Care compliance audit trail — the documentation CQC expects on every reference
Having a reference is not enough — CQC expects documented evidence that the reference was obtained compliantly. RefAssure generates a complete audit trail automatically on every reference: consent record, request timestamp, chase log, completion date, written responses. One PDF — everything an inspector needs. From 99p, no subscription.
A completed reference form is not enough — CQC expects a documented audit trail
Many care providers have written references on file but still fail CQC inspection because the documentation does not demonstrate how the reference was obtained. CQC inspectors are not just checking that a reference exists — they are checking that it was obtained before the worker started, obtained directly from the referee, with consent documented and a timestamped record of the entire process. RefAssure generates all of this automatically in one PDF on every reference.
Every element of a CQC-compliant care reference audit trail
One PDF per reference. Every piece of documentation CQC expects — generated automatically with no manual compilation.
RefAssure Reference Report — CQC Audit Trail Contents
Candidate consent recordCQC evidence
Written consent collected via email and SMS before any referee contacted — timestamped
Reference request timestampAudit trail
Exact date and time request sent to referee — confirms process initiated
Referee identity recordRegulation 19
Name, job title, organisation and relationship to candidate — confirms independent source
Chase sequence logAudit trail
Every automated email and SMS reminder logged with exact timestamp — documents diligence
Reference completion timestampRegulation 19
Date referee submitted — allows comparison against worker start date
Full written reference responsesCQC evidence
Verbatim answers to every question — conduct, performance, suitability
Suitability to work with vulnerable adultsRegulation 19
Explicitly captured — the referee's direct answer to the vulnerability question
Disciplinary and safeguarding historyRegulation 19
Referee answer to disciplinary procedures and safeguarding concern questions
Complete process audit trailCQC inspection
Every action from setup to report generation timestamped in sequence
What the audit trail looks like in practice
The RefAssure reference PDF — CQC audit trail in a single document
Consent timestamped · Request sent · Chases logged · Completion recorded · Responses captured in full · Safeguarding fields highlighted · Ready to file and produce at inspection the moment the reference is complete.
Care compliance audit trail — what CQC actually expects
The term "audit trail" is used frequently in CQC guidance but rarely explained in detail. For employment references, an audit trail means a documentary record that allows an inspector to reconstruct exactly what happened — when the reference was requested, whether the candidate consented, how referees were approached, whether chasing was needed, and when the reference was completed relative to the worker's start date.
Why a completed reference form alone is insufficient
A completed reference form proves a referee answered some questions. It does not prove the reference was obtained before the worker started, obtained directly from the referee, or obtained with the candidate's knowledge and consent. CQC inspectors look for evidence of the process, not just the outcome. A reference form with no accompanying documentation of when it was requested, how it was obtained and whether it was complete before the worker started, does not fully satisfy Regulation 19 requirements.
Digital audit trails — acceptable for CQC
CQC does not require reference audit trail documentation to be held in paper form. Digital storage is fully acceptable provided the documentation is secure, accessible and can be produced promptly during inspection. RefAssure generates a PDF that can be stored in any digital HR system — HRIS, staff management software, secure shared drives, or a simple structured folder system. The key requirement is that the documentation can be located and presented quickly when an inspector requests it.
How long to retain reference audit trail documentation
Reference documentation should be retained for the duration of employment and for a period afterwards — typically three to six years, in line with general employment record retention guidance. The exact period should be defined in the organisation's data retention policy and GDPR privacy notice. RefAssure PDFs can be downloaded at any point and stored indefinitely in the organisation's chosen HR system.
Care reference audit trail — questions answered
CQC requires documented evidence that references were obtained compliantly — when requested, when completed relative to start date, that they were obtained directly, with consent documented, and a timestamped record of the process. RefAssure generates all of this in a single PDF automatically.
Written reference responses including safeguarding suitability answers, candidate consent record with timestamp, reference request date, chase log, completion date, and referee details. RefAssure generates all of this in one PDF per reference.
For the duration of employment plus typically three to six years afterwards. The exact period should be in the organisation's data retention policy. RefAssure PDFs can be downloaded at any time and stored in any digital HR system.
Yes. CQC accepts digital documentation provided it is secure, accessible and can be produced promptly during inspection. RefAssure PDFs can be stored in any digital HR system.
Inability to produce evidence is treated as equivalent to not having followed the process. Inspectors record this as a Regulation 19 concern regardless of whether the provider asserts that references were obtained.
More CQC compliance guides
Complete CQC audit trail.
Automatic on every reference. From 99p.
Consent record, request timestamp, chase log, written responses, completion date — every element of a CQC-compliant audit trail in one PDF, generated automatically.
From 99p per reference · No monthly fees · Credits never expire · UK data hosting