In UK law, an estate agent is a gatekeeper. That word is not rhetorical — it is the conceptual foundation of the entire anti-money laundering regime as it applies to property, and understanding it explains everything that follows. Money launderers need to move illicit funds into assets that look legitimate, and property is close to ideal: transactions are large, the paper trail is respectable, and a completed purchase converts questionable cash into a clean, ownable asset. The estate agent stands at the entrance to that process, which is precisely why the law places obligations there.
The consequence is that estate agency is a regulated activity under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, and HM Revenue and Customs enforces those obligations with increasing rigour. The enforcement data is unambiguous about the direction. In the six months from October 2024 to March 2025, HMRC issued 336 penalties to businesses that should have been registered for AML supervision — 194 of them to estate agencies. Estate agent fines in that single period totalled £1.09 million, with individual penalties ranging from £1,250 to £27,000. The overwhelming majority were for one failure: trading while unregistered.
This reference sets out the complete picture: who must be checked, when, to what standard, who bears responsibility, who bears the cost, how the rules changed in 2025, and what HMRC actually penalises. It is written for agency principals, branch managers, nominated officers and compliance leads who need the obligations in operational detail rather than in outline, and it is grounded throughout in HMRC guidance, the Regulations, and the published enforcement record.
A note on who wrote this. This reference is published by OnBoardNow, which makes client onboarding software with built-in identity verification and AML screening for regulated UK firms, including estate and letting agents. We have a commercial interest in this market and have stated it plainly. The compliance guidance below is drawn from HMRC and the legislation, not from our product; where technology is relevant we say so and label it. You should read every vendor-published guide with that interest in mind, this one included.
The Legal Foundation: Why Estate Agents Are Regulated
Before the individual obligations, it is worth understanding the framework they sit within, because compliance decisions become far easier when the reasoning is clear rather than memorised.
Estate agency work, as defined under section 1 of the Estate Agents Act 1979, is designated a regulated activity under the MLR 2017. That designation flows from the UK’s assessment of money laundering risk. The National Risk Assessment — the government’s periodic evaluation of where laundering risk concentrates — has repeatedly identified property as a high-risk route, and the 2025 assessment again singled out the property sector, with super-prime residential property flagged as the single highest exposure and politically exposed persons named as a central driver.
Because the risk sits in property, the obligations sit on the professionals who enable property transactions: estate agents, letting agents, conveyancers and, in their own ways, lenders. Each is a line of defence. The estate agent is the first, which is why the agent’s checks come early in the transaction chain and why failures at the agent stage are treated seriously — a gap there is a gap at the entrance.
The regime is not risk-optional at the threshold. An agent cannot decide that a particular transaction feels low-risk and therefore skip registration or customer due diligence. The obligations apply to estate agency work as a category. What is risk-based is the intensity of due diligence — a higher-risk client attracts enhanced scrutiny — but the baseline obligations are mandatory across the board.
Do Estate Agents Have to Do AML Checks?
Yes, without qualification. Estate agents in the UK are legally required to carry out anti-money laundering checks, and the requirement is a matter of law rather than best practice.
The obligation has several distinct components, each independently enforceable. An agency must register with HMRC for AML supervision before it trades. It must carry out customer due diligence on the parties to a transaction. It must check proof and source of funds. It must screen against sanctions and, where relevant, identify politically exposed persons. It must maintain a written risk assessment and a policy statement. It must train its staff. It must report suspicious activity to the National Crime Agency. And it must keep records of all of this in a form that withstands inspection.
Failing to register with HMRC is itself a criminal offence, quite apart from any civil penalty. The sanctions for non-compliance range from civil fines — commonly running from around a thousand pounds into the tens of thousands — up to, in serious cases involving deliberate or reckless conduct, imprisonment for up to two years. The enforcement record shows HMRC relying principally on civil penalties, applied routinely and published openly, with the most common trigger being the simple failure to be registered when trading.
It is worth dwelling on how avoidable the most-penalised failure is. Registration is an administrative step. It requires telling HMRC about the business and its premises, paying the applicable fees, and ensuring responsible persons pass the fit and proper test and approval process. It does not require sophisticated compliance infrastructure. Yet it is the single most common reason estate agencies are fined — which means a large share of enforcement falls on businesses that could have avoided it entirely with a form and a fee.
Who Supervises Estate Agents for AML?
