UK Right to Work Manager for SMEs
Every RTW Check, Sorted — Before the £60K Fine
Executive Summary
In a nutshell
A single workflow for UK small employers (1-49 staff) to run and track Right to Work checks across every worker type — UK/Irish passports, Home Office share codes, e-visas, and IDSP-assisted flows — with automatic follow-up reminders before time-limited visas expire. The wedge: sit above the existing IDSPs rather than compete on identity verification, target the 5.64M SMEs that incumbents (Yoti, TrustID, Konfir, Amiqus) ignore, and price flat monthly instead of £4-£8/check. Timing is rare — the January 2026 Digital ID U-turn left the market confused, 70% of compliance platforms haven’t integrated the Digital ID API, and Section 48 of the Border Security Act 2026 expands RTW obligations to agency and zero-hours workers.
The Story
Meet the user
Sam runs a 14-person gastropub just outside Leeds. Three kitchen porters on student visas, two chefs on Skilled Worker visas, a British pot-washer, a couple of Irish bar staff, and a rolling cast of zero-hours Sunday cover. It took her two evenings with the HMRC guidance PDF just to work out which of her staff need a share code versus a passport check versus an IDSP scan, and she’s still not sure what to do about the two Bulgarian waitresses whose Pre-Settled Status evidence is buried somewhere in an old email thread. Her accountant shrugs and says "ask a solicitor." A solicitor wants £240. Meanwhile, her head chef’s Skilled Worker visa expires in nine months and she has no system for remembering to re-check it — last year she almost missed a follow-up on a different employee and lost sleep for a week after reading a Davidson Morris blog on the £60,000 penalty per illegal worker.
Then she stumbles onto RightWorks in an AHDB Facebook group. £29/month, unlimited staff, one dashboard. She adds each employee in two minutes, snaps passport pages or pastes a share code, and the system sorts them into the right compliance bucket — permanent-right, time-limited, follow-up-due. Visa expiry reminders land in her inbox 3 months, 1 month, and 1 week out. When the Home Office audits her in December, she taps "Export Audit Pack" and out drops a date-stamped PDF of every check, every document, every follow-up, every share-code-verification screenshot. For the first time in three years, she stops dreaming about the Home Office knocking on the door.
Scores
How does this idea stack up?
7.3/10
5.64M UK small employers; ~200K+ monthly search volume on RTW keywords; incumbents all target mid-market and enterprise.
£60K civil penalty per illegal worker; 62% of micro/small employers make documentary errors; follow-up check confusion is endemic.
Manager + tracker layer ships in weeks; full IDSP certification is a 6-9 month, ~£20-40K undertaking — avoid it on MVP, partner instead.
January 2026 Digital ID U-turn + Section 48 expansion to agency/zero-hours + 2029 online-only mandate = rare 3-4 year regulatory tailwind.
Compliance itself is permanent, but the 2029 full-online migration may let HMG offer a free baseline or HRIS incumbents absorb — 5-year window.
Medium — workflow + reminder engine is standard, but IDSP partnership negotiation and Home Office API integration add real lift.
Strongest
Timing
The January 2026 Digital ID reversal is a news-hook gift and the 70% un-integrated compliance-platform stat is a GTM angle on a plate.
Watch out
Feasibility
The moment you promise ‘we do the IDSP check’, you’re 6-9 months and £20-40K away from launch. Frame as orchestration + tracking and partner for the IDSP layer.
Pain Point
The problem
“Small and micro employers conduct checks before an employee starts work less frequently than medium or large employers (80% vs 93%), suggesting small and micro employers do not have a great understanding of what is required of follow-up checks. 62% of micro and small employers incorrectly believed a driving licence was a valid right to work document, compared to 42% of medium and large sponsors.”
— GOV.UK employer awareness survey
UK Right to Work compliance is a maze: three different checking methods (manual, Home Office online via share code, IDSP-assisted), multiple document categories (List A permanent, List B time-limited, List C interim), mandatory follow-up checks before visa expiry, 2-year post-employment document retention, and — as of February 2024 — penalties of £45,000 for a first breach rising to £60,000 per illegal worker for subsequent breaches. January 2026’s scrapping of mandatory Digital ID, and the upcoming Section 48 Border Security Act expansion of RTW obligations to agency and zero-hours work models, have only deepened the confusion.
5.64 million UK businesses employ 0-49 people (99.18% of the business population). 47% of micro/small employers incorrectly accept bank statements or utility bills. 79% still rely primarily on manual methods, because the digital IDSP market is priced for mid-market (£4-£8 per check minimum, 100-check minimum purchases at TrustID).
Follow-up expiry tracking, secure evidence retention, and the correct ‘statutory excuse’ paperwork are the three highest-risk failure modes — and they are exactly the three things a standard HRIS doesn’t do well. The incumbents all optimise for the 50-500+ headcount market — per-check pricing, sales-led onboarding, enterprise annual contracts. A 14-person pub manager like Sam has no HR, no solicitor on retainer, and no budget for £600/year Yoti contracts. She’s the invisible 5 million.
Want reports like this every Thursday?
One validated UK business opportunity per week. Free.