Umbrella Company Compliance Documents: Cross-Checking a Consultant File

Umbrella company compliance documents are checked by comparing the same facts across several papers: the umbrella's employment contract, its payslips, its PAYE reference, the bank account that pays the worker and the invoice your agency receives. A single document rarely tells you anything. A contract that names one legal entity while the payslip is issued by another does. This article sets out which field on which document is compared with which other record, what a mismatch looks like and what the reviewer does next.

The same logic applies to an employer of record (EOR) engaging a consultant on your behalf. The UK has a specific legal hook, covered below. For other markets we describe only the generic comparison.

Why does the umbrella chain need a cross-check from April 2026?

From April 2026, HMRC can pursue unpaid PAYE and National Insurance in an umbrella labour supply chain from the party with the direct contract with the end client, which is usually the agency, and not only from the umbrella. HMRC's Employment Status Manual describes this as joint and several liability under Chapter 11 of ITEPA 2003 (HMRC, ESM2420). Where the client contracts directly with the umbrella, the client is the relevant party.

Industry commentary stresses that there is no statutory defence based on due diligence or on supplier accreditation, so the file is evidence of what you checked and when, not a shield (REC, joint and several liability: what agencies and MSPs need to know). That is commentary, not HMRC wording, so read the manual page and the legislation for your own position.

A cross-check does one practical thing: it shows early that the money you pay for a worker is arriving as PAYE at HMRC.

Which documents make up a consultant file?

A consultant file holds the identity and right to work record, the engagement contract, the umbrella or EOR paperwork, timesheets, the agency invoice and payslips. Each document belongs to a different party, and that is why they drift apart.

Which cross-checks catch the most problems?

Seven comparisons cover most of what a reviewer can defend. The table sets out each field, where it is compared, what a mismatch looks like and the next action.

The same worker name should appear in the same form on the right to work record, the umbrella contract and the payslip. Where it does not, the issue is usually data entry. Occasionally it is not.

How do you check the umbrella itself?

Check the umbrella as a legal entity first, then as an employer. The Companies House register shows the registered name, company number, status and filing history, and it is free to search (Companies House). A matching registered name tells you the entity exists. It does not tell you it pays tax correctly.

For the employer side, compare payslips over several periods. Look for a stable PAYE reference, a plausible gross-to-net relationship, pension contributions where they apply, and deductions that tally with the Key Information Document. Agencies have to provide that document to workers placed through an umbrella under the Conduct of Employment Agencies and Employment Businesses Regulations 2003 as amended; read the current text for the exact duty.

Industry accreditation schemes and HMRC's published list of non-compliant umbrella companies are useful inputs. Treat accreditation as a reason to ask fewer questions, not none, given the point on defences above. A register entry or accreditation confirms status at a date. It does not show that last month's payroll was filed correctly.

What do contractors and recruiters actually ask?

Forum questions cluster around three worries. The first is "how do I know my umbrella is paying my tax?". Compare payslips with your own HMRC personal tax account and ask the umbrella for its PAYE reference. The second is "why is my take-home lower than the rate the agency quoted?". Employer costs, margin and the apprenticeship levy sit between the day rate and gross pay, which is what the Key Information Document is meant to show. The third, from agency staff, is "can we just rely on the accreditation badge?". As above, a badge is evidence of diligence, not immunity.

How does this work for an employer of record?

An EOR sits between the hirer and the consultant as the legal employer, so the same comparisons apply with one addition: the EOR's contract with the hirer must name the person actually working on site. Compare the consultant's name and role on the EOR statement of work with the right to work record and the timesheet. Compare the EOR entity on the invoice with the entity on the consultant's employment contract.

For a consultant in another country, apply the generic checks: legal name across documents, entity status on the local company register, payroll or social security proof on the payslip, and the account holder on the payment details. Do not assume a UK mechanism exists abroad. Where no official online check is available, ask for the document and record the date you received it.

What should the reviewer do on a mismatch?

Classify it, fix the record or escalate, and log the outcome. A clerical mismatch (name order, a typo in a reference) is corrected at source with a dated note. A structural mismatch (different employer entity, payment to another company, a PAYE reference that changes) is not corrected by the file reviewer. It goes to the person who owns the supplier relationship, and onboarding pauses until the answer is in writing. For wider inspection readiness, see our guide to cross-checks on a temp worker file and the staffing agency document requirements, and the sector overview in the industry verification guide.

How can CheckFile help?

CheckFile reads the fields on each document and compares them across the file: names, dates, reference numbers, company identifiers and bank details, and flags the ones that disagree so a reviewer decides. It compares data. It does not prove a document is genuine, and it does not replace an HMRC or Companies House lookup. Staffing teams can see the workflow on the temp staffing and recruitment page, pricing on /tarifs and data handling on /securite.

FAQ

What compliance documents does an umbrella company need to provide?

Typically its employment contract, payslips, company registration details, PAYE reference and pension arrangements. Agencies also provide a Key Information Document to the worker. Ask for them before the first payment, not after a query.

Is an umbrella company accreditation enough for due diligence?

No. Commentary on the April 2026 rules says no statutory defence rests on accreditation or due diligence alone. It is one input among several, alongside payslip and register comparisons.

Who is liable for unpaid umbrella PAYE from April 2026?

HMRC's manual says liability is joint and several between the umbrella and the party with the direct contract with the end client, so agencies can be pursued. Confirm your position against the manual and the legislation.

Does a Companies House check prove an umbrella is compliant?

No. It shows the entity exists, its status and its filings. Compliance with payroll obligations is shown, if at all, by consistent payslips and reference numbers.