By the end of 2025, the Home Office had revoked over 3,000 sponsor licences, frequently due to administrative and record-keeping failures rather than a lack of genuine vacancies. Today, sponsor licence compliance audit is no longer predictable, scheduled events. Furthermore, from April 2026, UKVI gains direct access to HMRC payroll data, meaning that salary discrepancies automatically trigger a compliance review before any visit takes place.
- Outdated right-to-work checks: Sponsors must repeat checks when a worker renews their visa. A check that relates to an expired visa period is a breach, not an oversight.
- Payroll discrepancies from April 2026: The Home Office will cross-reference HMRC records against every Certificate of Sponsorship without a visit. Moreover, unreported salary changes will automatically trigger compliance reviews.
- Insufficient recruitment evidence: Sponsors must retain a job advert, applicant assessments, and a selection rationale to establish that the vacancy was genuine.
- Premature record deletion: Sponsors must retain right-to-work records for the duration of employment plus 2 years.
In short, this guide covers what UKVI assesses during a sponsor licence compliance audit, the document errors that most commonly trigger enforcement action, and what the 2026 guidance changes mean for your records.
Table of Contents
Sponsor Licence Obligations
First, granting a sponsor licence places a set of ongoing legal obligations on your organisation. The Home Office expects you to meet those obligations continuously, not only at the point of application. Sponsor licence compliance audit exist to verify whether you do.
Consequently, your documentation is how UKVI verifies compliance. During a sponsor licence compliance audit, a compliance officer cannot observe how you manage your workers. Instead, they can only assess what your records show.
The Three Ongoing Duties
Every sponsor carries three responsibilities from the day the Home Office grants the licence.
- Record-keeping: Retain specific documents for every sponsored worker, as Appendix D of the sponsor guidance sets out.
- Reporting: Use the Sponsor Management System (SMS) to notify the Home Office of changes affecting sponsored workers or your organisation, within 10 working days in most cases.
- Right to work: Carry out compliant checks for every employee before they start.
Furthermore, UKVI trains compliance officers to identify compounding failures. A gap in one duty frequently reveals gaps in the others, and UKVI specifically looks for that pattern during a sponsor licence compliance audit.
Documentation as the Evidence of Compliance
Notably, failure to produce requested documents promptly, or producing records that contradict HMRC payroll data, counts as a compliance breach. Consequently, both trigger the same outcome regardless of the reason.
Accordingly, you must keep records immediately accessible at the point of inspection. Responses such as “stored off-site” or “held by our external payroll provider” are not acceptable.
Importantly, the location of your records is irrelevant. Accessibility at the moment of inspection is the standard.
Appendix D: The Document Standard You Are Measured Against
Most sponsors know Appendix D exists. However, far fewer have read it carefully enough to understand exactly what it requires. In practice, that gap is where most compliance failures begin.
Specifically, Appendix D sets out, in enforceable terms, which documents you must retain for every sponsored worker. Compliance officers, in turn, use it as a direct checklist in every visit. Therefore, it legally binds every sponsor.
The Five Document Categories Every Sponsored Worker File Must Contain
For each sponsored worker, your file must cover all five categories below. Notably, UKVI evaluates each one independently during a visit.
Category 1: Identity and Right to Work
- A copy of the worker’s current passport identity page
- A dated record of the right-to-work check you conducted before employment started
- Share code verification for any worker holding an eVisa. Just keeping a copy of an old Biometric Residence Permit (BRP) is not sufficient.
Category 2: Recruitment and Vacancy Evidence
- A copy of the job advert, including the URL and the dates it ran
- Records of how you assessed applicants against the role requirements
- A rationale explaining why you selected the successful candidate
Category 3: Salary, Contract, and CoS Alignment
- The worker’s signed employment contract
- Payslips confirming alignment with the Certificate of Sponsorship (CoS) salary
- Professional registration certificates where the role requires them, for example, the GMC or NMC for healthcare roles
Consequently, the salary on the CoS, in the employment contract, and in your payroll records must match exactly. Indeed, any discrepancy between those three sources is a compliance failure, regardless of whether it was deliberate.
