Building Safety Act Gateway 2: the evidence pack reviewers actually open first

A Gateway 2 application for a higher-risk building in England is decided by the Building Safety Regulator's multi-disciplinary team, and they read it in an order. Contractors who have had an application rejected, or approved with a list of requirements that turned into hold points, usually find that the document the team opened first was the one that got the least attention in the submission. This is the order we would assemble the pack in, and what each document has to prove.

The frame

The application is made under the Building (Higher-Risk Buildings Procedures) (England) Regulations 2023, SI 2023/909, regulation 4 and Schedule 1. The regulator, a standalone body sponsored by the Ministry of Housing, Communities and Local Government since 27 January 2026, works to a determination period of 12 weeks for a new higher-risk building and 8 weeks for work to an existing one, extendable by agreement. It may approve, approve with requirements, or reject. Our Gateway 2 guide sets out the full checklist; this post is about the order the evidence is read in and what makes each item survive the reading.

1. The building regulations compliance statement

This is opened first, and it is where most rejections originate. The team is looking for a strategy: how the design meets each applicable requirement of Schedule 1 to the Building Regulations, and where and why it departs from Approved Document guidance. A statement that lists the Approved Documents and says the design complies with each is not a compliance statement; it is a table of contents. Write it requirement by requirement, cross-referenced to the drawing or calculation that demonstrates the point, and make the departures explicit with the justification and the alternative evidence. A reviewer who finds the fire strategy, the structural strategy and the departures in the first ten pages reads the rest with confidence.

2. The drawings, at the right level

The drawings are read against the statement. They must demonstrate compliance, not describe a planning scheme with a note that details will follow. If the compliance statement says cavity barriers are provided at every compartment line, the reviewer expects to find them on a drawing with the product and its assessed classification, not "cavity barriers by specialist". The set that goes in is the set the approval attaches to, and every change to it afterwards is at least a recordable change.

3. The construction control plan

This is the principal contractor's document, and the team reads it to decide whether the people building the design will be able to prove they built it. It describes how the work will be planned, managed and monitored so that it complies: the inspection regime, the hold points, the records at each, the interface with the principal designer when the design changes, and how compliance will be evidenced at completion. The test a reviewer applies is whether the plan could be audited. A plan that says "inspections will be carried out in accordance with the quality management system" cannot. A plan that lists the inspection and test plans by element, marks the hold points, names the record for each and says who signs it can.

4. The change control plan

Read together with the control plan. Every change to the approved design during construction is at least recordable under regulations 18 to 26; a notifiable change is notified before it is carried out; a major change is applied for and not carried out until approved, and the regulator has six weeks to determine it. The plan has to show the classification method, the log, who classifies, and how a change discovered on site reaches the principal designer before the concrete is poured. A reviewer who sees a classification guide, a log template and a named owner believes the process exists. One who sees a paragraph does not.

5. The mandatory occurrence reporting plan

The system for identifying, reporting and recording safety occurrences under regulations 32 to 37, in place before construction begins. A safety occurrence meets the risk condition in regulation 35: it could cause a significant risk to life if it were not remedied. A notice goes to the regulator by the quickest practicable means and a report follows within ten days. The plan needs the definition, the workforce briefing, the internal reporting route and the form. Cross-reference it to change control, because an occurrence such as a cavity barrier that is not the product assessed is also a change.

6. Competence and the dutyholder appointments

Part 2A of the Building Regulations 2010 requires the client to appoint the principal designer and principal contractor in writing and to take reasonable steps to satisfy itself of their competence, including organisational capability and any serious sanctions. The application carries declarations to that effect. The evidence behind them is a record: the appointment letters, the competence assessment, the organisational capability evidence and the sanctions check. Reviewers do not read this first, but they read it, and a declaration with nothing behind it is the easiest requirement to attach to an approval.

7. The rest, and what happens after

The fire and emergency file, the partial completion strategy where the building will be handed over in parts, the planning statement and the higher-risk determination itself complete the set. Confirm each against the current text of Schedule 1 and the regulator's guidance on the application, which was updated on 1 April 2026.

Approval starts the clock, not the close-out. Work must commence within three years or the approval lapses under section 32 of the Building Act 1984, and for higher-risk building work regulation 46A of the Building Regulations 2010 treats the work as commenced when the client's statement confirms that 15 per cent of it has been done. From the first day the principal contractor is audited against the plans in the application: the change log open, the occurrence reporting system briefed, the golden thread kept to the standards in regulation 31, the Regulation 7 record for materials, and the ITPs with the hold points the control plan promised. Every declaration in the Gateway 3 completion certificate application under regulations 40 to 45 depends on those records, and under section 76 of the Building Safety Act 2022 the building cannot be occupied until the certificate is issued. A contractor who assembles the Gateway 2 pack in the order above has, without noticing, also built the filing system for Gateway 3.

England only; Wales, Scotland and Northern Ireland have different regimes. This is a summary of the regulations as read on 16 September 2026 and is not legal advice; the Building Safety Regulator's current guidance and the text of the regulations govern.