Everything California small business owners ask us about SB-553.

If you have 10 or more employees working in California — yes. The threshold is 10, not 50. Out-of-state employers with California-based workers are covered too. A small number of industries are exempt (primarily those already regulated under the separate healthcare workplace violence standard).

Generally yes — Cal/OSHA looks at total California-based workers regardless of full/part-time status. The 10-employee threshold is a low bar; if you're in the 8–12 range and uncertain, default to building a plan rather than risking a citation later.

Most small businesses near the threshold build a plan proactively. Once you cross 10, you're covered immediately — there's no grace period. The Starter tier templates are appropriate either way, since they document your safety culture even before the law strictly applies.

Remote employees count toward the threshold and are covered by the WVPP. The plan needs to address workplace violence risks in remote work contexts — different hazards than in-person, but still in scope.

SB-553 took effect July 1, 2024. If you've been operating in California since then without a written plan, you've been technically out of compliance — but Cal/OSHA inspections have so far focused on the worst-prepared employers. Get your plan in place now; don't wait for an inspection.

Cal/OSHA can cite up to $25,000 for a serious violation and up to $162,851 for a willful violation. Worse, the citation becomes available evidence in any downstream civil action alleging negligent safety practices.

Worker complaints, reported incidents, programmed inspections (random), and complaints from former employees. The most common Cal/OSHA inspection trigger for small businesses is a worker complaint — which is why building a working plan and training employees well matters operationally, not just legally.

Cal/OSHA is required to adopt a permanent workplace violence prevention standard for general industry by December 31, 2026. Every existing WVPP will need to be reviewed against the final standard. Organizations with substantive plans now will manage the update as a routine review; template-only plans will face a full rebuild.

The 11 procedural elements California requires include: responsibilities, employee involvement, methods of communicating risks, accepting workplace violence reports, investigating incidents, hazard correction, training, post-incident response, and annual review. The Kestralis Starter template covers all 11.

You can — and many California small businesses have. The challenge is that a free template that's never been customized to your operation is not what Cal/OSHA wants to see. The Kestralis Starter starts with a defensible template AND walks you through the customization, which is the part most operators skip.

Yes — SB-553 requires site-specific hazard analysis. A single plan covering multiple sites is fine, but each site needs its own hazard-specific procedures documented. The Plus tier handles up to 5 locations; Concierge handles up to 10.

Yes. SB-553 explicitly requires a written plan. Verbal procedures, an intranet page, or a 'we have a culture of safety' assertion are not compliant.

Every California-based employee, including managers and supervisors. New hires must be trained at hire. All employees must receive annual training, and refresher training whenever plans or procedures change materially.

Cal/OSHA requires training to be 'interactive' — employees must be able to ask questions and receive real-time responses. A passive recorded video alone may not fully satisfy the requirement. The Plus tier pairs the recorded video with a Q&A protocol that satisfies the interactivity standard; Complete and Concierge include live 90-minute training sessions. Starter customers deliver their own training session and use the acknowledgment forms to document it.

Cal/OSHA doesn't specify a duration. The Kestralis training video runs 30 minutes, which is typical for the standard curriculum (recognizing signs of risk, reporting procedures, response protocols, recordkeeping). Longer industry-specific or live training is appropriate for higher-risk operations.

Yes — and this is where most operators fail. Training without documentation is not, from Cal/OSHA's view, training that happened. Records must capture: date, duration, attendees with names + titles, content covered, trainer's qualifications, and evidence of the interactive Q&A. The Kestralis acknowledgment forms cover this.

A written log of every workplace violence incident — including verbal threats, near-misses, and any event where someone felt unsafe, not just incidents that caused injury. SB-553 requires 10 specific data elements per entry. Retention: 5 years.

Any threat, act of violence, or near-miss. A customer who verbally threatens an employee, an altercation between coworkers, a domestic-violence incident that spills into the workplace — all in scope. When in doubt, log it. Cal/OSHA prefers over-documentation to gaps.

Training records: at least 1 year. Violent Incident Log entries: 5 years. Hazard assessment records and any incident investigation records: 5 years. In practice, retaining all program documentation for the life of the program is the defensible posture.

You can — the question is whether the resulting plan will hold up under inspection. A template that's never been adapted to your operation, isn't accompanied by trained employees, and doesn't have a working log behind it is the most common Cal/OSHA citation. Kestralis Starter at $199 gives you defensible templates, an incident log, acknowledgment forms, a retention checklist, and 30 days of email support for customization questions — designed for owners who will run their own employee training and just need the documents and records right. If you want a ready-to-use employee training video too, that's in Plus at $499.

We're not a law firm — we don't draft legal documents under attorney-client privilege. We're a security advisory practice. For most California small businesses, what you need is a compliant operational program, not legal opinion. Our pricing reflects that: $199 to $4,999 vs. $5,000+ for a law firm hourly engagement on the same work.

Kestralis SMB is the productized practice for 10–99 employee California small businesses. Kestralis Group is the enterprise advisory practice for larger and multi-state organizations — different pricing, scoping by engagement rather than packaged tiers. If you outgrow SMB, the enterprise practice is at /services.