How to Hire a Security Contractor in New Zealand

Hiring a security contractor can look straightforward until the paperwork lands on your desk. A provider offers a standard agreement, promises trained staff and quick response times, and you just want the site covered. The trouble is that founders and SME owners often make the same mistakes: treating security as a simple labour hire arrangement, assuming the contractor is responsible for every compliance issue, or relying on verbal promises about licences, insurance and incident reporting.

That can leave your business exposed if a guard is unlicensed, uses subcontractors you did not approve, mishandles personal information, or fails to meet the service levels you expected. Problems also come up when a contractor is treated like an employee in practice, or when your agreement says almost nothing about liability, equipment, access rights or termination rights.

This guide explains how to hire a security contractor in New Zealand, what should be in the contract, what legal issues to check before you sign, and where businesses most often get caught.

Overview

Hiring a security contractor is not just about finding someone available at the right rate. The legal and commercial detail matters because security providers often have access to your premises, staff, customers, systems and incident records. Before you sign a contract, make sure the provider can legally do the work, the services are clearly defined, and the risk allocation matches the reality of your site.

  • Confirm whether the contractor and individual guards hold the right security-related licences or registrations for the services being supplied.
  • Check whether you are engaging an independent contractor business, labour hire provider, or an individual who may be treated like a worker in practice.
  • Review the scope carefully, including patrols, monitoring, alarm response, event security, key holding, CCTV oversight and reporting obligations.
  • Set clear service levels, attendance times, escalation procedures and records management requirements.
  • Check insurance cover, liability caps, indemnities and who pays for loss, damage or third party claims.
  • Address privacy issues if the contractor will handle incident reports, CCTV footage, visitor logs or employee information.
  • Control subcontracting, site access, use of equipment, uniforms, branding and health and safety responsibilities.
  • Include practical exit rights, handover obligations and a process for disputes and urgent incidents.

What This Means For Your Business

For a New Zealand business, hiring a security contractor means engaging an external provider under a commercial contract while still keeping a close eye on compliance, privacy, site safety and service quality. You are not just buying hours of guard time. You are giving another business access to your premises and expecting it to manage situations that can affect staff safety, customer relationships and your reputation.

This matters whether you run a retail store, warehouse, office, hospitality venue, event business, medical clinic or construction site. The risks change from business to business, but the core issue is the same: your agreement needs to match the real work being done.

Contractor or employee, why classification still matters

The first question is whether you are truly hiring an independent contractor business, or whether the arrangement starts to look like employment. This is where founders often get caught, especially when they hire an individual security guard directly rather than engaging an established security company.

If you control the person’s hours, direct their day-to-day work, provide the main equipment, require them to work only for you, and integrate them into your team like staff, calling them a contractor may not settle the issue. Labels help, but the real nature of the relationship matters more.

Before you classify someone as a contractor, think about:

  • Who decides when and where the work is done.
  • Whether the person can send a substitute.
  • Who supplies uniforms, radios, vehicles or monitoring equipment.
  • Whether the person works for multiple clients.
  • How they are paid, for example by invoice, project, shift or wage-like arrangement.
  • Whether you supervise them like an employee or buy outcomes from a separate business.

If you are engaging a security company rather than a sole trader, the classification risk is usually lower, but the contract still needs to be drafted on that basis. It should describe the provider as an independent business and avoid employment-style language unless it is genuinely relevant.

Licensing and industry-specific checks

Security work is not like hiring a generic cleaner or courier. Depending on the services involved, there may be licensing or certification requirements that apply to the company, individual personnel, or both. Before you rely on a verbal promise, ask the provider to confirm what authorisations are required for the services offered and who holds them.

You should also check whether the provider has:

  • Current public liability insurance and any other relevant cover.
  • Training records for staff likely to attend your site.
  • A process for vetting personnel.
  • Policies for incident handling, escalation and use of force.
  • A privacy notice or process for managing footage, logs and personal information.
  • Health and safety systems suitable for your site.

For higher-risk sites, ask for details in writing. A provider that cannot clearly explain its compliance position before you sign may create bigger issues later.

What services should be spelled out

A good security contract is specific. If the service description is vague, the main risk is that you think you bought one level of protection and the contractor believes it only promised something more limited.