Category 4: Absence, Attendance, and Contact Records
- An attendance log for the worker
- A record of any unexplained absences, with dates
- The worker’s current UK residential address, which you keep up to date
Category 5: Document Retention Timelines
Notably, applying a single HR retention policy across all records, without accounting for immigration law timelines, is one of the most common ways sponsors create invisible compliance gaps.
| Document type | Retention period |
|---|---|
| Appendix D sponsored worker records | Duration of sponsorship + 1 year |
| Right to work records | Duration of employment + 2 years |
| Organisational records | While licence is active + 1 year after revocation or surrender |
How UKVI Uses Appendix D During a Visit
During a visit, officers typically review between 10% and 20% of your sponsored worker files. They work through each file against Appendix D line by line. As a result, officers note any document that is missing, inconsistent, or takes too long to locate as a potential breach.
Furthermore, from April 2026, officers will also cross-reference your files against HMRC payroll data. If what you hold does not match what HMRC holds on that worker’s salary or hours, UKVI will identify that discrepancy without prior warning and without a visit.
Every Sponsored Worker File Must Cover These Five Categories
UKVI checks each one independently during a compliance visit
Five Document Mistakes That Most Commonly Trigger a Sponsor Licence Compliance Audit
These errors appear consistently across all sectors and business sizes during a sponsor licence compliance audit.
Furthermore, in most cases, they arise not because of deliberate negligence but because internal processes quietly fell out of step with the right guidance. Typically, they arise because a process that someone set up correctly at some point stopped working as the workforce grew, the guidance changed, or responsibilities moved between staff without a proper handover.
Mistake 1: Right-to-Work Records That Are Outdated or Incomplete
Typically, a sponsor carries out a right-to-work check on day one. However, nobody repeats it when the worker renews their visa or their immigration status changes. As a result, the file shows a check, but it relates to a visa that expired years ago.
The compliance basis
For workers on time-limited visas, sponsors must repeat the check before the current visa expires. UKVI does not categorise a lapsed check as an oversight. Instead, it treats it as a monitoring system failure.
Recommendations
- Confirm that the right-to-work check in every sponsored worker file relates to their current visa period, not the one they held when they joined
- Set calendar reminders 28 days before each worker’s visa expiry to carry out and record a fresh check
- Transition to share code verification for any new hire with an eVisa. A BRP copy alone is no longer a valid right-to-work record.
Mistake 2: Recruitment Files That Cannot Establish the Vacancy Was Genuine
From March 2026, the Home Office replaced the genuine vacancy requirement with an eligible role test. While the legal test has changed, the practical expectation has not: UKVI must still see that the role was real, that the salary and skill level were accurate, and that you documented the selection process.
Most recruitment files, however, fail to provide that evidence during the sponsor licence compliance audit.
The compliance basis
A file containing a CoS but no supporting recruitment trail raises an immediate question about whether the role existed as described. Accordingly, UKVI has grounds to conclude the vacancy was not genuine, and that conclusion can result in revocation.
Recommendations
- Retain every job advert at the point of posting, including the URL and the dates it ran
- Keep a written record of how you assessed all the applicants against the role requirements
- Where you interviewed other candidates and did not select them, document the reason very briefly
Mistake 3: Payroll Evidence That Does Not Match the CoS
From April 2026, the Home Office will gain automatic access to HMRC payroll data and will compare it against every sponsored worker’s CoS without needing to visit.
Consequently, salary discrepancies that previously only surfaced during visits will now surface automatically. Specifically, if the salary on your payroll does not match the CoS figure, a compliance review follows. The two most common reasons this happens are an unreported pay rise, where the payroll team processes the increase but no one submits an SMS report, and a change in contracted hours that alters the effective pay rate without anyone recognising the SMS reporting obligation.
