DBS Check Software UK 2026: A Practical Guide

If you hire in the UK for roles that involve children, vulnerable adults, finance or regulated professions, a criminal record check from the Disclosure and Barring Service (DBS) is usually part of pre-employment screening. The check itself is run by the DBS and your chosen Registered Body. The job of your hiring software is different but just as important: deciding which check a role needs, requesting the candidate's evidence, recording the certificate details, and proving to an auditor that you did all of this correctly and stored the data lawfully.

This guide explains the DBS landscape as it stands in 2026, then shows where an applicant tracking system (ATS) like Treegarden fits. To be clear up front: Treegarden is not a DBS umbrella body and does not issue certificates. It is the system of record that captures right-to-work and DBS evidence inside your pipeline, flags the correct level per role, and keeps a defensible audit trail. Where we mention Treegarden pricing, our public price page in GBP starts at £235 per month with no setup fee and no free plan; a demo is the way to see it.

The four DBS check levels in 2026

The DBS issues four levels of check. The level a role qualifies for is set by law, not by employer preference, so getting this right is the first compliance decision in any regulated hire.

Basic check (£21.50). Shows unspent convictions and conditional cautions only. Anyone can apply for a Basic check on themselves, and an employer can request one for any role. Per the current DBS fee schedule effective December 2024, a Basic check costs £21.50.

Standard check (£21.50). Shows both spent and unspent convictions and cautions held on the Police National Computer (subject to filtering rules). Standard checks are for eligible roles such as accountancy, legal and certain financial positions. An individual cannot apply for a Standard check alone; there must be a recruiting organisation that needs it, and the application goes through a Registered Body. The fee is £21.50.

Enhanced check (£49.50). Everything a Standard check shows, plus any additional information held by local police that a chief officer considers relevant to the role. Enhanced checks apply to roles working closely with children or vulnerable adults. The fee is £49.50.

Enhanced with Barred List(s) (£49.50). An Enhanced check plus a check against the Children's Barred List, the Adults' Barred List, or both. This level is reserved for roles in regulated activity with children or adults. The Barred List check carries no extra fee on top of the £49.50 Enhanced cost. Standard, Enhanced and Enhanced with Barred List checks are free of charge for volunteers.

Applying for a level a role is not entitled to is a criminal offence in itself, which is why eligibility logic matters. If you are unsure whether a role qualifies, the DBS publishes detailed eligibility guidance by check type.

Registered Bodies, Responsible Organisations and umbrella bodies

You cannot send a Standard or Enhanced application straight to the DBS as an ordinary employer. The application must be countersigned and submitted by a Registered Body, an organisation entitled by law to request full criminal-history disclosures. Many SMBs do not meet the volume threshold to register directly, so they use an umbrella body: a Registered Body that submits checks on behalf of other organisations and self-employed people who cannot apply directly.

For Basic checks the equivalent route is a Responsible Organisation, which is registered to submit Basic checks only. Commercial DBS providers such as uCheck, GBG and Verifile operate as umbrella or Responsible Organisations, handle identity verification, and return the result. Your ATS does not replace these providers; it records which provider you used, the application reference, and the outcome, so the chain of custody is complete.

The DBS Update Service

The DBS Update Service lets an individual keep a Standard or Enhanced certificate up to date and lets employers carry out a free online status check rather than paying for a brand-new certificate each time. The key facts for 2026:

• It costs £16 per year for the applicant, and is free for volunteers.
• It covers Standard and Enhanced checks only, not Basic.
• The applicant must register within 30 days of the certificate being issued (or have the DBS receive the application within 28 days if still awaiting the result).
• With the worker's permission, an employer who is legally entitled to see the check can perform an online status check at no cost and with no registration.

For a workforce with portable, subscribed certificates, the Update Service can remove most repeat-check fees. The practical catch is that someone has to track who is subscribed, confirm the certificate is for the right workforce and level, and re-run the online status check at your chosen review interval. That tracking is exactly what hiring software should own.

