Commercial Cleaning Tender Evidence Matrix: Proof vs Risk Tests

‍Turn Your Cleaning Tender Into a Defensible Risk Case

A commercial cleaning tender in New Zealand is now a risk document, not just a task list and a price. Boards, internal audit, regulators and insurers expect cleaning contracts to show how health and safety, infection control and security risks are identified, controlled and verified in practice.

One of the most practical ways to do this is with an evidence matrix. This is a table that links each material risk, such as health and safety, infection control, security and continuity, to specific controls, source documents and site-based tests. It tells procurement what to request, how to verify it on site and how to defend decisions during incident investigations or insurer reviews.

Right now, enforcement under the Health and Safety at Work Act 2015 is tightening, with WorkSafe New Zealand taking a more proactive approach to inspections and prosecutions. Infection control expectations have not relaxed since COVID-19, and early learning providers are experiencing closer scrutiny of cleaning and hygiene practices at licensing visits and ERO reviews. Insurers are also seeking more detail on contractor controls before underwriting liability and business interruption cover. This article sets out how to design or respond to a cleaning tender using an evidence matrix that will stand up to internal audit, regulator questions and serious incident reviews.

Build a Risk-Led Framework Before You Write Questions

Many cleaning tenders still start with recycled boilerplate questions from older RFQs. Those documents often come from a different risk profile and leave obvious gaps once an auditor or health and safety advisor reviews the file against current legislation and site conditions.

A more robust approach is to build a site-specific risk model first, based on your existing health and safety and risk frameworks. For most commercial facilities, cleaning risks group naturally into:

• Life safety (health and safety, slips, trips, falls, emergency egress)
• Infection control (clinical areas, food zones, vulnerable cohorts)
• Security and safeguarding (access, keys, data exposure, child safety)
• Business continuity (after hours response, surge cleaning, workforce transfer, disaster recovery)
• Reputation and regulatory (ECE licensing criteria, HACCP, ISO alignment)

Each category should align with the frameworks you already use. That means risk ratings and the hierarchy of control required under the Health and Safety at Work Act 2015, clinical governance committees and the Health and Disability Services Standard in healthcare and aged residential care, child protection policies under the Children's Act 2014 and the ECE licensing criteria in schools and early learning, and any critical infrastructure, Protective Security Requirements or essential services classification.

Once this is mapped, the evidence matrix becomes the single tool that links risk ratings, contract clauses, KPIs and evaluation tests. It gives health and safety, operations and procurement a shared view of which cleaning activities are high risk and which controls are non-negotiable.

If You Are Buying Through GETS or an All-of-Government Panel

Public sector and Crown-funded buyers run a different process, and the evidence matrix has to be built to fit it. Most open opportunities are advertised through the Government Electronic Tenders Service, and many agencies buy property and facilities services from All-of-Government or common capability panel arrangements rather than running a standalone open tender. Either route constrains how you ask for evidence, because your questions have to be answerable by every supplier on the same terms and defensible if the outcome is challenged.

The Government Procurement Rules set the frame. In practice that means:

• Evaluation criteria and weightings are published up front and applied as published, so an evidence matrix invented part way through evaluation is not usable
• You are buying on whole-of-life value rather than lowest price, which is exactly what a risk-and-evidence matrix is designed to demonstrate
• Suppliers must be treated fairly and given enough information to respond, so vague evidence requests produce vague answers you cannot score
• Panel arrangements often fix the commercial terms, which shifts the real differentiation onto capability and evidence, where this matrix does its work

The Rules also require agencies to consider broader outcomes: the secondary benefits generated by the way a contract is delivered. For cleaning, which is labour-intensive, comparatively low-paid and often subcontracted, this is not a token section. Broader outcomes commonly in scope include conditions for the workers delivering the contract, access for smaller suppliers and for Māori and Pasifika businesses, skills and training, and reduced environmental impact.