The compliance basis
The salary on the CoS is a sponsorship condition. Therefore, any deviation from it, however unintentional, is a breach of the terms under which the Home Office granted the licence.
Recommendations
- Before April 2026, confirm that every current sponsored worker’s payslip salary matches their CoS figure exactly
- Put a process in place so that any pay change for a sponsored worker automatically triggers an SMS reporting check
- Where discrepancies already exist, take legal advice before HMRC data sharing begins
Mistake 4: Absence and Contact Records That Have Never Been Properly Maintained
Two separate obligations fall under this category.
First, absence reporting: If a sponsored worker is absent for 10 or more consecutive working days without prior authorisation, you must report the absence to the Home Office via SMS. However, many businesses treat attendance tracking as a pure HR function and do not connect it to their sponsorship duties. As a result, a qualifying absence passes without anyone submitting the required SMS report. Failure to report this is a compliance breach.
Second, contact records: Additionally, most businesses record a home address at onboarding and do not review it again. Meanwhile, sponsored workers move without informing their employer. As the sponsor, however, you remain legally responsible for holding current contact information. An address that you have not updated in two years is evidence of inadequate workforce monitoring.
The compliance basis
Unreported absences and outdated contact details both indicate the same failure: the sponsor has no active oversight of their sponsored workforce. Notably, UKVI does not treat either as an isolated administrative error. Instead, both indicate a systemic monitoring failure.
Recommendations
- Implement a formal attendance monitoring process for sponsored workers, separate from general HR absence management
- Require sponsored workers to confirm or update their UK residential address every 6 months, and retain a written record that you did so
- Build an SMS reporting check into your attendance process so any qualifying absence automatically triggers a review
Mistake 5: Files Deleted Under Standard HR Retention Policies
For example, a sponsored worker leaves and your HR team applies the standard employment law retention schedule, deleting the file after one year. Under general employment law, that is compliant. Under immigration rules, however, the file needed to remain for longer.
The compliance basis
Sponsors must retain right-to-work records for the full duration of employment plus 2 years, and Appendix D records for the duration of sponsorship plus 1 year. Therefore, if UKVI audits within those windows and the records are gone, the Home Office can still take enforcement action.
Recommendations
- Create a separate immigration retention schedule, distinct from your standard HR policy, for all sponsored worker files
- Train HR and payroll staff on the difference between standard employment retention and immigration retention timelines
- Do not delete a sponsored worker file without first confirming that both the Appendix D and right-to-work retention periods have expired
How Long Must You Keep Sponsored Worker Records?
Two different rules apply — and confusing them creates a compliance gap
What the 2026 Guidance Changes Mean for Your Records
The five errors above have existed for years. However, what changed in early 2026 is that the Home Office added new obligations on top of them and upgraded its ability to detect existing failures without a Sponsor Licence Compliance Audit.
Consequently, sponsors who have not reviewed their processes since March 2026 face a higher combined risk than at any point before. Specifically, the March 2026 guidance update introduced new Appendix D requirements, and the April 2026 HMRC data-sharing integration means UKVI now identifies payroll discrepancies automatically.
1. The New Duty to Evidence Worker Employment Rights Briefings
First, Appendix D now requires sponsors to brief each sponsored worker on their employment rights in the UK and to retain evidence in the file that the briefing took place. Specifically, this is a new mandatory Appendix D requirement, not optional guidance.
The rights you must cover and document include:
- National Minimum Wage
- Working Time Regulations
- Pension auto-enrolment
- Statutory leave and pay entitlements
- How workers can raise a grievance
Notably, a signed acknowledgement, an email confirmation, or a dated training log satisfies this requirement. Therefore, sponsors who have not added this step to their onboarding process are already non-compliant with the March 2026 guidance.
2. The HMRC Payroll Data Change
Second, from April 2026, the Home Office systematically cross-references HMRC payroll data against every sponsored worker’s CoS. This requires no visit and no prior suspicion. Instead, it runs automatically, across all sponsor licences.
