Care home compliance checklist 2026: what to have in place for CQC

Care home compliance is not one thing you tick off — it is a standing state across everything from fire safety to staff training to how you record an incident. This checklist walks the ground a well-run home needs to hold, organised around the five questions CQC actually asks, so you can see where you stand and what needs attention. It is a companion to our fuller guide on how to prepare for a CQC inspection, and it is written to be used, not just read.

Safe

Safe is the most evidence-heavy of the five, because so much of it is documentable and so much of the risk is immediate. Work through it first.

• Building safety in date: fire risk assessment and drills, legionella, gas, fixed electrical (EICR), and LOLER inspections for hoists and lifting equipment.
• Safe medicines management with recent audits and clean administration records.
• Current, individual risk assessments that genuinely reflect each person's needs, not a generic template.
• Safeguarding records with clear referrals and outcomes.
• Safe recruitment evidence in every staff file: DBS, right to work, references.
• Accidents and incidents logged, with evidence that lessons were acted on.

The recurring test under Safe is not whether you have a policy but whether the practice and the evidence match. A medicines policy on the shelf means little if the last audit was a year ago; a fire risk assessment is only as good as the drills that follow it.

Effective

Effective asks whether care achieves good outcomes and follows current best practice — whether the care actually works for the person.

• Up-to-date mandatory training for every member of staff, tracked on a matrix that flags what is expiring.
• Supervision and appraisal records showing competence is maintained, not just achieved once.
• Care plans reviewed as needs change, with consent and mental capacity handled properly, including recorded best-interests decisions and any lawful DoLS.
• Nutrition and hydration needs assessed and met, with monitoring where there is a risk.

Caring and Responsive

Much of Caring is observed rather than filed, but records still support it, and Responsive is about care organised around the person rather than the routine of the home.

• Evidence that people are involved in decisions about their care, with dignity and privacy respected in everyday practice.
• Person-centred care plans reflecting individual preferences, culture and communication needs, reviewed as things change.
• A complaints process that is genuinely used — concerns logged, investigated, resolved and learned from. An empty complaints log usually signals concerns going unrecorded, not a perfect service.

Well-led

Well-led ties the others together and most often decides the overall rating, because it is what tells an assessor whether good performance is durable.

• A governance and audit schedule where findings become dated, closed actions.
• Current, acknowledged policies that staff have actually read.
• Statutory notifications to CQC made and evidenced for the events that required them.
• Duty of candour understood and applied when things go wrong.

The part a checklist cannot do

A checklist tells you what to have; it does not keep it current. Training lapses, certificates expire, audits fall due, policies drift out of date — quietly, while everyone is busy caring for people. The homes that stay calm about inspection are the ones where none of that is tracked by memory: where a training matrix flags refreshers before they lapse, certificate dates are watched, audits happen on schedule, and there is always an honest, current picture of where the home stands against the five key questions. That is the difference between preparing for CQC as a periodic scramble and simply being a home that would pass on any given day.

How to keep it ready

The practical way to hold all of this is to stop relying on memory and spreadsheets and let a system carry the load. Care home compliance software keeps a live readiness score across the five key questions, tracks training and certificate expiry, holds policies with acknowledgement, and keeps audits and their actions in one place, so the evidence is always current and can be produced on request. Complys helps you organise and evidence all of this; it does not certify your service or submit your statutory notifications for you — those remain the provider's responsibility. What it does is make sure the standing state this checklist describes is genuinely maintained, rather than assembled in a panic when notice arrives.