An HR compliance tracker is not really a filing system. It is a list of dates that answers one question: what stops being true next month? Almost every compliance failure in a small business is a date that passed while nobody was looking at it.
This is a practical guide to building one for a UK business - what it has to hold, the statutory periods behind each entry, and a five-step setup you can do in an afternoon. It is also honest about when a spreadsheet is still the right answer.
What an HR compliance tracker is for
Most small businesses already hold the documents. The certificates exist, the right to work checks were done, the training happened. What is usually missing is the ability to say, quickly, which of those things has quietly stopped being current.
That is the gap an HR compliance tracker fills. Storage you can already do with a folder. The useful part is the query - show me everything that expires in the next sixty days - which a structured list answers instantly and a filing cabinet cannot answer at all.
It is worth being clear about the limit up front. No tracker makes you compliant. It makes your position visible and lets you produce evidence on request, which is a narrower and more useful claim than most software marketing makes. If you want the argument for why this matters at all, we have written separately on why employee compliance tracking matters.
The statutory dates a UK tracker has to hold
This is the part most compliance-tracker guides skip, and it is the part that decides what your tracker needs. UK retention periods are not one number - they are several, running from different start dates, and some of them outlast the employment.
| Record | How long | Runs from |
|---|---|---|
| Right to work check | Employment + 2 years | The date they leave |
| Working time records | 2 years | The date the record was made |
| Minimum wage records | 6 years | When the record was created |
| Payroll and PAYE | 3 years | End of the tax year it relates to |
The sources, because these are worth checking rather than taking on trust:
Right to work. Keep the copy for the whole of the person's employment and for two years after they leave, make a copy that cannot be changed, and record the date the check was made (source: GOV.UK — Check a job applicant's right to work). Checked 11 September 2026.
Working time. Employers must keep records adequate to show compliance with the weekly working time and night work limits, retained for two years from the date they were made (source: Working Time Regulations 1998, regulation 9). Checked 11 September 2026.
Minimum wage. Records created on or after 1 April 2021 must be kept for at least six years, and you must be able to produce the records for a single pay reference period in a single document (source: GOV.UK — Employers and the minimum wage). Checked 11 September 2026.
That last one is the sharpest test of a tracker. Not "we could assemble it from the rota, the timesheets and payroll over an afternoon" - one document, one pay period, on request, with no notice.
Two more principles shape what you should and should not keep. Personal data must be adequate, relevant and limited to what is necessary, and kept no longer than necessary (UK GDPR, Article 5), and health information is special category data with its own conditions for processing (Article 9). A tracker that hoards everything forever is its own kind of failure. There is more detail in our guide to how long to keep employee records.
What belongs in it
Dates that recur
- Probation reviews and contract renewals
- Policy and handbook review dates
- Risk assessment and method statement reviews
- Insurance and accreditation renewals
- Payroll and filing deadlines
Documents that expire
- Training certificates with a renewal period - first aid, fire safety, manual handling
- Qualifications, licences and tickets
- Right to work copies, with the date of the check recorded
- DBS certificates, where your sector requires them
- Subcontractor insurance, if you use them
Records you must retain
- Contracts and any written variations
- Working time and pay records
- Absence records and return to work conversations
- Training history
- Disciplinary and grievance records
Setting up your HR compliance tracker in five steps
1. List the obligations, not the documents
Start from what you are required to hold and for how long, using the table above as the spine. Listing documents first produces a tracker that mirrors your filing cabinet, including its gaps.
2. Put it in one place
One file, one system, one owner. The most common failure is not an absent tracker but two of them - a spreadsheet and somebody's inbox - which disagree the moment anyone is on holiday.
3. Record the expiry, not just the document
Every row needs a date and an owner. A certificate with no expiry recorded is a certificate you will find out about late. Where a date has no natural expiry, give it a review date instead.
4. Review on a fixed cadence
Monthly is enough if your HR compliance tracker can show you what is expiring. If you are reading the whole list to find out, make it weekly - on a manual list, a monthly cadence means something can be four weeks overdue before anyone notices.
5. Automate the watching, not the judgement
The part worth automating is the part humans are worst at: noticing that a date is approaching. Deciding what a lapse means, and what to do about it, stays with you.
What software automates, and what it does not
In HR Henry, documents and training records carry expiry dates, and an expiring-records view lists what is lapsing across every member of staff before it does. Qualifications, training certificates and company documents with review dates all feed the same list. Company documents also carry a version number and a review date, so you can say which version of a policy was live on a given day - which is usually the actual question when something is disputed.
What it does not do is decide anything. It will not tell you whether your training is adequate for your sector, whether a lapsed certificate means somebody should come off the rota, or whether your retention policy is defensible. Those are judgements about your business, and any supplier implying their software makes you compliant is selling something that does not exist.
How this plays out varies a lot by sector - a nursery tracking paediatric first aid has a different problem from a contractor tracking van MOTs and subcontractor insurance. The sector guides go through both.
When a spreadsheet is still fine
Worth saying, because plenty of guides on this topic will not.
If you employ a handful of people, one person maintains the file, and very little you hold carries a renewal date, a spreadsheet is a perfectly reasonable HR compliance tracker. It costs nothing and everybody can already use it.
The case changes when the number of dates exceeds what one person can hold in their head, when two people start editing the same file, or the first time a renewal passes unnoticed. That last one is usually the deciding event, and it is worth not waiting for it. There is a fuller argument, including the points where a spreadsheet genuinely stops coping, in our guide to moving your HR off spreadsheets.
Frequently asked questions
What is an HR compliance tracker?
A single record of every people-related obligation with a date attached: renewals, training expiry, document retention and review dates. Its job is not storage - it is answering 'what lapses next month?' without anyone having to remember.
How often should I review an HR compliance tracker?
Monthly is enough if the tracker surfaces what is expiring. If you are relying on reading the whole list, review it weekly, because a monthly cadence on a manual list means a renewal can be four weeks overdue before anyone looks.
How long do I have to keep employee records in the UK?
It depends on the record. Right to work copies run for the whole of employment plus two years after the person leaves, working time records for two years from when they were made, and minimum wage records for six years. There is no single period that covers everything.
Do I need HR software to stay compliant?
No. A well-maintained spreadsheet is a legitimate tracker for a small, stable team. The case for software is about expiry: a date in a cell does nothing until someone looks at it, whereas a system can produce the list of what lapses next month on demand.
What is the most commonly missed compliance date?
In our experience, the right to work copy for someone who has already left. It has to be kept for two years after their employment ends, so it sits outside the mental model of 'current staff records' and is the one most often thrown out early.
Does an HR compliance tracker make my business compliant?
No, and treat any supplier who says otherwise with caution. A tracker makes your position visible and produceable. Whether your arrangements are adequate is a judgement about your business, made by your regulator.