AI agents for business finance: what they can and can't do
What AI agents can do in bookkeeping, close, collections and compliance today, where a person must stay in charge, and how to judge a product.
The short answer
A UK employer must check that every employee has the right to work before employment starts, using a manual document check, an identity service provider for British and Irish passports, or the Home Office online service. Keep a clear record of the check for the whole employment and for two years after it ends, and diary follow-up checks for anyone with time-limited permission. An agent can hold records and dates, but the check itself must be done properly by the employer.
Why the record matters
The check is your legal excuse. If an employee turns out not to have the right to work, a correct check carried out before employment began protects you from a civil penalty. GOV.UK sets the maximum civil penalty at up to £60,000 per illegal worker, and knowingly employing someone without the right to work is a criminal offence. A check you cannot prove you made is, in practice, a check you did not make.
The three ways to check
| Method | Typical use | What you keep |
|---|---|---|
| Manual document check | Original documents from the Home Office lists, seen with the holder | A dated copy of each document and the date the check was made |
| Identity service provider | British and Irish citizens with a valid passport | The output from the provider |
| Home Office online check | People with eVisas or digital status, using a share code | The profile page from the online service |
The method must suit the person's status. You cannot insist on a particular document if the person has the right to prove their status online, and you must not discriminate by checking only some workers. Check everyone.
Follow-up checks
If a worker has time-limited permission, you must check again before it expires to keep your protection. Missing this date is the most common failure in small businesses, because the first check was done and everyone moved on. The date belongs in a register with an owner and a reminder well before expiry.
What an AI agent can do
- Hold a checklist for each new hire and refuse to mark the start date ready until the right to work record is attached.
- Collect the documents or share code the candidate provides and file them against the employee record.
- Record who did the check, how and on what date.
- Diary a follow-up check for time-limited permission, with reminders 90 and 30 days before expiry.
- Set a deletion date two years after employment ends, so records are not kept longer than needed under UK GDPR.
- Report on gaps: employees with no record attached, or a follow-up check overdue.
Right to work documents are personal data, so access should be limited to those who need it. See the first 72 hours of a data breach for what to do if they leak.
What the employer must do
The check itself has rules an agent cannot satisfy on its behalf. For a manual check, the employer must see the original document with the holder present, in person or by live video, and be satisfied that the photo matches and the document is genuine. Deciding whether a document looks tampered with, and what to do if the online service says a person has no right to work, are decisions for you. The hiring decision and the contract stay with you too.
Worked example
Example only. A café in Bristol hires three staff in March. One is a British citizen with a passport, checked through an identity service provider. One shares a code for the online service, showing permission until 30 November. One provides an Irish passport, checked manually. The agent files each record against the employee, notes the method and the manager who checked, and diaries a follow-up check for the second employee for 1 September, with a reminder on 2 August. When the employee's new status arrives in October, the manager rechecks online and the agent replaces the reminder with the new expiry.
Keeping records lawful and secure
Right to work records contain passport images, immigration status and sometimes biometric details. That makes them personal data that needs care under UK GDPR, alongside the immigration rules that require you to keep them. The two sets of rules fit together if you are disciplined about access and deletion.
- Store each record against the employee, not in an inbox or a phone camera roll.
- Limit access to the people who hire and the person who handles payroll.
- Record the date of each check and the method used, so the copy can be matched to the rules that applied at the time.
- Delete records two years after employment ends unless another legal reason applies, and record the deletion.
- Review the list of current staff against the records each quarter, so a missing record is found before an inspection rather than during one.
An agent can run that quarterly comparison and list any gaps for a manager to close. It should not fill a gap by inventing a date or marking a check complete without the document.
Where Pryme fits
The Pryme Compliance agent keeps employment obligations in its obligations register, each with its own clock, and refuses to mark an item done without its evidence. Payroll runs from the same account, and above the agent's mandate a person decides. For first-hire steps in Nigeria, see hiring your first employee in Nigeria.
Questions people ask
When must the check be done?
Before the person starts work. A check made after employment begins does not give you the statutory excuse for the period before it.
How long do I keep right to work records?
For the duration of employment and for two years after it ends, according to GOV.UK guidance.
Can an AI agent do the right to work check?
It can track and file the check, but the employer, or someone they authorise, must carry it out following Home Office guidance.
What is the penalty for getting it wrong?
A civil penalty of up to £60,000 per illegal worker, according to GOV.UK, and a criminal offence where an employer knew or had reasonable cause to believe the person could not work.
Sources
- GOV.UK: Check a job applicant's right to work · accessed Oct 2026
- GOV.UK: Employing staff for the first time · accessed Oct 2026
- ICO: Employment practices and data protection · accessed Oct 2026
This article is general information, not financial, legal or tax advice. Products described are provided under the terms on this site and are subject to regulation and eligibility.