For nearly all UK estate and letting agency businesses, the AML supervisor is HM Revenue and Customs. This is a point of frequent confusion, because different regulated sectors have different supervisors, and the differences matter for how enforcement works.
Banks and financial-services firms are supervised for AML by the Financial Conduct Authority. Solicitors are supervised by the Solicitors Regulation Authority. Accountants are supervised by a professional body such as ICAEW or ACCA, or by HMRC where no professional body applies. Estate agents fall to HMRC directly. This matters because HMRC’s supervisory style — periodic inspection visits, published penalty lists, a strong focus on registration compliance — differs from, say, the FCA’s, and shapes what an agency should prioritise.
HMRC’s supervisory functions in this area are carried out through its compliance and Fraud Investigation Service teams. The authority conducts inspections and compliance checks, imposes civil penalties, and publishes the names of businesses that have failed to comply. That publication is itself a sanction: reputational exposure sits alongside the financial penalty, and for an agency that trades on local trust, appearing on HMRC’s non-compliance list carries a cost beyond the fine.
Registration with HMRC is compulsory and must precede trading. It must then be actively maintained — an agency that registers and later lets its registration lapse is treated, for enforcement purposes, much like one that never registered. Because registration failures dominate the penalty data, the practical priority is unambiguous: register before trading, and keep the registration current without fail.
Customer Due Diligence: The Core Obligation in Detail
Customer due diligence — CDD — is the heart of the regime, and it is where the largest share of the substantive (as opposed to registration) work lies. It has three limbs: identify the client, verify that identity, and understand the purpose and intended nature of the business relationship.
Identification means establishing who the client is. Verification means confirming it against reliable, independent evidence. For an individual, that traditionally means a government-issued photographic document such as a passport or driving licence, supported by evidence of address such as a recent utility bill or bank statement. For a company or other entity, it extends to identifying the beneficial owners — the individuals who ultimately own or control it — which is where corporate structures can become genuinely complex.
Since the incorporation of the Fifth Money Laundering Directive into UK law in January 2020, electronic identity verification has been formally recognised as an acceptable method. An agent does not have to physically inspect paper documents in person, provided the electronic verification meets the required standard of reliability. This recognition matters operationally: it is what makes it possible to run compliant checks remotely and at volume, and it is the legal basis for the digital onboarding tools the sector increasingly relies on.
The third limb — understanding the purpose of the relationship — is often overlooked and is a genuine obligation. The agent should understand why the transaction is happening and whether it is consistent with what is known about the client. A transaction that makes no commercial sense, or that is inconsistent with the client’s apparent circumstances, is a red flag that CDD is designed to surface.
Enhanced Due Diligence and Politically Exposed Persons
Standard CDD is the baseline; enhanced due diligence applies where risk is higher. EDD means additional steps to identify and verify the client, obtaining additional information on the source of funds and the purpose of the transaction, and applying enhanced ongoing monitoring.
EDD is mandatory in several defined situations: where the client or transaction presents higher risk on the agency’s own risk assessment, where the client is established in a high-risk third country, and — always — where a politically exposed person is involved. A PEP is someone entrusted with a prominent public function, along with their family members and known close associates. The status does not imply wrongdoing, but it carries elevated risk, and where a PEP is involved, regulation 35 of the MLR 2017 requires source of wealth as well as source of funds to be established.
The distinction between source of funds and source of wealth is critical here and widely misunderstood, so it is worth stating precisely. Source of funds concerns the specific money being used in this transaction. Source of wealth concerns the origin of the person’s overall financial position — how they came to be wealthy at all. For a PEP or other high-risk client, establishing that the deposit came from a named bank account is not enough; the agency must understand how that person accumulated their wealth in the first place.
Do Estate Agents Need to Do AML Checks on Buyers?
Yes — and this is one of the most consequential misunderstandings in the sector, because getting it wrong creates a systematic gap that an inspection will find immediately.
Customer due diligence applies to both parties in a property transaction: the seller and the buyer. The obligation does not depend on who instructs the agency or who pays its commission. In a conventional sale the seller is the paying client, and an agency that reasons “the seller is our client, so we check the seller” has misread the regulation. The buyer must be checked too.
