How to Track First Aid Certificate Expiry [2026]

If your workplace needs trained first-aiders, a certificate in an employee's inbox is not enough. You need to know who is currently qualified, which site or shift they cover, when the qualification ends, and who will book the next course before cover disappears.

This guide is for office managers, safety leads, HR teams, facilities managers and small-business owners who need a dependable way to track workplace first-aid certificates. It starts with a free spreadsheet and calendar method, then shows how to make the process survive staff changes, busy diaries and several locations.

Certificate rules vary by country, course and employer requirement, so treat the figures below as the common case. In Great Britain, HSE says First Aid at Work and Emergency First Aid at Work certificates are valid for three years, and it strongly recommends annual refresher training. Check the rule and course issuer that applies to your team rather than assuming every card follows the same cycle. HSE's first-aider guidance is a useful starting point for UK workplaces.

1. Start with the first-aid cover you actually need

Before making a tracker, list the people and places your first-aid provision needs to cover. A name-only list is misleading. A first-aider who works Tuesdays at one site may not provide cover for a night shift or another location.

Your first-aid needs assessment should drive the list. HSE says employers should use that assessment to decide the appropriate training level and number of first-aiders, rather than relying on a fixed universal number. Record the conclusion alongside the register, for example, the minimum cover needed for each site, shift or work activity.

Create one record for each person and qualification. Include employees, regular contractors and temporary cover if they count in your plan. A person with both a workplace first-aid certificate and a specialist course needs two records if they renew on different dates.

2. Build a free first-aid certificate spreadsheet

For a small team, a shared spreadsheet is a sensible place to begin. Use one row per person per certificate, not one row per employee with several courses squeezed into one cell.

Set up these columns:

| Column | Why it matters | | --- | --- | | Person | The certificate holder's full name | | Site and shift | Shows whether the person counts toward actual cover | | Course or qualification | FAW, EFAW, CPR/AED, or the exact course title | | Provider | Lets you find the issuer or booking route later | | Certificate ID | Helps verify the document where the provider offers verification | | Issue date | Evidence of the current qualification period | | Certificate expiry date | The hard date after which the certificate cannot be treated as current | | Annual refresher due | A separate maintenance date, if your policy uses one | | Booking-by date | Your internal date to secure a place before expiry | | Record owner | The person accountable for arranging action | | Evidence link | Link to the PDF or approved document store | | Status | Current, booking needed, booked, evidence pending or expired |

In a blank column called Days left, enter this formula in the first data row and copy it down:

=IF(H2="","",H2-TODAY())

Replace H2 with the expiry-date cell in your sheet. Add conditional formatting so values under 0 are red, 0 to 60 are amber, and larger values are green. That is useful, but it is not the whole system. A 60-day warning only tells you something is close. It does not tell you whether the team has enough cover while someone attends a course.

3. Verify the source document before entering a date

Open the certificate itself. Record the printed holder name, course title, certificate ID, issue date and expiry date. Do not copy an old date from a manager's list unless someone can match it to the current evidence.

Where an issuer provides a lookup tool, use the certificate ID and save the result or link with the record. The American Red Cross, for example, says its digital certificates include a unique ID and QR code for verification. That is stronger evidence than a filename in a shared folder.

Also capture scope. A qualification can be current but not be the appropriate level for a particular risk, workplace or task. Keep a short note such as “warehouse day shift”, “office EFAW” or “includes oxygen administration” where that distinction affects your plan.

4. Set reminders from the booking date backwards

Do not schedule the first reminder on the expiry date. By then, the problem is already urgent.

Start with the expiry date and work backwards to a booking-by date that fits your team. There is no universal number of days. Course availability, leave patterns, shift cover and the need to replace several people at once all matter. A practical starting workflow is:

1. At the booking-by date, ask the record owner to check course dates and confirm who will attend.
2. At 60 days before expiry, escalate any certificate with no confirmed booking to the safety lead or manager.
3. At 30 days before expiry, confirm the course is completed or that alternative current cover is in place.
4. After completion, request the new certificate, verify its details, update the record and close the old reminder.

