A digital SDS library is a four-part job: inventory every hazardous chemical on site, source and import a current Safety Data Sheet for each one, set up automatic update checks, and run a recurring review so the file still matches what is on the shelf. OSHA does not put an expiration date on an SDS. Under the Hazard Communication Standard, 29 CFR 1910.1200, you need the manufacturer’s current sheet, and employees must be able to reach it during the shift. This guide walks that process in order, including how automatic SDS updating actually works, how long to keep archived sheets, and the mistakes that still show up in HazCom inspections. If you are choosing software while you build, start with a practical overview of SDS management software rather than a binder rewrite.
Quick answer: Walk every work area and list each product by the name on the label and the manufacturer. Collect a current 16-section SDS for each item. Load those files into a searchable system organized by site and storage area. Publish access points (QR codes at storage, plus an offline fallback). Then keep the library current with purchase-triggered adds, automated revision flags, a quarterly shelf check, and a 30-year archive you never purge.
Contents
- How do you build an SDS library from scratch?
- How do you import existing SDSs into new software?
- How does automatic SDS updating work?
- How do you keep an SDS database up to date?
- How long must you keep old or archived SDSs?
- What are common mistakes in SDS management?
- How Helios Comply helps
- FAQ
How do you build an SDS library from scratch?
Build an SDS library in four steps: walk every work area and list each hazardous chemical by exact product name and manufacturer, collect a current SDS for each, load them into a searchable digital system organized by location, then publish access points employees can reach during their shift. The inventory step decides whether everything after it is accurate.
- Do a physical walkthrough inventory. Do not start from a spreadsheet someone left on a shared drive.
- Source a current SDS for every line on that list.
- Structure the library by site and work area so you can produce a site-specific list on demand.
- Publish access: post QR codes at chemical storage and confirm an offline path for low-signal work.
Walk storage rooms, janitorial closets, maintenance shops, service vehicles, and any product poured into a secondary container. For construction and contractor sites, check job boxes and trucks, not only the shop. Record the product name as printed on the label, manufacturer, container size, quantity, work area, and whether it is still in use.
Source the SDS from the manufacturer first, then the supplier. For discontinued or hard-to-find products, use a free SDS search tool (Helios Comply offers one) rather than leaving a blank row. Organize records by location so a multi-site business is not mixing warehouses into one pile. Then post access where people actually store chemicals. Electronic SDS access is allowed under 29 CFR 1910.1200(g)(8) when there are no barriers to immediate use during the shift. That is why OSHA accepts QR code access if a worker can open the sheet without finding a supervisor or a locked office, and why an offline fallback belongs in the build, not as a later extra.
The library does not replace the rest of HazCom. You still need a written hazard communication program under 1910.1200(e), and workplace containers still need labels under 1910.1200(f)(6). Helios Comply can generate GHS secondary container labels from the SDS data so that piece is not a separate scavenger hunt.
How do you import existing SDSs into new software?
Most businesses import by bulk-uploading existing PDFs, scanned binder pages, or a spreadsheet chemical list, then letting the software read each document and pull product name, manufacturer, revision date, and GHS classification. Review the extracted data, fix duplicates and unreadable scans, then map each record to a location.
|
What you have |
What import needs |
Where it usually breaks |
|
A folder of SDS PDFs |
Legible files named well enough to match products |
Same product saved under two filenames or old MSDS scans mixed with current SDS files |
|
A paper binder, photographed or scanned |
Pages that are complete and readable, including Section 1 and the revision date |
Crooked scans, missing backs of pages, faded headers |
|
A chemical list with no documents |
Exact product name and manufacturer for each row |
House nicknames (“the red degreaser”) that do not match any SDS |
The 16-section SDS format in Appendix D to 1910.1200 is what extraction should capture: identification, hazards, composition, first aid, and the rest of the required headings, including the date of preparation or last revision in Section 16. AI-powered digitization and auto-classification is how that parsing happens in practice, which is why setup time drops compared with typing every field by hand. A person still has to check manufacturer names, catch the same product entered under two SKUs, and re-source anything scanned too poorly to read.
