Which ASHRAE 188 records does the owner keep, and the vendor?
Summary
Under ANSI/ASHRAE Standard 188-2021, a Program Team that the building owner designates runs the water management program, so its records belong with the owner (as of 2026-10-23). The water treatment vendor produces much of the evidence, such as test results and service reports, but the owner should hold the master set. New York City makes that explicit for cooling towers.
ANSI/ASHRAE Standard 188-2021 is the edition ASHRAE sells as of 2026-10-23, and its Addendum e, approved on September 30, 2021, adds minimum requirements for when the Program Team chooses Legionella testing (ASHRAE, 2021).
In New York City, the cooling tower owner must keep records for each tower for at least 3 years and produce them to the Health Department on request (24 RCNY §8-07, NYC DOHMH, accessed 2026).
The CDC toolkit says a water management program needs review at least once per year, and again after events such as a change in treatment products (CDC toolkit version 1.2, 2025).
US healthcare facilities certified by CMS are expected to document test results and the corrective actions taken when control limits are not maintained (CMS QSO-17-30, revised 2018).
This split covers buildings that follow ANSI/ASHRAE Standard 188 by choice, by contract or under an adopting code. State, city, national or accreditor rules on records and retention decide where they are stricter. Standard 188 is sold by ASHRAE, so the split below comes from public summaries and is marked as inference where the standard text was not seen.
Who owns the water management program records under ASHRAE 188, the building owner or the water treatment vendor?
The building owner owns the ASHRAE 188 water management program records, because the Program Team that develops and maintains the program is designated by the owner, and the vendor works inside that team. A public summary of the standard defines the Program Team as "a group or individuals designated by the building owner or designee to be responsible for developing, implementing and maintaining the Program" (Garratt-Callahan, 2015). The same summary lists documentation and recordkeeping among the program elements: establish documentation of all procedures and maintain records (Garratt-Callahan, 2015). That summary was written for the 2015 edition; the 2021 edition, according to ASHRAE, replaced permissive language with enforceable language (ASHRAE, 2021).
The CDC toolkit, which interprets Standard 188 for building owners, names "Equipment or chemical suppliers" and "Contractors/consultants" as possible team members next to the building owner (CDC toolkit version 1.2, 2025). A vendor on the team therefore produces records for the owner's program; it does not run a separate program of its own. This is an inference from the team duty, since the standard text itself was not reviewed for this article, but it matches the one rule found that states ownership outright: in New York City, "The owner must keep records for each cooling tower for at least 3 years" (24 RCNY §8-07(a), NYC DOHMH, accessed 2026).
Which ASHRAE 188 records does a water treatment vendor produce for the owner?
A water treatment vendor typically produces the monitoring results, chemical addition logs, service reports, Legionella test arrangements and its share of corrective action records, while the owner's Program Team produces the program documents themselves. The table below decides which side holds each ASHRAE 188 record and what the service contract has to fix. Produced by and Kept by are inferences from the Program Team duty unless a cell cites a rule; contract wording and time limits are illustrative.
ASHRAE 188 record | Produced by | Kept by | Contract clause |
|---|---|---|---|
Program Team list with names, titles, contacts and roles (CDC toolkit version 1.2, 2025) | Owner | Owner | Vendor named on the team, with its role |
Building and water system description, process flow diagrams (CDC toolkit version 1.2, 2025) | Owner, vendor supplies cooling tower details | Owner | Vendor provides system data for its scope |
Hazard analysis of building water systems | Program Team | Owner | Vendor input requested in writing |
Control locations, control measures and limits | Program Team, vendor proposes chemical limits | Owner | Limits stated in the program, not only in the vendor's manual |
Monitoring results and chemical additions | Vendor and site staff | Owner original, vendor copy | Delivery within 5 working days of each visit (illustrative) |
Legionella test reports, if testing is chosen | Laboratory | Owner | Lab report sent to the owner as well as the vendor |
Corrective actions | Whoever acts | Owner | Who is told, by when, and what the record must show |
Verification, validation and the annual review | Program Team | Owner | Vendor attends the review and signs its part |
Read the table by asking, for each row, who could rebuild the record if the other party disappeared. The owner can rebuild the team list and system description; only the vendor and the laboratory can rebuild monitoring data and test reports, which is why those rows need a delivery clause. The row to settle first in a contract is monitoring results: the vendor writes them, but the owner should hold the original. New York City requires the owner to keep 3 years of water treatment, test and corrective action records for each cooling tower (24 RCNY §8-07(a), NYC DOHMH, accessed 2026).
Where should vendor service reports and Legionella test results be kept under ASHRAE 188?
Vendor service reports and Legionella test results should be kept in the owner's program records, where the Program Team can review them, and not only in the vendor's files or customer portal. CDC tells owners to write the program down because "This information will be important to improve your program and if you or others want to review your records" (CDC toolkit version 1.2, 2025). A record that only the vendor can open fails that purpose when the vendor changes.