As a result, payroll discrepancies no longer wait until UKVI uncovers them during a visit. Rather, the discrepancy itself becomes the trigger for a compliance review. Therefore, any sponsor with doubts about whether their payroll figures align with their CoS records should audit them right away.
3. The eVisa Transition
Third, from 15 January 2026, the Home Office no longer issues physical BRPs to new entrants. Consequently, every right-to-work check for a new sponsored worker must use the online share code verification system.
Additionally, for existing workers who moved from a BRP to an eVisa, confirm that an updated share code check is on file. Importantly, a copy of an expired BRP with no digital verification is not a valid right-to-work record in 2026.
Audit Findings and Enforcement Action
A compliance visit is a formal assessment, not an advisory review. Therefore, the findings feed directly into decisions about your licence. The table below shows how findings from a sponsor licence compliance audit typically translate into outcomes.
Outcomes After a Compliance Visit
| Severity of finding | Outcome | Immediate impact |
|---|---|---|
| Administrative record gaps | B-rating and action plan | No new CoS assignments for up to 3 months |
| Repeated SMS failures or payroll mismatches | Suspension | All sponsorship activity frozen |
| Systemic failures or deliberate non-compliance | Revocation | All sponsored workers lose their status |
Specifically, a B-rating requires the sponsor to pay a fee, address all failures within 3 months, and provide evidence of improvement. Meanwhile, suspension freezes all sponsorship activity immediately. Finally, revocation cancels the licence entirely, removing the right to employ any overseas worker.
Why Document Failures Are Treated as Systemic
Importantly, the Home Office does not treat a missing document as an isolated error. When a compliance officer finds the same gap across multiple worker files, UKVI concludes that the sponsor’s compliance framework is inadequate as a whole and does not see it as that one file went wrong.
That distinction matters. Specifically, a sponsor who can demonstrate that they isolated the gap, identified it promptly, and corrected it stands in a fundamentally different position from one whose records suggest the failure is widespread.
Ultimately, the document trail is not only evidence of a specific breach. Rather, it is evidence of whether your organisation treats compliance as a standing obligation.
Is Your Organisation Audit-Ready?
If a UKVI officer arrived at your premises today, could you produce a complete Appendix D file for any sponsored worker within two minutes?
Three Checks to Run for Every Sponsored Worker
Notably, these are the same checks a compliance officer will carry out during a sponsor licence compliance audit:
- Right-to-work check: current visa period only. First, locate the right-to-work check in the file. Then confirm it relates to the worker’s current visa, not the one they held when they joined.
- Payslip versus CoS: exact match. Next, open the most recent payslip and compare the gross salary against the CoS figure. The two must be identical. Importantly, the UKVI will identify this type of discrepancy from April 2026 without needing to visit.
- All five Appendix D categories present and retrievable. Finally, work through each category and confirm that the relevant documents exist, are current, and that you can locate them within two minutes.
Why a Mock Audit Finds Problems Before UKVI Does
A structured compliance audit replicates precisely what happens during a sponsor licence compliance audit. Specifically, it reviews your HR systems, your SMS reporting history, and a sample of sponsored worker files against current Appendix D requirements. The difference is that you will find the gaps before a compliance officer does.
If you hold a sponsor licence and have not reviewed your records since the March 2026 guidance update, our immigration team at A Y & J Solicitors can conduct a structured mock audit to identify gaps before UKVI does. Furthermore, with HMRC data sharing active from April 2026, that review is more time-sensitive than it has ever been.
How A Y & J Solicitors Can Help
A sponsor licence compliance audit will point out failures that are rarely visible from within the organisation. In most cases, document gaps, lapsed checks, and unreported changes accumulate quietly, and the first indication is a compliance visit or an automatic HMRC data flag.
A Y & J Solicitors holds SRA regulation and Legal 500 recognition, and has handled more than 5,000 successful UK immigration cases with a 98% success rate. Contact us for a free initial consultation on your company’s UK sponsor licence compliance.