The logic is straightforward once the gatekeeper framing is recalled. Money laundering through property overwhelmingly happens on the buy side — that is where illicit funds enter the asset. A regime that checked only sellers would leave the primary laundering route unguarded. So the agent must identify and verify both parties, and check the buyer’s proof and source of funds, at the appropriate points in the transaction.
There is an important sequencing point that clarifies how the agent’s obligation relates to the solicitor’s. The estate agent verifies identity and checks proof of funds relatively early — typically when a buyer’s offer is accepted, if not before. The conveyancing solicitor later conducts more detailed customer due diligence and the deeper source of funds and source of wealth analysis. These are complementary lines of defence, not duplicates: the agent’s checks do not discharge the solicitor’s obligation, and the solicitor’s later checks do not excuse the agent from doing their own. An agency that assumes “the solicitor will check anyway” has misunderstood the structure of the regime and left its own obligation unmet.
Proof of Funds versus Source of Funds
These two terms are routinely used interchangeably, and the conflation is not harmless — it maps directly onto one of the most common substantive compliance failures, and both HMRC and the SRA scrutinise the difference.
Proof of funds establishes that the money exists and is available. It is typically evidenced by a recent bank statement showing the balance. It answers the question: does this person actually have the money? Source of funds goes further and answers a different question: where did this money come from, and is that origin legitimate? Evidencing source of funds means backing the bank statement with proof of origin — a completion statement from a previous property sale, a documented inheritance, a salary record, a gift letter with supporting evidence, or written confirmation from an accountant.
The failure pattern is consistent and worth internalising. An agent collects a bank statement showing the funds are present, files it, and treats the check as complete. But that is proof of funds only. Nothing on the statement establishes how the money arrived in the account, and it is the origin — not the presence — of funds that money laundering concerns. A statement showing £400,000 tells you the money is there; it tells you nothing about whether it came from a legitimate house sale or from crime. Source of funds is the check that closes that gap, and stopping at proof leaves it open.
For higher-risk clients the obligation extends further still, to source of wealth, as discussed above. The three sit in a hierarchy of depth: proof of funds (the money exists), source of funds (where this money came from), source of wealth (how the person became wealthy at all). Knowing which the situation requires — and evidencing it properly, with scrutiny rather than mere collection — is the substance of what inspectors increasingly examine.
The Full Set of AML Obligations
CDD is the core, but it is one of several obligations, each independently inspectable and each represented in HMRC’s enforcement record. The table below sets out the complete set with the failure mode most associated with each.
| Obligation | What it requires in practice | Most common failure |
|---|---|---|
| Register with HMRC | Register before trading; maintain registration; pass fit and proper test | Trading while unregistered — the most-fined breach by far |
| Firm-wide risk assessment | A written assessment of the agency’s own money-laundering risk exposure | Missing, generic, or never updated |
| Customer due diligence | Identify and verify both buyer and seller; understand the relationship | Checking only the paying client |
| Proof and source of funds | Confirm funds exist and evidence their legitimate origin | Stopping at proof; not scrutinising origin |
| Enhanced due diligence | Extra scrutiny and source of wealth for PEPs and high-risk cases | Standard checks applied to high-risk clients |
| Sanctions screening | Screen every client against the UK sanctions list; re-screen | Not screening — acute risk in lettings since May 2025 |
| Suspicious activity reporting | Report suspicions to the NCA via a SAR; do not tip off | Failing to report, reporting late, or tipping off |
| Policy statement and controls | Documented, proportionate money-laundering controls and procedures | No written policy statement |
| Staff training | Ensure staff understand the law and their responsibilities | Untrained staff missing red flags |
| Record keeping | Retain CDD and transaction records for the required period | Incomplete records; unable to evidence checks done |
The 2025 Sanctions Change: What Letting Agents Must Now Do
A significant change took effect on 14 May 2025 that reshaped obligations for letting agents specifically, and many agencies are still adjusting to it. Understanding it requires distinguishing sanctions compliance from the wider AML regime, because they operate differently.
Before this change, letting agency activity was drawn into the AML regime primarily above a rent threshold — a monthly rent equivalent that excluded most ordinary lettings. From 14 May 2025 that threshold was removed, and letting agents were brought within scope as relevant firms under the UK’s financial sanctions regime. In practice this means letting agents must now screen clients against the UK sanctions list and report suspected breaches, regardless of the rent level. The assumption that only high-value lettings triggered obligations no longer holds.
