Cyber Security

Digital Records Compliance for SMEs: What MTD Requires...

Digital records compliance UK SMEs: what MTD requires for record-keeping, software and data before April 2026 deadline. Book a Security Triage Call.

Cyber Security

Digital Records Compliance for SMEs: What MTD Requires...

Digital records compliance UK SMEs: what MTD requires for record-keeping, software and data before April 2026 deadline. Book a Security Triage Call.

Published:

From 6 April 2026, UK sole traders and landlords with qualifying income over £50,000 must keep digital records for Making Tax Digital (MTD) for Income Tax Self Assessment. That is not a subtle change to how your accountant works. It is a structural shift in how every business transaction must be captured, stored, and submitted.

The reality is that most small businesses will discover this requirement too late. They assumed their existing spreadsheet workflows were sufficient — or that the digital records obligation meant little more than keeping receipts on a USB drive. None of that satisfies HMRC's requirement.

If you run a 10-to-25-seat business in Sussex or Kent, or a sole-traded consultancy, this is fundamentally an IT question. You need a working software stack, a data flow that actually functions, and confidence that your records will survive an HMRC compliance check. The three months before April are the only window to get that right.

GOV.UK: who needs to use MTD for Income Tax

What digital record keeping actually means under MTD

HMRC's definition of a digital record is precise. A digital record is a record of your income or expense that is created and stored using software that works with Making Tax Digital for Income Tax. It is not a photograph of a receipt. It is not a PDF saved to a shared drive. It is a structured data entry inside compliant software.

Under MTD for Income Tax, you must create digital records for:

  • Self-employment income — sales, takings, fees

  • Self-employment expenses — stock, travel, office costs, financial costs

  • UK property income — rent, premiums for lease grants, reverse premiums

  • UK property expenses — repairs, maintenance, other services

These records must include the amount, the date, and the applicable Self Assessment category. HMRC does not require you to digitise receipts themselves — you still keep those supporting documents as you normally would — but the figures derived from them must exist as structured data in your MTD-compatible software.

GOV.UK: create digital records

The digital link requirement — the part most SMEs miss

The digital link rule is where digital record keeping gets practical. HMRC does not merely want your records stored digitally. It wants those records to flow to HMRC's systems through a digital connection — an automated or semi-automated data transfer between your record-keeping software and HMRC's platform.

This means you cannot type figures from a paper logbook into your spreadsheet and then manually re-type those same figures into your software. You cannot copy values between spreadsheets. You cannot hand-write totals on a piece of paper and type them into your submission tool.

What does qualify as a digital link:

  • Direct API connection. Your bookkeeping software sends data directly to HMRC through HMRC's approved application programming interface. This is how most full accounting packages work.

  • Linked spreadsheet cells. A formula in one spreadsheet cell mirrors the source value in another cell within the same workbook.

  • File import and export. XML, CSV, or structured file transfers between two systems.

  • Bridging software. A tool that reads your spreadsheet and submits the required data to HMRC on your behalf.

  • Automated data transfers and bank feeds. Where your software imports bank data and links it to your records.

This requirement is not optional. HMRC has made it clear that manual transcription breaks the compliance chain, regardless of how accurate your final numbers are.

GOV.UK: digital links guidance

Choosing compliant software for your SME

You must use HMRC-recognised software to meet your digital records and submission obligations. HMRC does not provide software itself — you must source it independently.

Two categories of product exist:

Full accounting packages. These create digital records, manage quarterly updates, and submit your Final Declaration. Examples that have received HMRC recognition include Xero, QuickBooks Online, Sage Accounting, FreeAgent, Clear Books, and Dext. Many of these tools offer receipt scanning, bank-feed integration, and multi-currency support — features that optimise your record keeping for businesses with more than one income stream.

Bridging software. If your business relies on spreadsheets for record keeping, bridging software connects your spreadsheets to HMRC's system. Tools such as 123 Sheets, Coconut, and APARI Pro can create the required digital link without replacing your existing workflow. Bridging software is a legitimate compliance route, but it adds a second subscription and a second point of failure to your stack.

You may use separate software products for different income sources — for example, one package for self-employment records and another for property income. However, you may only use one product for each individual submission to HMRC.