Broader outcomes are the section most often answered with intent rather than proof. Your matrix should demand evidence in the same way it does for health and safety:

• Wage and employment conditions: the employment agreements actually applied, wage build-ups by role, and how any subcontracted labour is remunerated and monitored
• Skills and training: training matrices, completion data and progression evidence from existing contracts, rather than a described programme
• Supplier diversity: named subcontractors, the scope and value of work actually passed to them, and how that is verified over the contract term
• Environmental performance: chemical and consumable selection criteria, waste and packaging data, and reporting cadence, tied where relevant to an ISO 14001 system
• Reporting: what will be measured, how often, and what happens contractually if a committed outcome is not delivered

Treat a broader outcomes commitment the way you treat a KPI. If it is not measured, reported and consequenced in the contract, it will not survive the first budget review.

One New Zealand-specific transition risk belongs in the continuity block of your matrix. Cleaning is named in Schedule 1A of the Employment Relations Act 2000, so Part 6A applies when the contract changes hands, and affected employees may elect to transfer to the incoming supplier on their existing terms with continuity of service preserved. Ask each bidder what transfer uptake its price assumes, how it will run the information exchange and election process, and what its mobilisation plan does if uptake is much higher or much lower than assumed. A bid that has not priced this has not priced the contract, and the gap will surface as a variation claim or as attrition in the first month.

Map Health and Safety Risk to Hard Evidence and Site-Based Testing

For commercial cleaning tenders in New Zealand, health and safety expectations now track with those for other higher-risk contractor categories. Regulators consistently expect alignment to the Health and Safety at Work Act 2015 and its regulations, documented risk assessments and a safety management system that can be demonstrated during a site visit. ISO 45001 certification from a JAS-ANZ accredited body is one practical indicator of structure and discipline.

At a minimum, your matrix should call for:

• Current public liability and statutory liability certificates of currency
• ISO certifications issued by JAS-ANZ accredited bodies, where claimed
• Corporate health and safety policy and an overview of the safety management system
• Site-specific risk assessments for cleaning activities, not just generic task lists
• Task analyses for high-risk work as defined in New Zealand's health and safety regulations, such as work at height or in plant rooms
• Induction and refresher training records for cleaners, including any language support
• Recent safety performance data, including notifiable events reported to WorkSafe New Zealand and LTIFR where recorded

Because cleaners work in a building the contractor does not control, the matrix should also test how overlapping duties will be managed. Under the Act, the contractor, the building owner or occupier and the tenant each hold a duty to the extent they can influence and control the matter, and each must so far as is reasonably practicable consult, cooperate and coordinate with the others. Ask how site hazard information will be exchanged before work starts, who coordinates when several contractors are on site at once, and what record is kept of that consultation.

The matrix should then define verification tests, not just a list of documents. Practical health and safety checks can include:

• Desktop review of task analyses against known site hazards and plant
• Observation of a live toolbox talk on site to confirm how procedures are communicated
• PPE spot checks during a shift, compared to documented risk controls
• Confirmation that current chemical SDS are available at the point of use and match the actual products in storage

Health and safety is also about how contractors respond when things go wrong. Ask for sample incident investigation reports that show root cause analysis, corrective action logs with close-out dates, and evidence of worker engagement through health and safety representatives or committees at other client sites. The matrix should detail how your panel will score the maturity of these responses using your internal risk rating or audit scales.

Evidence for Infection Control in High-Risk Facilities

In hospitals, day surgeries, aged residential care, early learning, and food processing, cleaning is a primary infection control measure. Requirements are influenced by the Health and Disability Services Standard, the ECE licensing criteria and the Education (Early Childhood Services) Regulations 2008, as well as HACCP and any documented food control plan.

Your infection control evidence block should be specific to the facility type and risk zones. Typical inclusions are:

• Written infection control procedures by zone and risk category that reference your site layout
• Colour-coding systems for equipment and cloths with diagrams and training material
• Chemical information that shows the relevant regulatory approval where required, with documented kill claims and contact times from manufacturer data
• Training matrices showing which staff are trained and assessed for outbreak, isolation or terminal cleaning
• Cleaning validation or audit protocols for high-touch and clinical areas, aligned where relevant to the Health and Disability Services Standard or internal infection control policies

Verification should go beyond visual checks. For higher risk sites, your matrix can include:

• ATP testing programmes with defined thresholds and corrective actions
• Scheduled surface audits for critical areas and touch points, with sampling plans
• Hand-touch point cleaning logs and supervisory sign-offs for peak periods
• Measured turnaround times for isolation rooms or outbreak cleans using time-stamped records

Winter in New Zealand typically brings increased influenza and RSV pressure for healthcare, aged residential care and early learning services. A strong evidence matrix asks for surge plans and inventory lists for critical consumables, documented outbreak playbooks that align with public health guidance, and rosters or staffing models that show how extra touch point cleaning will be resourced during peak respiratory season.