Put those reminders in a shared calendar, not an employee's private calendar. Title each event with the person's name, course and site. Invite the record owner and a backup owner. Link the event to the spreadsheet row or document location.

For UK FAW and EFAW records, annual refresher training is a separate reminder worth keeping. HSE strongly recommends it during the three-year certification period, while the certificate expiry still determines whether the person is considered competent as a workplace first-aider. HSE's guidance on first aid at work also notes that employers need to arrange retraining before certificates expire.

5. Check cover as a group, not only certificate by certificate

A register can show every person as current while the operation still has a coverage gap. That happens when multiple certificates expire in the same month, everyone works one shift, or training dates remove the only qualified person from a site.

Once a month, filter the register for certificates expiring in the next 90 days. Compare that list with your needs assessment and upcoming leave or site changes. Ask two questions:

• Does each site and shift still have the level of cover the assessment calls for?
• If a course is delayed, who is the current backup?

That monthly check is what many expiry lists miss. It turns “Sarah's certificate ends in October” into “our Tuesday warehouse shift has one qualified person until Sarah's requalification is completed”.

6. Avoid the failure points that make certificates lapse

The spreadsheet is not usually the problem. Ownership is.

One person owns every date. If a coordinator leaves or is on holiday, reminders may sit unseen. Give every record a primary owner and a manager or safety lead who can see the whole register.

Expiry and renewal-start dates are treated as the same thing. They are not. The expiry date is the hard deadline. The booking-by date gives you time to preserve cover. Keep both.

The new certificate is assumed, not collected. A booked course is not evidence. Mark the record as “evidence pending” until the new document and expiry date are checked.

A training record is mistaken for a coverage plan. The register should include site, shift and scope so you can spot a real operational gap.

Reminders are too late. A course may be full, an employee may be away, or multiple people may need training. Backward planning is more reliable than setting a single annual reminder.

For a wider system that covers different certifications, not just first aid, see How to Track Employee Certifications Across a Team. The underlying register design is also explained in How to Track Certificate Expiry Dates.

Where Lapsewise fits

A spreadsheet and shared calendar can work when you have a handful of certificates and one person can maintain them carefully. It starts to strain when several sites, rotating staff, evidence documents and multiple reminder dates are involved.

Lapsewise gives each certification its own record with an owner, dates, status and document. You can set reminders before the booking-by date and expiry date, keep the evidence with the record, and see the upcoming workload in one dashboard rather than hunting through calendars. The point is not to replace a first-aid needs assessment or decide who should be trained. It is to make the dates and responsibilities visible early enough to act.

For the module overview, see certification management software. If you are building one calendar for certificates, licences, insurance and other compliance dates, what renewal management means explains the shared approach.

FAQ

How long does a first-aid certificate last?

It depends on the issuer and jurisdiction. In Great Britain, HSE says workplace first-aid certificates are valid for three years. Always check the certificate and the rules that apply to your workplace.

Should I track first-aid refresher training separately from certificate expiry?

Yes. They are different actions. For UK FAW and EFAW, HSE strongly recommends annual refresher training during the three-year certificate period. Keep that date separate from the final certificate expiry date.

What is the best spreadsheet formula for first-aid certificate expiry?

Use =ExpiryDate-TODAY() in a Days Left column and apply colour rules. Pair it with calendar reminders based on a separate booking-by date, because the formula does not book training or alert a backup owner.

What should I do when a first-aid certificate has expired?

Treat the person as not current for the role until you have confirmed the applicable requirements and completed the appropriate training or requalification. Check whether your site still has adequate cover and record the corrective action.

Can one person be the first-aid owner for every location?

One person can oversee the register, but each record should also have a local owner or backup. That prevents a holiday, departure or missed email from leaving a site without anyone acting.