Use cases / Engineering & construction

How a site with 12 subcontractors keeps every document in its lane.

Insurance certificates, safety plans, crew lists. Each contractor gets its own restricted folder, provisioned automatically — and none of them can see the others.

Use caseEngineering & construction5 min read

Ridgeline Construction

General contractor · illustrative company

Subcontractors12
Docs per contractor6
Site1 project
Setup time< 20 min

Illustrative scenario based on how teams use Foliato. Not a customer testimonial.

The problem

Ridgeline Construction runs a plant-expansion site with 12 subcontractors: electrical, HVAC, steelwork, scaffolding. Before any crew enters the site, its company must hand over insurance certificates, safety plans, crew lists, and equipment certifications.

Today that lives in email. The project manager chases each contractor, saves attachments into a shared drive, and hopes the folder structure survives. Confidential documents from one contractor have already ended up visible to another.

Twice this year, a crew arrived at the gate with an expired insurance certificate — discovered right there. A stopped crew costs a full day of schedule.

72+

Contractor documents in play

12 subcontractors × 6 required documents, plus monthly certificate renewals. One expired certificate at the gate stops a crew — and the schedule — for a day.

The solution

The team modeled contractors as groups. Creating a group provisions its restricted folder automatically, with the right permission — and requests with expiry dates keep certificates current.

  1. 01

    Create the group type once

    A "Subcontractors" group type linked to a Contractor role: target project, parent folder, permission level.

  2. 02

    One group per contractor

    Creating "HVAC Corp" auto-creates its restricted folder. Invitations assign role, group, and access in one step.

  3. 03

    Request certificates with expiry

    Insurance and safety documents are requested with due dates. Reminders chase renewals — not the project manager.

Group type: Subcontractors → role: Contractor
  • HVAC CorpContractorEDIT/Site/Contractors/HVAC Corp
  • Voltaic ElectricalContractorEDIT/Site/Contractors/Voltaic Electrical
  • Steelworks SAContractorEDIT/Site/Contractors/Steelworks SA
Groups can't see each other's folders.
Creating a group runs the provisioning rules: restricted folder + permission, automatically.

The result

The project's document flow changed shape:

BeforeWith Foliato
Attachments buried in email threadsEach contractor uploads into its own folder
Contractor A could stumble on contractor B's filesRestricted folders: groups can't see each other
Expired certificates discovered at the gateExpiry dates + reminders renew them in advance
Onboarding = folders and permissions by handCreate the group. Folder and access appear on their own

Running a site with more than two contractors?

Model them as groups once. Every new contractor is one click. Free for 7 days.

Start for free

Foliato expert — the setup

The setup is one group type, one role, and a folder convention. Three decisions make it work:

1 · The group type carries the provisioning rules. The "Subcontractors" group type is linked to a Contractor role that defines where folders are created and with which permission. Creating a group executes those rules — nobody creates folders by hand:

Plant expansion — site project
Site
Site policiesVIEW
Contractors
HVAC CorprestrictedEDIT
insurance-certificate.pdf
Voltaic Electricalrestricted
Steelworks SArestricted
What HVAC Corp sees: its own folder and the shared policies. The others don't exist for them.

2 · Restricted folders keep siblings invisible. Each contractor's folder is created as restricted: its group gets EDIT on its own folder and nothing else. A shared policies folder stays read-only for everyone:

/Site/Contractors/{group}

3 · Certificates carry expiry dates. Insurance and safety certificates are requested with a due date and automatic reminders. A wrong or expired certificate is rejected per item, with a reason:

foliato.com/request/f7d2a9…

Site access · HVAC Corp

Ridgeline Construction asks you for 4 documents

  • Insurance certificateRequired

    insurance-2026.pdf · uploaded yesterday

    PDF
  • Safety planRequired

    Site-specific

    PDF
  • Crew listRequired

    Names and ID numbers

    XLSX · PDF
  • Equipment certificationRejected

    equipment-cert.pdf · 1.4 MB

    PDF
Reason: the certificate expired in June. Upload the renewed one.
Revision email sent to ops@hvaccorp…
Expires in 10 days1 / 4 completed
The request each contractor receives before entering the site. Expired items are rejected with a reason.

Frequently asked questions

Can one contractor see another contractor's documents?

No. Each group's folder is restricted: the group has access to its own folder and to whatever you explicitly share — nothing else.

What happens when a contract ends?

Deactivate the group. Its members lose access; the folder and its documents stay in the project for the record.

Do contractors need Foliato accounts?

To upload via document requests, no — they use a secure link. To work inside their folder, invitations create the account and assign role, group, and access in one step.

Who can create groups?

Workspace admins. The group type and its provisioning rules are defined once; after that, creating a group is a single field.