Last updated: 11 September 2026

BS 7858 vetting requirements: the complete UK compliance guide

BS 7858 vetting requirements set out how UK employers screen individuals working in secure environments, including a minimum five-year employment, education and activity history check (Security Watchdog/Team Matrix, 2026). Compliance is mandatory for SIA Approved Contractor Scheme members and often required by insurers and clients.

Key Takeaways

• BS 7858 requires verification of a minimum five-year employment, education and activity history for individuals working in secure environments (Security Watchdog/Team Matrix, 2026).
• Any gap in that five-year history exceeding 31 days must be accounted for and supported with evidence, not simply left blank on the file (Security Watchdog/Team Matrix, 2026).
• Screening records must be retained for seven years after an individual leaves employment, including proof of identity, character references and career history confirmation (BSI BS 7858:2012, 2012).
• The current edition of BS 7858 took effect on 1 May 2013, replacing BS 7858:2006+A2:2009, and has since been revised again in 2019 (BSI BS 7858:2012, 2012).
• The SIA requires Approved Contractor Scheme members to demonstrate compliance with BS 7858, making it a de facto condition of trading for most guarding contractors (BSI Knowledge, 2019).

What is BS 7858?

BS 7858 is a British Standard published by the British Standards Institution (BSI) that sets out a code of practice for the security screening of individuals working in a secure environment. It applies to security officers, keyholders, cash-in-transit staff, and anyone else whose role gives them access to sensitive sites, cash, data or vulnerable people. The standard defines what must be checked, how far back the check must reach, and what documentation must exist to prove it happened.

BSI states that the objective of screening is "to obtain sufficient information to enable organisations to make an informed decision on employing an individual in a secure environment" — a purpose-first framing that matters, because BS 7858 is not primarily a criminal records check. It is a whole-history verification exercise: identity, addresses, employment, education, financial probity where relevant, and character references, stitched together into a continuous, evidenced timeline.

The current text is BS 7858:2019, which superseded BS 7858:2012, which itself came into effect on 1 May 2013 and replaced BS 7858:2006+A2:2009 (BSI BS 7858:2012, 2012). Each revision has tightened documentation and evidence standards rather than changed the core purpose.

Is BS 7858 vetting a legal requirement in the UK?

BS 7858 is not itself a statute — no Act of Parliament requires it by name — but it is a practical requirement for almost every licensed security business through the Security Industry Authority (SIA) Approved Contractor Scheme (ACS). Organisations wanting to join the ACS must demonstrate their compliance to relevant British Standards, including BS 7858 (BSI Knowledge, 2019).

The Private Security Industry Act 2001 established the SIA and the licensing regime for individual operatives, but BS 7858 sits alongside licensing as the vetting standard that ACS-approved contractors must evidence. Government guidance confirms this directly: GOV.UK's FOI response on BS7858 states BS7858 is a requirement for Approved Contractor Scheme members, with compliance checked against the ACS Self-Assessment Workbook.

Beyond the SIA, insurers frequently make BS 7858 a policy condition. Some insurers require BS 7858 as part of policy conditions and may impose additional requirements, such as a longer screening period than the standard five years (BSI Knowledge/Intertek Inform, 2019). Many corporate clients — banks, data centre operators, shopping centres — also write BS 7858 into their contracts as a minimum bar for any officer on site, regardless of whether the contractor holds ACS status.

When BS 7858 becomes contractually unavoidable

Even where BS 7858 isn't legally mandated, it becomes commercially unavoidable in three common situations:

• Bidding for public sector or blue-chip contracts that specify BS 7858 in the tender documents
• Insuring a guarding, keyholding or cash-handling operation where the underwriter conditions cover on it
• Applying for or renewing SIA Approved Contractor Scheme status

How far back does BS 7858 employment history checking go?

BS 7858 requires a minimum five-year check of employment, education and activity history for anyone working in a secure environment (Security Watchdog/Team Matrix, 2026). This period covers every job, course of study, period of unemployment or self-employment, and any other significant activity — each one must be verifiable and, ideally, corroborated by a third party such as a former employer or education provider.

