Golden Thread in Construction: Requirements, Responsibilities & Implementation Guide

• The golden thread is a digital, lifecycle-long record of every safety-critical decision and document for a building — required by the UK Building Safety Act 2022 for high-rise residential buildings, hospitals, care homes, and student accommodation.
• Three mandatory gateways (Planning, Pre-Construction, Completion) govern new high-rise construction. Buildings cannot be certified complete until Gateway 3 approval is secured.
• Responsibility shifts at handover: principal designers and contractors hold it during construction; building owners and safety managers hold it after occupation.
• A compliant golden thread must be stored in a common data environment (CDE) with version-controlled records, access controls, audit trails, and documented change history — maintained from design through demolition.
• While codified in UK law, golden thread principles — single source of truth, traceable changes, access-controlled documentation — represent best practice for any construction project managing safety-critical records.

The golden thread is a continuous digital record of all information relevant to a building's safety throughout its entire lifecycle — from initial design through demolition. The term entered UK construction law through the Building Safety Act 2022.

The Building Safety Act requires the golden thread for:

Higher-rise residential buildings (18+ meters in height, or 7+ stories with at least 2 residential units)
Care homes
Hospitals
Student accommodation

Key stakeholders include architects, contractors, developers, landlords, and building owners. The record begins at the design stage and aggregates safety information in a single accessible location for all parties involved in building safety decisions.

The requirement emerged directly from the 2017 Grenfell Tower fire in London, which killed 72 people. The subsequent independent review identified the absence of accessible, accurate safety documentation as a critical failure in the building's management. The Building Safety Act's golden thread requirement is a direct legislative response.

A compliant golden thread must:

• Be readily accessible throughout the building lifecycle
• Facilitate transparency to identify and reduce risks
• Incorporate all necessary safety and management information
• Provide information to the right people at the right time
• Support building safety regulations Undergo regular reviews for accuracy
• Use digital tools with appropriate security controls

Accountability and transparency

A golden thread creates a clear record of every safety-relevant decision — including how, when, and by whom it was made. Digital storage ensures that accountability is documented and assigned, not assumed.

Informed decision-making

Detailed, accessible records enable building owners, managers, and fire safety professionals to make evidence-based decisions about maintenance and upgrades. Rather than reconstructing decision history from emails and paper files, all relevant information is in one governed location.

Regulatory compliance

The golden thread provides evidence of compliance from design phase through operation, demonstrating to regulators that required standards were applied at every stage — not assembled after the fact.

Resident rights and public confidence

The Building Safety Act gives residents access to relevant building safety information sourced from the golden thread, enabling them to hold accountable persons responsible for safety issues. A maintained golden thread is verifiable evidence of the duty holder's compliance.

Reduced lifecycle risk

Continuous maintenance of accurate records supports informed decisions throughout a building's 30+ year operating life, reducing the risk of unsafe conditions developing undetected. The golden thread functions as an ongoing risk management system — surfacing potential weaknesses before they become safety events.

The Building Safety Act uses two distinct legal terms. Duty holders carry responsibility during design and construction. Accountable persons take responsibility at handover and hold it for the building's entire operational life. Understanding which role applies at each stage is a prerequisite for compliance.

During design and construction, duty holders include:

• Principal contractor or contractor
• Principal designer or designer
• Client/building owner

After occupation, accountable persons include:

• Building owner
• Building safety manager
• Facilities manager

At Gateway 3 (completion), full golden thread documentation must transfer to the ongoing accountable person. Any gap in that handover creates both a compliance failure and a practical safety risk.

The Building Safety Act incorporates ten principles that define a compliant golden thread:

1. Accurate and trusted

Accountable persons and duty holders must maintain proof of compliance with building regulations. Any modification to the building or its safety systems requires a documented change control record.

2. Security of residents

Residents receive building safety information sourced from the golden thread, enabling them to hold accountable persons responsible for identified safety issues.

3. Culture change

The golden thread supports systemic improvement in construction competence, working practices, process management, and information control — not just a documentation requirement.

4. Single source of truth

The golden thread is an immutable record of all information related to a building's safety. All changes — updates, additions, deletions — must be documented with reasons, assessments, dates, and decision-making processes recorded. Best practice requires maintaining this record in a common data environment (CDE) rather than through email or disconnected shared drives.

