How to track employee certifications and license expirations

To track employee certifications and license expirations, give every credential one record holding the employee, credential type, number, issuing body, issue date, expiration date and a photo or scan of the card, then have the tracker remind the employee and their manager well before each date, and again as it gets close. The step most companies miss is the last one: connect the record to scheduling, so a driver whose medical card lapsed or a technician whose safety card expired cannot be assigned to work that requires it. That turns a list into a control.

Most companies track credentials in a spreadsheet the office manager updates when she remembers, a folder of photocopies, and the hope that employees will mention when something is due. It works until an auditor, insurer or customer asks for proof, or until someone finds out on the job site that a card expired in March.

What a lapsed credential costs

• Work stops. A crew cannot start if the only certified operator's card has expired.
• Contracts are at risk. Many customers require proof of training before your people set foot on site.
• Fines and findings. Regulators and auditors look for exactly this kind of gap.
• Insurance questions. After an incident, the first question is often whether the person was certified.
• Office hours. Chasing renewals by text and checking cards by hand eats time. A Zapier survey of businesses with up to 250 people found repetitive tasks take an average of 17.3 hours a week.

What to record

Credential types

Set up each type once, with the rules that go with it:

• Name, such as Commercial driver's license, Forklift operator, First aid and CPR, Food handler card.
• Who issues it.
• How long it is usually valid.
• The warning window: how many days before expiry the first reminder goes out.
• Whether it requires a document upload.
• Whether it is required for specific roles, jobs or equipment.

Each employee's credential

• Employee and their manager.
• Credential type.
• Credential or license number.
• Issuing body and, where it applies, state or region.
• Issue date and expiration date.
• A photo or scan of the front and back.
• Status (see below).
• Who verified it, and when.
• Notes, such as restrictions or endorsements.

Requirements

The rules that make the tracker useful:

• Which roles require which credentials. All drivers need a valid license and medical card.
• Which equipment requires which credentials. Only certified operators can be assigned the forklift.
• Which customers or sites require which credentials. A hospital job requires a specific safety course.

Statuses at a glance

Reminder timing

Set the warning window by how long renewal takes, not by habit.

Send the second reminder at about a third of the window, and a final one a week out. When a credential expires, the manager is told the same day.

Roles

• Employees see their own credentials, upload renewals from their phone and get reminders.
• Managers see their team, get alerts about expiring and expired credentials, and see who is cleared for which work.
• Office or HR sees everyone, verifies uploads, adds credential types and requirements, and runs reports.
• Owner sees everything, including the gaps report.

Credential documents can contain personal details, such as birth dates and home addresses, and medical cards can say more. Limit who can open attachments to the people who verify them. This is not a theoretical concern: in November 2024, CyberScoop reported that a misconfigured Microsoft Power Pages site exposed data on 1.1 million employees of an NHS provider, and in 2021 UpGuard found 38 million records exposed across 47 Microsoft Power Apps portals. Employee records need real access rules, not a shared link.

Connect it to scheduling

The tracker earns its keep when the people assigning work can see it.

1. Mark requirements on roles, jobs, sites and equipment.
2. Show clearance on the assignment screen. When a dispatcher picks a person, the tracker shows whether they hold every required credential.
3. Block what must be blocked. For safety-critical credentials, an expired card removes the person from the list for that work.
4. Warn on the rest. For credentials a customer prefers but does not require, show a warning instead of a block.

Reports

• Expiring in the next 90 days, by credential and by manager.
• Expired now, with the people affected and what they cannot do.
• Gaps: people whose role requires a credential that was never recorded.
• Proof package: everyone's current credentials for a given site, customer or audit, with copies attached.
• Verification log: who checked each upload and when.

Questions to settle before you build

• Which credentials are truly required, and by whom? Law, contract, insurer or company policy. Write the source next to each one.
• Who verifies uploads? One person, with a backup.
• What blocks work and what only warns? Decide per credential.
• How do new hires get in? Add credentials during onboarding, before the first shift.
• What happens when someone leaves? Keep the records for the period your advisor recommends, but end their access.

Example request

Example request: "Build a certification tracker for our 70-person electrical contracting company. Credential types have a name, issuing body, usual validity, warning window in days, and whether a photo upload is required. Each employee credential has employee, manager, credential type, number, state, issue date, expiration date, front and back photos, status, verified by and verified date. Statuses are current, expiring soon, renewal submitted, expired, missing and not required. Roles require credentials: journeymen need a state license and OSHA card, drivers need a license and medical card, lift operators need a lift certification. When a credential enters its warning window, remind the employee and manager, again at one third of the window, and a week before. On expiry, alert the manager the same day and remove the person from the list of who can be assigned work that requires it. Employees see only their own credentials and can upload renewals from their phone; uploads stay renewal submitted until the office verifies them. Managers see their crew. Office sees everyone. Only the office and owner can open medical card photos. Show reports for expiring in 90 days, expired now, missing required credentials, and a proof package for a chosen job site. Roles are owner, office, manager and employee. Only invited people can sign in."

How to roll it out

1. List credential types and requirements first. This is a one-afternoon job for the safety or HR lead.
2. Load what you have. Bring in the existing spreadsheet, then fill gaps from the photocopy folder.
3. Ask every employee to upload their cards within two weeks. Most will do it from their phone in a minute.
4. Verify in batches. The office works through uploads daily until the backlog is gone.
5. Turn on reminders. Start with the 90-day report so nobody is surprised.
6. Connect scheduling once the records are clean.
7. Retire the spreadsheet with a firm date.

Mistakes to avoid

• One warning window for everything. A one-hour refresher and a license with continuing education need very different lead times.
• Trusting uploads without checking. An unverified photo is not proof.
• Reminding only the employee. Managers need to know, because they feel the gap when someone cannot work.
• Tracking but not blocking. A tracker that never stops anyone from being assigned is a calendar, not a control.
• Wide-open documents. Limit who can open attachments.

How to measure that it works

• Expired credentials on any given day, which should fall toward zero.
• Average days before expiry that renewals are submitted.
• Time to produce a proof package for a customer or audit.
• Assignments blocked for a lapsed credential, which should be rare once reminders are working.
• Office hours spent chasing renewals.

How FORGE handles it

On FORGE, your safety or HR lead describes the tracker in plain words, like the example above, and FORGE builds it. A panel of top AI models plans the tool, a dedicated AI crew builds it, and every piece is checked for quality and security before it is saved. Most teams have their first real tool the same day, working on a phone for the employee uploading a card and on a desk for the office verifying it.

Every app lives inside your company and only invited people get in. Employees see only their own credentials, managers see their crew, and the office sees everyone, with a complete record of who uploaded and who verified each card. Employees who only upload and check their cards are $10 a user a month, and builders are $49 a seat a month with 3 builds included. When you add a new credential type later, the change is a small fraction of a build. We onboard every company ourselves, starting with a workflow workshop. Talk to us or see pricing.

Questions people ask

Sources

1. CyberScoop: Microsoft Power Pages misconfiguration exposed NHS employee data (Nov 2024)
2. UpGuard: Power Apps portals data exposure
3. Asana: why work about work is bad
4. Zapier: most dreaded tasks survey