KCSIE Compliant ATS for UK Schools 2026: Safer Recruitment Guide

Keeping Children Safe in Education 2025 (KCSIE) defines the safer recruitment standard for all UK schools, multi-academy trusts and colleges. This guide covers what your ATS must do to align: prohibition checks, Section 128 directions, overseas checks, two references, identity and qualification verification, enhanced DBS, and Single Central Record (SCR) export.

The KCSIE 2025 safer recruitment standard

KCSIE 2025 Annex F lists the mandatory pre-employment checks for staff working with children:

• Identity verification (in person at interview)
• Right to work in the UK
• A minimum of two references, obtained before interview wherever possible
• Qualification verification (originals seen)
• Prohibition from teaching check (DfE Check a teacher's record)
• Section 128 direction check (management roles in academies, free schools and independent schools)
• Additional checks for candidates who have lived or worked overseas (the standalone EEA teacher sanctions check was withdrawn on 1 January 2021)
• Childcare disqualification declaration (early years, reception and out-of-hours provision for under-8s)
• Enhanced DBS with Children's Barred List
• Health and physical capacity assessment (where applicable)

One framing point matters before the checklist. KCSIE 2025 came into force on 1 September 2025 and replaced the 2024 edition, and Part 3 is explicit that safer recruitment is more than a set of checks run at the end of the process. It runs from the wording of the advert through shortlisting, interview, the checks themselves and into induction. KCSIE 2025 also reinforces that schools should carry out an online search on shortlisted candidates as part of due diligence, which is a step many older recruitment workflows never recorded. An ATS that only models the final checks misses half of what inspectors now expect to see evidenced.

The safer recruitment checks, explained

The Annex F table reads as a tidy list, but several of these checks have traps that catch schools out every inspection cycle. Here is what each one actually means in practice.

Identity and right to work

Identity is verified in person, ideally at interview, against original documents. Right to work is a separate legal duty under immigration law and applies to every employee regardless of nationality. The Home Office right to work guidance sets out the document checks and the online share-code route, and a compliant check gives the employer a statutory excuse against a civil penalty. The two checks are related but legally distinct, and the SCR records them separately.

Prohibition from teaching

The prohibition check is run through the DfE Check a teacher's record service. A prohibition order is made by the Secretary of State following a Teaching Regulation Agency professional conduct panel and is, in effect, a lifetime ban on unsupervised teaching, though it can in some cases be reviewed after a set period. It is not the same as a DBS check and not the same as a Section 128 direction, which is why all three sit as separate lines on the record.

Section 128 directions

A Section 128 direction, made under the Education and Skills Act 2008, bars an individual from taking part in the management of an independent school, academy or free school. It reaches well beyond headteachers: governors, trustees, members of a local governing body and senior or departmental leadership roles all fall within scope. The DfE Check a teacher's record service points schools to a separate Section 128 list for this lookup, so a workflow that treats prohibition and Section 128 as one step is incomplete.

Overseas checks (and the retired EEA check)

Where a candidate has lived or worked outside the UK, the school must make whatever further checks it considers appropriate, such as a certificate of good conduct or overseas police check, so that relevant events abroad can be weighed. The older standalone EEA teacher sanctions check was withdrawn on 1 January 2021, when EEA regulators stopped sharing sanction data with the Teaching Regulation Agency. Removing the formal EEA check did not remove the duty: an enhanced DBS with barred list information is still required even for a teacher who has never set foot in the UK.

Childcare disqualification

The childcare disqualification declaration is narrower than many schools assume. It applies to staff working in early years provision, reception and nursery classes, and out-of-hours provision such as breakfast and after-school clubs for children under eight, not to every member of staff. The GOV.UK guidance on disqualification under the Childcare Act 2006 sets out who is in scope.

Enhanced DBS with the Children's Barred List

For paid roles in a school, the individual is in regulated activity with children and is therefore eligible for an enhanced DBS check together with a check of the Children's Barred List, as the DBS regulated activity with children guidance confirms. An enhanced certificate without the barred list element is not sufficient for a child-facing post.

