Record keeping for a self-employed workforce: the audit file every UK operator should be able to produce

• Record keeping for a self-employed workforce: the audit file every UK operator should be able to produce
  • Why your file is different from the contractor's own records
  • The five-part audit file
    • 1. Engagement and status evidence
    • 2. Documents and expiry dates
    • 3. The work record
    • 4. Pay and self-billing
    • 5. The audit log
  • How long to keep what
  • A weekly and annual review rhythm
  • Spreadsheet vs one system: when it breaks
  • Common gaps clients and auditors find
  • How Zerity helps
  • Common questions
    • What records should a business keep for its self-employed workers?
    • How long should I keep records for self-employed contractors?
    • Do I need to keep a CEST result?
    • What counts as an audit trail for subcontractors?
    • Do the off-payroll (IR35) record rules apply to every self-employed worker?
  • Sources

# Record keeping for a self-employed workforce: the audit file every UK operator should be able to produce

Short answer. For every self-employed person you engage, you should be able to produce one complete file in five parts: the engagement and how you assessed their employment status, their documents and expiry dates, the record of work done, the pay and self-billing records, and a log of who checked what and when. Keep the financial parts for the periods HMRC sets for your business, such as 6 years for company accounting records, and nothing for longer than you need. One file per person, kept in one place, is quicker to maintain than records spread across spreadsheets and inboxes, and much quicker to produce when a client, an insurer or HMRC asks.

Operational guidance, not legal or tax advice. Last reviewed 13 October 2026 against the GOV.UK and legislation.gov.uk pages listed under Sources.

# Why your file is different from the contractor's own records

A self-employed person keeps their own business records. GOV.UK tells them to keep those records for at least 5 years after the 31 January submission deadline of the relevant tax year. Those are their records, about their business.

Your file answers a different question: how did you engage, check and pay this person? It is evidence of your own decisions. Couriers are one example, but the same file applies to cleaning, facilities, care and field-service teams. Whatever the sector, the questions you get asked are the same: what was agreed, what did you check, what work was done, and what did you pay.

# The five-part audit file

# 1. Engagement and status evidence

GOV.UK says businesses should check whether someone is self-employed under both tax law and employment law, because a person can have a different status in each. HMRC's CEST tool gives HMRC's view for tax purposes, based on the information you enter, and HMRC says it will stand by the result as long as that information stays accurate. That is why the file should hold the date and the answers you gave, not just the outcome. Re-run it when the contract or working arrangement changes; CEST lists that as one of its uses. Courts and tribunals can make final decisions on status, so keep the file as evidence of how you assessed it, not as a ruling. Our guides on employment status and IR35 go deeper.

# 2. Documents and expiry dates

This part is about knowing who can work tomorrow morning. Store each document with its expiry date and the date you last looked at it. For driving roles, the licence check runs through GOV.UK: the driver creates a check code, which is valid for 21 days, and you use it once with the last 8 characters of their licence number. Record the date of each check, not the code itself. The full matrix of reminder windows and lapse steps is in our document expiry tracking guide. From 1 October 2026, right to work checks extend beyond employees to people engaged under a worker's contract and to individual subcontractors (including sole traders) who personally do work you have contracted to provide, for engagements that start on or after that date. They do not apply when you contract with a company, such as a worker's own limited company, rather than with the individual. Keep a copy of the check for the length of the engagement and for 2 years afterwards. See section 14A of the Immigration, Asylum and Nationality Act 2006 and the Home Office employer's guide to right to work checks.

# 3. The work record

Record the work offered, the work accepted and the work completed, with dates and sites. This is what your pay run is built from, and if you run more than one site it is what lets you answer for each one. The multi-depot guide covers running records across sites.

# 4. Pay and self-billing

If you self-bill VAT-registered suppliers, VAT Notice 700/62 says you stay responsible for setting up and reviewing self-billing agreements, keeping copies, and keeping each supplier's name, address and VAT registration details, even when a third party issues the invoices for you. HMRC says reviewing agreements every 12 months is advisable. Use Check a UK VAT number and keep the result. Our self-billing for subcontractor pay runs guide walks through the agreement and invoice rules.

# 5. The audit log

The audit log is what turns a folder of documents into an audit trail. For every check, record who did it, when, which source they used, what they found, and when it is next due. Without it you can show that a document exists, but not that anyone looked at it.

# How long to keep what

The periods below come from HMRC and Home Office guidance for the business keeping the records. Your accountant should confirm which apply to you.

The off-payroll rules are only relevant where the worker provides services through their own intermediary, such as a personal service company. The Construction Industry Scheme applies only to construction work and carries its own record rules, so it does not apply to most non-construction self-employed teams.

