The JHA is the optional one
Every free template site offers you a job hazard analysis. Not one of them mentions that no OSHA standard requires it.
A JHA is a recommended practice. OSHA publishes guidance on how to do one and it is genuinely good practice, widely asked for by general contractors and useful for training. But it is not the document you can be cited for not having.
The document you can be cited for not having is the certification.
29 CFR 1910.132(d), in full
Two parts, and the second is the one that gets missed.
(d)(1) requires the employer to assess the workplace to determine whether hazards are present, or likely to be present, that need personal protective equipment. If they are, PPE has to be selected, communicated to each affected employee, and fitted properly.
(d)(2) requires that assessment to be verified through a written certification carrying four specific things: the workplace evaluated, the person certifying that the evaluation was performed, the date or dates of the assessment, and a statement identifying the document as a certification of hazard assessment.
That last one is why the document this tool produces says so on its face. A page headed "PPE assessment" does not identify itself as a certification, and the standard asks for a document that does.
An inspector who walks a site, finds every worker correctly equipped, and asks for the certification, can still write a serious citation when there isn't one. The workers being safe is not the thing being cited. The missing document is.
The other things that are required
Worth naming, because a page that only says what is not required is half a page.
- Permit-required confined spaces in construction, 1926 Subpart AA. A written permit space program under 1926.1204, and an entry permit under 1926.1206 made available to every authorized entrant at the time of entry. The general industry standard, 1910.146, is the one usually quoted and OSHA states plainly that it does not apply to construction.
- Process safety management, 1910.119. A documented process hazard analysis.
- PPE, 1910.132(d). The assessment and its written certification, as above.
None of those are a JHA. A JHA can inform all three, and often does, but producing one does not discharge any of them.
Why the strict half is the certification
This tool will happily give you a thin JHA. It will warn you that a step has no control, or that you have not said what happens if a control fails, and then produce the document anyway, because a JHA is your document and it is voluntary.
It will not issue a certification without the four named fields, because a certification missing one of them is not a certification.
That ordering is deliberate. A tool that enforced the JHA rigidly and treated the certification as an afterthought would look more thorough while teaching the opposite of the regulation.
A job safety analysis is the same document
Job hazard analysis and job safety analysis are used interchangeably across American industry, and nothing legal turns on which one you write at the top. OSHA settled on job hazard analysis in its own guidance, which is the only reason this page uses JHA.
Some employers do draw a line, and it is a house rule rather than a standard: JSA for the short task-level sheet filled in on the day by the crew, JHA for the fuller analysis kept on file and reviewed. If your client asks for a JSA and hands you a form, use their form. If they ask for one and hand you nothing, this produces it.
What does not change either way is the half that is mandatory. Neither a JHA nor a JSA is required by any OSHA standard, and the PPE hazard assessment certification is required by one, so the document with the legal weight is the one nobody is asking you for by name.
The shape of a JHA is not the shape of a method statement
If you have worked from British paperwork, this will look different, and the difference is worth understanding rather than working around.
A UK method statement is a narrative: first this, then that, and here is who is responsible. A JHA is a table, one row per step, and it carries two columns the narrative version does not: what happens if the control fails, and why this control.
Those two columns are the reason a JHA is useful in a pre-task briefing. "Wear cut resistant gloves" is an instruction people tune out. "The wheel can burst and the fragments come off at speed, which is why the shield goes down and not just the glasses" is a reason, and reasons survive the walk to the machine.
What this does not do
It does not make anything compliant, and it cannot. The certification proves an assessment was carried out. It does not prove the assessment was any good, and an assessment that does not match the actual workplace is not rescued by being certified.
Whether the hazards and controls here are right for your job, your equipment and your people is the judgement of whoever prepares and signs it. That does not move because a form was filled in online.
A certification is somebody putting their name to it
The certification is the half of this an inspector can cite, and the standard works by naming a person. Who certified it, which workplace, and on what date is the entire document, so it is one individual attesting to something with their name attached.
That name never reaches us. Both files are assembled and written in your browser with your own company details on them, so the only copies in existence are the ones you saved.
Common questions
Does OSHA require a job hazard analysis?
No. No OSHA standard mandates a JHA as a standalone document. It is a recommended practice, described in OSHA’s own guidance, and it is widely asked for by general contractors and clients. That makes it worth doing and worth doing well, but it is not the document an inspector can cite you for not having.
So what does OSHA actually require in writing?
For PPE, a written certification that the hazard assessment was done. 29 CFR 1910.132(d)(1) requires the assessment, and (d)(2) requires it to be verified by a written certification identifying the workplace evaluated, the person certifying, the date or dates of the assessment, and stating that the document is a certification of hazard assessment. An inspector who finds correctly equipped workers and no certification can still issue a serious citation.
Is anything else mandatory?
Yes, for particular work. Permit-required confined space entry on a construction site needs a written permit space program under 1926.1204, and an entry permit under 1926.1206 that is made available to every authorized entrant at the time of entry. Note the part number: 1910.146 is the general industry standard and OSHA states it does not apply to construction, which has had its own standard, 1926 Subpart AA, since 3 August 2015. Processes covered by process safety management need a documented process hazard analysis under 1910.119. Those are requirements rather than recommendations, and none of them are the JHA.
Why is the certification section stricter than the JHA section?
Because the law is. The tool will produce a thin JHA and only warn you about it, because a JHA is voluntary and it is your document. It will not issue a certification without the four things the standard names, because a certification missing a named field is not a certification. Making the optional document the strict one would look more rigorous and teach you the opposite of the regulation.
What is the difference between a JHA and a JSA?
In practice, nothing. Job hazard analysis and job safety analysis are used interchangeably in the United States, and OSHA uses JHA in its own guidance. Some employers use JSA for a shorter, task-level version done on the day, and JHA for the fuller analysis kept on file, but there is no legal distinction between the terms.
Can I use a UK method statement or an Australian SWMS instead?
Not as they stand, and not the other way round either. A method statement is a narrative sequence. A SWMS has to identify defined high risk construction work and say how controls are monitored, which is an Australian statutory requirement with no American equivalent. A JHA is a table with a consequence and a rationale column that the other two do not have. The content overlaps; the documents are not interchangeable.
Does the JHA go to a server?
No. Both documents are built in your browser and written to your own machine, with your own company details on them. No account, no email address, and no copy on anybody else’s server.