You hold the sponsor licence. You have hired the people you needed. Most of the time, the system runs in the background. Then a Home Office officer turns up at reception on a Wednesday morning, and the question that has been sitting at the back of your mind for months becomes the only question that matters about Sponsor Licence Management: would we actually pass this audit?
The honest answer for most UK employers in 2026 is “probably not.” The Home Office now cross checks sponsor records against HMRC payroll data automatically. A missed SMS report, a payroll slip, an authorising officer who left the company, any of these gets flagged in days, not at the next annual review. And the penalty for getting it wrong starts at £45,000 per illegal worker, set by the Home Office’s Code of Practice on Preventing Illegal Working in force from 13 February 2024.
By the end of this guide, you will know the 7 areas UKVI checks during a visit, what triggers an audit in the first place, the readiness checklist that tells you where you actually stand, and the steps to take if you find a gap before the Home Office does.
- Penalties: from £45,000 per illegal worker
- Detection: automatic, through HMRC data
- Reporting: 10 working days, no batching
- Defence: complete records, current AO, mock audits
Here is the full picture.
Table of Contents
Sponsor Licence Compliance at a Glance
The table below shows the headline rules every sponsor must keep in front of them in 2026.
| Compliance Area | Rule | Risk of Failure |
| Right to work checks | Digital only via eVisa share code | Up to £45,000 per illegal worker |
| Reporting changes about a worker | Within 10 working days | Late report = sponsor duty breach |
| Reporting changes about the organisation | Within 20 working days | Late report = sponsor duty breach |
| Salary threshold | £41,700 or going rate, whichever higher | CoS rejection or licence action |
| Pay period compliance (SW 14.3B) | Threshold met in every pay period from 8 April 2026 | Audit failure or licence action |
| Worker rights notification | Signed proof of issue in Appendix D file | Direct ground for revocation |
| English requirement | B2 for new applications from 8 January 2026 | Visa refusal |
| Record keeping | Appendix D files for every sponsored worker | Audit failure |
These are the minimums. Sponsor licence management means operating well above them, every day, all year.
What Is Sponsor Licence Management?
Sponsor licence management is the ongoing operational discipline of running your licence so it survives an audit on any day, not just the day you knew one was coming. So it covers three core functions: keeping accurate records, reporting changes on time, and monitoring your sponsored workers without gaps.
Most employers treat the licence as a one off achievement. You applied for the sponsor licence, you got it, you assigned a Certificate of Sponsorship, the worker arrived. But the licence is a live obligation, not a permission slip.
The good news: this is learnable. But the hard part is making it routine across HR, payroll, and senior management, so nothing slips when the original person who set it up is on leave.
Why Audit Readiness Matters More Than Ever in 2026
Three things changed in 2026 that made the old way of doing this obsolete.
First, the Home Office now runs digital enforcement through HMRC and UKVI data integration. So salary discrepancies, missing reports, and right to work gaps surface automatically. The new SW 14.3B framework, in force from 8 April 2026, means pay is now assessed in defined pay period blocks, not just annual averages. Manual catch up during a UKVI compliance audit no longer works because by then the system has already flagged you.
Second, civil penalties tripled in February 2024 to £45,000 per illegal worker for a first breach and £60,000 for repeat breaches within three years. So a single hire without proper right to work checks can now cost more than most SMEs’ annual legal budget.
Third, revocation typically follows a serious breach immediately. Your sponsored employees lose their work permission within 60 days, and your business loses the ability to hire from overseas for at least 12 months. The reputational damage outlasts the regulatory hit.
What Triggers a Home Office Compliance Audit?
Most visits are not random. The Home Office uses risk based triggers to decide whom to look at first.
The most common triggers in 2026 are:
- Payroll mismatches detected by HMRC data sharing
- A new sponsor licence, particularly within the first 6 months
- A complaint from a current or former sponsored worker
- A surge in CoS assignments that does not match your usual hiring pattern
- Late or missing SMS reports flagging up automatically
- A change in authorising officer without timely notification
- An adverse Companies House filing or HMRC compliance issue
But some visits are completely random. So you cannot predict when you will be audited. Still, you can predict what they will look at when they arrive. That is what the next section unpacks.
What Happens During a Sponsor Licence Audit?
A typical Home Office compliance visit is part records inspection and part interview. Officers turn up unannounced, present credentials, and begin work.
They will ask to speak to your authorising officer first. If your AO no longer works for the company, or if they hold a visa themselves rather than settled status, the audit will likely end in licence action. So the AO check is the first filter.
They will then request records on randomly selected sponsored workers. You are typically given 20 minutes to produce complete files. But incomplete files are interpreted as inadequate systems, not as a minor administrative gap.
They will interview the workers themselves, often without management present. The questions test whether the role the worker actually does matches the role on the Certificate of Sponsorship. Significant gaps count as fraud or role drift, both serious breaches.
