Recruitment Supplier Compliance: Why Evidence Matters More Than Promises

Stop Telling Me You’re Compliant. Show Me.

The recruitment industry has spent years talking about compliance. Supplier questionnaires, accreditation badges, policies, procedures and declarations all play an important role.

But increasingly, the question is not simply “Are you compliant?”

It is “Can you prove it?”

For recruitment businesses, that distinction matters.

Clients are asking more detailed questions about supply chains. Workers expect greater transparency around how they are engaged and paid. And recruitment leaders need confidence that the suppliers they rely on are not only saying the right things but operating in the right way.

That means moving beyond compliance as a statement and towards compliance as something that can be evidenced, tested and monitored.

From Promise to Proof

Traditional due diligence often starts with documents.

Policies are requested. Accreditations are checked. Questionnaires are completed. Contracts are reviewed.

All of that remains important but strong due diligence should go a step further.

It should connect three things:

1.  What does the supplier say it does?
2.  What controls does the supplier have in place?
3.  What evidence demonstrates those controls are actually working?

Payroll is a good example.

A supplier might have detailed payroll procedures, but recruitment businesses should also want confidence that workers are actually being paid correctly, that deductions are transparent and that the processes described on paper are reflected in practice.

So, what should recruitment leaders actually be checking?

A Practical Compliance Checklist

Due diligence should not be treated as a one-off exercise completed when a supplier joins a PSL. Whether onboarding a new umbrella company or reviewing an existing payroll provider, recruitment businesses should consider checking areas including:

1. Supplier identity and accountability

Confirm exactly which legal entity you are contracting with, who is responsible for delivering the service and whether any other organisations are involved in the contractual or payment chain.

2. Contracts and worker communications

Review the contractual documentation and information provided to workers. Is the engagement model clear and consistent? Do the contracts, illustrations, key information documents and worker communications tell the same story?

3. Pay and deductions

Ask for anonymised sample payslips and calculation breakdowns. Can you clearly follow the journey from the assignment rate through to the worker’s gross taxable pay and eventual net pay? Are deductions clear, understandable and properly explained?

4. Holiday pay

Understand how holiday entitlement is calculated, recorded, communicated and paid. Crucially, do not rely solely on the written policy. Consider reviewing examples that demonstrate how the process operates in practice.

5. Payroll controls and reporting

Ask what controls are used to check payroll accuracy and what evidence is retained. Where appropriate, consider whether reconciliation or independent verification can provide additional assurance.

6. Pensions and statutory payments

Understand how pension obligations and statutory payment requests are managed, recorded and communicated to workers.

7. Worker support and complaints

What happens when something goes wrong? Review how workers can raise questions, how complaints are escalated and whether recurring issues are identified and addressed.

8. Ongoing monitoring

Finally, put a process around the process.

Set review dates. Decide what evidence should be requested. Record findings and actions. If concerns arise, increase the frequency or depth of your checks.

The objective is not to catch suppliers out.

It is to make sure the level of confidence you have in your supply chain is supported by evidence.

Questions You Should Be Asking Your Suppliers

Good due diligence depends on good questions.

Recruitment leaders reviewing an umbrella company or payroll provider should consider asking:

• Can you clearly explain the journey from the assignment rate you receive to the worker’s net pay?
• What deductions could appear on a worker’s payslip, and how are these explained?
• What evidence can you provide that payroll calculations are being checked?
• How are payroll errors identified, corrected and communicated?
• How is holiday entitlement calculated, recorded and paid?
• How do you manage pension obligations and statutory payments?
• Are any elements of your service outsourced or provided by another organisation?
• What audit, reconciliation or management information can you provide to support our ongoing due diligence?
• How would you notify us if a material compliance issue was identified?
• Are you prepared to support proportionate sample testing as part of an ongoing supplier review?

The important thing is not simply receiving an answer, it is considering what evidence supports that answer.

Common Red Flags

A red flag does not automatically mean a supplier is non-compliant.

It does mean it is worth asking another question.

Warning signs could include:

• Different contacts providing different explanations of the engagement or payment model.
• Reluctance to provide supporting evidence beyond policies, accreditations or general assurances.
• Take-home pay illustrations that appear unusually high or are difficult to reconcile with the stated model.
• Contracts, payslips, illustrations or worker communications that do not appear consistent with one another.
• Deductions that are difficult for the worker or agency to understand.
• Recurring complaints around areas such as pay, holiday entitlement or pensions.
• Third parties appearing within the contractual or payment chain without a clear explanation of their role.
• Pressure to approve a supplier or payment route before normal due diligence has been completed.

None of these necessarily provides an answer in isolation but each should prompt the next question:

“Can you show me the evidence?”

What If You Find Something That Doesn’t Look Right?

Finding an inconsistency does not necessarily mean something improper has happened. Errors occur and processes can fail. What matters is how the issue is investigated and resolved.

A sensible approach is to:

Define the concern.
Be clear about what appears inconsistent and what information or evidence is missing.

Preserve the evidence.
Retain relevant contracts, payslips, illustrations, communications and review notes.

Ask focused questions.
Give the supplier a clear opportunity to explain the issue and provide supporting evidence.

Test the explanation.
Where possible, compare the response against calculations, records or independent evidence rather than accepting a revised assurance at face value.

Agree corrective action.
If a gap is identified, document what needs to change, who is responsible and when it should be completed.

Escalate where necessary.
If the concern is material, repeated or specialist in nature, involve the appropriate internal or external compliance, legal or technical expertise.

Verify closure.
Do not simply record that an action has been completed. Where appropriate, recheck the process to establish whether the issue has actually been resolved.

This creates something incredibly valuable: an audit trail showing not only that you asked questions, but that you acted on the answers.

Compliance Is Also a Commercial Advantage

Good compliance is sometimes viewed purely through the lens of risk but there is another side to it.

Being able to demonstrate robust supply chain oversight can strengthen client conversations, support tender submissions and provide greater confidence during audits and due diligence exercises.

Imagine the difference between telling a prospective client:

“We only work with compliant suppliers.”

Or being able to say:

“Here is how we select our suppliers, here is what we check, here is the evidence we require, and here is how we continually monitor them.”

The second statement is considerably more powerful, strong compliance does not simply help mitigate risk. It can become part of your commercial proposition.

Where Independent Verification Fits

This is also where technology is beginning to change the compliance conversation.

At Cinch, we have embraced solutions such as veriPAYE as an additional layer of assurance within payroll due diligence.

The important point is that independent verification should not replace good governance, accreditation, supplier reviews or traditional due diligence.

It should strengthen them.

Technology can help move the conversation beyond policies and declarations by providing another source of evidence around what is actually happening within payroll operations.

And that is ultimately where recruitment supply chain compliance is heading.

Not away from trust - Towards evidence that supports trust. Trust, But Verify

Compliance should never become a box-ticking exercise.

The objective is not to create more paperwork or make supplier relationships unnecessarily difficult.

It is to create confidence, Confidence for the recruitment business, Confidence for its clients.

And, importantly, confidence for the workers whose pay and employment experience ultimately sit at the end of the supply chain.

So the next time a supplier says: “We’re compliant.”

Perhaps the most valuable response is: “Great. Show me.”

Because in today's recruitment market, saying you're compliant is no longer the strongest reassurance you can provide.

Proving it is.

This article has been provided by our partners at Cinch, sharing their expertise on supplier compliance, payroll due diligence and the importance of independent verification in recruitment. You can view their Partner Page here.