Who this guide is for?
Entrepreneurs forming a new contract security company in Alabama, owners converting an in-house guard force into a licensed contract agency, and managers standardizing multi-site compliance. This path is not easy and it is not for everyone. You will face strict licensure, high insurance limits, 24/7 operations, tight margins, constant recruiting, training and retention pressure, armed vs. unarmed credential rules, municipal licensing quirks, client audits, and real liability if you cut corners. Expect capital needs for payroll float, uniforms, radios, scheduling tech, and supervision. Yet for disciplined operators who document everything, build a compliant training pipeline, keep a strong Qualifying Agent, and deliver quiet, consistent service, the rewards are real: durable multi-year contracts, recurring revenue, clear career ladders for officers, meaningful community impact, and room to scale into specialty niches like healthcare, industrial sites, or corporate campuses. Hard work and persistence turn the complexity into a defensible moat. Hopefully this guide will help you along the way.
Our Mission Is Your Success.
Acronyms used in this guide
- ASRB = Alabama Security Regulatory Board
- QA = Qualifying Agent (the Board-recognized individual responsible for a company’s compliance and training oversight)
- COI = Certificate of Insurance (proof from an insurer showing active coverage, limits, and notice terms)
- CGL = Commercial General Liability insurance
- HNOA = Hired & Non-Owned Auto liability insurance
- WC = Workers’ Compensation insurance
- ADOR = Alabama Department of Revenue
- MAT = My Alabama Taxes (ADOR’s online portal)
- ADOL = Alabama Department of Labor
- BPT = Alabama Business Privilege Tax
- APOSTC = Alabama Peace Officers’ Standards and Training Commission
- SOP = Standard Operating Procedure
- KPI = Key Performance Indicator
- DAR = Daily Activity Report
- COF = Course of Fire (live-fire qualification standard)
Snapshot: What you must have before you sell services
- A properly formed Alabama business entity, with EIN, state tax accounts, and local business licenses.
Detail: File formation with the Alabama Secretary of State. Keep your charter number. Obtain an EIN from IRS. Register tax accounts in My Alabama Taxes (MAT). Expect 3–5 business days for ADOR to assign account numbers after online registration. Maintain your executed Operating Agreement or Bylaws for insurer and client onboarding. - A valid ASRB Contract Security Company license anchored by a designated Qualifying Agent (QA).
Detail: The QA must be a licensed security officer and have at least 3 years of qualifying supervisory or management experience in contract security or law enforcement. One QA per company unless the Board approves otherwise. If your QA departs, you must notify the Board within 10 working days and designate a substitute within 30 days; the Board may extend up to 3 months for good cause. Company licenses expire September 30 each year; the renewal must be received before October 1 and cannot be accepted after October 31; after that you must file a new company application. - Active insurance policies that meet or exceed statutory minimums with required endorsements and cancellation-notice language.
Detail: Maintain at least $2,000,000 for bodily or personal injury and $200,000 for property damage. Include general liability, personal injury, and workers’ compensation. Provide COIs to the Board naming it as certificate holder with 30-day cancellation notice. Many clients will require additional insured and waiver of subrogation endorsements and may require umbrella limits of $1M–$5M. - Processes to ensure every guard holds an individual ASRB license; armed officers must also hold a county pistol permit and an ASRB armed certification card.
Detail: Permitless carry does not change this. Supervisors must verify both documents before scheduling an armed post.
Step 1 — Choose and form your business entity
- Select the entity structure.
Detail: LLC is standard for liability shielding and pass-through taxation. Corporations support multiple share classes and scale. Foreign entities must register (certificate of authority) if formed out of state. Avoid names implying police powers. - Reserve the company name (optional).
Detail: Name reservations in Alabama last 1 year if you choose to reserve before filing; ensure trademark clearance for statewide use and web domains. - File formation with the Alabama Secretary of State.
Detail: Retain Articles and certificate of existence. Banks and insurers will ask for them. Clients may request corporate authorization evidence and W-9.
Get an EIN
Detail: IRS issues EIN immediately online. Use exact legal name. Store the CP 575 EIN letter in your compliance packet.
Step 2 — Register for state taxes and annual obligations
- Create your MAT account and register.