Your scope might include:

  • Static guarding during trading hours or overnight.
  • Mobile patrols at set intervals.
  • Alarm monitoring and response.
  • Event entry screening and crowd control.
  • Key holding and after-hours access.
  • CCTV observation or review.
  • Incident logging and reporting.
  • Emergency callout support.

Spell out practical detail such as arrival windows, reporting format, site rules, escalation contacts, prohibited conduct and any tasks the contractor must not perform. Security providers often supply standard terms designed to fit many clients. Those terms may not say enough about your site, your hours, your customer traffic or your internal protocols.

Before you sign a security services agreement, the key legal issue is whether the contract clearly allocates responsibility for performance, compliance and risk. If the answer is unclear, the cheapest quote can become the most expensive arrangement.

Scope, service levels and KPIs

The contract should say exactly what the contractor will do, when, and to what standard. A simple reference to “security services as requested” is usually too loose for an SME relying on that provider to protect premises or people.

Include clear items such as:

  • Days, times and locations covered.
  • Minimum staffing levels and role descriptions.
  • Response times for alarm callouts or urgent incidents.
  • Patrol frequency and checkpoints.
  • Reporting deadlines after incidents.
  • Requirements for written logs, body camera use or CCTV handling where relevant.
  • Escalation steps if an issue cannot be resolved on site.

If your site has special risks, put them in the agreement. A warehouse with controlled access, a bar with late-night trading, and an office handling sensitive records all need different written terms.

Liability, indemnities and insurance

Liability clauses often decide who wears the cost when something goes wrong. Security contracts commonly try to cap the provider’s liability at a low amount or exclude indirect loss very broadly. That may not reflect the real impact of a missed response, a lost key, unauthorised access or an incident involving a customer.

Before you accept the provider’s standard terms, check:

  • Whether the liability cap is realistic for the value and risk of the engagement.
  • What losses are excluded.
  • Whether the provider gives indemnities for property damage, personal injury, privacy breaches or misconduct by its personnel.
  • Whether your business is being asked to indemnify the provider too broadly.
  • What insurance the provider must maintain and on what evidence.

Not every risk can or should sit with the contractor, but the agreement should reflect who controls the relevant activity.

Privacy and confidential information

If your contractor will collect or access personal information, privacy terms should not be an afterthought. Security contractors may handle visitor logs, employee details, access records, CCTV footage and incident reports. In some businesses, they also see customer information or sensitive health-related details.

Your agreement should cover:

  • What information the contractor may collect or access.
  • How that information can be used.
  • Who owns reports, logs and footage.
  • Storage, retention and deletion requirements.
  • Confidentiality obligations.
  • Notification steps if there is a privacy incident or unauthorised disclosure.

This is particularly important if the contractor uses cloud systems, offshore support functions or shared reporting platforms.

Health and safety responsibilities

Security work can involve real physical risk. Even where the contractor manages its own staff, your business may still have overlapping duties in relation to the workplace and site hazards. The contract should not assume health and safety is solely the contractor’s issue.

Before you sign, confirm who is responsible for:

  • Site inductions and hazard information.
  • Incident reporting to your business.
  • Emergency procedures and evacuation roles.
  • Communication devices, vehicles or protective equipment.
  • Working alone, after-hours entry and high-risk callouts.

Operational procedures should align with the written agreement. If your contract says one thing but your managers direct guards differently on site, problems can follow quickly.

Subcontracting and personnel changes

You may think you are hiring a particular provider because of its reputation, but the contract may allow it to subcontract the work freely. That can create problems if unknown personnel attend your site or if service quality drops.

Consider adding terms that:

  • Require your written approval before subcontracting.
  • Set minimum standards for all replacement or relief personnel.
  • Allow you to request removal of unsuitable personnel from site.
  • Require current licence and training records on request.
  • Make the main contractor fully responsible for subcontractors.

Term, termination and handover

An exit clause matters more than many businesses expect. Security arrangements often need to change quickly if service quality slips, your operating hours change, or your site closes or relocates.

The agreement should deal with:

  • Initial term and renewal process.
  • Termination for breach, convenience, insolvency or loss of required licences.
  • Immediate suspension rights for serious safety or compliance concerns.
  • Return of keys, passes, devices, uniforms and records.
  • Final invoices and disputed charges.
  • Transition support if a new contractor is appointed.

Without a clear handover process, the end of the relationship can be where your business is most exposed.

