Compliance, Safety, and Liability in Florida Facilities

Maravilla Editorial Team · 2026-08-18 · 18 min read

Most facility managers hire a cleaning company to solve an appearance problem. The part nobody mentions in the sales meeting is that you are also buying a compliance position.

Your cleaning vendor's crews work unsupervised in your building, handle regulated chemicals on your floors, touch biological waste in your restrooms, and create the wet-floor conditions that produce your most common injury claim. If that vendor's paperwork is thin, the exposure does not stay with the vendor. It shows up in your OSHA inspection, your insurance renewal, your health inspection, and your litigation file.

This guide covers what actually applies in Florida, in plain language: which OSHA standards touch cleaning work, what your contract needs to say about insurance and indemnity, why the cleaning log has become a legal document, and what to ask a vendor before you sign.

The short version:

- Four OSHA standards do most of the work: housekeeping (1910.22), hazard communication (1910.1200), bloodborne pathogens (1910.1030), and PPE. - On a shared site, you and your vendor are both employers. OSHA's hazard communication standard requires on-site access to safety data sheets across employers, not just within one. - Florida's slip-and-fall statute turns on actual or constructive knowledge. Your cleaning records are the evidence that decides that question, in either direction. - Florida requires workers' compensation for non-construction employers with four or more employees. A vendor below that threshold may legally carry none, and then their injury becomes your problem. - Private Florida employers with 25 or more employees have been required to use E-Verify since July 1, 2023, with penalties reaching $1,000 per day and license suspension. - Disinfection only counts if the surface stays visibly wet for the full contact time. Most facilities fail this without knowing it.

Why Your Vendor's Compliance Becomes Your Exposure

The cleanest way to think about it: on any day your vendor is in your building, that building is a multi-employer worksite. Two sets of employees, two sets of safety programs, one set of physical hazards.

That creates three practical channels of exposure.

Regulatory. Hazards your vendor creates or fails to control exist on your premises. Chemicals they bring in are chemicals your employees can be exposed to. Documentation obligations run in both directions.

Civil liability. When somebody falls, the question is not who mopped. It is what the record shows about how long the condition existed and whether it was foreseeable. That record is usually the vendor's.

Operational. A failed health inspection, a cited safety violation, or an insurer that declines to renew all cost more than the cleaning contract does, and none of them can be fixed retroactively.

None of this argues for anxiety. It argues for a vendor whose paperwork you have actually looked at.

The OSHA Standards That Actually Touch Cleaning

Cleaning is not a heavily regulated industry, but it sits inside four standards that get cited regularly.

Housekeeping and walking-working surfaces — 29 CFR 1910.22

The baseline requirement is that "all places of employment, passageways, storerooms, service rooms, and walking-working surfaces are kept in a clean, orderly, and sanitary condition" [1910.22(a)(1)], and that "the floor of each workroom is maintained in a clean and, to the extent feasible, in a dry condition" [1910.22(a)(2)].

That phrase, *to the extent feasible, in a dry condition*, is the one that matters. The standard goes on to require that where wet processes are used, "drainage must be maintained and, to the extent feasible, dry standing places, such as false floors, platforms, and mats must be provided," and that surfaces be kept "free of hazards such as sharp or protruding objects, loose boards, corrosion, leaks, spills, snow, and ice" [1910.22(a)(2)–(3)].

Wet mopping during occupied hours is, by definition, the deliberate creation of a temporary hazard. It is legal and normal. What makes it defensible is signage, sequencing, and documentation. What makes it indefensible is doing it at noon in a lobby with no cones and no log entry.

Hazard communication and safety data sheets — 29 CFR 1910.1200

Every hazardous chemical your vendor brings into your building carries a paperwork obligation. Employers "shall have a safety data sheet in the workplace for each hazardous chemical which they use" [1910.1200(g)(1)], and must ensure sheets "are readily accessible during each work shift to employees when they are in their work area(s)" [1910.1200(g)(8)].