The five-year window is a floor, not a ceiling. Some sectors and insurers extend it — financial services vetting, aviation security and certain government contracts commonly ask for seven or ten years. A candidate who has lived or worked overseas during the reference period adds complexity, since employment verification and criminal record checks in other jurisdictions rarely run to UK standards or turnaround times, and vetting teams should plan for this at the offer stage rather than discovering it during onboarding.

How employment gaps are handled

Gaps of more than 31 days within the required screening history must be accounted for and supported with evidence (Security Watchdog/Team Matrix, 2026). A candidate cannot simply state "not working" for a six-month period; the file needs a plausible, evidenced explanation — parental leave, travel, illness, redundancy followed by jobseeking — supported by whatever documentation is reasonably available.

This is where paper-based vetting files fall down fastest. A gap flagged on day one of screening but not resolved before deployment is exactly the kind of incomplete file that later becomes an audit failure, an insurer dispute, or — worse — the reason a contract is terminated after a client site visit. We've seen the alternative work at scale: across our own managed sites, we've moved 4,900+ patrols off paper logs and onto a record that can be checked against production data, which is the same discipline a screening file needs — nothing left to memory, nothing missing when someone asks for proof.

What checks make up a BS 7858 screening file?

A BS 7858 screening file is the complete, evidenced record built to satisfy the standard's identity, history and character requirements before someone is deployed to a secure site. It typically includes proof of identity and address, verified employment history spanning the reference period, education verification, credit and financial checks where the role justifies them, unspent conviction declarations, and character references. Each element must be documented, dated and retained — the file is only as strong as its weakest verified element, which is why incomplete gaps or unconfirmed references are treated as compliance risks rather than paperwork.

The core elements

BS 7858 vs BPSS vs DBS: what's the difference?

Business professionals moving between sectors often confuse BS 7858 with the Baseline Personnel Security Standard (BPSS) or a standalone DBS (Disclosure and Barring Service) check. They overlap but are not interchangeable.

A DBS check is a single component that can sit inside a BS 7858 file — it confirms criminal record status but says nothing about employment continuity, education, or address history. BPSS is the government's own baseline and is narrower in scope than BS 7858, which is why government security contracts sometimes require both.

How long is BS 7858 screening valid, and how long must records be kept?

BS 7858 screening does not carry a fixed "expiry date" written into the standard itself, but records must be maintained for seven years after an individual's employment ends, covering proof of identity, character references and career history confirmation (BSI BS 7858:2012, 2012). In practice, most employers treat the original screening as valid for the duration of continuous employment and re-verify or refresh checks — particularly criminal record disclosures — at intervals set by client contract or internal policy, commonly every one to three years.

This seven-year retention obligation has real operational weight. If a former officer is later implicated in an incident, or a client audits a contractor's ACS compliance, the employer must be able to produce a complete, dated file — not a recollection of what was checked. Retention also needs to comply with UK GDPR and the Data Protection Act 2018, which the Information Commissioner's Office (ICO) regulates: personal data must be held securely, accessed only by those who need it, and disposed of once the seven-year period has genuinely lapsed.

"A lapsed licence or an incomplete screening file walking onto a client site is how contracts end. Track vetting to a clearance date and hold people off the roster automatically until every check is clear — deployment discipline shouldn't depend on someone remembering." — Mo Hassan, Founder, Pulse

This is precisely the gap that trips up growing security and FM contractors: vetting sits in one folder, licensing sits in another, and nobody owns the join between them. Pulse's compliance runway puts SIA licensing, BS 7858, DBS, right to work, training records and statutory building compliance on a single expiries timeline, so an officer with an incomplete or lapsed check simply cannot be rostered — not because someone remembered to check, but because the system won't allow it.

In-house vetting vs outsourcing to a screening provider

Employers running BS 7858 screening face a genuine choice: build the capability in-house or outsource to a specialist third-party screening provider. Neither option is automatically superior — it depends on volume, risk appetite, and how tightly the business wants to control the process.

In-house vetting gives full control over pace and candidate relationships, and can be cheaper at low volumes where an HR or compliance team already has capacity. The risk is consistency: a small in-house team screening occasionally is more likely to miss a 31-day gap or accept a weak reference than a specialist who does it daily.