Retention, storage and UK-GDPR duties

DBS certificate information is special-category-adjacent and tightly governed. Under the DBS code of practice on handling certificate information, you must use the disclosure only for the purpose it was requested, store it securely with strictly controlled access, and not keep it longer than necessary. As a rule of thumb the guidance points to destroying certificate information once a recruitment decision is made and any disputes are resolved, usually within six months. Longer retention requires a documented, exceptional justification and consideration of the individual's data-protection and human rights.

In practice you should record the fact and date of the check, the certificate number, the level, and who saw it, rather than keeping a photographed copy of the certificate itself indefinitely. All of this sits inside your wider obligations under UK-GDPR and the Data Protection Act 2018: a lawful basis, a retention schedule, access logging, and the ability to evidence the above to the ICO if asked. Software that captures only an unstructured PDF in a shared drive fails most of these tests.

What DBS-aware hiring software should do

Software does not perform the check, but it should remove the manual error from everything around it. At a minimum, look for:

• Flagging the correct DBS level per role from the job classification, so a recruiter cannot accidentally request Enhanced for a finance role that only qualifies for Standard.
• A pipeline stage that requests, receives and timestamps the candidate's check, with the provider reference (uCheck, GBG, Verifile and similar) recorded against the candidate.
• Structured capture of the certificate number, level and issue date rather than a loose file upload.
• Update Service subscription tracking, with reminders for the periodic online status re-check.
• Retention controls that delete or redact certificate detail at the end of your retention window, with an audit log of who accessed what and when.
• Equivalent handling for the devolved schemes: AccessNI for Northern Ireland roles and Disclosure Scotland for roles in Scotland.

How Treegarden captures DBS evidence in the pipeline

Treegarden treats DBS as one of several pre-employment checks captured inside the candidate pipeline, alongside right-to-work documents. As a candidate moves through the Kanban pipeline, a compliance stage prompts the recruiter to record the required check for that role, attach the evidence the candidate or your DBS provider supplies, and log the certificate number, level and date. Because the field is structured, you can report on which hires have a completed, in-date check and which are outstanding, rather than hunting through email.

Treegarden does not issue DBS certificates and is not an umbrella body. It does not connect to the Police National Computer or sit in the legal chain of disclosure. What it does is give you a defensible system of record: the right level requested, the evidence captured, access logged, and retention enforced under UK-GDPR. For organisations in safeguarding-heavy sectors, that audit trail is the part regulators and inspectors actually ask to see. Treegarden also includes an HR module, so once a checked candidate is hired their record carries into onboarding without re-keying, and bulk CV upload plus the Edera AI matching engine keep the earlier sourcing stages fast.

Common DBS mistakes to design out

• Requesting the wrong level: Enhanced where only Standard is lawful, or vice versa. Eligibility logic in the ATS prevents this.
• Relying on an old paper certificate of unknown provenance instead of an Update Service online status check.
• Not subscribing eligible workers to the Update Service, then paying £21.50 or £49.50 again for a fresh check that an online status check would have covered.
• Keeping scanned certificates indefinitely in a shared drive, breaching the code of practice retention guidance and UK-GDPR.
• Forgetting AccessNI for Northern Ireland-based candidates and Disclosure Scotland for Scotland-based candidates, since the DBS scheme covers England and Wales only.

Standalone DBS tools versus an ATS that captures DBS

You will see two kinds of product in this space. Dedicated screening platforms (uCheck, GBG, Verifile and similar) actually submit the check and return the result; they are the umbrella or Responsible Organisation. General ATS and HR platforms capture and track the evidence inside the wider hiring workflow but do not submit the check themselves. These are complementary, not competing: most regulated employers use a screening provider to run the check and an ATS to record it against the candidate, control access and enforce retention. The mistake is treating a loose folder of PDFs as a compliance system. Whichever screening provider you pick, the capture, audit log and retention belong in your hiring system of record, which is the role Treegarden plays.

Frequently asked questions