Compliance & Industry Standards

Last updated: 14 May 2026

GuardFlow is built specifically for the UK private security industry and is designed to help operators meet their statutory obligations.

SIA (Security Industry Authority)

The platform records SIA licence numbers, expiry dates and licence types for every operative. Approved Contractor Scheme (ACS) record-keeping is supported. The customer remains responsible for verifying every licence on the official SIA Register.

Right to Work

Right-to-work documents (passport, BRP, share code) can be uploaded and verified per Home Office guidance. Records are retained for the duration of employment plus 2 years.

Working Time Regulations 1998

GuardFlow records scheduled and actual hours for every operative, with clock-in/clock-out evidence, so the data needed to evidence Working Time compliance is captured and exportable. GuardFlow does not currently calculate the 48-hour weekly average, track signed opt-outs, or block a shift that would breach the reference period — monitoring and enforcement remain the operator's responsibility.

HMRC & payroll

Timesheet exports include all data required for PAYE / RTI and CIS reporting. Records are retained for 6 years per HMRC requirements.

BS 7858 (screening)

Vetting documents — including proof of address, identity documents, DBS certificates and training records — can be uploaded and stored against each operative's profile with expiry tracking. GuardFlow does not currently provide a structured BS 7858 screening workflow (5-year employment-history reconciliation, gap analysis, automated reference chasing). Screening is carried out by the operator or their screening provider; GuardFlow is the record store for the resulting evidence.

Information security

• TLS 1.2+ in transit, AES-256 at rest.
• Row-level security enforced at the database layer.
• Audit log of all admin actions.
• Daily encrypted backups taken by our database host. You can additionally export your own data at any time from the Export Centre.

Reporting concerns

Compliance concerns can be raised at support@guardflowapp.com. Whistle-blowing disclosures are handled confidentially.