Sanctions compliance is distinct from AML customer due diligence in a way that raises the stakes considerably: it operates on strict liability. Under the AML regime, an agency that took reasonable steps but missed something may have a defence based on the adequacy of its procedures. Under the sanctions regime, dealing with a sanctioned person is a breach regardless of intent or effort. There is no “we did our best” defence for acting for someone on the sanctions list. This is why sanctions screening cannot be occasional or judgment-based — it must be systematic, applied to every client, and repeated, because the sanctions list itself changes as individuals and entities are added and removed.
The consolidated UK sanctions list has grown substantially and now covers thousands of individuals and entities. For a letting agency handling volume, screening every applicant against a list of that size, and re-screening as the list updates, is not realistically a manual task done well. This is one of the clearest cases in the whole regime where systematic, automated screening is not merely convenient but close to necessary for reliable compliance.
Who Should Pay for AML Checks?
This is among the most searched questions on the topic, and a precise answer requires separating two things that are frequently conflated: legal responsibility and commercial cost.
Legal responsibility is not negotiable and cannot be transferred. The obligation to carry out AML checks falls on the estate agent. If the checks are inadequate or missing, HMRC penalises the agency — never the buyer or seller. No contractual arrangement, and no fee charged to a client, shifts that responsibility. An agency remains fully accountable for the checks being done properly regardless of who pays for them.
Commercial cost is a separate and genuinely open question. There is no legal rule requiring either party to bear the cost of the checks. In practice, approaches vary. Some agencies absorb the cost as a cost of doing business, treating compliance as overhead. Others pass a modest, disclosed fee to the client — commonly a per-check charge for the identity and AML verification, disclosed up front so it is not a surprise at instruction. Both are legitimate.
Two principles should govern whichever approach an agency takes. First, transparency: if a fee is charged, it should be disclosed clearly and early, not buried or sprung late in the process. Second, and more important, cost must never become a reason to skip or dilute a check. HMRC does not accept expense as a defence for inadequate due diligence. An agency that skimped on verification to avoid a cost, and was found non-compliant, would find the saving dwarfed by the penalty — the £1,250 to £27,000 range of recent fines makes the economics of cutting corners plainly irrational.
When Must the Checks Be Done?
Timing is itself a compliance dimension, and doing the right check at the wrong time can constitute a failure. The governing principle is that customer due diligence must be carried out before the business relationship is established or the transaction proceeds — not retrospectively, once a deal is agreed and the file is being tidied.
| Stage | What should happen | Why the timing matters |
|---|---|---|
| Taking instructions | Identify and verify the seller as the relationship begins | Establishes the relationship on a compliant footing from the outset |
| Buyer registration / offer | Verify the buyer’s identity | The buyer is equally in scope; late checks leave a gap |
| Offer accepted | Confirm proof and source of funds before the deal advances | Funds issues surfaced early can be resolved or reported |
| Throughout the transaction | Ongoing monitoring; re-screen against sanctions | Risk profiles and sanctions status change during a deal |
| At any point suspicion arises | Submit a SAR to the NCA; do not tip off the client | The reporting obligation is continuous, not a stage |
The unifying principle is that AML is not a box ticked at completion. It begins when the relationship begins and continues through the life of the transaction, and the agency’s records must demonstrate that each check happened at the right point — not merely that it happened eventually. An inspection that finds source of funds “evidence” gathered the week before completion, on a deal agreed months earlier, sees a process that was reverse-engineered to look compliant rather than one that actually managed risk.
The Enforcement Reality: What HMRC Actually Penalises
Compliance effort is best directed by understanding what enforcement actually targets, and the published data tells a clear and somewhat counterintuitive story.
In the October 2024 to March 2025 period, HMRC issued 336 penalties across its supervised sectors, of which 194 went to estate agencies. Estate agent fines totalled £1.09 million, with individual penalties from £1,250 to £27,000. Across this and earlier periods a consistent pattern holds: the overwhelming majority of penalties are for administrative failures — principally failing to register, or failing to maintain registration — rather than for sophisticated substantive breaches such as botched source of funds analysis.
This has a sharp practical implication that is easy to miss. The businesses most at immediate penalty risk are frequently not those with weak due diligence procedures, but those that missed the registration step entirely. An agency can have reasonable CDD processes and still be fined heavily for the simple failure to register or to keep registration current. Conversely, the substantive quality of due diligence, while genuinely important and increasingly scrutinised, has historically been a smaller share of the penalty data.