Detail: Register for employer withholding if you will run payroll; add sales/use only if applicable. MAT setup requires your ADOR account number, Sign-On ID, and Access Code. ADOR processing of initial registrations typically completes in 3–5 days. - Employer withholding setup.
Detail: New employers select a filing frequency (monthly or quarterly) based on payroll volume. Calendar periodic A-6 returns and the annual A-1/W-2 submissions. Automate e-filing through payroll software connected to MAT. - Business Privilege Tax (BPT).
Detail: File the initial return after formation, then file annually (Form PPT/CPT) based on entity type and year-start. For tax years beginning after Dec 31, 2023, if your calculated BPT liability is $100 or less, you are not required to file a BPT return. Otherwise, file annually. Maximum BPT is generally $15,000; verify each year.
Step 3 — Unemployment insurance, workers’ comp, and E-Verify
- Unemployment insurance (ADOL).
Detail: New employers pay 2.7% on the first $8,000 of wages per employee until experience rating is established; annual rates range roughly 0.6%–6%+ thereafter, depending on schedule. Expect 7–10 quarters to establish an experience rating. Payments and wage reports are quarterly. - Workers’ Compensation (WC).
Detail: Coverage is mandatory once you regularly employ five or more employees. Many primes require WC regardless of headcount. Work with a carrier familiar with contract-security risks and premium audits. Maintain injury reporting procedures and return-to-work plans. - E-Verify enrollment.
Detail: Alabama requires enrollment; complete the federal MOU, post required notices, and integrate I-9 and E-Verify into onboarding. Define escalation steps for tentative non-confirmations and document retention.
Step 4 — Local business licensing
Detail: Obtain municipal business/privilege licenses in each city you operate in. If you operate inside city limits you typically pay a full-rate city license; in the police jurisdiction outside city limits you may owe a reduced fee (often half the in-city rate). Most licenses renew on a calendar-year cycle. Keep a matrix for each municipality with renewal dates, gross-receipts classifications, and whether a local background check is required.
Step 5 — Insurance: meet statutory minimums before ASRB will license your company
Required program and documents:
- CGL with personal injury coverage, minimum $2,000,000 for bodily/personal injury.
Detail: Include additional insured and waiver provisions as contracts demand. Verify assault-and-battery coverage. Confirm care-custody-control exclusions do not conflict with your scope. - Property Damage coverage at or above $200,000.
Detail: Often integrated within CGL as property damage liability. Confirm sub-limits and any deductible alignment with your cash position. - WC for statutory benefits and Employer’s Liability limits that meet client RFPs.
Detail: Multi-state operations require correct state endorsements. If you use staffing partners or 1099 vendors, ensure their COIs and hold-harmless provisions; misclassification carries risk. - COIs with 30-day cancellation notice to the Board.
Detail: Ask your broker to issue a COI template meeting Board language and keep it in your renewal tickler 60/30/15 days before expiration.
Recommended but often client-mandated:
- Commercial Auto (add HNOA for supervisors).
- Umbrella/Excess Liability to $1M–$5M.
- Cyber if you manage access control data, video, or PII.
- Crime/Fidelity for key-holding and cash-handling posts.
Step 6 — Qualifying Agent (QA) and the Company License with ASRB
A. Qualifying Agent requirements
Role: The QA is responsible for the company’s compliance posture, training oversight, and adherence to Board rules.
Eligibility: Must meet age, background, and training standards under Alabama law and hold the appropriate personal license; typically 3+ years qualifying management/supervisory experience in contract security or 3+ years supervisory service in recognized law enforcement.
Continuity: If the QA departs, the company must notify the Board within 10 working days and designate a replacement within 30 days; operations cannot continue unanchored. The Board may grant up to 3 months for transition.
B. Prepare the company application packet
Typical contents:
- Completed Contract Security Company application and fee.
- QA proof (current personal license) and identification.
- Corporate documents (Articles, Certificate of Existence or SOS certificate, foreign qualification if needed).
- COIs meeting the statutory minimums (above).
- Any required background disclosures and fingerprint cards if indicated by current forms.
- Payment by certified/cashier’s check, money order, licensed company business check, or approved online card payment. Dishonored payments trigger bad-check charges and can suspend processing.