If you are already VAT-registered, check whether your current software provider has extended MTD recognition to Income Tax. Many do.

GOV.UK: HMRC software finder

Your IT stack and data integrity under MTD

Most SMEs in the 10-to-25-seat range operate on a Microsoft 365-centric stack — Teams for communication, SharePoint for shared files, Excel for ad hoc calculations, and possibly a separate cloud accounting package. The question is whether this stack can support MTD compliance without creating parallel processes that your team will inevitably bypass.

A practical approach is consolidation. If your business already uses a cloud accounting package, verify that the same package supports MTD for Income Tax. Where it does, you reduce the number of systems, the number of subscriptions, and the chance that data falls between disconnected tools.

Where you maintain records in spreadsheets — a common pattern in smaller businesses — bridging software adds a second tool. That is acceptable under the rules, but it means an extra subscription, an extra account to manage, and an extra point where data must be kept current. The more tools in your stack, the harder it is to maintain data integrity across them.

MTD for Income Tax is also a practical reason to move a business from spreadsheet-based record keeping to a purpose-built cloud accounting package if you have not done so already. Spreadsheets are not forbidden. They are simply not sufficient on their own.

Your data must be accurate and complete before each quarterly submission. HMRC places the responsibility on you, not your software provider. This is where proper IT governance matters — from version control on shared files to the way your organisation structures cloud access — version control on shared files, access permissions on cloud accounts, and clear procedures for who enters and validates records in your software.

Record retention and backup under MTD

Your digital records must be stored for at least 5 years after the 31 January submission deadline for the relevant tax year. This is the same retention period that applies to Self Assessment records — but the format has changed.

Where Self Assessment allowed you to keep paper records and scanned copies on a shared drive, MTD requires that the digital records themselves — the structured data entries in your software — remain accessible and unaltered for the full 5-year period. HMRC can request access to your digital records during a compliance check, and they must be recoverable in the software that created them.

This has backup and business continuity implications that go beyond simple file backups. If your accounting software operates on a multi-tenant cloud platform, your records exist within that platform's infrastructure. You need to understand:

  • Whether your software vendor provides independent backup capabilities outside their primary environment.

  • Whether your current backup solution covers application-level data, not just file-level snapshots.

  • Whether you have tested the recovery of your MTD records in a restore scenario.

The 5-year retention period means your digital records strategy needs to be as durable as your paper records strategy was.

GOV.UK: how long to store digital records

What happens if your SME is not ready for MTD by April 2026?

HMRC has confirmed it will begin auto-signing up businesses that need MTD for Income Tax from September 2026. When HMRC auto-signs you up, it uses only the information it already holds about your business. This may not reflect recent changes to your circumstances, income sources, or tax situation.

HMRC will not apply penalty points for late quarterly updates during the first tax year (2026 to 2027). Penalties will still apply for late tax returns and for late payment of tax owed. But relying on a grace period is not a strategy — it is a recognition that HMRC expects businesses to prepare before their deadline arrives.

You must be registered for Self Assessment and have submitted a tax return in the last two years to sign up. If you have recently started trading, or if your last tax return was submitted more than two years ago, you may not be able to sign up. Contact HMRC directly in that case.

To verify whether you need to comply, HMRC provides an eligibility checker and published guidance on exemptions, including grounds for digital exclusion.

Common mistakes SMEs make preparing for MTD

Several patterns recur among businesses that discover digital record keeping late. The most frequent are:

  • Treating digital record keeping as an accountant's problem. MTD compliance is the business owner's obligation. Your accountant may do the quarterly submissions, but you must choose and authorise the software. You must ensure the records are accurate.

  • Assuming spreadsheets alone satisfy the requirement. Spreadsheets are permitted only when paired with bridging software that creates the required digital link to HMRC. A spreadsheet on its own does not meet the digital records rule.

  • Not checking that VAT software covers Income Tax. Many accounting packages that are HMRC-recognised for VAT have not extended their recognition to Income Tax. Verify the coverage with your provider.

  • Leaving software selection until March. This is when HMRC's systems are slowest and when your accountant's queue is longest. Early adoption gives you time to test the software with live data.

