Skip to main content
KestralisKestralis

— Compliance Campaign

Brief · California · 2026

California SB-553 is in effect.
Most plans won't survive an inspection.

California employers with 10+ in-state employees are subject to the most comprehensive general-industry workplace violence law in the United States. Kestralis builds defensible programs — not form-filler plans.

— Smaller California operation?

Kestralis SMB has productized SB-553 compliance for 10–99 employee businesses.

Templates, training, and support from $199 — built specifically for California small businesses that don't need a custom enterprise engagement.

— Free tool · ~90 seconds

Find your 3-year California workplace violence exposure across Cal/OSHA penalties, civil liability, workers’ comp, productivity, and insurance — from federal and state data, with a personalized PDF.

What SB-553 requires

Four deliverables every covered employer must maintain.

California Labor Code § 6401.9

  1. 01

    A written, site-specific WVPP

    A Workplace Violence Prevention Plan that addresses the required 11 procedural elements, tailored to each work area and operation — not a template.

  2. 02

    A Violent Incident Log

    Operational recordkeeping of every incident, regardless of injury, with the 10 required data elements. Retained for five years.

  3. 03

    A training program

    Initial, annual, and periodic training when plans or procedures are updated. Training must be interactive, delivered by a knowledgeable person, and appropriate to workers' language and literacy. Appropriate records are maintained for at least 1 year.

  4. 04

    A recordkeeping system

    Hazard assessment records, incident logs, and investigation records. Retained five years and produced on request for Cal/OSHA.

— Common failures

What we see most often in non-compliant programs.

Every item below is citable on its own — and every one of them is routine in plans written to meet the July 2024 deadline.

  1. 01A plan downloaded from Cal/OSHA’s model and never customized to the actual worksite
  2. 02An incident log that no one has been trained to use, or that lives in a spreadsheet no one opens
  3. 03Training delivered once in 2024 and never repeated
  4. 04No defined Threat Assessment Team and no documented escalation path
  5. 05No annual review — the plan has not been touched since adoption
  6. 06Managers who don’t know the plan exists, let alone what it obligates them to do

Three ways to start — free

Get a defensible read on your program before you book.

Interactive · ~10 min · ReadyState

See where you stand in ten minutes.

An interactive scorecard that maps your current state against every SB-553 requirement. No login. No email gate. Bring the results to a consultation and we'll scope the work from there.

Launch ReadyState

PDF · Instant · 12-Point Assessment Guide

Will your plan survive the inspection?

The same 12-point assessment instrument our principals run before every engagement. Read it on your own, at your own pace. No login. No email gate.

Calculator · ~90 sec · For CFO & GC

What is your 3‑year exposure?

A defensible dollar figure across Cal/OSHA penalties, civil liability, workers' comp, productivity, and insurance impact. Federal data only. Personalized PDF you can forward to the CFO or GC.

Run the calculator

Three ways to engage

From compliance gap to defensible program.

Pricing reflects single-location mid-market engagements. Multi-site, regulated, or complex programs are scoped individually after a thirty-minute consultation.

Tier 01

Readiness Assessment

$3,500 – $6,500

Five-business-day engagement

Practitioner review of your current state — plan, log, training, and hazard assessment — against all SB-553 requirements.

  • Written compliance scorecard
  • Prioritized remediation roadmap
  • Cost-to-close estimate per finding
  • Findings briefing with a principal

Best for: Existing 2024 plans needing an independent review, or employers facing imminent Cal/OSHA inspection.

Schedule a Consultation

Tier 02

Program Build

$8,500 – $18,000

Four to six weeks · single location

End-to-end build of your written plan, log system, training program, and Threat Assessment Team — site-specific, not templated.

  • Written, site-specific WVPP
  • Violent Incident Log + 5-year retention framework
  • Manager and employee training delivery
  • Threat Assessment Team launch facilitation
  • 30-day post-launch support

Best for: From-scratch programs, or 2024 plans that need a full rebuild before the permanent Cal/OSHA standard.

Schedule a Consultation

Tier 03

Managed Program

$2,000 – $4,000 / month

Annual retainer

We own the plan's annual cadence — review, retraining, regulatory monitoring, and on-call consultation when threats arise.

  • Annual plan review and retraining cadence
  • Regulatory monitoring (Cal/OSHA, new state mandates)
  • Annual refresher training delivery
  • On-call case consultation
  • Quarterly program check-ins

Best for: Organizations that want SB-553 compliance handled without standing up an internal owner.

Schedule a Consultation

Frequently asked

Questions counsel and HR leadership ask us first.

Who has to comply with SB-553?

Any California employer with 10 or more employees in the state — including out-of-state employers with California-based workers. A small number of industries are exempt (primarily those already regulated under the separate healthcare workplace violence standard).

What happens if we are inspected and non-compliant?

Cal/OSHA can cite up to $25,000 for a serious violation and up to $162,851 for a willful violation. More importantly, a citable deficiency becomes available evidence in any downstream civil action alleging negligent safety practices.

The law has been in effect since July 2024. Why do we still need help?

Most plans written in 2024 were generic templates filed to meet the deadline. Cal/OSHA's permanent workplace violence standard is due by end of 2026 — every existing plan will need to be updated. Annual review, retraining, and ongoing incident-log discipline are additional requirements most employers have not operationalized.

How is Kestralis different from HR compliance vendors?

We are not an HR firm selling templates. Our principals have designed and run enterprise-scale security programs and managed real threat cases, and a licensed private investigations capability is in-house when a case requires it. We build programs that work, not binders that check a box.

— Complete Compliance

SB-553 is one piece of a larger Cal/OSHA obligation.

California's workplace safety framework extends beyond the Workplace Violence Prevention Plan. Every California employer is also required to maintain a written Injury and Illness Prevention Program (IIPP) under 8 CCR § 3203 — covering general hazard identification, incident investigation procedures, correction tracking, and employee safety communication systems. Hazard-specific written programs (Heat Illness Prevention, Hazard Communication, and others) apply based on industry and workplace conditions.

Kestralis Group focuses on workplace violence prevention, behavioral threat assessment, and security advisory — the areas where our principals' operational and enterprise credentials produce the most defensible outcomes. For the full Cal/OSHA compliance picture, we work alongside specialist partners and can connect clients with the right resources for IIPP development, hazard-specific programs, and harassment prevention training.

If you are not certain where your organization stands on the complete California compliance obligation, start with our SB-553 Readiness Assessment. The assessment process surfaces adjacent compliance gaps and we will tell you honestly what falls within our scope and what requires a different specialist.

Operating outside California too? View the full national compliance guide →

WVPP

Workplace Violence Prevention Plan — SB-553 / Labor Code § 6401.9

IIPP

Injury & Illness Prevention Program — 8 CCR § 3203

IIPP + WVPP

Kestralis Group builds both as a single coherent system

Before you book a consultation

Want to evaluate where your plan stands before talking to us? The 12-point assessment guide is the same instrument we run before every engagement.

Next step

Talk to a principal.

Thirty minutes — no procurement gauntlet. We'll review your current state (including any ReadyState results you bring) and scope the right tier from there.