Outsourced screening brings process discipline and audit-ready documentation as standard, and is often the pragmatic choice for contractors screening dozens or hundreds of candidates a year. GOV.UK's own guidance on outsourced pre-employment screening makes clear that outsourcing does not remove the employer's responsibility — the ACS-holding company remains accountable for the quality and completeness of vetting carried out on its behalf, and must be able to audit its provider.

Whichever route is chosen, the outcome that matters for compliance and for client confidence is the same: a complete, dated, retrievable file for every deployed individual, and a clear record of who checked what and when.

Your BS 7858 vetting requirements checklist

• Verify a minimum five-year employment, education and activity history for every candidate before deployment
• Investigate and document any gap in that history exceeding 31 days, supported by evidence
• Confirm right to work under Home Office rules before the first shift, not after
• Obtain and record character references from at least two independent sources
• Run a Basic DBS check (or Enhanced, where the role and client require it) and log the result against the individual's file
• Retain the complete screening file for seven years after employment ends, in line with BS 7858 record-keeping requirements
• Audit any outsourced screening provider periodically to confirm files meet BS 7858 and ACS standards
• Track licence and vetting expiry dates on one system so nobody is rostered with an incomplete or lapsed check

FAQ

What is BS 7858 and who needs to comply with it?

BS 7858 is a British Standard code of practice for screening individuals working in secure environments, covering security guarding, keyholding and cash-in-transit roles. Any organisation seeking or holding SIA Approved Contractor Scheme status must demonstrate compliance with it, and many client contracts and insurers require it independently of ACS status.

Is BS 7858 vetting a legal requirement?

BS 7858 isn't named in statute, but it functions as a mandatory requirement for SIA Approved Contractor Scheme members, and it's frequently a condition of insurance cover and client contracts. For most security businesses operating at any scale, treating it as anything less than mandatory is a commercial and insurance risk.

How far back does BS 7858 employment history checking go?

BS 7858 requires a minimum five-year check of employment, education and activity history. Some insurers and high-security sectors extend this beyond five years as an additional policy or contract condition.

How are employment gaps handled under BS 7858?

Any gap exceeding 31 days within the screening period must be identified, questioned and supported with evidence rather than left unexplained. Unexplained gaps are one of the most common reasons a screening file is rejected during audit.

What is the difference between BS 7858 and BPSS?

BS 7858 is the security industry's own screening code of practice with a minimum five-year history check, while the Baseline Personnel Security Standard (BPSS) is the UK government's own minimum pre-employment check, typically covering three years. Some government security contracts require both to be satisfied.

How long must BS 7858 screening records be retained?

Screening records — including proof of identity, character references and career history confirmation — must be retained for seven years after the individual's employment ends. Retention must also comply with UK GDPR and Data Protection Act 2018 requirements on secure storage and disposal.

Can BS 7858 screening be outsourced to a third-party provider?

Yes, and many contractors do outsource screening to specialist providers to gain consistency and audit-ready documentation. Outsourcing does not remove the employer's own responsibility, however — GOV.UK guidance confirms the ACS-holding company remains accountable and must be able to audit its screening provider's work.

Vetting compliance without the spreadsheet chase

The problem most guarding and FM contractors describe isn't understanding BS 7858 — it's keeping five-year screening files, DBS renewals, SIA licence expiries and right-to-work checks in sync across a workforce that turns over constantly. A vetting file that's 90% complete is functionally the same as one that's incomplete when a client asks for proof, or when an auditor asks who was on site last Tuesday.

Pulse's compliance runway puts BS 7858, SIA licensing, DBS, right to work, training and statutory building compliance on one expiries timeline, with automatic roster holds for anyone whose file isn't clear — the same discipline Pulse applies to its own operation, Priority First, the founding team's own London security and FM business that Pulse was built inside before being offered to other operators. It's the same discipline that let us induct 11 officers onto one system rather than leaving each of them to carry site knowledge, licence status and history in their own heads.

If BS 7858 vetting and licence tracking currently live across three spreadsheets and one filing cabinet, get in touch with Pulse Operations for a walkthrough of the compliance runway, or see the published pricing at /pricing — every plan includes free admin seats, so the people who chase compliance don't cost extra to add.

Related Reading

• Asbestos Register Requirements UK: 2026 Compliance Guide
• Body Worn Camera Rules for UK Security Firms 2026
• Guardhouse Alternative 2026: Best UK Options Compared