Free HVAC Job Hazard Analysis Template (JHA / JSA)

Build and download a free HVAC job hazard analysis — the OSHA 3071 step decomposition, not another hazard grid. Break the job into steps, pick each hazard from a cited HVAC library, choose the control by its position in the hierarchy of controls, and record the residual. Rooftop, refrigerant and rigging hazards included. Trigger a confined space or hot work permit and sign-off is blocked until the reference is entered. PDF, Excel, or Word export.

Where should we send it?

Add your email to download this template. It is free, and you only have to do this once.

We use it to send you the occasional template and product update. See our privacy policy.

Build your HVAC job hazard analysis

Break the job into the steps the crew will actually perform, then analyse each step on its own — hazards, the control for each one chosen by its place in the hierarchy, and the risk left afterwards.

Job Hazard Analysis

HVAC · JHA / JSA

Analysis incomplete

Every step needs at least one hazard, and every hazard needs a control.

1Job & work contextWhich OSHA standard covers this work decides the trigger heights and the confined-space rulebook.
Work context

Fall protection triggers at 4 ft on this analysis (29 CFR 1910.28(b)(1)(i)). Confined space is governed by 29 CFR 1910.146.

JHA #
Date
Job / task
Location
Analysis by
Supervisor
Crew performing the joboptional
Review dateoptional
Company detailsNothing set
2Job steps & hazardsAdd the steps in the order the crew performs them. Each step carries its own hazards and controls.
1Step 1
What happens at this step
Add a hazard to this step
3Permits & authorisationsGatedTriggered by the hazards you selected. A missing reference blocks sign-off.

No permit-triggering hazards selected yet. Confined space entry, excavation, hot work and energized work each need a separate authorisation — pick one from a step’s hazard list and it appears here.

4Job-wide requirements & sign-offPPE and training for the job as a whole, then confirm the analysis was walked through with the crew.
Required PPEoptional
Required training / certificationoptional
Date signedoptional

Add to your analysis:

Download your analysis:

Free · no signup · fully editable

What's included

  • Rooftop and roof-edge work with the general-industry low-slope tiers and the construction rule carried separately (1910.28(b)(13); 1926.501(b)(10)–(b)(11)), plus skylights treated as holes under 1926.501(b)(4)
  • Refrigerant release as an oxygen-displacement hazard, not just a leak — below 19.5% oxygen the atmosphere is oxygen-deficient (1910.134(b)), with Section 608 certification cited at 40 CFR 82.161
  • Rigging and hoisting a unit to the roof — before-each-shift inspection under 1926.251(a)(1), with Subpart CC flagged where a crane sets the equipment
  • Attic, crawlspace and plenum entry that triggers the confined space permit and names which standard applies — 1910.146 for service, 1926 Subpart AA for construction
  • Brazing and torch work triggering the hot work authorisation, with the 35 ft combustible radius and the fire watch cited to 1910.252(a)(2)(iii)
  • A true OSHA 3071 step decomposition — you add a job step, and its hazards live inside it, so the sequence survives into the export instead of collapsing into a flat grid
  • A cited hazard library per trade: pick a hazard and it brings its control, its hierarchy tier, its residual and its CFR citation with it — all editable
  • Controls chosen by position in the NIOSH hierarchy of controls (elimination → substitution → engineering → administrative → PPE), with the tier ranked rather than just labelled
  • A PPE-only warning on any step where every control sits at the weakest tier — a prompt, not a block, printed in every export
  • A permit gate: permit-required confined space, excavation, hot work and energized work are triggered by the hazards you select, and sign-off is blocked until each reference is entered
  • Honest permit labelling — only the confined space entry permit is an actual OSHA permit (1910.146(e); construction 1926.1205); the other three are authorisations or consensus-standard forms, and the export says which is which
  • Missing permit references printed ABOVE the letterhead on the PDF, not buried on page two
  • Both fall-protection trigger heights carried and cited — 6 ft construction (1926.501(b)(1)) and 4 ft general industry (1910.28(b)(1)(i)) — because the work context decides which applies
  • Job-wide required PPE and required training / certification blocks, separate from per-step controls
  • A crew review confirmation, because OSHA 3071 treats involving the people doing the job as part of the method
  • Every export carrying the full disclaimer: this is a template, and a completed analysis is not itself compliance
  • Export to PDF, Excel (.xlsx), or Word (.docx)