5. Secure

Appropriate security protocols, data protection measures, and access controls must protect the golden thread against unauthorized access and cyberattacks. EU-based buildings must align with GDPR data protection requirements.

6. Accountable

All modifications must be recorded. The golden thread must clearly document responsibilities and performance at every level of the safety chain.

7. Understandable and consistent

All information must be clear, concise, and understandable to all parties, using standard methods, processes, and terminology for fast information retrieval.

8. Accessible

Records must be structured, organized, and searchable in formats that allow straightforward extraction and updating by any authorized party.

9. Longevity

Information must support users throughout the full building lifecycle, stored in standard structured formats that adhere to open data and interoperability standards — ensuring portability across systems when building ownership or management changes.

10. Relevant

Information must be proportionate. Obsolete data should be deleted with the deletion action noted in change records. Periodic reviews should remove stale information to keep the record accurate.

The Building Safety Act includes three mandatory checkpoint stages for new higher-risk buildings and major refurbishments. Buildings cannot progress to the next stage without regulatory approval.

Gateway 1 — Planning

The principal designer presents the golden thread at the planning application stage, demonstrating that the application addresses fire service access and water supply for firefighting.

Gateway 2 — Pre-construction

The principal contractor provides a full design intention requiring regulatory approval before construction commences. Applicants must demonstrate compliance with building regulations covering duty holder competence, fire safety measures, control measures, and mandatory reporting requirements.

Gateway 3 — Completion

The accountable person submits final as-built materials for regulator evaluation and inspections. The building cannot be certified complete until all approvals are secured. At this stage, full golden thread documentation transfers to the ongoing accountable person for the building's operational life.

Implementing a golden thread begins with establishing a common data environment (CDE) — a single governed repository for all project information. The CDE is the technical foundation that enables the ten standards: accessibility, version control, access management, audit trails, and change records.

Core implementation steps:

Define information requirements: Identify what building safety information owners, operators, and occupiers will need throughout the building's lifecycle — structural specifications, fire safety systems, maintenance records, and change history.

Set up the common data environment: Configure a platform with version-controlled folders, role-based access controls, and structured naming conventions aligned to open data standards. All project data — drawings, specifications, correspondence — should be centralized here.

Establish security and access protocols: Define who can read, edit, or approve each document category. Configure change control workflows so every modification is captured with author, date, and reason.

Organize digital building information: Create a consistent classification structure that allows any authorized party to locate a specific document quickly — not just during construction, but decades later under different management.

Implement change management processes: Document every update, addition, or deletion. Record the reason, the assessor, the date, and the decision made. Change records are what make the golden thread legally defensible.

Ensure accuracy at each gateway: Before submission at each gateway, audit the golden thread for completeness. Verify that as-built documentation reflects what was actually constructed, not the original design intent.

Plan for long-term maintenance: Schedule regular reviews to remove obsolete data, update records when safety systems change, and verify that the accountable person for each document type is current.

Egnyte provides a common data environment designed for AEC workflows:  Drive-letter access and adaptive block caching allow large design files — CAD, BIM, specifications — to open and sync without broken references. Access management, version history, and audit trails apply consistently across all project data. 

Egnyte also captures project-related emails and links them to the relevant files and folders, making correspondence searchable and part of the governed record — directly satisfying the golden thread requirement that all safety-relevant communications be documented alongside the files they relate to.
For firms managing regulated projects requiring CMMC compliance, Egnyte's EgnyteGov enclave provides a separate secure environment for controlled unclassified information under the same governance framework.

The Building Safety Act applies to higher-risk buildings in England and Wales. However, the underlying framework — a single source of truth, version-controlled change records, access-controlled documentation, and lifecycle accountability — is sound practice for any construction project managing safety-critical information.

Firms outside the UK, or working on buildings that don't meet the higher-risk threshold, benefit from the same approach. Centralizing project data in a governed CDE reduces rework, version confusion, and compliance risk regardless of regulatory jurisdiction. The golden thread is a model for what good information management in construction looks like — the UK Building Safety Act simply made it mandatory for the highest-risk buildings first.