Managing DBS Checks Online Without Paperwork

If you have managed Disclosure and Barring Service (DBS) checks by hand, you will know how quickly the administration grows: identity documents to review, applicants to chase, status emails to answer and spreadsheets that are out of date almost as soon as they are saved. For busy HR teams, the problem is not the check itself. It is the fragmented process around it. 

In short: a paperless DBS workflow brings applicant details, identity evidence, communications, progress updates, and administrative records into one controlled process. It can reduce manual chasing and re-keying, but it does not remove an employer's or Registered Body's responsibilities to request the correct level of check, verify identity correctly, identify a lawful basis for processing criminal offence data and handle certificate information securely. 

This article focuses on DBS checks used for suitability decisions in England and Wales. Different disclosure bodies apply in Scotland and Northern Ireland. It provides general information rather than legal advice or a role-eligibility decision. 

Why DBS Checks Become Paperwork-Heavy 

Manual checking creates work at every hand-off. An applicant completes a form, someone verifies identity documents, another person submits the check, and the hiring team asks for updates. If those steps sit across email, paper files and spreadsheets, the team must reconstruct the current position each time a candidate or manager asks a question. 

Moving only the application form online does not solve the underlying problem. The workflow remains fragmented if candidate consent, identity evidence, reminders, DBS status and the final recruitment decision are recorded in separate places. That fragmentation increases re-keying, makes ownership less clear and leaves gaps in the evidence trail. 

For regulated organisations, those gaps matter. DBS information counts as criminal offence data, so access, retention and use all need proper control. A process that depends on individual memory is difficult to manage consistently when volumes rise or team members change. 

How an Online DBS Workflow Works 

A well-designed digital workflow connects the stages around the DBS application while keeping the organisation's responsibilities visible. A typical process is: 

1. Confirm that the role is eligible for the requested level of DBS check. Basic checks can be used for any purpose, while Standard, Enhanced and Enhanced with Barred Lists checks have specific eligibility rules. 

2. Invite the applicant through a secure portal and explain what information is required, why the check is being requested and how their data will be used. 

3. Collect the application details and complete identity verification using the route permitted for that check. 

4. Submit the application through the appropriate Responsible Organisation or Registered Body, such as VettingGateway.

5. Track progress centrally and use reminders or task lists to follow up on incomplete applicant actions. 

6. Record the outcome and recruitment decision while handling certificate information in line with the organisation's policy and DBS requirements. 

   
   

Under current DBS digital identity verification guidance, Registered Bodies and Responsible Organisations can use an appropriately certified digital verification service for Basic, Standard, Enhanced and Enhanced with Barred Lists applications. They remain responsible for using the correct service, conducting due diligence and meeting the other DBS identity requirements. 

Digital identity verification can therefore remove an office visit in suitable cases, but it should not be presented as automatic or universal. Some applicants may need an alternative document-based route, and digital verification does not replace a separate Right to Work check. 

How VettingGateway Supports Paperless DBS Checks 

VettingGateway brings Criminal Record Checks, applicant communications, references, and other pre-employment screening tasks into one platform. Organisations can choose Basic, Standard or Enhanced DBS checks, subject to the relevant eligibility and registration requirements, and add checks individually or within a screening bundle. 

Applicants work through a digital portal, while HR teams can use workflows, prioritised task lists, and auto-chasing to manage outstanding actions. This creates one view of the candidate's progress instead of a chain of disconnected emails and spreadsheets. 

Wilson James reported that, after implementing VettingGateway in 2022, features including candidate and referee auto-chasing and prioritised task lists helped make its background-checking process quicker, more streamlined, and more resilient. 

Candidate Consent and Lawful Processing 

The applicant needs to understand the check and participate in the process. For example, an employer using a Responsible Organisation to obtain a Basic DBS check must have the applicant's consent, and VettingGateway requires consent before a Criminal Record Check is requested. A digital workflow can capture that acknowledgement clearly and show when it was provided. 

However, applicant consent should not be described as automatically satisfying UK data protection law. The Information Commissioner's Office guidance explains

that organisations processing criminal offence data must identify an Article 6 lawful basis and either official authority or a relevant Schedule 1 condition under the Data Protection Act 2018. Depending on the conditions used, an appropriate policy document may also be required. 

The practical lesson is simple: capture the applicant's agreement to the check, provide clear privacy information and document the organisation's separate lawful basis and condition for processing. The workflow should support the policy; it should not be treated as a substitute for it. 

Tracking DBS Status Without Chasing Emails 

A central dashboard gives HR teams a current view of open checks and applicant actions. Depending on the service, that may include whether an invitation has been opened, applicant information is outstanding, identity verification is complete, the application has been submitted or a result is available. 

This visibility helps the team focus on exceptions rather than asking every candidate for an update. Automated reminders can reduce delays caused by incomplete applicant steps, while alerts and task lists make ownership clear when someone in the HR team needs to act. 

It is important to separate workflow speed from DBS processing time. No screening platform can guarantee how quickly DBS will complete a particular check. The level of check and the circumstances of the application affect turnaround time.