How to use this template

  1. 1

    Set the work context and the job

    Construction or general industry first — it decides the fall-protection trigger height and which confined-space standard applies. Then the job or task, the location, who did the analysis and who is on the crew.

  2. 2

    Break the job into steps

    Add the steps in the order the crew will actually perform them, described as actions: "set cones and unload", "open the trench", "enter and cut the lateral". If a step needs more than one control answer, split it — it is really two steps.

  3. 3

    Add the hazards of each step

    Pick from the trade library and the hazard arrives with a starting control, its hierarchy tier, a residual level and its citation — or type your own. Tap the ⓘ on any library hazard for the reason it is there and the section behind it.

  4. 4

    Choose each control by its tier

    Elimination, substitution, engineering, administrative, then PPE. Work down only when the tier above genuinely is not available. If every control on a step turns out to be PPE, the form says so — that is a prompt to look again, not a failure.

  5. 5

    Clear the permits

    Select a hazard that needs a separate authorisation and it appears in the permit block with the step numbers that triggered it. Enter the reference. Until you do, the analysis reads "permit required — cannot sign off" and the gap prints at the top of the export.

  6. 6

    Review with the crew, sign, and download

    Add job-wide PPE and training, confirm the analysis was walked through with the people doing the work, then sign. Export to PDF, Excel or Word — only the steps and hazards you actually recorded appear, and the disclaimer travels with the file.

Why the step is the unit, and what that changes

OSHA 3071 describes a job hazard analysis as a technique focused on the relationship between the worker, the task, the tools and the work environment. The method is a decomposition: list the steps of the job in the order they happen, identify the hazards of each step, then determine a preventive measure for each hazard. Almost every free JSA template on the internet skips the first part. They hand you a three-column grid — hazard, control, PPE — and call the left-hand column "job steps", which produces a hazard register with a misleading header. This builder is structured the way the method is: you add a step, and the hazards live inside it.

That structure changes what the document can tell you. An HVAC changeout is not hazardous in the abstract; it is hazardous at specific moments — getting the recovery machine up the ladder, working the roof edge before the guard goes up, breaking the braze on a charged system, and setting the new unit off the rigging with people below. Those are four different steps with four different controls, and a flat register cannot hold them apart. It also cannot show you the step where the control is missing, which is the finding you actually want out of a JHA.

The second thing this builder does differently is treat the hierarchy of controls as a ranking rather than a dropdown. NIOSH publishes the five tiers in order — elimination, substitution, engineering controls, administrative controls, PPE — and is explicit that PPE is the least effective. Most JSA templates offer a "PPE required" column, which quietly encourages the weakest tier as the default answer. This one asks which tier each control sits at, and when every control on a step is PPE it says so on the form and prints it in the export. That is not a failing grade. Sometimes PPE genuinely is the control. It is a prompt to check whether an engineering control was available and skipped, which is the question a JHA exists to force.

The third difference is the permit gate. Four hazards on this form cannot be closed out by writing a sentence in a control box — permit-required confined space entry, excavation, hot work and energized work each need a separate authorisation. Select one and the analysis will not report itself as ready until the permit reference is entered, and any missing reference prints above the letterhead on the PDF. The form is also honest about which of the four is genuinely an OSHA permit: only the confined space entry permit is (1910.146(e), or 1926.1205 in construction). Subpart P contains no excavation permit; hot work is "preferably in the form of a written permit" under 1910.252(a)(2)(iv); and the energized electrical work permit is NFPA 70E 130.2(B), a consensus standard OSHA does not adopt by reference. Templates that print all four as "OSHA required" are teaching something false, and contractors repeat it in front of inspectors.