C. License fees and renewal cycle
Cycle: Company licenses expire September 30 each year.
Renewal: Submit renewal before October 1 to avoid lapse. After October 31 renewals are not accepted; you must file as new. The Board may inspect licensees; keep your files inspection-ready. Post a current company license at all Alabama business offices.
Step 7 — Personal licensure of your security officers
Who must be licensed: Every employed security officer must be personally licensed by ASRB.
Onboarding window: Submit personal applications within 30 days of hire to avoid unlicensed work. The Board may issue a temporary card pending completion.
Renewal: Track 2-year renewal cycles per officer. Use a calendar with 90/60/30-day reminders and supervisor notifications.
Training hours and qualifications
- Unarmed: Minimum 8 contact hours of Board-approved training delivered by a Certified Trainer before applying.
Core curriculum: Alabama law and Board rules, authority limits, use-of-force continuum, report writing, private-property rights, detainment vs. arrest, evidence preservation, and customer service in a public-facing role. One contact hour equals 50 minutes. - Armed: Minimum 14 contact hours classroom plus safety and live-fire qualification on a Board-recognized COF.
Standards: Handgun course = 30 rounds on the FBI “Q” silhouette. Passing = 80% (≥24 hits fully inside silhouette). Failed attempts require a complete re-shoot of the course. Maintain annual re-qualification for each authorized weapon system (handgun, and if applicable, shotgun or rifle). Certain APOSTC or NRA-LEAD quals may be recognized when criteria are met. - Records: Keep signed rosters, test results, and range scorecards. Do not print Pass/Fail or numeric scores on student certificates; scorecards are the official record.
Pistol-permit rule for armed officers
Rule: Armed officers must hold a valid county pistol permit issued by their sheriff and a current ASRB armed certification card. Supervisors must verify both before an officer carries on duty.
Step 8 — Uniforms, badges, and prohibited practices
Uniform and insignia controls:
- Your uniform must not reasonably be mistaken for law enforcement. Avoid identical colorways, patches, or shoulder-rockers that imply police authority.
- Badges and shields must conform to law; prohibited designs or wording can trigger discipline.
- Vehicle markings must avoid law-enforcement deception. Include “Security” plainly visible on outer garments and vehicles where used.
Prohibited practices examples:
- Representing your company or guards as police or public officers.
- Carrying firearms on duty without the armed card and pistol permit.
- Operating without valid company or personal licenses.
- Failing to maintain required insurance or to notify the Board of QA changes.
Step 9 — Records, audits, and Board inspections
Maintain, at minimum:
- Company license file: license, renewal receipts, current COIs, QA designation letters, Board correspondence.
- Personnel files: application, background checks, personal license copy, training certificates, annual quals, pistol-permit verification if armed, disciplinary actions.
- Training records: curricula, sign-in sheets, test answer sheets, range scorecards, instructor credentials, equipment logs.
- Operations: post orders by site, tour logs, incident reports, use-of-force reports, evidence chain forms, lost-and-found logs, key-control logs.
- Contracts/COIs: scopes of work, indemnity clauses, client-required endorsements, additional-insured certificates, contract amendments.
Inspection SOP:
- Appoint a Compliance Officer.
- Keep an indexed digital repository with restricted access and audit trails.
- Respond to Board requests within the stated timeframe and log the request, response, and artifacts produced.
Step 10 — Operational build-out that clients expect
Policies & SOPs:
- Use-of-force policy aligned to Alabama law and your insurer’s guidelines; emphasize de-escalation.
- Incident reporting standard with timelines, supervisor notifications, photo/video handling, and evidence chain.
- Access control procedures for visitor badges, vendor escorts, and after-hours entries.
- Post orders that translate the client scope into step-by-step tasks, alarms/escalations, call trees, and map references.
- Privacy & data governance for CCTV retention, body-worn video (if used), and PII collected at checkpoints.
- Emergency response playbooks for medical events, severe weather, fire, workplace violence, and utility failures.
HR & Scheduling:
- Structured hiring with background checks, I-9 + E-Verify, drug-free workplace rules, and clear uniform/equipment issuance.
- Fatigue and overtime controls; break scheduling that meets post coverage.
- Supervisor span-of-control definitions; on-call rotation and relief procedures.
