Qualification verification process: check the right evidence for the role
To verify a qualification, first identify the credential the job actually requires, then check its holder, issuer, current status, scope and any restrictions through an appropriate authoritative route. A certificate image is a starting point, not always the endpoint. The person may hold a real award that is irrelevant to this task, a registration may have lapsed, or a competent worker may need site-specific authorisation in addition to a qualification.
The Health and Safety Executive defines competence as training, skills, experience and knowledge, plus the ability to apply them safely. Its competence-assurance guidance says training is important but insufficient on its own. Use this guide to build a defensible verification workflow for employees and contractors; it does not give one universal list of licences for every UK occupation.
Start with the work, not the certificate
Write down the task, equipment, sector, site, person and legal or contractual requirement. Ask whether you need to establish: an academic or vocational award; a current professional registration; a licence or authorisation; a short course; a card issued by an industry scheme; or demonstrated practical competence. These are different forms of evidence. A training certificate may show attendance, while a statutory register shows present authority to practise. A client may ask for a card that is not itself a legal licence.
Use the GOV.UK regulated-professions service to locate a regulator where a profession is legally regulated. Then use that regulator's own current register or verification route. For a trade skill, check the relevant scheme or issuer's process and whether the award covers the particular equipment or activity. Do not infer that a broad “health and safety” certificate permits all high-risk work.
If the work is in England but the certificate was earned elsewhere, determine whether the UK regulator, licensing body or contracting party recognises it for this role. A genuine foreign diploma does not automatically confer UK professional registration. Conversely, a person may be permitted through a formal recognition route; check the actual regulator rather than applying a blanket rejection.
Six verification steps
1. Define the required evidence. Record the source: statute, regulator rule, recognised standard, contract, risk assessment or internal policy. Mark which is mandatory and which is buyer preference. This prevents an administrator from rejecting a capable person for lacking an irrelevant certificate or accepting a generic badge when law requires a specific registration.
2. Match the person. Check that the name, identifier and, where relevant, date of birth or registration number belong to the worker who will do the job. Resolve name changes fairly and privately. Do not expose identity documents to everyone who can see the training matrix.
3. Verify the issuer and record. Where a public register or direct validation service exists, use it. Otherwise contact the awarding body or training provider through an independently found official route, with appropriate consent and privacy notice. Avoid relying solely on a QR code printed on an untrusted PDF; verify the destination is the real issuer.
4. Check current scope. Confirm level, specialism, equipment category, expiry or renewal date if there is one, suspension, conditions and geographic validity. Do not assume every qualification expires. Professional registration can be current while a separate employer authorisation is absent; a card can have a date while the worker's practical ability needs reassessment.
5. Assess application to this task. Ask the supervisor or technical reviewer whether the person's experience, recent practice, site briefing and supervision fit the work. HSE's competence definition is task and place specific. A new worker with a valid award may need close supervision before working alone.
6. Record the decision and recheck trigger. Save what was checked, when, by whom, through which source, the result, any restriction, and when it should be reviewed. Separate the evidence date from a policy review date. Provide a route to correct an error or contest a disputed result.
Copyable verification register
| Person and role | Required credential/source | Evidence/registration number | Issuer or register checked | Check date and checker | Scope/restrictions | Task-competence decision | Next review trigger | Exception/action |
|---|---|---|---|---|---|---|---|---|
| Approved / Supervised / Hold |
Keep sensitive documents in a controlled evidence location and link from the register. A general dashboard can show “checked” and the review date without publishing full identity documents or protected employment information. The ICO's recruitment guidance covers candidate verification and data protection; it is currently marked under review following the Data (Use and Access) Act, so recheck its current status when publishing.
What to do when the evidence is unclear
If a qualification cannot be verified, mark verification pending, identify the source to contact and do not assign work that depends on that credential until the required assurance exists. A delay in a register response is not proof of fraud. Give the person a chance to explain a misspelling, old surname or changed scheme number.