Electronic access is explicitly permitted — the standard allows it "as long as no barriers to immediate employee access in each workplace are created by such options." A binder in a locked janitor closet on another floor is a barrier. A QR code on the cart is not.

The multi-employer provision is the one facility managers miss. Under 1910.1200(e)(2)(i), employers must "provide the other employer(s) on-site access to safety data sheets for each hazardous chemical the other employer(s)' employees may be exposed to while working." Your vendor owes you access to their sheets. You owe them access to yours. In practice almost nobody does this until an inspector asks.

Bloodborne pathogens — 29 CFR 1910.1030

This standard is written for healthcare, but it reaches cleaning crews in any facility where they may contact blood or other potentially infectious materials — which includes restrooms, first-aid incidents, and biohazard cleanup in an office, a school, or a gym.

Where it applies, the employer needs a written exposure control plan, accessible to employees and reviewed annually [1910.1030(c)(1)]. Training is required at initial assignment and "at least annually thereafter" [1910.1030(g)(2)(ii)(B)]. PPE: "gloves, gowns, laboratory coats, face shields or masks and eye protection," must be provided at no cost to the employee [1910.1030(d)(3)(i)]. Hepatitis B vaccination must be made available within 10 working days of assignment, also at no cost [1910.1030(f)(1)(ii)(A)]. And "all equipment and environmental and working surfaces shall be cleaned and decontaminated after contact with blood or other potentially infectious materials" [1910.1030(d)(4)(ii)].

The question to ask a vendor is short: *do you have a written exposure control plan, when was it last reviewed, and are your crews trained annually?* A vendor who has one will produce it in a day. A vendor who does not will change the subject.

Personal protective equipment

Provided at the employer's cost, matched to the hazard, and used. This is the standard where the gap between the written program and the actual behavior on your floor is widest, and it is visible without any paperwork at all. Walk your building during the cleaning shift and look at what people are wearing.

For the standard-by-standard breakdown, see OSHA Requirements Relevant to Facility Cleaning, and for the bloodborne pathogen program specifically, Bloodborne Pathogen Standards for Cleaning Crews.

Safety Data Sheets: The Paperwork That Fails Audits

Three failure modes account for nearly every SDS problem in a commercial building.

The sheets are for products nobody uses anymore. A vendor changes suppliers, the chemicals on the cart change, the binder does not.

The sheets are not where the work is. The standard's test is accessibility *in the work area during each work shift*, not existence somewhere in the building.

The sheets never crossed the employer boundary. Your vendor has theirs, you have yours, and neither of you has the other's — which is exactly what 1910.1200(e)(2)(i) requires you to exchange.

The fix is a five-minute annual habit: request a current chemical inventory with matching sheets, confirm where crews access them on-site, and give your vendor the same for anything your staff uses in shared spaces. Safety Data Sheets: What Facility Managers Must Keep on File covers the mechanics, including what a compliant electronic system looks like.

Slip-and-Fall Liability: Why the Cleaning Log Is a Legal Document

This is the single highest-value compliance item in a Florida facility, and it is almost entirely a documentation question.

Florida Statute 768.0755 governs it. If a person slips and falls on a transitory foreign substance in a business establishment, "the injured person must prove that the business establishment had actual or constructive knowledge of the dangerous condition and should have taken action to remedy it."

The statute then defines how constructive knowledge can be established by circumstantial evidence showing that:

> "(a) The dangerous condition existed for such a length of time that, in the exercise of ordinary care, the business establishment should have known of the condition; or (b) The condition occurred with regularity and was therefore foreseeable."

Read those two clauses as a facility manager and the operational implications are immediate.

Clause (a) is a stopwatch. The plaintiff's case improves with every minute the condition existed unaddressed. A documented inspection sweep that ran twelve minutes before the fall is a materially different fact pattern than a building with no inspection record at all.

Clause (b) is a pattern. If the same entryway floods every afternoon in rainy season and nothing changed, foreseeability is not a hard argument to make. This cuts both ways: a log showing you identified a recurring condition *and implemented a countermeasure*, mats, a mid-day sweep, a drainage fix, is strong evidence of ordinary care. A log showing you identified it and did nothing is the plaintiff's best exhibit.

