The PPO Owner's 12-Point Checklist Before You Hire a Security Guard

In California, every legal security company must hold a Private Patrol Operator license issued by the Bureau of Security and Investigative Services. It is a public record. Search the company name at search.dca.ca.gov and confirm the PPO is 'Clear' and the expiration date is in the future. If the proposal does not print the PPO number in the footer, that is your first red flag — legitimate operators are proud of the number because it took a $500,000 surety and a qualifying manager exam to earn it. Ours is PPO #121830, printed on every invoice, contract, and vehicle door decal in Sacramento.

The PPO license authorizes the company. The guard card authorizes the individual officer. California requires every uniformed security officer to hold a current guard card, and armed officers must additionally hold an exposed firearm permit and baton permit if applicable. Ask for the roster of officers who will physically work your site, with guard card numbers. Then re-verify at search.dca.ca.gov before the first shift. Cards can be suspended for domestic violence convictions, DUI arrests, or lapsed continuing education — you want to know that before the officer is standing on your dock at 2 a.m.

• Guard card number on file for every officer
• Armed officers: separate exposed firearm permit verified
• Continuing education current (annual 8-hour refresher)
• Re-check quarterly for your permanent post

The market minimum in Sacramento is $1,000,000 per occurrence and $2,000,000 aggregate general liability, plus statutory workers' compensation. Do not accept a certificate of insurance that names only the vendor as insured — you want your entity listed as an 'Additional Insured' on the endorsement page (not just the COI face sheet). This is what allows your defense counsel to tender the claim to their carrier when a plaintiff sues both of you. Request the endorsement page, form CG 20 10 or CG 20 26, and check that the description of operations names your property specifically.

This is the single biggest liability trap in the Sacramento security market. A large minority of local vendors misclassify officers as 1099 contractors to avoid workers' comp premiums (which are punishing for guard payroll — rates commonly run 6–12% of wages). When a 1099 'contractor' is injured on your site, California workers' comp defaults to the property owner as the presumed employer under the AB5 borrowed-servant analysis. You inherit the claim. Ask for the vendor's Workers' Compensation Insurance Rating Bureau (WCIRB) X-Mod and demand a copy of their most recent premium audit. W-2 shops have nothing to hide.

A post order is the officer's operating manual for your specific property — where to patrol, what to check, who to call, what to do when something goes wrong. If the vendor hands you a generic 40-page template with 'CLIENT NAME' in tracked-changes highlight, they will run your post from the same template. Insist on a site-specific post order that names your gate codes, your after-hours contact, your escalation ladder, your trespass authorization letter, and your no-contact list (evicted tenants, banned patrons, former employees). Every quarter it should be updated in writing.

In 2026 there is no excuse for a patrol log that consists of an officer's initials on a paper sheet. Every reputable Sacramento vendor now runs a GPS tour system — Silvertrac, Guardso, TrackTik, or equivalent — that requires the officer to physically scan an NFC/QR tag at each checkpoint, capture a timestamped photo, and file the tour report to the cloud in real time. Ask to see a sample tour report from a similar property. If the vendor cannot email you one within an hour of the request, they do not have the system.

Call the vendor's dispatch line at 2 a.m. on a Sunday before you sign. Time how long it rings before a human answers. Sacramento's national brands (Allied, Securitas, Inter-Con) route after-hours to Manila or Guatemala City call centers with 8–15 minute average pickup. Local PPOs answer in-house — my dispatch is contractually obligated to pickup within 90 seconds and I audit call logs weekly. When your alarm trips at 3 a.m., 12 minutes on hold is 12 minutes you are paying for and getting nothing.

The Sacramento security market has been distorted for two decades by national-brand contracts that auto-renew for 12–24 months with 90-day termination windows. Read every page before you sign — the termination clause is usually on page 11 in 8-point font. My standard agreement is month-to-month with a 30-day notice on either side. That aligns incentives: if my service degrades in week three, you are free by week seven. Vendors who need a two-year contract to make the account profitable are billing you for their sales cycle, not their service.

Ask for pricing itemized by post-hour, patrol-tour, alarm-response, and after-hours call-out. If the vendor quotes a single monthly retainer with no unit breakdown, you cannot compare apples-to-apples across bidders and you cannot audit the invoice. Sacramento 2026 benchmarks: unarmed static $28–$36/hr, armed static $42–$65/hr, mobile patrol $15–$25 per documented tour, alarm response $65–$95 per callout. Our pricing sheet is public and lives at /hire-a-security-guard.

The industry-standard fraud in California security is the 'ghost supervisor' — a name on the org chart who never physically visits your site. Insist that a licensed supervisor conduct a documented, photographed field check at random times at least twice per week for the first month, then weekly thereafter. Ask to receive those check reports by email. When a supervisor knows their visits are audited by the client, officer performance improves within one shift.

California Penal Code 602 gives peace officers and licensed security officers authority to eject and arrest for trespass — but only if the property owner has signed a written authorization letter naming the vendor and posted compliant 602 signage at every entry. Your PPO should draft both documents at onboarding and file the letter with Sacramento PD or your municipal law enforcement agency. Without this paperwork, the officer is legally a bystander and cannot lawfully order a trespasser to leave. Any vendor who does not raise this in your first meeting has not done the work.

Not a 1-800 line. Not a generic 'operations@' inbox. A human being who owns your account, whose personal cell you can text at 11 p.m., who conducts a formal quarterly business review with incident stats and recommendations. If the vendor's org chart routes you through three layers to reach a decision-maker, service failures will take three layers to reach the person who can fix them. On our accounts, the ownership names a contract manager on day one and prints their cell on the post order cover page.

Send this 12-point checklist as a Word document to three bidders on Monday. Require written responses by Friday, with the PPO number, COI, sample post order, sample tour report, and dispatch test-call log attached. On Saturday, call each vendor's after-hours dispatch line yourself and time the pickup. On Sunday, cross the two lists — the vendor who submitted a complete written response AND answered dispatch inside 90 seconds is your finalist. Sign a 30-day trial. Award the permanent account only after 30 days of documented performance.