What your ATS must do

An ATS for UK schools must enforce each KCSIE check as a non-skippable pipeline stage that captures a timestamp, an evidence upload and the name of the verifying staff member. Skipping a stage should be technically prevented, not merely flagged after the fact. In practice that means four things working together:

• Gating. A candidate cannot be moved to "appointed" until every check required for their role type is recorded as complete, so the system enforces the policy rather than relying on memory.
• Role-aware logic. The required checks differ between a reception teaching assistant, a head of department and a one-day supply teacher. The pipeline should ask only for the checks that apply and should never let a mandatory one be quietly omitted.
• Evidence and audit trail. Each check stores who verified it, when, and the supporting document or reference number, producing the audit trail an inspector expects without anyone assembling it by hand.
• Retention and access control. Safeguarding evidence is special-category personal data under UK GDPR, so it must be access-controlled and held only as long as the school's retention schedule allows.

Single Central Record (SCR) export

Schools must maintain a Single Central Record confirming that the required recruitment and vetting checks have been carried out, with the date each check was completed or each certificate received. The SCR is the record of the checks, not a store of the certificates themselves, and it must cover all staff, including agency and third-party supply staff who work even a single day. During inspection, Ofsted cross-references the SCR against the current staff list and expects every applicable check to be present for every person on it.

Treegarden exports the SCR in the columns inspectors expect to see: identity, right to work, qualification, prohibition, Section 128, enhanced DBS with barred list, childcare disqualification where relevant, overseas checks where relevant, and references. It produces both PDF and CSV, and updates as new staff are appointed so the record stays in step with the live staff list rather than being rebuilt by hand before each inspection.

MAT-level configuration

Multi-academy trusts carry a particular burden here: a single safeguarding policy has to hold across every school in the trust, but each school still maintains its own SCR and answers to inspection on its own record. Treegarden lets a trust configure its safer recruitment workflow once at trust level, then gives each academy its own pipeline and its own exportable SCR. Trust HR sees aggregate progress across all schools, while each school sees only its own candidates. Standardised TLR contracts, M1 to UPS3 pay scales and shared-services workflows are templated centrally, so a new school joining the trust inherits a compliant process on day one rather than rebuilding it.

Evaluating Treegarden for your school or trust

There is no free plan or guided demo. Evaluation is a guided demo with our team followed by hands-on access to a sandbox, so a safeguarding or HR lead can walk a real candidate through the KCSIE pipeline and see the SCR export before committing. Pricing is public and per environment: USD $299, $499 and $899 a month, or GBP £235, £395 and £710 a month, with the tier set by volume rather than by which compliance features you can use. Every tier includes the full safer recruitment workflow, the SCR export and UK-GDPR-aligned retention controls; nothing about KCSIE compliance is held back for a higher plan.

Common KCSIE mistakes

• Requesting references only after interview, when KCSIE asks schools to obtain them before interview wherever possible so concerns can be explored with the candidate
• Section 128 check skipped because 'we forgot' (mandatory for anyone in a management role at an academy, free school or independent school)
• Additional overseas checks not carried out for candidates who have lived or worked outside the UK
• SCR not updated as soon as practicable after an appointment, so the record drifts out of step with the live staff list
• Old DBS certificate accepted (must be enhanced with a Children's Barred List check for child-facing roles)

Frequently asked questions

Setting up a KCSIE-compliant pipeline: step by step

If you are configuring an ATS from scratch, or auditing an existing workflow, work through these steps in order. Each one maps directly to a section of KCSIE 2025 and to an evidence trail that an inspector can follow.