So the practical standard for a Florida facility is not "clean floors." It is a timestamped, contemporaneous record of inspection and remediation: who swept, when, what they found, what they did. Photo-verified checklists with automatic timestamps have quietly become the strongest form of this evidence, because they are hard to reconstruct after the fact and therefore hard to impeach.

One caution worth stating: a log is only an asset if it is accurate. A log with entries for sweeps that did not happen is worse than no log, because it converts a negligence argument into a credibility problem.

Slip-and-Fall Liability: Why Cleaning Documentation Matters covers what a defensible log actually contains, and our own approach to timestamped verification is described in Digital Quality Assurance: Photo Verification and Smart Checklists.

Insurance and Indemnity: What the Contract Needs to Say

Six items. If your cleaning contract is missing any of them, the gap is worth closing at renewal.

1. General liability, with you named as additional insured. Being named is what gives you direct rights under their policy. A certificate showing they have coverage is not the same thing as being covered by it.

2. Workers' compensation, and check the threshold. This is Florida-specific and it catches people out. Under Fla. Stat. 440.02(20)(b)2., mandatory coverage applies to "all private employments in which four or more employees are employed by the same employer" for non-construction work, while construction employers are covered at one or more employees. Cleaning is non-construction. So a three-person cleaning company may legally carry no workers' compensation at all, and if one of their people is injured in your building without coverage, the question of who is responsible becomes expensive and unpredictable.

3. A janitorial or crime bond. Coverage for employee theft. Relevant anywhere crews work unsupervised after hours, and non-negotiable anywhere with cash handling, controlled substances, or client data.

4. A real indemnification clause. Mutual, clearly scoped, and specific about defense costs. This is the clause most worth having an attorney read, because generic language tends to allocate risk in whichever direction the drafting party preferred.

5. Certificates of insurance with automatic renewal notice. Coverage lapses quietly. A certificate you collected at signing tells you nothing about today. Require notice of cancellation or material change.

6. A written scope of work with documented frequencies. This is a compliance document as much as a service document. When an inspector or an attorney asks how often that area was supposed to be cleaned, the answer needs to exist in writing.

For clause-level detail, see Insurance and Indemnity Clauses in Cleaning Contracts. How these items fit into a bid comparison is covered in Commercial Cleaning: Scope, Cost, and Contracting.

Workforce Compliance: E-Verify in Florida

Since July 1, 2023, Florida law has required private employers with 25 or more employees to use E-Verify to confirm a new employee's employment eligibility. Under Fla. Stat. 448.095, verification must occur within three business days after the first day the new employee begins working for pay, and the employer "must retain a copy of the documentation provided and any official verification generated, if applicable, for at least 3 years."

The enforcement mechanism has teeth. An employer found to have failed to use E-Verify three times within a 24-month period faces a fine of "$1,000 per day until the employer provides sufficient proof" of compliance, and noncompliance can trigger suspension of licenses. Employers also certify compliance annually when submitting unemployment insurance contributions.

Why this belongs in a facility manager's file: cleaning is a labor-intensive, high-turnover industry, and workforce compliance is where undercutting happens. A bid meaningfully below the market often reflects a labor cost structure that will not survive scrutiny. You are entitled to ask whether a vendor is above the 25-employee threshold, whether they use E-Verify, and whether they retain documentation.

E-Verify and Workforce Compliance: What Clients Should Ask gives the questions in a form you can put directly into an RFP.

What Changes by Facility Type

Medical, dental, and healthcare

The highest-stakes category. Bloodborne pathogen requirements apply squarely, regulated waste handling is a defined procedure rather than a habit, and disinfection is only real if it is done to label.

