How to Verify a BSIS Security Guard License Before You Hire — California

California recognizes three security-related licenses under BSIS jurisdiction. Understand the difference before you search or you will look at the wrong record.

First, the Private Patrol Operator (PPO) license authorizes a company to sell security services. The PPO holder is the qualifying manager and legal principal. Every legitimate Sacramento security vendor has a PPO number in the format 'PPO 1XXXXX' or 'PPO 0XXXXX' (older). Second, the guard card (formally 'Security Guard Registration') authorizes an individual to work as a uniformed officer. Every officer on your site must hold one. Third, the exposed firearm permit authorizes an armed officer to carry a duty sidearm; it is issued only after guard card and requires additional range and legal training.

Go to search.dca.ca.gov (the Department of Consumer Affairs license search). Do not use third-party sites — they are stale. The DCA page is the authoritative source of record. In the 'License Type' dropdown, select 'Bureau of Security and Investigative Services' as the board. Then choose the sub-license from three that matter: 'Private Patrol Operator' for the company, 'Security Guard' for the individual officer, or 'Firearm Permit' for the armed permit.

Enter either the exact PPO number the vendor gave you, or the business name. The DCA search is exact-match on numbers and partial-match on names — searching 'Stormhammer' returns my record; searching 'Storm hammer' with a space may not. If the vendor gave you a PPO number that does not exist, the search returns 'No records found' and you stop right there. Reputable operators publish the PPO on their homepage footer, business card, invoice, and vehicle door decal. If you have to ask twice for the number, that is your answer.

The record returns a status field. Only 'Clear' means the license is active and in good standing. Any other code means stop and dig deeper.

The record also displays the license expiration date and the surety bond information. PPO licenses renew every two years. If the expiration date is within 45 days, ask the vendor to confirm renewal is filed — a lapse mid-service is your problem, not theirs, because your contract becomes voidable. The surety bond field must show an active $500,000 bond on file with a California-admitted surety carrier. No bond, no license.

Ask the vendor for the guard card number of every officer who will regularly patrol your site. Search each one under 'Security Guard' by card number. Confirm status is 'Clear' and the expiration date is at least 60 days out. California guard cards are 8-digit numbers in a strict format; anything else is fake. Officers must physically carry the card on shift under BPC 7583.35 — you can ask to see it any time and photograph it for your records.

The exposed firearm permit is a distinct record from the guard card. Search under 'Firearm Permit' with the officer's name. Confirm the caliber authorization matches the sidearm the officer actually carries — an officer permitted for 9mm cannot legally carry a .45. The permit also expires on a two-year cycle and requires annual live-fire qualification with a BSIS-certified firearms trainer. Ask for the qualification report from the last cycle.

Over seven years, these are the patterns that have preceded every problem I have seen a Sacramento property owner walk into.

• PPO number not printed on proposal, business card, or invoice
• Vendor gives a 'DBA' license or LLC filing instead of a BSIS PPO number
• PPO status 'Delinquent' but vendor claims 'renewal in progress'
• Guard card numbers withheld pending contract signature
• Company address on state record does not match address on proposal
• PPO owner name on DCA record is different from person selling the account
• Vendor advertises 'licensed and bonded' without printing the number
• Officer refuses to show guard card when asked politely on shift
• Firearm permit status 'Clear' but caliber does not match sidearm carried
• Company advertises armed service but has zero firearm permits in state record
• Vendor references a PPO number from another state (only CA PPO is valid here)
• Any vendor who says the DCA site is 'wrong' or 'outdated'

First, screenshot the DCA record with the date visible. Second, email the vendor asking for a written explanation and a target date for return to Clear status. Third, do not sign a contract until Clear status is confirmed via a second search. Fourth, if the vendor is already on your site under an existing contract, notify your general counsel — you may need to place operations on hold and switch to a licensed backup. Every reputable Sacramento PPO (including us) maintains an emergency same-day coverage capability for exactly this scenario.

License status changes between renewals. Suspensions can happen any Tuesday for reasons the client never learns about. I recommend a calendar reminder to re-verify PPO status and roster guard cards on the first Monday of each quarter. Total time: five minutes. Total protection: your entire security posture.

License verification proves the vendor is legally allowed to work. Insurance verification proves they can pay when something goes wrong. Do both. Ask for the Certificate of Insurance (COI) via ACORD 25 form, plus the Additional Insured endorsement page (CG 20 10 or CG 20 26). Contact the listed insurance broker directly and confirm the policy is in force and your entity is named — brokers will do this in one email.

In the industry, the joke is: 'Show me a lawsuit against a property owner for a security incident, and I will show you a vendor who was unlicensed for six months and nobody noticed.' The click at search.dca.ca.gov takes ninety seconds. The failure to click has, in one recent Sacramento case, cost a client a seven-figure indemnity ruling. Verify before you hire, and verify quarterly after.