Document Tracking Spreadsheet or Dedicated Tool? What Each Can Check

This article is for information only and is not legal advice. Regulatory references are accurate at the date of publication. Seek qualified advice for any decision about an individual file.

A document tracking spreadsheet is enough while the job is to record which documents have arrived and when they expire. It stops being enough when the job becomes comparing them: does the name on the payslip match the ID, does the company number exist in the register, does the bank account belong to the applicant. A spreadsheet stores whatever a person types in; a dedicated tool reads the fields from the documents themselves and compares them. The choice therefore depends less on volume than on which checks your files need.

What a spreadsheet does well, and where it stops

A spreadsheet is a good tracker and a poor checker. It records status, owner and dates cheaply, and anyone can adapt it in an afternoon. The trouble starts when the same sheet is asked to prove that a file is consistent.

The middle rows are the point. A sheet that says "ID received: yes" and "payslip received: yes" says nothing about whether the two belong to the same person. Our guide to verification automation covers the wider pipeline; this article stays on the tracking-versus-checking line.

The cross-checks a tracker cannot run on its own

A cross-check compares one field on one document with a field on another document or an official register, and defines in advance what a mismatch looks like and what the reviewer does next. If the sheet only has a "received" tick per document, none of these exist. If it has typed values, the comparison depends on the typist.

Two rules keep this table honest. A mismatch is a question, not a verdict: most name differences are marriage, translation or a missing middle name, and rejecting on them alone is unfair. And the next step is written down per mismatch type, so the outcome does not depend on who is on shift. A spreadsheet can hold the rules as a column of text, but it cannot apply them.

Where spreadsheets break in practice

Spreadsheet trackers fail quietly, which is why they last longer than they should. The common failure modes are structural, not a sign of careless staff.

1. Dates stored as text. A "12/03/2027" typed by one person and "2027-03-12" by another sorts and filters differently; an expiry formula returns nothing, and the row looks fine.
2. Copies in circulation. Two people download the sheet on Monday; on Friday there are two versions of the truth.
3. Personal data in an uncontrolled place. ID numbers and bank details in a shared sheet are visible to everyone with the link, and rows for rejected applicants stay there indefinitely.
4. Overwritten history. When a status changes from "mismatch" to "OK", the sheet rarely records who decided and why.
5. Rules that live in someone's head. The knowledge that "a joint account is acceptable for tenants, not for payroll" is nowhere in the file.

The data point matters legally as well as practically. Storage limitation is set in UK GDPR Article 5(1)(e), and a sheet with no retention logic is where files outlive their purpose.

United Kingdom: what each official check proves

An official check proves a status on the day it was run, not that your copy of the document is genuine. Your tracker should therefore record the result, the date and the person, and say what was checked.

For right to work, the GOV.UK guidance requires you to make and keep copies of the documents and record the date of the check, retaining them for the duration of employment and for two years afterwards (GOV.UK: check a job applicant's right to work). For many non-British applicants the check uses the Home Office online service with a share code. It shows the status and any time limit; it does not authenticate a passport scan you hold. A sheet column "RTW checked: yes" is a start. A useful record also holds the check date, the checker and the expiry, so that the follow-up check is not forgotten.

For company applicants, such as suppliers, compare the company number and registered name on their document with the entry at Companies House, and look at the company status. A register lookup shows what is registered, not who is behind the upload.

For regulated firms, record-keeping under the Money Laundering Regulations is set out in regulation 40 of the MLR 2017: customer due diligence records must generally be kept for five years from the end of the business relationship or transaction. Check the current text for your sector before setting retention. The ICO's employment guidance is the reference for what you may collect from employees and applicants.

What people ask about spreadsheet trackers

Recurring questions in compliance, recruiting and operations communities are practical.

"Can I just use Excel or Google Sheets for document control?" Yes, for a small, stable process: one document type, a handful of files a week, one owner. Add a data-entry rule for dates, lock the sheet to named users and set a retention date column. Stop when a second person edits it or when you need field comparisons.

"How do I stop the sheet getting out of date?" Make the source of truth the document, not the sheet: if the expiry date is typed, it will drift. Tools that extract the date remove the retyping, which is where most drift begins.

"Is there a free document tracking template I can download?" Many exist, and most give you columns for name, status and date. None provides the comparison rules in the table above. Treat a template as a status list and write your own mismatch rules next to it.

When to move: five triggers

Move when any one of these is true, not when volume reaches an arbitrary number.

1. More than one person edits the tracker in a day.
2. Reviewers retype data from documents into cells.
3. You are asked to evidence who approved a mismatch and when.
4. Files include a time-limited document that must be re-checked (right to work, insurance, licence).
5. Chasing missing or inconsistent documents takes more time than reviewing them.

Migration does not need to be abrupt. Keep the sheet for reporting, move capture and comparison to the tool, and export the mismatch log back for management. A related case is tracking expiry of supplier documents, where the re-check step is the whole purpose.

Choosing a tool: questions for a vendor

1. Does it read fields from each document, or only store the images?
2. Can I write my own comparison rules and choose which block and which flag?
3. Does it show the reviewer both values side by side, with the source document?
4. Does it log who resolved each mismatch and what they decided?
5. Where is data stored, for how long, and can I set retention per file type?
6. Does it state plainly what it does not check? Be wary of any tool that implies a field match proves authenticity.

Where CheckFile fits

CheckFile is a validation layer that compares the documents in a file: whether the file is complete, whether dates are current, and whether names, addresses, income figures and bank details agree across documents. Mismatches go to a reviewer with the fields highlighted, and the decision stays with your team. It does not replace the official checks above, and a match is not proof that a document is genuine. For onboarding files see the HR onboarding solution, or review pricing. For the broader picture, read the pillar guide on automating verification and the article on cross-document consistency checks.

Frequently Asked Questions

Is a spreadsheet enough to track documents?

It is enough to track status and expiry dates for a small, stable process with one owner. It is not enough once you need to compare fields across documents or evidence who approved a mismatch.

What is the difference between document tracking and document validation?

Tracking records that a document is present and when it expires. Validation reads the document and compares its fields with other documents or a register, then routes mismatches to a reviewer.

Can a spreadsheet be compliant with data protection rules?

It can be, with access controls, a retention date per row and deletion when the purpose ends. Those controls are manual in a sheet, which is why they are often missed.

Does a dedicated tool prove my documents are genuine?

No. A tool shows whether fields agree and dates are in range. Whether the original is authentic is a separate question that field matching does not answer.

How much does a dedicated tool cost compared with a spreadsheet?

A spreadsheet looks free but costs reviewer hours in retyping and chasing. Compare a tool's per-file price with those hours, and get the pricing basis in writing.