The compliance ledger for SME construction firms. Real-time verification, auto or 2-click document validation and easy subcontractor upload.
Legal Duty
You have a legal duty to verify every subcontractor before they start on site — their competence, their tax registration, and their right to work in the UK. Most smaller contractors have never carried out a formal check. That gap is now a criminal and financial liability, not a paperwork inconvenience.
As the principal contractor, you are a named dutyholder. You must be able to prove every subcontractor on site is competent and appropriately insured. The Act applies to all notifiable projects and you cannot pass this responsibility to anyone else — even a large subcontractor.
HMRC's new "Knew or Should Have Known" rule comes into force April 2026. If a subcontractor gives you the wrong CIS deduction status and you don't verify it, you're personally liable for the tax shortfall. Taking their word for gross status is no longer a legal defence.
You must carry out a right to work check before any subcontractor starts. A glance at a passport or a photo sent over WhatsApp does not meet the legal standard. Civil penalties start at £45,000 per illegal worker, per offence — with criminal prosecution for repeat or knowing breaches.
Automated Workflow
We automate the heavy lifting so your site management can focus on building, not auditing folders.
Enter the project details for admin and choose a tier. Upgrade at any time.
Fill out names and contact details of all subcontractors working on the site.
Bulk send requests to all subcontractors for all necessary documentations.
You will be prompted to upload all the relevant compliance documents — once, from your phone.
Submit and verify documents to the relevant bodies automatically — no chasing required.
As contractors need compliance proof it's just a one click "Allow access" button. You're in control.
Automated
Verified real-time oversight of every critical compliance metric — automatically, for every subcontractor on every project.
CITB register — 2 click live check
Auto submission for Passport, BRP, or Share Code
Auto reach out for insurer confirmation for PL + EL
Auto status check — Gross / Net / Unmatched status audit
Auto validation check — Awareness certificate — OCR verification
Ltd Company status check
Gas trades — conditional check
NICEIC / NAPIT / ECS — conditional check
Main Contractors
Subcontractors
Scalable authority for projects of every magnitude.
For single-trade projects.
The industrial safety standard.
Full institutional oversight.
Focused local sites.
The industrial safety standard.
Common Questions
Most smaller contractors have never been asked for a compliance record. That's changing. Here's what you need to know before you get caught out.
Yes — and the law doesn't give credit for the fact that most builders haven't been doing it. The Building Safety Act 2022 makes you a named dutyholder on notifiable projects, which means you're personally responsible for the competence and compliance of every person working on site. The reason no one has asked you yet is not a defence — it just means you haven't been checked yet.
You need to keep records. HMRC requires evidence of CIS verification for at least 3 years and can request it at any time. Right to Work records must be kept for the duration of the engagement plus 2 years. Insurance confirmations need to be retained for the project lifecycle. A verbal check, a WhatsApp photo, or a handshake does not satisfy any of these requirements.
It depends on which check you've missed, but none of them are minor. Right to Work: civil penalties start at £45,000 per illegal worker, with criminal prosecution for knowing or repeat breaches. HMRC CIS: from April 2026 you can be personally liable for unpaid tax under the "Knew or Should Have Known" rule — even if the subcontractor told you they were gross status. Building Safety Act: enforcement notices, prohibition orders, and criminal prosecution for serious breaches. These are not theoretical risks — HMRC and the HSE are both expanding enforcement.
Several different bodies. HMRC runs CIS compliance reviews and can request your verification records without warning. The HSE and local authority building control enforce Building Safety Act duties on notifiable projects. The Home Office enforces Right to Work. If something goes wrong on site — an accident, a claim, a dispute — your compliance records will be the first thing requested. The fact that enforcement has been light so far does not mean it will stay that way: HMRC is specifically widening its reach from April 2026.
Yes. The law applies regardless of how long you've worked together. "I've known him for fifteen years" is not a Right to Work check — it does not produce a verification number, it does not create a record, and it does not protect you. It also does not tell you whether their CSCS card is still valid, whether their insurance has lapsed, or whether their CIS status has changed. Long relationships feel safe. They are not a legal substitute for verification.
No. The Building Safety Act, HMRC CIS rules, and Right to Work legislation apply equally to sole traders and SME contractors running domestic refurbishments, extensions, and smaller commercial projects. There is no turnover threshold or project-size exemption. The legal duty applies the moment you engage a subcontractor. Enterprise contractors have compliance teams. You need Subchecked.
Contractors have a legal obligation to verify the compliance of everyone they hire — Right to Work, CIS registration, CSCS cards, and insurance. The Building Safety Act 2022 and HMRC's updated CIS rules put the responsibility firmly on them. Subchecked is how they meet that obligation. It's not personal — it's a legal requirement, and the consequences of getting it wrong fall on the contractor, not on you.
It depends on the project and trade, but you should expect to be asked for: proof of your right to work in the UK (passport, biometric residence permit, or share code), your CIS registration details or UTR number, a valid CSCS card for your trade and qualification level, and current public liability insurance. Subchecked lets contractors verify CIS status directly with HMRC and check CSCS cards without you having to supply physical copies each time.
Yes, if your CIS status isn't current. HMRC verification confirms your deduction rate — gross (0%), standard (20%), or higher (30%). If you haven't registered under CIS, or your registration has lapsed, the contractor is legally required to deduct at the higher rate. Getting your CIS registration in order means you receive more of your payment upfront. If you're currently on higher-rate deduction, speak to HMRC or your accountant about standard or gross registration.
Gross status means HMRC deducts 0% from your payments — you manage your own tax liability. To qualify, you need to be registered under CIS, have filed all returns and paid tax on time, have been trading for at least 12 months, and have an annual turnover above £30,000 for sole traders (higher for companies). You apply through HMRC's online service or via your accountant. Once approved, contractors verifying you through Subchecked will automatically see your gross status.
CSCS cards are required on most regulated construction sites and are increasingly being verified digitally before you start. Without a valid card for your trade, a contractor using Subchecked may not be able to add you to a project. The CITB health, safety and environment test is the first step — from there, you apply for the card relevant to your trade and qualification level through CSCS. Most cards are straightforward to obtain if your qualifications are in order. Check cscs.uk.com for the right card for your trade.
The compliance records held in Subchecked belong to the contractor — they are the data controller for their project records. If you want to know what they hold about you, or you believe something is inaccurate, ask them directly. If you have concerns about how your personal data is being handled, your rights under UK GDPR include the right to access, rectify, or erase data held about you. Our Privacy Policy sets out how Subchecked processes any data we handle in this process.
Join us now, reduce your compliance risk and put your name on every project you touch.