Products on the walkthrough list with no document get queued for sourcing. They do not get skipped. Map records to sites, departments, and storage areas during import so you are not re-sorting the whole library later. You are done with import when every inventory line has a matching record, a legible SDS, and a revision date.
How does automatic SDS updating work?
Automatic SDS updating works by matching the products in your library against manufacturer and supplier SDS sources. When the system finds a document with a newer revision date for a product you carry, it flags the record, retrieves the replacement, archives the superseded version, and notifies the person responsible for review.
Matching depends on manufacturer plus product identifier. That is why the name on the label at import matters. The trigger is a newer revision date, not a calendar reminder. OSHA does not set an SDS expiration date. The standard is the manufacturer’s current sheet. Under 1910.1200(g)(5), the manufacturer, importer, or employer preparing the SDS must add significant new hazard information, or new information on how to protect against the hazards, within three months of becoming aware of it.
Typical reasons a new SDS appears: reformulation, a changed hazard classification, new toxicological data, or updated supplier information. Software can find the newer file. It cannot confirm that the drum you bought this week is still the same formulation, so a human review step stays in the loop. Archiving on replacement is what preserves your retention record.
After an update, check secondary container labels so they still match the SDS (1910.1200(f)). If the hazard class changed, tell the people who use the product and train them on the new hazard, as OSHA describes in its employer HazCom steps. The library update is not finished until those follow-on tasks are done.
How do you keep an SDS database up to date?
Keep an SDS database current with a two-part routine: automated update checks running in the background, plus a scheduled human review, quarterly for most sites, that reconciles the library against what is physically on the shelf. Add new chemicals at purchase, not at audit time, and assign one accountable owner per location.
Rule for purchasing: no new chemical enters the site until its SDS is in the library. Loop in whoever approves purchase orders, because they are the people who can stop a product at the door. For field crews, that same rule applies to store runs and jobsite buys. If chemicals live on trucks as much as they live in a closet, pair the library with offline SDS access so a dead signal is not a missing sheet.
|
Event |
Action |
Retention |
Owner |
|
New chemical purchased |
Add the current SDS and location before the product arrives |
Keep the active SDS while the product is on site |
Site owner, with purchasing in the loop |
|
Revision flagged |
Review the new sheet, replace the active file, archive the old one, update labels if hazards changed |
Keep the superseded SDS in the archive |
Named library owner |
|
Product discontinued |
Remove it from the active list used by employees; do not delete the file |
Retain identity and use history for 30 years |
Site owner |
|
Annual walkthrough |
Catch contractor supplies, samples, and field purchases that skipped purchasing |
Add missing sheets; archive anything no longer present |
Site owner plus a backup |
Quarterly, clear flagged updates, confirm location assignments, and test one QR code per storage area. Confirm offline access still opens. Once a year, walk the site again. For companies managing SDSs across multiple sites, keep a shared master catalog with site-level lists so corporate can see every location without merging them into one unusable pile. Name a person and a backup at each site. If the task sits with whoever “used to handle safety,” it dies when that person leaves.
How long must you keep old or archived SDSs?
Do not delete superseded SDSs. Under OSHA 29 CFR 1910.1020, employers must retain employee exposure records for 30 years. Material safety data sheets that show a material may pose a health hazard count as exposure records. If you discard the sheet, 1910.1020(d)(1)(ii)(B) still requires some record of the chemical identity, where it was used, and when, for those same 30 years. Keeping the document is the lower-risk option, and it costs nothing in a digital archive.
The 30-year rule is for reconstructing historical exposure, not for day-to-day HazCom. Split the system: an active library of current sheets employees use, and an archive of superseded and discontinued products. OSHA’s 1992 interpretation on MSDSs as exposure records makes the same point: if the data sheet is the only exposure record, the employer must maintain it for at least thirty years, or keep the identity record in its place.
This is where binders versus a cloud library stop being a preference and start being a records problem. Paper from 20 years ago rarely survives a move, a flood, or a change in ownership. Digital archiving does, if you never hit delete during a software migration.