If a register shows a restriction or a card's scope does not match the work, have a competent decision maker assess the precise consequence. One worker may still be able to do a narrower task under supervision; another may have to stop all regulated work until authorisation is restored. Do not use a single red/green indicator as a legal judgement. Record who made the decision, supporting evidence and whether the worker was told.
For professional healthcare roles, registration should be checked with the appropriate regulator. The GOV.UK regulated-professions guidance helps identify the regulator, while individual registers govern current status. A qualification certificate from training years ago does not itself prove present registration. The precise employer duty and checking schedule depend on the profession and sector.
For contractor teams, verify the people actually attending. A business may have a qualified director, while a different operative performs the work. Ask who supervises, whether subcontractors are included, and how substitutions are approved. HSE's Using contractors guidance says the depth of competence enquiry should reflect job risk and complexity. A low-hazard supplier should not face the same document burden as a specialist carrying out hazardous construction work, but the assessor still needs a reasonable basis for the decision.
Set review dates without inventing expiry
Some cards, licences and registrations have a stated renewal or expiry date; others do not. Track the date printed or shown in the official register as a factual field. A separate next verification review date can reflect an employer policy, contract or risk-based schedule. Recheck sooner after a role change, scope change, incident, regulatory notice or doubt about a credential.
Do not label every course certificate “expired” at an annual anniversary if the issuer has no expiry rule. Equally, do not ignore perishable competence: a worker who last used a high-risk skill many years ago may need practical assessment or supervised practice even if an old award remains genuine. This is the difference between verifying a document and assuring capability.
Example: choosing a contractor for a lifting task
A facilities manager receives an operator card and a company training sheet for a contractor who will use lifting equipment. The manager checks the card's issuing scheme through its official route and confirms the category matches the equipment. The named operator's identity matches; the company has relevant experience; and the lift supervisor reviews the plan and site constraints. A second operative arrives as a substitute. The previous check is not silently transferred to that person: identity, category and supervision are reassessed before the substitution is accepted. The record shows both the credential verification and the job-specific competence decision.
Common mistakes
- Treating upload as verification. A file can be genuine, altered, expired, outside scope or belong to someone else.
- Treating a badge as all-purpose permission. Check the exact role, activity, equipment and jurisdiction.
- Checking only the company. A current business accreditation does not prove the named operative's authority.
- Failing to preserve source and date. A future reviewer needs to know which issuer/register was checked and when.
- Confusing a local review reminder with credential expiry. Label the two dates separately.
- Skipping practical capability. Training or an award may need recent experience, supervision and site instruction to be effective.
Where Complys fits
The intended money-page relationship is to verified training matrix software, subject to exact canonical host and live route. A buyer should ask Complys to show whether the current product can hold a worker's credential metadata, attach evidence, flag a stated renewal or policy review date and restrict sensitive records. Do not claim it directly queries every awarding body or regulator, authenticates documents, or decides legal competence without proof of those implementations. Link to the employee-screening checklist for the broader hiring workflow and to induction record keeping for local instruction, while this page remains the owner of qualification verification.
Source and writer-side QA record
| Material claim | Primary source | Boundary |
|---|---|---|
| Competence combines training, skills, experience, knowledge and safe application | HSE competence | Relevant to task and workplace |
| Training alone does not establish competence | HSE training and competence | Practice and supervision may matter |
| Some professions have statutory regulators/registers | GOV.UK regulated professions | Exact regulator/role must be checked |
| Contractor competence enquiries proportionate to work | HSE Using contractors | Risk and complexity specific |
| Candidate verification uses personal data | ICO recruitment guidance | ICO guidance under review; current data law and notice apply |
Intent/cannibalisation: Specific issuer/register-to-task verification process, distinct from broad recruitment checklist and training matrix. Public search on 6 October 2026 found no exact Complys owner at proposed route; repository/canonical check remains open. Product truth: no automated issuer or regulator validation claim. Internal links: exact money and adjacent routes require verification. Writer-side disposition: READY.