Training plan:
- Onboarding: unarmed or armed core, site orientation, radio discipline, report writing.
- Annual refreshers: legal updates, first aid/CPR/AED, de-escalation, and firearms re-quals where applicable.
- Supervisor development: coaching, documentation, client communication, and incident command basics.
Contracts:
- Define hours, posts, relief coverage, KPIs, reporting cadence, and compliance attestations.
- Align indemnity, COI language, and waiver provisions to your insurance.
- Set change-order mechanisms for post additions or mobilizations.
Finance:
- Calendar MAT filings, BPT deadlines, unemployment reports, WC audits, and COI expirations.
- Establish clean invoice formats tied to timekeeping and post rates; define late-fee terms and dispute windows.
Critical workforce model: W-2 employees vs 1099 independent contractors
Baseline: In contract security, post-assigned guards are almost always employees (W-2) due to control over schedule, uniform, supervision, method, and integration into your core business. Treating front-line guards as 1099 is high-risk and frequently deemed misclassification.
W-2 employees (recommended default for guards)
- Taxes and rates: Employer pays 7.65% FICA (6.2% Social Security up to the federal wage base + 1.45% Medicare), FUTA 6.0% on first $7,000 per employee (typically 0.6% after credits), and Alabama SUI new-employer 2.7% on first $8,000.
- Protections: Overtime, minimum wage, unemployment insurance, WC once thresholds are met, anti-discrimination protections.
- Control: You set schedule, uniform, SOPs, and supervisor oversight. Disciplinary control is straightforward.
- Client expectations: Enterprise clients expect W-2 staffing for post coverage and often reject 1099 guard models.
1099 independent contractors (limited, specialized use)
- When it may fit: Truly independent specialists who control method and means, set their own schedule, use their own equipment, carry their own insurance, can hire helpers, invoice by milestones, and operate a separate business with multiple clients.
- Where it fails: Fixed shifts, required uniform, site-specific SOPs, daily supervisor direction, exclusive assignment, or bans on other clients. These factors typically make the worker an employee.
- Risks of misuse: Back taxes for FICA and FUTA/SUTA, interest, penalties; retroactive wage/overtime liabilities; WC exposure; contract and insurance violations.
- If you still use 1099 specialists: Use a tight IC agreement, require COIs, W-9, and business license proof; issue 1099-NEC if paid $600+; never staff standing posts with ICs.
Bottom line: Post-based guarding, patrols, access control, and most site-lead roles should be W-2. Reserve 1099 for bounded consulting deliverables where the contractor controls their own work.
Armed vs Unarmed Posts — Requirement Differences
Licensing:
- Unarmed post: Officer must hold an ASRB personal license.
- Armed post: Officer must hold an ASRB personal license, an ASRB armed certification card, and a valid county pistol permit.
Training hours:
- Unarmed: ≥ 8 contact hours with a Certified Trainer before licensure.
- Armed: ≥ 14 contact hours classroom plus firearms safety and live-fire; then annual firearms re-qualification for each authorized weapon system.
Qualification standards (handgun):
- COF: 30 rounds on FBI “Q” silhouette.
- Pass: 80% (≥ 24 hits fully inside silhouette).
- Fail: Must re-shoot the entire course; partial make-ups are not allowed.
Equipment & carry:
- Unarmed: Uniform, communications, reporting tools, and post-specific equipment.
- Armed: All unarmed equipment plus duty firearm meeting policy, approved holster/retention, spare magazine(s) as policy dictates, and visible identification. Carry is prohibited on duty without both the Board armed card and pistol permit in hand.
Policy and supervision:
- Unarmed: Emphasis on observation, access control, de-escalation, report writing.
- Armed: All unarmed expectations plus weapons handling and use-of-force policy compliance, stricter supervisor checks before shift, and immediate incident escalation and notifications on any display, discharge, or weapon-related deficiency.
Insurance & contracts:
- Unarmed: CGL and WC at statutory minimums often acceptable.
- Armed: Many clients require higher limits or Umbrella/Excess coverage, specific assault-and-battery endorsements, and stricter COI terms.
Documentation:
- Unarmed: Standard DARs, incident reports, post-order acknowledgments.
