, followed by a second event at the roof plant two hours later, tells a plausible story. So does a gatehouse sign-in, a permit-to-work record or a lone worker check-in from a mobile application.

There are boundaries. UK GDPR applies to engineer tracking exactly as it applies to any other worker monitoring. A facilities team relying on vehicle tracking or continuous location data to evidence PPM delivery needs a lawful basis, a documented purpose limitation and a retention period, and it should be able to explain why less intrusive means would not suffice. The objective is corroboration of a specific visit, not surveillance of a workforce. A short data protection impact assessment is proportionate; an unwritten arrangement is not.

The photograph problem

Photographic evidence is the most frequently abused element of a PPM pack, largely because it is the easiest to reuse. The checks are well established and rarely performed.

• Confirm that metadata is intact. Images stripped of EXIF data by a messaging application have lost much of their evidential value.
• Compare the device clock against the visit date. Persistent drift is a warning sign; a photograph claiming 14:32 on a Tuesday when the camera says 09:14 is not fatal but requires explanation.
• Look for an asset identification label, a consumable in a visibly new state, and a reference item that fixes the date.
• Compare against the previous visit. Identical framing, identical shadows and identical debris are a strong indication that the same image has returned.
• Check geolocation where it is available and plausible, particularly on multi-site contracts where the same image can appear twice.

The sequencing question

Time stamps deserve more attention than they usually receive. A worksheet showing forty discrete tasks across three buildings, all signed within an eleven-minute window, describes something other than forty tasks. Likewise, a two-person lift inspection recorded as a solo attendance, or a fire alarm cause-and-effect test completed in the gap between two other jobs.

A useful discipline is to reconstruct the day from the timestamps before reading the narrative. If the reconstructed day is not physically achievable, the record needs to be challenged before it is filed, not after an insurer asks about it.

Questions to put before a record enters the file

1. Which asset identifier does this worksheet refer to, and does it match our register?
2. Who attended, and is there an independent trace of their presence on site?
3. What did the asset look like before and after, and is either state evidenced?
4. Which consumables were used, and can the quantity be reconciled with the task list?
5. Do the timestamps describe a day that could actually have been worked?
6. Are the photographs original, dated, and specific to this asset on this visit?
7. Where the task is safety-critical, was anyone independent present or subsequently satisfied?
8. If the record were challenged by an insurer tomorrow, what would we produce second?

Sampling is an assurance activity in its own right

No facilities team can interrogate every record, and it should not try. A risk-based sample is more defensible: all safety-critical assets annually, a quarterly sample of high-risk plant, and a random selection across the remainder. The sample should be documented, the findings recorded, and the outcome reported to the duty holder. An audit trail of your own assurance work is often more persuasive than the records it examines, because it demonstrates that the file has been tested rather than assembled.

The uncomfortable conclusion is that a PPM file is only as strong as its weakest corroborated entry. A worksheet is a claim. The asset, the access log and the photograph are the record. Facilities teams that understand the difference tend to discover, early and cheaply, which of their contractors are delivering the service and which are delivering the paperwork.