What are common mistakes in SDS management?
The most common failures are an incomplete chemical inventory, SDSs that no longer match the product on the shelf, access that depends on someone unlocking an office, missing secondary container labels, and deleting superseded sheets. Each one is an inspection finding even when the library looks tidy. Hazard Communication (29 CFR 1910.1200) was the second most frequently cited federal OSHA standard in fiscal year 2025 (October 1, 2024 through September 30, 2025).
- Incomplete inventory. Janitorial closets, service vehicles, and contractor-supplied chemicals are the usual misses. Cleaning products belong in the library the same as process chemicals.
- Stale sheets. A 2011 MSDS for a product the manufacturer has reformulated is not the current SDS.
- Access barriers. A login employees do not have, or a computer in a locked office, fails 1910.1200(g)(8).
- No offline fallback for basements, remote sites, or field crews.
- Secondary containers with no GHS workplace labels. The library does not cover 1910.1200(f)(6).
- Purging archives during a system migration.
- No named owner, so the library decays between audits.
Fix the inventory first. A polished database of the wrong list is still the wrong list.
How Helios Comply helps
Helios Comply is cloud SDS management built for small teams that own HazCom as one job among many. You upload PDFs or scan a binder; AI-powered digitization and auto-classification pull the 16-section fields instead of making you type them. Automatic SDS retrieval and revision flagging watch for newer manufacturer sheets. You still approve the swap. The old file stays in the archive.
Employees open sheets with QR codes at storage points, including offline access when the network drops. You can generate GHS secondary container labels from the same records, keep separate lists for each location, and pull compliance reports when someone asks what is on site. Helios does not write your HazCom program for you and does not make you compliant by itself. It removes the filing work that usually causes the library to rot.
Start a free trial at app.helioscomply.com. If you want help standing the library up rather than clicking through it alone, call (855) 920-5202.
FAQ
How often does OSHA require an SDS to be updated?
OSHA does not require employers to refresh SDSs on a calendar. Manufacturers, importers, or anyone preparing the SDS must add significant new hazard information within three months under 1910.1200(g)(5). Your job is to have that current sheet and make it reachable.
How long do you have to keep old SDSs?
Treat superseded sheets as exposure records. Keep them, or a record of chemical identity, location, and time of use, for 30 years under 1910.1020(d)(1)(ii). Do not delete them to “clean up” the library.
Can a digital library satisfy OSHA access rules?
Yes, if employees can get the SDS during each work shift in the work area with no barriers, and you have a backup when the primary electronic system fails. That is the condition in 1910.1200(g)(8) and in OSHA’s SDS brief. A locked office or a login nobody has is a barrier.
What if a product arrives without an SDS?
Do not put it into use as a gap-filler. Request the SDS from the manufacturer or importer (1910.1200(g)(6)). Keep the product off the floor until the sheet is in the library.
Does an SDS library replace secondary container labels?
No. Workplace containers still need labels under 1910.1200(f)(6) unless a listed exception applies, such as a portable container for immediate use by the person who poured it.
Sources
- 29 CFR 1910.1200 Hazard Communication (GPO CFR XML, title 29, 2024), including (e) written program, (f)(6) workplace labeling, (g)(5) three-month SDS revision, and (g)(8) readily accessible electronic access
- 29 CFR 1910.1200 Hazard Communication (Cornell LII)
- 29 CFR 1910.1020 Access to employee exposure and medical records (eCFR), including (c)(5) SDS as an exposure record and (d)(1)(ii) 30-year retention
- OSHA interpretation (August 28, 1992), MSDSs as employee exposure records retained at least thirty years
- OSHA Top 10 Most Frequently Cited Standards, Fiscal Year 2025
- OSHA 3514, Hazard Communication Standard: Safety Data Sheets (16-section format and electronic access with backup)
- OSHA 3696, Steps to an Effective Hazard Communication Program for Employers That Use Hazardous Chemicals
- Appendix D to 1910.1200, Safety Data Sheets (Mandatory)