  • Ignoring the 5-year retention requirement. Your records will need to be recoverable for a full 5 years in the software that created them. If you change software mid-compliance, you must migrate old records or maintain access to the old system.

Where to start

The threshold does not apply to every business. Sole traders and landlords with qualifying income under £50,000 for the 2024 to 2025 tax year are not required to join MTD until April 2027 (when the threshold drops to £30,000) or April 2028 (£20,000). But if you are above the threshold, or if your income is close enough that a small increase could push you over, the clock is already ticking.

The first practical step is to establish your qualifying income for the current tax year — your total income from self-employment and property, calculated before expenses, based on the tax return you submitted last year.

Once you know you need to comply, the sequence is:

  1. Check your existing software for MTD for Income Tax compatibility.

  2. Select an HMRC-recognised product that supports all your income sources.

  3. Test the software with live data before April.

  4. Confirm your accountant or tax agent can submit quarterly updates on your behalf if they do so now.

  5. Verify your backup and retention strategy covers the 5-year digital records requirement.

HMRC is not recommending any particular product or provider. The choice depends on your existing stack, your accountant's preferences, and the features that match your workflow. But the decision needs to be made now, not after the deadline.

GOV.UK: sign up for MTD for Income Tax

FAQ

Do spreadsheets satisfy the digital records requirement for MTD?

Yes, but only if you pair them with bridging software that creates the required digital link to HMRC. HMRC's digital link rule means data must flow from your records to HMRC through an automated or semi-automated connection — a spreadsheet on its own does not meet the requirement. Bridging tools connect to your spreadsheets and submit the required quarterly updates on your behalf.

What happens if I am below the £50,000 threshold?

If your qualifying income is below £50,000 for the 2024 to 2025 tax year, MTD for Income Tax does not apply to you yet. The threshold drops to £30,000 in April 2027 and to £20,000 in April 2028. You may sign up voluntarily before the mandatory date if you wish, but you are not required to until the relevant threshold applies to you.

Can I keep my existing accountant under MTD?

Yes. MTD for Income Tax allows agents — including accountants and tax advisers — to submit quarterly updates and Final Declarations on your behalf. You will need to authorise your agent through the HMRC online service. Confirm with your accountant that they have access to MTD-compatible software capable of handling Income Tax submissions, not just VAT.

How long must I keep my digital records?

You must store your digital records for at least 5 years after the 31 January submission deadline for the relevant tax year. This is the same retention period that applied to paper Self Assessment records, but the format has changed — the structured data entries in your software must remain accessible and recoverable for the full period.

Can I get an exemption from MTD?

Yes, on certain grounds. HMRC grants exemptions where a taxpayer is digitally excluded, or where there are religious objections, severe disability, or other practical reasons that make digital compliance unfeasible. You must apply for an exemption through HMRC — it is not granted automatically. GOV.UK guidance on MTD exemptions

Conclusion

Digital records compliance for MTD for Income Tax is not a tax-only question. It is an IT systems question that affects your software stack, your data workflows, and your business continuity planning. The deadline is 6 April 2026, and HMRC's auto-sign-up process in September will not refine your details to match your current circumstances.

The businesses that handle this well are the ones that start now — verifying their software compatibility, testing the digital link between their records and HMRC, and confirming that their backup strategy covers the 5-year digital records requirement.

If you want to understand your current IT readiness and how it aligns with what MTD requires, book a Security Triage Call. It is the quickest way to establish where your systems stand and what steps need to happen before the deadline.

More resources

Keep reading

Browse the latest practical guides across Managed IT, Cyber Security, Modern Workplace, and Backup

More resources

Keep reading

Browse the latest practical guides across Managed IT, Cyber Security, Modern Workplace, and Backup

More resources

Keep reading

Browse the latest practical guides across Managed IT, Cyber Security, Modern Workplace, and Backup

For 10-15 seat

Owner-managed SMEs in Sussex & Kent

Who want clarity, stability, and a proper security baseline — start with the free Security Triage Call.

For 10-15 seat

Owner-managed SMEs in Sussex & Kent

Who want clarity, stability, and a proper security baseline — start with the free Security Triage Call.

For 10-15 seat

Owner-managed SMEs in Sussex & Kent

Who want clarity, stability, and a proper security baseline — start with the free Security Triage Call.