Railing Liability: A Risk Manager's Guide to the Exposure

Guard failures are rare and catastrophic, which is the worst combination for an underwriter. Frequency is low enough that many portfolios have no loss history at all, and severity is high enough that a single incident can involve a fatality, a multi-party action, and a limitation period that keeps the file open for years. Unlike a slip and fall, a guard failure produces a physical exhibit that engineers on both sides will examine in detail, which means the outcome usually turns on facts that were established years earlier: how the system was designed, who installed it, what was inspected, and what the owner knew. This is a general orientation for risk managers and brokers rather than legal advice, and provincial law varies significantly.

Four failure modes, four different defendants

Almost every guard failure resolves into one of four causes, and each points at a different party and a different policy. Sorting a loss into the right category early determines which coverage responds and where subrogation goes.

• Design: the system was under-designed for the loads, the wind exposure, or the geometry requirements. This is a professional liability exposure sitting with the engineer who sealed the design, which on most commercial railing work is a delegated design engineer employed by or retained by the fabricator, not the structural engineer of record.
• Product: the material or component was defective — a bad weld, a glass lite with a nickel sulphide inclusion, a finish that failed and allowed corrosion. This is a products liability and completed operations exposure, and it can travel back through the supply chain to a mill or a glass plant that may be offshore and effectively unreachable.
• Installation: the design was sound and the execution was not — anchors into inadequate substrate, missing fasteners, incorrect embedment, damage during handling. This is the general contractor's and the installer's exposure, and it is a frequent finding in practice.
• Maintenance and alteration: the system was fine and then degraded or was modified. This is the owner's exposure, and it is the category where an inspection record either saves the file or sinks it.

Commercial general liability does not cover design

The most common gap in a railing risk transfer is assuming that a contractor's CGL certificate covers everything the contractor did. It generally does not extend to professional services. Where a fabricator provides delegated design and seals drawings, that activity typically needs to sit under a professional liability or errors and omissions policy. Ask for the certificate for that policy specifically, confirm it is in force for the relevant period, and confirm whether it responds on a claims-made basis, because a claims-made policy that lapses when the firm winds up leaves nothing behind for a claim discovered later.

Three other terms deserve attention on a railing package. Completed operations coverage matters more here than on most trades, because guard failures typically occur years after substantial performance, not during construction. Additional insured status should be confirmed as extending to completed operations, not just to ongoing operations. And where a supplier carries a large aggregate spread across dozens of projects, a per-project aggregate endorsement on a major tower is worth asking for.

The certificate of insurance you collect at buyout has to still mean something the day the claim arrives, which may be eleven years later and two corporate reorganizations down the road.

The documents that decide the outcome

In an owner-side defence, the question is almost never whether the building was perfect. It is whether the owner acted reasonably on what they knew or should have known. That standard is met with paper. A building with a five-year run of dated guard inspections, photographs, work orders that were opened and closed, and written notices to residents about prohibited modifications is in a fundamentally different position than one with a single condition report and an email chain.

• Dated inspection records with photographs, findings and assigned actions, including the ones where nothing was found
• Work orders showing the interval between report and remedy, which is often the specific fact in dispute
• The original stamped shop drawings and engineering, retained permanently rather than for a document retention cycle
• Product records identifying glass make-up, alloy, finish and hardware, which determine whether a failure is a product defect or wear
• Correspondence with residents about prohibited attachments, and evidence of consistent enforcement
• Any engineer's report recommending work, along with the record of what the board or owner decided and why

That last item is the one owners most often mishandle. An engineer's recommendation that was received and not acted upon, with no documented reasoning, is the most damaging document in a guard failure file. A recommendation that was received, prioritized against other capital work, and deferred with a written rationale and an interim mitigation is a defensible decision. The difference is entirely in the record.

Long tails: why records outlive the people who made them

Construction claims in Canada have long horizons and the rules differ by province. Most common-law provinces run a discovery-based limitation period with an ultimate cap measured in years from the act or omission, and Quebec's civil law regime imposes its own prescription rules along with a specific liability on contractors, architects and engineers for loss of the work over a period of years after completion. The practical implication for a risk manager is uniform regardless of the jurisdiction: a guard installed today may generate a claim well into the next decade, and the defence will depend on documents created now by people who will have moved on. Retention policies that discard construction records after seven years are actively working against you.

Confirm the specifics with counsel in the relevant province. The point here is not the number of years but the design of the file: railing records should be treated as permanent building assets, stored where a successor manager can find them, and transferred on sale.

Resident and tenant modifications are an underwriting question

A guard engineered for a specific wind pressure with a specific open area is a defined risk. That risk changes the moment a resident zip-ties a solid privacy screen across it, mounts a planter box on the top rail, or stores a cooler against it inside the non-climbable zone. From an underwriting standpoint these are unrecorded modifications to a life-safety element, and from a defence standpoint they are the owner's problem if the owner permitted them, tolerated them, or never looked.

The mitigation is unglamorous: a written rule, a communication cadence, an inspection that records violations, and enforcement that is consistent. Inconsistent enforcement is worse than none, because it demonstrates awareness without action. Where a building wants to permit screens or attachments, treat it as a design change requiring engineering review, and record the approval.