1. Map your role types before touching the pipeline. List every category of person who will be hired or placed: permanent teaching staff, support staff, leadership, supply and agency workers, governors and trustees, and volunteers. The required checks differ between these groups, and building the pipeline before you have mapped the groups almost always leads to a workflow that applies the wrong checks to the wrong people.
2. Configure gating logic, not advisory flags. In your ATS, set each mandatory check as a hard gate: the system must prevent a candidate from being moved to "appointed" until every check required for their role type is confirmed. Advisory warnings that can be clicked past create a compliance gap the moment anyone is in a hurry. The DfE Governance Handbook is explicit that the governing board is responsible for the robustness of these controls, not just their existence.
3. Set the reference request to fire at shortlist, not at offer. KCSIE 2025 says references should be obtained before interview wherever possible so that any concerns can be explored with the candidate face-to-face. Configure your ATS to generate the reference request when a candidate reaches the shortlist stage, and record the date each reference was received. If a reference arrives late, the record should note that and the reason.
4. Build in the online search step. KCSIE 2025 states that schools should carry out an online search on shortlisted candidates as part of due diligence. This step is often missing from older workflows. In your ATS, add a checklist item at the shortlist stage requiring that an online search was performed, with a text field for the outcome and the name of the person who conducted it. The search itself does not produce a certificate, but the record that it happened must exist.
5. Wire the prohibition and Section 128 checks to the DfE Secure Access lookup. The DfE Check a teacher's record service is the authoritative source for both prohibition from teaching and Section 128 directions. Record the search date and the result (not prohibited / prohibited) in the candidate record, not in a separate spreadsheet. Where your ATS integrates directly with DfE Secure Access, the result is captured automatically; where it does not, require a manual log entry with a screenshot or reference number.
6. Configure the DBS stage to require enhanced with Children's Barred List for all regulated-activity roles. Plain enhanced DBS is not sufficient. Your ATS should allow you to specify, per role type, which level of DBS is required, and should reject a submission that logs an enhanced-only certificate against a child-facing post. Note the DBS certificate number, the date of issue, and who verified it.
7. Add the overseas check prompt for candidates who have lived outside the UK. If a candidate declares they have lived or worked in another country, a conditional stage should appear in the pipeline requiring that appropriate overseas checks are defined and pursued. The GOV.UK guidance on criminal records checks for overseas applicants lists the contact points for each country. Log which checks were requested, whether a response was received, and how any information was weighed.
8. Export the SCR immediately after appointment, not at year-end. Configure your ATS to update the Single Central Record as soon as a candidate is marked as appointed and all checks are recorded. The SCR should be a live document, not a report rebuilt before each inspection. Verify the export includes all required columns: identity, right to work, qualification, prohibition, Section 128, enhanced DBS with barred list, overseas checks, childcare disqualification (where relevant), and two references.
9. Set retention rules aligned to your records schedule. Safeguarding records are sensitive personal data under the UK GDPR special category framework overseen by the ICO. Your ATS retention rules must reflect the school's or trust's records retention schedule, not a generic default. Automated deletion prompts at the correct interval are preferable to manual reviews that are easily missed.

KCSIE checks by role type: quick reference

The table below summarises which checks apply to each category of worker in a school or academy. Use it to configure your ATS pipeline logic and to audit your SCR columns. Always read the current edition of KCSIE Annex F as the definitive source.

For Ofsted inspection readiness, the Ofsted School Inspection Handbook confirms that inspectors check the SCR on the first morning of an inspection and that a school with an incomplete SCR is likely to receive a safeguarding judgement that affects the overall effectiveness grade. Treat the table above as a pre-inspection audit prompt, not just an onboarding tool.

Key takeaways

• KCSIE 2025 came into force on 1 September 2025; if your pipeline references the 2024 edition, update it now.
• Safer recruitment is a process that runs from the job advert through to induction, not just a checklist of final checks.
• An online search on shortlisted candidates is now expected and must be recorded in the pipeline.
• References must be requested at shortlist stage, not after offer, so concerns can be raised at interview.
• Section 128 checks are mandatory for management roles at academies, free schools and independent schools; they are separate from the prohibition check and from DBS.
• Enhanced DBS must include the Children's Barred List for any child-facing post in regulated activity; enhanced-only is insufficient.
• The SCR must be live and up to date at all times; Ofsted inspectors check it on the first morning of an inspection.
• Safeguarding records are special-category data under UK GDPR; access controls and a defined retention period are legal requirements, not good practice.
• Supply and agency workers must appear on the SCR even if they work for a single day, and the school must confirm the agency holds compliant check records for them.
• MATs should configure a single compliant workflow at trust level and push it to each academy, so a new school inherits compliance on day one.