Common Mistakes With How to Hire a Security Contractor

The most common mistake is signing the contractor’s standard terms without matching them to the real risks at your premises. Security is operational work with legal consequences, so vague assumptions usually fail when an incident actually happens.

Assuming the provider handles all compliance

Many businesses assume that if a contractor says it is licensed and insured, that settles the issue. It does not. You should still verify the position, especially where guards will have direct access to customers, restricted areas or sensitive records.

If the provider cannot show clear evidence of its compliance and staffing standards before you sign, treat that as a warning sign.

Using a generic contractor agreement

A general services contract may miss the points that matter most in security work. Generic templates often say nothing about patrol logs, response times, access control, incident escalation, use of force limitations or handling of footage and reports.

This is where founders often get caught. The contract might be legally valid, but still commercially weak because it does not describe what success looks like.

Relying on verbal promises about coverage

A sales representative may promise dedicated staff, ten-minute response times or regular senior oversight. If those promises are not written into the agreement, they may be hard to enforce later.

Before you rely on a verbal promise, put the key commitment into the contract, a schedule, or a written service specification.

Ignoring privacy until after an incident

Businesses often think about privacy only after CCTV footage goes missing or an incident report is shared too widely. Security contractors can sit close to sensitive information flows. If the contract does not say who owns the records and how they are managed, disputes can start quickly.

This matters even more for clinics, schools, childcare operators, offices, gyms and customer-facing venues where incident records may contain personal details.

Forgetting to control subcontractors

Relief staff and subcontracted guards are common in practice. The problem starts when your agreement allows substitutions with little oversight and no requirement to maintain the same qualifications or standards.

If your business depends on consistency, ask for approval rights and replacement standards in writing.

Not every poor experience gives you an immediate right to terminate. If the contract has a cure period, notice process or narrow termination trigger, you may need to follow that process first.

That is why the performance standards and default clauses need to be practical. A contract should give your business a realistic path out if the provider repeatedly misses the mark.

FAQs

Do I need a written contract to hire a security contractor in New Zealand?

Yes, in practice you should. A verbal arrangement leaves too much uncertain, especially around scope, liability, privacy, insurance and termination.

Can I hire an individual security guard as a contractor instead of using a security company?

You can, but take extra care. Before you classify someone as a contractor, check whether the real working arrangement could look more like employment and whether the person holds any required authorisations for the work.

What should I ask for before signing a security services agreement?

Ask for evidence of licences or registrations where relevant, insurance details, service scope, response standards, privacy processes, subcontracting terms and incident reporting procedures. You should also check who owns records and footage created during the engagement.

Who is responsible if the contractor mishandles customer or staff information?

The answer depends on the facts and the contract. Your business may still face exposure if personal information is mishandled, which is why privacy obligations, notification steps and data handling rules should be clearly written into the agreement.

Can I use the provider’s standard terms?

Sometimes, but do not assume they are balanced or tailored to your site. Review the terms carefully before you accept them, especially the clauses on liability, service levels, subcontracting, termination and privacy.

Key Takeaways

  • Hiring a security contractor is a risk allocation exercise as much as a staffing decision.
  • Before you sign, confirm the provider’s licensing position, insurance, staffing standards and any site-specific compliance requirements.
  • Make sure the contract clearly covers scope, service levels, incident reporting, privacy, confidentiality, subcontracting and handover obligations.
  • Take care when engaging an individual directly, because contractor classification issues can arise if the arrangement looks like employment in practice.
  • Do not rely on verbal promises about response times, dedicated staff or reporting. Put those commitments in writing.
  • Review liability caps, indemnities and termination rights so the agreement reflects the real risk to your business.

If you want help with contractor agreements, privacy terms, liability clauses, and service levels, you can reach us on 0800 002 184 or team@sprintlaw.co.nz for a free, no-obligations chat.

Get your customer-facing terms right

What should your privacy and online terms cover?

If you collect customer data, sell online or run marketing campaigns, your public terms and privacy documents should match the real customer journey.

Alex Solo
Alex SoloCo-Founder

Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.

Get your customer-facing terms right

Get in touch with our team

Tell us what you need and we'll come back with a fixed-fee quote - no obligation, no surprises.

Need support?

Need help with your business legals?

Speak with Sprintlaw to get practical legal support and fixed-fee options tailored to your business.