The visit usually ends with an indication of next steps, an action plan, a downgrade, suspension, or revocation. But the formal decision arrives in writing later.
The 7 Areas UKVI Will Examine During an Audit
These are the seven pillars of every sponsor licence audit. Get all seven right and a visit becomes a formality. Miss any one of them and you have a problem.
Record Keeping
Appendix D sets out exactly what you must hold for each sponsored worker: contact details, address history, payslips, signed contracts, right to work PDFs, CoS confirmations, and correspondence on role changes. These sponsor licence record keeping requirements run for the full sponsorship plus two years.
The 6 March 2026 guidance update added a new duty. You must now formally inform every sponsored worker of their UK employment rights, covering National Minimum Wage, Working Time Regulations, statutory leave, and grievance procedures. So a signed onboarding checklist or written confirmation that you provided this information must sit in their Appendix D file.
The test is producing complete files in 20 minutes. Test yourself quarterly with three random workers.
Reporting Duties
Sponsor licence reporting duties divide into two timeframes. Changes about a worker (failure to start, absence of 10+ consecutive days, resignation, termination) must be reported within 10 working days. Changes about your organisation (registered address, mergers, AO changes) within 20 working days.
You cannot batch report. Each event has its own clock.
Right to Work Checks
The duty to complete a right to work check applies to every new hire, not just sponsored workers. So British citizens, Irish citizens, and visa holders are all in scope. The check route differs by status, but the obligation is the same.
For visa holders, the check is digital through the eVisa share code system. Biometric Residence Permits expired on 31 December 2024 and provide no defence. The statutory excuse, your only protection against a civil penalty, requires you to download the PDF profile page from the government checker before the worker starts. Screenshots do not count.
For British and Irish citizens, the share code system does not apply. You complete a manual check of an acceptable document (a passport or a birth certificate with NI evidence) or use a certified Identity Service Provider for British and Irish passport holders. The check must still happen before the worker starts, and the record must sit on file
Eligible Role Requirements
The Home Office replaced the “genuine vacancy” test with the broader “eligible role” standard on 6 March 2026. An eligible role must exist at the point the Certificate of Sponsorship is assigned, match the duties and hours on the CoS, sit at the right skill level, meet salary thresholds, and be appropriate to your business model.
So auditors now look beyond job titles. They assess whether the role is structurally necessary, whether the SOC code maps to the actual duties, and whether the salary is commensurate with your turnover. Padded titles and inflated descriptions are still treated as fraud.
Sponsored Worker Monitoring
You must track attendance and role consistency for every sponsored worker. Office logs, system logins, manager check ins, any combination that lets you spot when someone stops attending or shifts away from their sponsored role and also because they have to maintain any workers’ absence from the UK.
Salary and Pay Period Compliance
You must pay the higher of the general threshold of £41,700 or the going rate for the SOC code on the Skilled Worker visa. Bonuses, overtime, and discretionary payments do not count.
The 2026 framework also requires pay to clear the threshold in every individual pay period, not just on an annual average. Paragraph SW 14.3B of Appendix Skilled Worker, in force from 8 April 2026, sets defined assessment blocks. For monthly payrolls, pay across any 3-month window must equal a quarter of the required annual salary. For weekly pay, the test runs over 12-week blocks, or 17 weeks where hours fluctuate. UKVI now cross checks payslips against these blocks during an audit.
Sponsor Management System (SMS) Management
Your Level 1 user must log in monthly at a minimum. Dormant accounts raise immediate audit concerns. Your authorising officer must be a current paid employee or director with settled status, not a consultant or someone who left the business months ago. The full sponsor licence requirements on key personnel still apply throughout the licence period, not just at application.
Sponsor Licence Audit Readiness Checklist
Run through this sponsor licence audit checklist quarterly for your Sponsor Licence Management. If you cannot tick every box, you have a gap that needs fixing today.
- Authorising officer is a current paid employee or director with settled status
- Level 1 user has logged into SMS within the last 30 days
- Every sponsored worker has a complete Appendix D file you can produce in 20 minutes
- Every resignation or termination from the past 6 months was reported within 10 working days
- Every right to work check uses an eVisa share code and a downloaded PDF profile page
- Every CoS assignment has been salary checked against the current going rate
- Pay clears the threshold in every pay period under the SW 14.3B framework
- A signed worker rights notification sits in every sponsored worker’s Appendix D file
- The compliance calendar runs on its schedule and is owned by a named person
This is also the moment to ask the harder question. If your authorising officer left 8 months ago, if your Level 1 user logs in quarterly, if you are still keeping BRP copies in personnel files, the next audit will surface every one of those gaps.
Also Read: Sponsor Licence Application Guide
Quarterly Audit Readiness Checklist
Internal Compliance Run these structural self-checks every 90 days.
Pro Tip: Keep this checklist completely clear of blank cells or unverified parameters. Treat any missing document or unsigned file as a high-priority compliance gap.