That last point deserves emphasis, because it is the most common failure in the field and it is invisible on inspection. EPA guidance on registered disinfectants is explicit that "the surface should be visibly wet for the entire contact time," and notes that "this may mean the product needs to be reapplied." A crew that sprays and immediately wipes has cleaned the surface. It has not disinfected it. Contact times vary by product and by target organism, which is why product substitution in a medical facility is a compliance event, not a purchasing decision.

See Medical Office Cleaning: Infection Control Fundamentals and the Medical, Dental & Healthcare Cleaning service page.

Restaurants and food service

Florida licenses and inspects public food service establishments through the Division of Hotels and Restaurants. Under Fla. Stat. 509.032(2)(a), the division adopts "a risk-based inspection frequency for each licensed public food service establishment," performing "at least one, but not more than four, routine inspections" annually, and under 509.032(2)(d) it must "adopt and enforce sanitation rules consistent with law to ensure the protection of the public from food-borne illness," including standards for obtaining, storing, preparing, processing, serving, and displaying food.

Practically: inspections are unannounced, frequency scales with risk, and the conditions inspectors cite most often — grease accumulation, floor drains, hood and vent buildup, dish area sanitation — sit in the overlap between kitchen staff duties and the cleaning contractor's scope. That overlap has to be written down, or it becomes the gap where the violation lives.

Kitchen exhaust has its own inspection cycle and its own fire code. We set out the schedule and what an inspector looks for in a compliant exhaust strategy.

See Florida Health Code and Restaurant Cleaning Requirements and the Restaurants & Food Service Cleaning service page.

Schools, daycare, and education

Background screening requirements are stricter, access is time-boxed around student presence, and chemical storage rules are tighter. Documentation expectations from districts and licensing bodies are typically the most detailed of any commercial category. See Schools, Daycare & Education Cleaning.

Gyms, studios, and personal care

Shared equipment, bare skin, and constant moisture. Disinfectant contact time and locker-room protocols carry more weight here than square footage does. See Gyms & Fitness Studios and Salons & Personal Care.

Industrial, warehouse, and critical facilities

Chemical inventories are larger, forklift and traffic patterns constrain when cleaning can happen, and in data centers and critical infrastructure the controlling requirements come from the client's own protocols rather than from a public standard. See Warehouse & Industrial and Data Centers & Critical Facilities.

Secure and cleared environments

If your facility includes classified or access-controlled space, the requirements shift from safety compliance to personnel security — screening levels, escort procedures, and chain of custody. That is a different body of practice, covered in Secure Facilities and Cleared Environments.

The Vendor Compliance Checklist

Ten items. Any vendor worth hiring can produce all ten within two business days.

1. Certificate of general liability insurance, with your entity named as additional insured 2. Proof of workers' compensation coverage — or a written explanation if they fall below Florida's four-employee threshold 3. Janitorial or crime bond 4. Written bloodborne pathogen exposure control plan, with the date of last annual review 5. Training records showing annual bloodborne pathogen and hazard communication training 6. Current chemical inventory with matching safety data sheets, plus how crews access them on-site 7. Written confirmation of E-Verify use, if they are at or above 25 employees 8. Written scope of work with documented cleaning frequencies by area 9. Their inspection and documentation method: what gets logged, by whom, with what timestamp 10. Named point of contact for incidents, with a defined response time

How long they take to produce these is itself a data point.

The Complete Compliance Library

Regulatory foundations

- OSHA Requirements Relevant to Facility Cleaning - Bloodborne Pathogen Standards for Cleaning Crews - Safety Data Sheets: What Facility Managers Must Keep on File

Liability and contracts

- Slip-and-Fall Liability: Why Cleaning Documentation Matters - Insurance and Indemnity Clauses in Cleaning Contracts - E-Verify and Workforce Compliance: What Clients Should Ask

Facility-specific requirements

- Florida Health Code and Restaurant Cleaning Requirements - Medical Office Cleaning: Infection Control Fundamentals

Related guides

- Commercial Cleaning: Scope, Cost, and Contracting , Specialty Cleaning: When Standard Janitorial Isn't Enough , The AI-Native Cleaning Operation