Digital workflows remove avoidable delays before submission and during candidate follow-up. 

Audit Trails, Retention, and Evidence 

When an internal reviewer, regulator or safeguarding lead asks what happened, the organisation should be able to show the relevant process events: what was requested, who completed each action, which identity route was used, when the application moved forward and what decision was recorded.

A suitable digital platform can create a time-stamped administrative record and keep supporting evidence together. That makes information easier to retrieve than a mixture of inboxes, paper notes, and local spreadsheets. An audit trail supports oversight, but it does not prove compliance by itself; the underlying check must still be eligible, accurate and handled under the correct policy. 

The DBS guidance on handling certificate information requires Registered Bodies to have a written policy covering secure storage, handling, use, retention, and disposal. Its sample policy says certificate information should not be kept for longer than necessary and that organisations should not ordinarily retain a photocopy or image of the certificate. A limited administrative record may be retained, including the certificate issue date, subject, type, position, reference number and recruitment decision. 

A digital background-checking policy should therefore define access permissions, retention periods, and deletion rules. Storing more information is different from maintaining better evidence. 

DBS Checks Within Wider Pre-Employment Screening 

A DBS check answers a specific criminal-record question. It does not confirm identity for every employment purpose, prove a person's Right to Work or replace references and other role-specific checks. Most regulated hiring processes therefore combine it with other screening activities. 

When criminal record checks run alongside Digital Right to Work checks, references, Identity Checks or sanctions screening within one platform, the HR team can manage one candidate journey and one set of outstanding tasks. The required checks still need to be selected according to the role; centralisation does not make every check appropriate for every candidate. 

This distinction is especially important for sector-specific screening. BS 7858 is a screening standard, BPSS is the Baseline Personnel Security Standard rather than a security clearance, and Enhanced DBS checks are available only for eligible positions. A workflow can help apply the correct screening bundle consistently, but the organisation remains responsible for determining what the role requires. 

Moving From Manual to Digital DBS Management 

The strongest implementation starts with the process, not the software. Before moving checks into a platform, map the current hand-offs, confirm who owns eligibility decisions and identify what evidence genuinely needs to be retained. Then configure the workflow around those requirements. 

A practical migration checklist is: 

• List each role and the checks it may require, with an approved route for deciding eligibility. 

• Document the lawful basis, criminal-offence-data condition, privacy information and certificate-handling policy. 

• Define who can invite applicants, review evidence, submit checks and record decisions. 

• Create candidate communications that explain the process in plain language. 

• Set reminders and escalation rules for genuinely outstanding actions. 

• Test the workflow with a small group before moving all live checks into it. 

  
  

For HR teams currently relying on printed forms, shared inboxes or spreadsheets, this change can remove avoidable administration and create a clearer candidate experience. The goal is not simply to digitise a form. It is to make responsibility, status, and evidence visible from the start of the check to the recruitment decision. 

Ready to replace manual tracking with one controlled screening workflow? 

Speak to the VettingGateway team about your DBS and wider pre-employment screening requirements. 

Frequently Asked Questions 

Can candidates complete a DBS application entirely online? 

The application can be completed online, and identity verification may also be digital where the Registered Body or Responsible Organisation uses a service certified against the current trust framework and DBS supplementary code. An alternative document-based route may still be needed in some cases. The DBS certificate and any requirement for the employer to see it remain separate from the online application workflow. 

Does digital consent make a DBS check compliant? 

No. Electronic capture can provide evidence that the applicant agreed to the check, but compliance also depends on role eligibility, correct identity verification, fair and transparent processing, an Article 6 lawful basis and the appropriate Article 10 or Data Protection Act 2018 condition for criminal offence data. 

How does DBS check software improve tracking? 

DBS check software can show open applications, outstanding applicant actions and available results in one dashboard. Reminders and task lists help HR teams focus on exceptions instead of chasing every candidate manually. The exact statuses and notifications depend on the provider. 

What should a DBS audit trail record? 

A useful audit trail records relevant events such as the invitation, applicant acknowledgement, identity-checking route, submission, status changes and internal recruitment decision. It should be time-stamped, access-controlled and aligned with the organisation's retention policy. 

What is the DBS Update Service? 

The DBS Update Service lets an employer carry out an online status check on a subscribed Standard or Enhanced certificate. It is not available for Basic checks. The employer must see the original certificate in person, confirm identity, obtain the individual's consent and be legally entitled to the same level and workforce information. Do not assume a screening platform integrates with the service; confirm the provider's functionality and the organisation's process. 

How long does an online DBS check take? 

There is no single guaranteed turnaround time. Timing depends on the level of check and the application. A digital workflow can reduce delays caused by incomplete forms, manual data entry and missed follow-ups, but it cannot control the time DBS, or other authorities need to process the check. 

Can one platform manage Basic, Standard and Enhanced DBS checks? 

Yes. VettingGateway supports Basic, Standard and Enhanced checks on the same platform. Standard and Enhanced checks remain subject to role eligibility, and the organisation must complete the relevant DBS registration before requesting them through VettingGateway. 

👉 Find out more about VettingGateway

👉 Download our Employer guide