Galico All articles
Compliance & Governance

Who Pays When the Umbrella Folds? Records and Questions for UK Firms Using Contingent Labour

Galico
Who Pays When the Umbrella Folds? Records and Questions for UK Firms Using Contingent Labour

Photo: UK compliance manager reviewing payroll chain audit documents with agency contracts on desk, via upload.wikimedia.org

Contingent labour has a habit of arriving through a door marked convenience. A worker is introduced by an agency, engaged through an umbrella company, invoiced monthly and paid without ever appearing on the payroll. The arrangement is lawful and, for many UK businesses, entirely appropriate. What has changed is the expectation that the end client can explain it.

HMRC's attention to umbrella company arrangements has sharpened considerably, and the direction of travel is clear: liability is being pushed up the chain towards the parties who can most easily exercise control. Alongside that, the government's announced extension of managed service company rules to umbrella companies — with effect from April 2026 — makes the payroll chain a governance question rather than a procurement detail. A business that cannot produce evidence of due diligence when asked will find the conversation difficult to steer.

Start With What You Are Actually Buying

An umbrella company employs the worker and invoices for their services, typically charging a margin and deducting PAYE, National Insurance and pension contributions at source. The end client pays a rate. Between those two points sit assumptions about employment status, expenses, holiday pay and tax treatment that the end client rarely sees and frequently inherits.

Governance means narrowing that gap. The first step is a register: which engagements are filled through umbrella companies, which agency introduced them, which umbrella is used, and when the arrangement began. Without that list, nothing else can be audited.

The Records to Keep

An inspection is an evidence exercise. The following should be held centrally, not scattered across individual hiring managers' inboxes.

PAYE records must generally be retained for three years after the end of the tax year, and company records for six. Where an arrangement is novel or the umbrella is new to the supply chain, a longer internal retention period costs almost nothing.

Ten Questions for Any Umbrella Provider

  1. What is the employer's PAYE reference, and can you evidence registration?
  2. Which legal entity employs the worker, and where is it incorporated?
  3. How is holiday pay calculated and paid — accumulated and paid on leave, or rolled into the rate?
  4. Which expenses are processed, and on what basis is the temporary workplace identified?
  5. Is the worker ever advanced funds, and are those advances net of tax?
  6. Does the worker receive a compliant key information document before each engagement?
  7. How is the assignment rate split between pay, margin, employer costs and any residual?
  8. Who holds liability for underpaid PAYE, and what indemnity is offered?
  9. Will you confirm compliance on request, in writing, annually?
  10. What happens to the worker's pay if the umbrella ceases trading mid-assignment?

Five Red Flags

Beyond the Umbrella

The compliance picture does not stop at the payroll arrangement. Where the worker is supplied through an agency, the Agency Worker Regulations still apply, including the right to equal treatment on pay and basic working conditions after twelve weeks in the same role. An umbrella structure does not displace that obligation, and treating it as though it might is one of the more common errors in contingent labour governance.

It is also worth confirming the position on facilitating tax evasion under the Criminal Finances Act 2017. A business with reasonable prevention procedures in place — documented, owned, reviewed — is in a materially better position than one that simply relied on a contractual assurance.

A Practical Sequence

Map the chain this month. Ask the ten questions of the two umbrella providers used most heavily. Sample five payslips against the rates invoiced. Diarise a review for the start of the next quarter, and put a name against it.

None of that requires new systems. It requires the decision that the chain is the company's responsibility even when the employment is not.

The Galico View

Contingent labour is not an outsourcing of accountability. The end client that can produce a register, a due diligence file and a dated review is not merely better prepared for a compliance visit; it is able to negotiate rates and terms from a position of knowledge — which is the point at which governance starts paying for itself.

All Articles

Related Articles

The Ninety-Day Proof: Buying Small Automation Without the Annual Lock-In

The Ninety-Day Proof: Buying Small Automation Without the Annual Lock-In

Before the Register Says No: A 2026 Director’s Guide to Companies House Identity Verification

Before the Register Says No: A 2026 Director’s Guide to Companies House Identity Verification

When One Invoice Hides Two Supplies: VAT Apportionment for UK SMEs in 2026

When One Invoice Hides Two Supplies: VAT Apportionment for UK SMEs in 2026