- Armed: All unarmed documentation plus current qual records, pistol-permit verification, armed card verification, and armorer/inspection logs if maintained.
Mobilization checklist for your first client site
- Licensing: company license current; QA on file; personal licenses issued; armed cards and pistol permits validated.
- Insurance: client COIs issued with accurate additional-insured and waiver language; umbrella shown if required.
- Staffing: duty roster filled; relief plan confirmed; supervisor assigned with span-of-control defined.
- Training: site orientation completed; hazard walkthrough documented; post orders signed.
- Equipment: radios, chargers, PPE, key rings and logs, incident kits, first aid/AED (if required), flashlights, body-worn cameras if used.
- Technology: incident/tour platform configured; geofencing and lone-worker alerts tested.
- Handover: client sign-off on post orders and escalation tree; DAR format approved.
Common pitfalls and how to avoid them
- Insurance gaps. Build a 60/30/15-day renewal timeline with broker confirmations and COI refreshes; confirm assault-and-battery coverage and client endorsements.
- QA change with no Board notice. Maintain a cross-trained deputy QA and a pre-drafted notice packet.
- Arming officers without credentials. Implement a hard stop in scheduling for missing pistol-permit, armed card, or expired quals.
- Weak documentation. If it isn’t written and retrievable, it didn’t happen. Standardize forms and centralize storage.
- Municipal license gaps. Map every city and police jurisdiction; maintain a license matrix with renewal dates.
- 1099 misuse. Do not staff posts with contractors; default to W-2 for guards.
Where STPA can help
- Security Officer Training for New Agencies
- SOBT (Unarmed, 8 hours): Board-aligned curriculum, test, and records package.
- ASOT (Armed): In-person classroom + range, handgun qual (30 rounds, 80% pass), annual re-quals, and remedial.
- Supervisor/Site-Lead: De-escalation, incident documentation, client communication, incident command.
- Commercial account pricing: Specialized rates for agencies enrolling 4+ officers per session or booking on-site training days. Ask for the Commercial Training Rate Sheet.
- Startup compliance packages
- Company-license readiness review, training matrix design, post-order templates, mobilization checklists, inspection-ready records.
- On-site mobilizations
- Regional qualification days, new-site launch support, and policy/SOP tune-ups aligned to insurer and client requirements.
Contact STPA Commercial Training: info@shieldwalltpa.com • (205) 753-6998
Ready to launch? Request STPA’s Agency Startup Bundle: QA readiness, COI templates, training calendar, and a license-renewal system.
Also see our Complete Alabama Security License Guide for more information about getting your officers in compliance.
Appendix — Templates to implement now
- Credential Matrix: Employee, license type/number, issue/expiration, pistol-permit date, firearm platform, next qual date.
- Training Ledger: Initial, site, annual refreshers with attachments; retain at least 3 years.
- COI Vault: Certificates by client with 45-day pre-expiry reminders.
- Incident Packet: Initial report, supplemental, photo log, evidence log, supervisor review.
- Post Order Format: Scope summary, hourly duties, prohibited acts, emergency routing, call tree, map callouts.
- Employee vs Contractor Gate: One-page decision aid that defaults to W-2 unless the task is a bounded consulting deliverable with contractor control over method and means.
Sources
Board training specifics, contact-hour definition, record retention 3 years, handgun COF (30 rounds, FBI “Q”, 80% pass), re-shoot requirements, annual re-qual, and records-production timelines; payment methods and dishonored-check handling; inspection authority.
Alabama Security Regulatory Board statute: company insurance minima ($2,000,000 bodily/personal injury; $200,000 property); pistol-permit for armed officers; training requirements; renewals and timelines.
Alabama Business Privilege Tax: exemption from filing when calculated tax due ≤$100 for tax years beginning after Dec 31, 2023; program overview and maximum.
Alabama unemployment insurance: new-employer 2.7% rate; $8,000 wage base; schedule ranges thereafter; quarterly reporting.
Alabama workers’ compensation coverage threshold: required at 5+ employees; program notes.
E-Verify mandate for Alabama employers; state references to participation and enforcement.
Alabama UC “Employment” definition and classification context; employer handbook.
US DOL misclassification overview and impacts; general 1099 vs employee guardrails.