The lesson is therefore twofold, and both parts matter. First, treat registration as non-negotiable and continuous — it is the most-fined failure and the most avoidable. Second, do not let the registration focus lull the agency into neglecting substance: as HMRC’s supervision matures, and as the wider regulatory environment (including the intensifying scrutiny of source of funds seen in the solicitor sector) raises expectations, the quality of due diligence is coming under greater examination. An agency that is registered but does poor CDD is exposed to the next phase of enforcement even if it is safe from the current dominant one.
The broader trajectory is unmistakable. HMRC AML enforcement across its sectors has risen sharply over recent years, estate agencies have consistently borne a large share, and the published penalty lists grow with each reporting period. More inspections, more penalties, and rising documentation expectations are the settled direction, not a temporary spike.
Running AML Compliance at Volume Without Gaps
The obligations set out above are demanding individually; run across a busy agency handling many transactions simultaneously, they create real operational load. The failure modes that HMRC penalises — missed checks, inadequate records, unscreened clients — are very often not failures of intent but failures of capacity: the check that did not happen because someone was busy, the record that cannot be found because it was never properly filed, the sanctions screen that was skipped because it was a manual step in a rushed process.
Three principles keep compliance reliable at volume without cutting corners, and each points toward systematising rather than improvising.
Verify electronically wherever possible. The Regulations have recognised electronic identity verification since 2020, and for an agency doing volume it scales in a way manual document handling does not. Electronic verification is faster, produces a consistent audit trail automatically, and removes the variability of individual staff members handling documents differently. It is also, for remote transactions, often the only practical way to verify to a proper standard.
Screen systematically, not occasionally. Sanctions and PEP screening must be built into the process for every client, applied consistently and repeated as lists change. This is especially acute for letting agents since the May 2025 change removed the threshold that previously exempted most lettings. Occasional or judgment-based screening leaves exactly the gaps that strict-liability sanctions rules do not forgive.
Keep the evidence, not merely the outcome. HMRC inspects records. For enforcement purposes, a check that was genuinely done but cannot be evidenced is indistinguishable from a check that was never done. Systematic record keeping — capturing what was checked, when, and on what basis — is what converts compliance activity into a defensible position when an inspector arrives.
This is the operational case for digital client onboarding and verification. A well-designed onboarding process performs the identity check to a recognised standard, runs sanctions and PEP screening automatically, structures the proof and source of funds request so nothing is missed, and produces the complete, timestamped record an inspection requires — reducing both the administrative burden and the risk of a gap. The alternative, running these checks manually across a busy branch under transaction pressure, is precisely the environment in which the documentation and screening failures HMRC penalises tend to originate. The point is not that software is mandatory; it is that the failure modes are predictable, and systematising the process is the most reliable way to avoid them.
Frequently Asked Questions
Do estate agents have to do AML checks on buyers?
Yes. Customer due diligence applies to both parties in a property transaction — buyer and seller — regardless of who pays the agency’s commission. Verifying only the seller because they are the paying client is a common and serious compliance gap, and money laundering through property happens predominantly on the buy side, so an unchecked buyer is exactly the risk the regime targets. The estate agent verifies identity and checks proof of funds for both parties before a conveyancing solicitor later conducts the deeper source of funds and source of wealth analysis. The two sets of checks are complementary lines of defence, not substitutes for one another.
Do solicitors do AML checks?
Yes. Solicitors and licensed conveyancers carry out their own AML checks, supervised by the SRA rather than HMRC. In a property transaction there are effectively two lines of defence: the estate agent checks identity and proof of funds early in the process, and the conveyancer later carries out more detailed customer due diligence, including source of funds and, where relevant, source of wealth analysis. The agent’s checks do not remove the solicitor’s obligation, and the solicitor’s checks do not excuse the agent — each is independently responsible, and an inspection of either will not accept the other’s work as a substitute.
Do landlords need to do AML checks?
Landlords letting property directly are generally not themselves regulated for AML in the way agents are. Letting agents, however, are within scope, and since 14 May 2025 the previous rent threshold was removed, meaning letting agents must screen clients against the UK sanctions list regardless of rent level. A landlord using a letting agent will find the agent carries the AML and sanctions obligations on the letting. Landlords should also be aware of Right to Rent immigration checks, which are a separate legal requirement from AML and apply to the landlord or their agent directly — the two regimes are distinct and both may apply.