The same CDC section lists what the written program should hold, including the Program Team, the water system description, control measures, confirmatory procedures, and the sample collection and transport method and the laboratory used when environmental testing is done (CDC toolkit version 1.2, 2025). For Legionella testing, ASHRAE added Normative Appendix B through Addendum e to Standard 188-2021, setting minimum requirements when the Program Team chooses testing (ASHRAE, 2021).
New York City adds format rules for cooling towers. A Legionella result must be recorded in a final laboratory report that includes the signed chain of custody and the laboratory's ELAP certification number (24 RCNY §8-05, NYC DOHMH, accessed 2026). Electronic records requested at an inspection must be shown on a device provided by the owner, with copies in a commonly available format such as PDF (24 RCNY §8-07(a)(3), NYC DOHMH, accessed 2026). For the practical choice between a portal and email for delivering reports, see Is an SDS portal better than email for SDS and service reports?.
What should a water treatment contract say about ASHRAE 188 records?
A water treatment contract should say which ASHRAE 188 records the vendor produces, in what form and how fast it delivers them to the owner, who notifies whom when a control limit is missed, and what the vendor hands over when the contract ends. Standard 188 does not supply contract wording, so these clauses are a checklist derived from the record duties above, not quotations from the standard.
Scope: list the records the vendor produces, by the same names the program uses.
Delivery: a fixed time from each visit to delivery of the service report and test data, for example 5 working days (illustrative).
Format: files the owner can open and keep without a vendor login, such as PDF.
Laboratory reports: sent to the owner directly, with chain of custody where the jurisdiction requires it, as New York City does (24 RCNY §8-05, NYC DOHMH, accessed 2026).
Out of limit results: who is told, within what time, and who records the corrective action.
Annual review: the vendor attends and confirms its part of the program.
Exit: all records and the program sections the vendor drafted are handed to the owner.
In Lubinpla's Field Care, a water treatment vendor shares service reports and test results item by item with the customer contact and can unshare them at any time, so clause 3 still matters: the owner saves its own copies.
How ASHRAE 188 record duties compare with the CDC toolkit and local cooling tower rules
ASHRAE 188 sets the program and its records, the CDC toolkit explains how owners build it, and local rules such as New York City's cooling tower chapter add binding retention periods and formats. A building can sit under several of these at once: a New York City hospital with a cooling tower answers to the city rule, to CMS and to whatever its program adopts from Standard 188. In that case the strictest record duty on each point is the one to plan for. The table compares where each source puts the record duty.
Source | Who keeps records | Retention or review | Status |
|---|---|---|---|
ANSI/ASHRAE Standard 188-2021 | Owner's Program Team (inference from the team duty) | Not seen in public summaries | Edition sold by ASHRAE as of 2026-10-23 (ASHRAE, 2021) |
CDC toolkit | Owner, as writer of the program | Review at least once per year (CDC toolkit version 1.2, 2025) | Guidance, version 1.2, 2025-09-30 |
New York City 24 RCNY Chapter 8 | Owner | At least 3 years per cooling tower (24 RCNY §8-07(a), NYC DOHMH, accessed 2026) | Binding rule for cooling towers in New York City |
CMS QSO-17-30 | Certified healthcare facility | Document test results and corrective actions (CMS, 2018) | Memo revised 2018-07-06 |
The key row is New York City: it is the only source here that names the owner as record keeper and fixes a period, 3 years per tower (24 RCNY §8-07(a), NYC DOHMH, accessed 2026). CMS expects Medicare and Medicaid certified hospitals, critical access hospitals and long-term care facilities to have water management plans that consider the ASHRAE industry standard and the CDC toolkit (CMS QSO-17-30, revised 2018).
Frequently asked questions
How long does ASHRAE 188 require water management records to be kept?
The public summaries of ANSI/ASHRAE Standard 188 reviewed for this article do not state a retention period, so check the standard text and local rules. New York City requires at least 3 years for each cooling tower (24 RCNY §8-07(a), NYC DOHMH, accessed 2026), and other jurisdictions set their own periods.
Does a vendor's online portal count as the owner keeping the records?
A portal helps the vendor deliver records, but the owner should still be able to open, copy and keep them without depending on the vendor's account. New York City requires the owner to display electronic records on its own device at inspection and supply copies in a format such as PDF (24 RCNY §8-07(a)(3), NYC DOHMH, accessed 2026).
What happens to ASHRAE 188 records when the building changes water treatment vendor?
The records stay with the owner's program, because the Program Team that holds them is designated by the owner (Garratt-Callahan, 2015). The outgoing vendor should hand over its reports and any program sections it drafted, and the CDC toolkit lists a change in treatment products among the events that call for a program review (CDC toolkit version 1.2, 2025).