Worried your systems will not survive the question? A Sponsor Licence Compliance Audit from A Y & J Solicitors reviews your records, reporting, and governance against current Home Office requirements, so gaps are fixed before they cost you the licence.
Common Compliance Failures That Lead to Suspension or Revocation
Most sponsor licence suspension risks come from a small set of recurring failures on Sponsor Licence Management. None are deliberate. All are preventable. Each one can escalate to suspension or revocation if left unchecked.
Role drift is the most common. You sponsor a marketing manager. Six months later they are doing IT support because the IT person left. The role on the CoS no longer matches reality.
Ghost authorising officers is the next most common. The AO left the company a year ago. Nobody updated SMS. The audit asks for the AO and there is nobody to produce.
Calendar blindness sits behind both. There is no schedule, no named owner, and no recurring check in for compliance tasks. Reports get missed, expiries sneak up, and problems compound silently.
Late or batched SMS reports trigger automatic system flags. Even a single late report can downgrade your licence from A to B, blocking new hires.
Right to work gaps, where workers start before the digital check is complete, expose you to civil penalties of £45,000 per worker plus licence action.
Also Read: Sponsor Licence Duties for UK Employers
How to Conduct an Internal Sponsor Licence Audit
The best way to know how to prepare for a sponsor licence audit is to run one on yourself. Quarterly is the right rhythm.
So pick three random sponsored workers. Try to produce complete files for them within 20 minutes. If you cannot, the files need rebuilding before a real auditor asks.
Then check your last 6 months of SMS reports against your payroll and HR records. Every resignation, address change, and visa expiry should map to a timely report.
Review your right to work check folder. Every active sponsored worker should have a PDF profile page on file, dated before their start date. If anything is missing, do not panic. Document the gap, fix it, and record what you did. A documented self correction reads far better than a quietly ignored problem.
Then sit down with your authorising officer and confirm they can answer the questions an auditor would ask. If they hesitate, that is information you need before an officer is in the room.
Best Practices for Ongoing Sponsor Licence Management
Three habits separate the sponsors who pass audits from the sponsors who lose licences.
Treat compliance as an operation, not a project. Build it into the calendar. Name an owner. Schedule the monthly login, the quarterly file review, the annual training refresh. The same discipline pays off again when sponsor licence renewal comes round, because the records you need are already complete.
Document everything as you go. When a worker resigns, when an address changes, when a role shifts, capture it in real time and report it on time. Backfilling at audit reads as system failure.
Get a second pair of eyes annually. A mock audit catches what internal teams cannot. The blind spots are usually structural, the authorising officer’s status, the SMS audit trail, the gap between job descriptions and actual roles. You cannot see your own posture from the inside.
Sponsor licence management services exist for exactly this reason. The cost of a mock audit is a fraction of a civil penalty, and tiny next to the cost of revocation.
Frequently Asked Questions
How Often Does UKVI Audit Sponsor Licence Holders?
There is no fixed schedule. New sponsors are typically visited within the first 12 months. After that, visits are risk based and unannounced.
Can a Home Office Compliance Audit Be Unannounced?
Yes, and most are. Officers arrive without notice, present credentials at reception, and begin the visit immediately. So routine readiness is the only defence.
What Documents Must Sponsor Licence Holders Keep?
Appendix D requires contact details, address history, payslips, signed contracts, right to work PDFs, CoS confirmations, and correspondence about role or status changes. Keep them for the duration of sponsorship plus two years.
What Happens If a Sponsor Licence Is Suspended?
You cannot assign new Certificates of Sponsorship during suspension. Existing sponsored workers remain legal for now, but no new hiring can happen. The outcome is either reinstatement, an action plan, or revocation.
How Can Employers Prepare for a Home Office Audit?
Run a quarterly internal audit on three random workers. Confirm your authorising officer is current and properly qualified. Check your Level 1 login frequency. Review your right to work folder. Or commission an external mock audit.
How A Y & J Solicitors Can Help With Sponsor Licence Management and Audit Readiness
The shift to digital enforcement in 2026 has changed what sponsor licence management actually means. The compliance burden no longer fits in an HR file. It sits across payroll, governance, recruitment, and reporting, and a single weak link can cost you the licence.
A Y & J Solicitors is SRA regulated, recognised in the Legal 500, and has handled more than 5,000 immigration cases with a 98% success rate. We act as sponsor licence compliance partners for UK businesses, running mock audits, identifying gaps before the Home Office does, and providing ongoing retainer support so your systems stay audit-ready every day, not just the day before an inspection. Contact us for a free initial consultation.
Also Read : Sponsor Licence Suspension: Causes and What to Do
Conclusion: Staying Audit Ready in 2026 and Beyond
The era of the quiet warning is over. The Home Office has the data, the systems, and the mandate to enforce sponsor compliance at scale. The sponsors that come through this unscathed are the ones who treated audit readiness as a daily operation. Build the calendar, name the owner, run the mock audit. The licence you protect is the workforce you keep.