These are minimums for tax records, not a reason to keep everything forever. Under Article 5 of the UK GDPR, personal data must be limited to what is necessary and kept in an identifiable form for no longer than necessary. Set a deletion date for each part of the file when someone leaves, and record it. Our offboarding checklist covers closing that file when someone leaves.

# A weekly and annual review rhythm

Most of the file maintains itself if it is touched at a steady rhythm. Each week, close the work record, run the pay and look at anything expiring soon; the weekly ops checklist sets out that loop step by step. Each year, review every self-billing agreement, re-check VAT numbers, look again at any engagement whose working arrangement has changed, and delete records that have passed their retention date.

# Spreadsheet vs one system: when it breaks

A shared spreadsheet works while one person maintains it for one site. The warning signs that it has stopped working are familiar:

• an expiry date is missed because the reminder lived in someone's calendar
• you cannot say who checked a document, only that a copy exists
• work records and pay sit in different files and have to be matched by hand
• a second site keeps its own version of the same sheet
• producing one person's complete file takes an afternoon of searching inboxes

When two or more of these keep happening, the cost is no longer the spreadsheet. It is the time spent rebuilding the file every time someone asks for it. Use the compliance risk scorecard to see where your gaps are.

# Common gaps clients and auditors find

These are operational gaps, not legal findings:

• a signed agreement exists, but no record of how status was assessed or when it was last reviewed
• self-billing agreements that passed their expiry date while invoices kept going out
• documents stored without their expiry dates
• checks with no name or date against them
• records kept for years after someone left, with no reason and no deletion date

# How Zerity helps

Zerity is one operating system for compliance and operations across your self-employed workforce, so most of the file sits on one record per person:

• Every licence and policy expiry date is tracked in one place. Zerity stores the record, the date it was checked and the expiry; checking it remains your duty, using the DVLA service or a bureau your insurer accepts.
• UTR and VAT details sit on the record.
• The rota is published to the driver app, and days worked feed the self-bill.
• The self-billing agreement is stored, invoices are raised from the agreed rate and days worked, and the PDF is kept. The software does not make the arrangement compliant on its own.
• One account covers every site, with people tagged by depot and network.
• Contracts, policies and handbooks are stored in one place, with version history, policy acknowledgement tracking and quick retrieval for audits.
• Compliance reports can be exported from the documents and dates you actually hold.

Zerity does not decide anyone's employment status. That assessment stays with you. See compliance records, the operations hub, document expiry tracking software and subcontractor driver management. HMRC references are collected in our HMRC guides. Pricing is from £6 per active driver.

Book a demo to see one complete file on your own data.

# Common questions

# What records should a business keep for its self-employed workers?

Keep one file per person with five parts: the engagement and status evidence, documents with expiry dates, the record of work done, pay and self-billing records, and an audit log of who checked what and when. The financial records must be kept for the periods HMRC sets for your business.

# How long should I keep records for self-employed contractors?

It depends on the record. GOV.UK says limited companies must keep accounting records for 6 years from the end of the last company financial year they relate to, and VAT Notice 700/21 says VAT business records should generally be kept for at least 6 years. Personal data should not be kept longer than necessary.

# Do I need to keep a CEST result?

Keeping it is good practice. HMRC says it will stand by a CEST result as long as the information you gave remains accurate, so record the date and the answers as well as the outcome. Re-run it if the contract or working arrangement changes. Courts and tribunals can make final decisions on employment status.

# What counts as an audit trail for subcontractors?

A dated record of every check: who made it, when, which source they used, the outcome and when it is next due. A stored copy of a document shows that it exists. The audit trail shows that someone checked it.

# Do the off-payroll (IR35) record rules apply to every self-employed worker?

No. They apply where the worker provides services through their own intermediary, such as a personal service company. If you are the deemed employer, HMRC says PAYE records must be kept for 3 years from the end of the tax year they relate to.

# Sources

• Employment status and Self-employed and contractor, GOV.UK.
• HMRC, Check employment status for tax (CEST), GOV.UK.
• Business records if you're self-employed: how long to keep your records, GOV.UK.
• Running a limited company: company and accounting records, GOV.UK.
• HMRC, Record keeping for VAT (VAT Notice 700/21), GOV.UK.
• HMRC, Self-billing (VAT Notice 700/62), GOV.UK.
• Check a UK VAT number, GOV.UK.
• HMRC, Off-payroll working: record keeping (part 3), GOV.UK.
• Construction Industry Scheme (CIS), GOV.UK.
• Income Tax (CIS) Regulations 2005, reg 51, legislation.gov.uk.
• What you must do as a CIS contractor: record keeping, GOV.UK.
• View or share your driving licence information and Check someone's driving licence information, GOV.UK.
• UK GDPR, Article 5, legislation.gov.uk.
• Immigration, Asylum and Nationality Act 2006, section 14A, legislation.gov.uk.
• Home Office employer's guide to right to work checks, GOV.UK.