Related templates

More free downloads for your HVAC template library.

Job Hazard Analysis FAQs

What is the difference between a JHA, a JSA and a risk assessment?

JHA and JSA are the same document under two names — OSHA publishes it as a job hazard analysis in OSHA 3071, and much of the industry says job safety analysis. A risk assessment is a genuinely different document. The risk assessment is a register: one row per hazard, scored likelihood × severity on a matrix, re-scored after controls, written once per project. It has no job sequence in it. The JHA is a decomposition: you break the specific job into the steps the crew will actually perform in order, and for each step you list that step's hazards and the control for each one. The sequence is load-bearing, because most HVAC injuries happen in the transitions — carrying the recovery machine up the ladder, breaking the roof-hatch threshold, setting the condenser off the rigging. Those are steps, and a hazard register has no place to put them. Use the risk assessment to decide what the project's hazards are; use the JHA to plan one job before the crew does it.

Enough that each step is a distinct action with its own hazards, and few enough that the crew reads it. OSHA 3071 does not set a number — it warns against a breakdown that is so detailed it becomes unusable and one so general that hazards hide inside a step. The practical test is whether a step has more than one control answer; if it does, it is really two steps. This builder caps the form at twelve, which is an application limit rather than a standard, and most service jobs land between four and eight.

Because PPE is the bottom of the hierarchy of controls and it is where a weak analysis lands by default. NIOSH ranks the five tiers — elimination, substitution, engineering, administrative, PPE — and states that PPE is least effective, since it does nothing to the hazard and fails at the moment the hazard reaches the worker. A JHA that answers every step with "wear gloves and safety glasses" has documented that nothing was controlled. The flag is not a block and it is not an error: for some hazards, such as splash to the face, PPE is the honest answer. It is there so the choice is visible rather than automatic.

Four, and they are triggered by the hazards you select rather than by a checkbox. Permit-required confined space entry (attic, crawlspace or plenum on the HVAC library), excavation, hot work, and energized work. Selecting a hazard that carries one puts the permit in the block, names the step numbers that triggered it, and holds the analysis at "permit required — cannot sign off" until you enter the reference. Any still-blank reference prints above the letterhead in the PDF, not on page two.

Frequently, which is why the library asks rather than assumes. A space is confined when it is large enough to enter, has limited means of entry or exit, and is not designed for continuous occupancy — a description that fits a great many attics, crawlspaces and plenums. It becomes permit-required once it holds or could hold a hazardous atmosphere, engulfment potential, a trapping configuration, or any other recognised serious hazard; summer attic heat alone can get there. Which rulebook applies follows the work: 29 CFR 1910.146 for service and maintenance, 29 CFR 1926 Subpart AA for construction. Subpart AA additionally requires a competent person to identify the spaces and continuous atmospheric monitoring where possible.

Both of them, and which applies depends on the standard covering the work rather than the size of the drop. Construction triggers at 6 feet under 29 CFR 1926.501(b)(1); general industry — routine service, maintenance and repair on an existing system — triggers at 4 feet under 29 CFR 1910.28(b)(1)(i). HVAC crosses that line constantly, so this form asks for the work context up front and carries both numbers rather than printing one as "the OSHA height". Rooftops add tiers on the general-industry side under 1910.28(b)(13); construction has no tiers.

No, and every export says so. It is a template the employer must adapt to the actual job, the actual site and any state plan that applies, and must train the crew on. A completed analysis records that the analysis was done. It does not replace your written safety program, your permit-required confined space program, your energy control procedures, or any permit system — and where this analysis triggers a permit, that permit is a separate document that must be issued before work starts. Citations appear to explain why an item is in the library, not to certify anything.

Your crew walks the steps before they climb. Larry answers the phone while they do.

We will run your numbers on the call and tell you if the maths does not work for a shop your size. That happens, and it is a cheaper conversation than finding out three months in.

Get a demo