Security, Safeguarding and Contractor Integrity Checks

Cleaning teams often have unsupervised access after hours, master keys and proximity to children, vulnerable clients, plant rooms and unsecured information. This creates a material security and safeguarding risk that warrants a distinct section in the evidence matrix.

You should clearly define the contractor evidence you need, such as:

• Current NZ Police vetting for relevant roles, within your required renewal period
• Safety checks under the Children's Act 2014 for anyone who qualifies as a children's worker on site
• Site-specific access control procedures for cleaners, including zoning and escort requirements
• Key, fob and card registers that show issue, return and escalation processes
• Documented visitor and contractor sign-in procedures aligned with your existing security policies

For government tenancies, this block also has to satisfy the Protective Security Requirements. That usually means clear rules on after-hours escorting, secure waste and destruction streams, clear-desk handling, and restrictions on phones and photography in secure areas, with named and vetted staff rather than a rotating pool.

Your verification tests can include:

• Random after-hours security audits against rostered staff and access logs
• Reconciliation of access control records with timesheets over a sample period
• Testing lost key procedures and rekeying decision triggers with a tabletop exercise
• Checks that cleaning procedures align with your child protection policies and information security standards, including rules on phones and photos on site

Integrity controls also matter. An effective matrix calls for signed Codes of Conduct, whistleblower or grievance pathways, and high-level information on disciplinary actions taken for security breaches at other sites over a defined lookback period. This helps your panel test whether actual behaviour matches the documented policies.

Designing an Evidence Matrix Your Panel Can Score and Use on Site

To make the evidence matrix usable, it needs a clear structure that any panel member can follow and score. For each risk item, practical columns include:

• Risk description
• Required control or outcome
• Specific evidence type
• Verification test or audit method
• Scoring rubric
• Consequence for non-conformance

Weighting should reflect the service context and your enterprise risk register. Health and safety and infection control should carry the highest weight in hospitals and aged residential care, while security and safeguarding should dominate in schools and early learning settings operating under the ECE licensing criteria and ERO oversight. In logistics, manufacturing and critical infrastructure, continuity and surge capacity may deserve higher weighting because of supply chain and production impacts. In a public sector procurement, broader outcomes carry a published weighting of their own, so decide early what weight they hold and what evidence will satisfy it.

Your matrix should also spell out what good evidence looks like in practice. For example:

• Site-specific procedures that reference your plant, layout and operating hours, not generic manufacturer manuals
• Current certificates and registers, with expiry dates visible and within your required tolerances
• Independent audit reports, performance dashboards and meaningful client references that include scope, duration and sites, rather than unsubstantiated marketing claims

Once contracts are in place, the same matrix should flow through to mobilisation checklists, quarterly performance reviews and any re-tender decisions. At White Spot Group, facility and procurement teams we work with typically pilot the matrix at one high-risk site, involve health and safety and clinical or safeguarding leads from the planning stage, and make on-site demonstrations and audits a standard part of shortlisting. That approach treats cleaning as a controllable risk, managed through clear evidence and repeatable tests, rather than a fixed overhead that only attracts attention after an incident or complaint.

Get Started With Your Project Today

If you are preparing a commercial cleaning tender in New Zealand, we can help you scope the work clearly and submit a compliant, cost-effective proposal. At White Spot Group, we work closely with facility managers and procurement teams to align our services with your operational and budget priorities. Reach out to contact us and we will walk you through the next steps, from site assessment to tailored service schedules.

[LEGAL REVIEW — Part 6A description to be confirmed by NZ employment counsel.]