What is AML for real estate agents?
AML — anti-money laundering — for real estate and estate agents is the set of legal obligations under the Money Laundering Regulations 2017 designed to prevent property being used to launder illicit money. It requires agents to register with HMRC for supervision, verify the identity of both buyers and sellers, check proof and source of funds, screen clients against sanctions and PEP lists, assess and document risk, report suspicious activity to the National Crime Agency, maintain written policies and controls, train staff, and keep inspectable records. Estate agency is treated as a regulated activity because property is one of the highest-risk routes for money laundering in the UK.
What anti money laundering checks are needed when buying a house?
When buying a house, a buyer will be asked to prove their identity — usually a passport or driving licence plus proof of address — and to evidence their funds in two respects: that the money exists (proof of funds, typically a bank statement) and where it legitimately came from (source of funds, such as a previous property sale, savings, salary, gift or inheritance). Both the estate agent and the conveyancing solicitor carry out checks at different stages. For higher-value purchases or where risk factors such as PEP status are present, source of wealth — the origin of the buyer’s overall financial position — may also be required. These checks are a legal requirement on the professionals involved, not the agency or solicitor being obstructive.
What are AML checks for estate agents?
AML checks for estate agents are the specific verification and compliance steps the Money Laundering Regulations 2017 require. In practice they comprise: confirming and verifying the identity of buyers and sellers (customer due diligence); checking that funds exist and evidencing their legitimate origin (proof and source of funds); applying enhanced due diligence, including source of wealth, for politically exposed persons and other high-risk clients; screening clients against the UK sanctions list; and reporting anything suspicious to the National Crime Agency. Surrounding these transaction-level checks are firm-level obligations: HMRC registration, a written risk assessment, a policy statement, staff training, and record keeping.
Who should pay for AML checks?
Legally, the responsibility to carry out AML checks always falls on the estate agent and cannot be transferred to the client. The cost is a separate, commercial matter with no fixed rule: some agencies absorb it as overhead, others charge a modest, disclosed per-check fee. Whichever approach is taken, two principles apply — any fee should be disclosed clearly and early, and cost must never become a reason to skip or dilute a check, because HMRC does not accept expense as a defence for inadequate due diligence and the penalties far exceed the cost of doing the checks properly.
What does HMRC guidance say estate agents must do?
HMRC’s guidance for the estate agency sector sets out that businesses carrying out estate agency work must register with HMRC before trading, carry out customer due diligence on clients, verify proof and source of funds, apply enhanced due diligence to high-risk clients and PEPs, screen against sanctions, report suspicious activity, maintain a written risk assessment and policy statement, train staff, and keep records. HMRC conducts compliance inspections, imposes civil penalties for breaches, and publishes the names of non-compliant businesses. The guidance is risk-based in the intensity of due diligence required but mandatory in its baseline obligations, and agencies should consult HMRC’s current sector guidance directly when designing their procedures.
AML compliance for estate agents has moved decisively from background formality to actively enforced legal obligation, and every indicator points to intensification rather than stability. HMRC issued 194 penalties to estate agencies in a single six-month period, most for the entirely avoidable failure of trading while unregistered, and the 2025 sanctions changes widened obligations for letting agents onto strict-liability ground where good intentions are no defence.
The essentials, stated plainly, are these. Register with HMRC before trading and keep the registration current — it is the most-fined failure and the most avoidable. Check both buyer and seller, never just the paying client. Distinguish proof of funds from source of funds, and evidence origin, not merely presence. Screen every client against the sanctions list systematically, particularly in lettings since May 2025. Apply enhanced due diligence and source of wealth to PEPs and high-risk clients. And keep records that prove each check happened at the right time.
The genuine difficulty is not knowing the obligations — it is meeting all of them reliably, at volume, under transaction pressure, without the gaps that inspections find. That is a question of process design. An agency that verifies electronically, screens systematically, and keeps a clean, timestamped audit trail is not merely compliant; it is able to demonstrate compliance on demand, which is the capability that actually protects it when HMRC calls. In a regime where the failures are predictable and the enforcement is rising, building the process to prevent those failures is the whole of the task.
Leave a Reply