Related services

- Office & Corporate · Medical, Dental & Healthcare · Retail & Showroom · Restaurants & Food Service · Gyms & Fitness Studios · Schools, Daycare & Education · HOA & Condominium Common Areas · Hospitality & Hotels · Warehouse & Industrial · Aviation & FBO · Marine & Yacht · Data Centers & Critical Facilities · Salons & Personal Care · Event & Venue Post-Event · Disinfection & Electrostatic Spraying · Day Porter & On-Site Attendant

Deferred cleaning shows up on the balance sheet before it shows up in an audit. Protecting the bottom line through asset-based maintenance puts numbers to what an office loses.

Where We Work

Maravilla Cleaners serves commercial facilities across Florida, with the deepest coverage in Fort Myers, Naples, and Miami, and active service in Fort Lauderdale, West Palm Beach, Cape Coral, Sarasota, and Tampa.

Frequently Asked Questions

Is my cleaning company's OSHA compliance my problem? Practically, yes. When your vendor works in your building, both companies' employees share the same physical hazards, and some obligations — such as exchanging safety data sheet access under 29 CFR 1910.1200(e)(2)(i) — run between employers rather than within one. Hazards your vendor creates exist on your premises.

Does my cleaning vendor need workers' compensation insurance in Florida? Only if they meet the threshold. Fla. Stat. 440.02(20)(b)2. requires coverage for non-construction employers with four or more employees; construction employers are covered at one. Cleaning is non-construction, so a very small vendor may legally carry none. Ask, and get the answer in writing.

Do cleaning crews need bloodborne pathogen training? Where crews may reasonably be expected to contact blood or other potentially infectious materials, 29 CFR 1910.1030 requires a written exposure control plan, training at initial assignment and at least annually after, PPE at no cost to the employee, and hepatitis B vaccination made available within 10 working days of assignment.

Where do safety data sheets have to be kept? Readily accessible during each work shift to employees in their work areas [1910.1200(g)(8)]. Electronic access is allowed as long as it creates no barrier to immediate access. A binder locked in a closet on another floor generally does not meet the test.

How do cleaning records affect a slip-and-fall claim in Florida? Fla. Stat. 768.0755 requires the injured person to prove the business had actual or constructive knowledge of the dangerous condition. Constructive knowledge can be shown by how long the condition existed or by the condition occurring with regularity. Timestamped inspection and remediation records go directly to both questions.

Does Florida require my cleaning contractor to use E-Verify? Private Florida employers with 25 or more employees have been required to use E-Verify for new hires since July 1, 2023, with verification within three business days and documentation retained at least three years (Fla. Stat. 448.095). Below 25 employees, the state mandate does not apply.

How often are Florida restaurants inspected? The Division of Hotels and Restaurants sets a risk-based frequency, with at least one and no more than four routine inspections annually per licensed public food service establishment (Fla. Stat. 509.032(2)(a)). Inspections are unannounced.

What is the most common disinfection mistake in commercial facilities? Not respecting contact time. EPA guidance states the surface "should be visibly wet for the entire contact time," and that the product may need to be reapplied. Spraying and immediately wiping cleans a surface without disinfecting it.

Is sales tax charged on commercial cleaning in Florida? Yes. Cleaning of nonresidential building interiors is taxable at the state rate plus any applicable county surtax, while residential cleaning is not (Florida Department of Revenue, GT-800015).

What should I ask a vendor before signing? Work through the ten-item checklist above. The useful signal is not only whether they have the documents, but how quickly they can hand them over.

Request a Compliance Review

We will walk your facility, review your current cleaning scope and documentation against the requirements on this page, and give you a written summary of the gaps, whether or not you end up working with us.

Request a walkthrough

*This guide summarizes regulatory requirements in plain language for facility management purposes. It is not legal advice, and it is not a substitute for review by qualified counsel or by your insurance advisor. Regulations and statutes change; citations reflect the sources and revision dates listed at the end of this document. Confirm current requirements for your specific facility and jurisdiction before acting.*