Insights

Every September brings updates. This year’s KCSIE changes tighten requirements around online checks, overseas verifications, and how agencies evidence their processes to schools. We break down what matters.

The SCR is the most audited document in education recruitment. Yet most agencies maintain it manually, with gaps they don’t discover until an auditor does. There’s a better way to think about it.

AI agents query the DBS Update Service, run TRA prohibition checks, and validate Right to Work documents — autonomously. But the compliance decision? That’s made by deterministic rules, not AI. Here’s why that distinction matters.

Most compliance systems send a reminder when a DBS certificate is about to expire. Then what? Someone emails the candidate, chases the re-upload, checks the document, updates the record. That’s not automation — it’s a to-do list.

Between email chains, re-uploads, spreadsheet updates, and audit prep, the average compliance officer spends 60% of their time on process — not judgement. We mapped the true cost.

AI can extract data from documents and run checks autonomously. But should AI decide whether a candidate is compliant? In regulated sectors where safeguarding is the standard, the answer is no — and the architecture should reflect that.

CQC inspections don’t just assess the quality of care — they assess the systems behind it. For agencies supplying staff into regulated settings, that means your recruitment compliance is on the line too. Here’s what gets flagged most.

NHS trusts require agency staff to meet strict compliance frameworks — often exceeding standard DBS and Right to Work checks. At volume, managing this manually creates bottlenecks that delay placements and cost revenue.

Digital Right to Work checks have been available since 2022. But digitising the check isn’t the same as automating the process. Most agencies still manually verify share codes, chase expired documents, and update records by hand.

Most agencies prepare for audits reactively: pulling records, filling gaps, and compiling evidence in the weeks before an inspection. Agencies that treat audit readiness as a system property — not a task — never scramble.

With 165,000 vacancies in adult social care, the pressure to place staff quickly has never been greater. But speed without compliance rigour creates risk. Agencies need systems that do both — not one at the expense of the other.

Agencies hold sensitive personal data for thousands of candidates: DBS certificates, identity documents, health records, references. GDPR doesn’t just require consent — it requires a defensible system for how that data is stored, accessed, and deleted.