Outsourced Payroll UK – Compare & Decide

Reviewed: 17 June 2026

Outsourced payroll means an external provider performs agreed payroll tasks for an employer. The provider may calculate pay, produce payslips, submit payroll information and prepare payment reports, but the employer remains responsible for the accuracy of information supplied and for meeting its legal obligations.

What can be outsourced

Payroll calculations and deductions.
Payslip production and distribution.
Full Payment Submissions and Employer Payment Summaries.
Statutory-payment calculations.
Pension contribution files.
Year-end payroll documents.
Reports for employee, HMRC and pension payments.

What remains with the employer

Providing complete and accurate payroll inputs.
Authorising starters, leavers, pay changes and bank-detail changes.
Approving the final payroll before payments are released.
Ensuring employees receive the correct pay and payslips.
Paying HMRC and pension providers by the deadline.
Keeping appropriate records and monitoring the provider.

Using an external provider does not transfer PAYE, minimum-wage, pension or employment-law responsibility away from the employer.

2026/27 information to confirm

The provider should confirm that its systems use current tax codes, National Insurance thresholds, statutory-payment rates and minimum-wage rates. For 2026/27, the main employer National Insurance rate is 15% above the relevant threshold, the employer secondary threshold is £5,000 a year, and the National Living Wage for workers aged 21 and over is £12.71 an hour from 1 April 2026.

Check the current HMRC employer rates and thresholds.

Service agreement essentials

Which payrolls, employees and tasks are in scope.
Input cut-off dates and accepted formats.
Named preparers, reviewers and approvers.
Normal and urgent correction procedures.
Responsibility for RTI, pension files and payment reports.
Service times around weekends, bank holidays and year end.
Fees for additional runs, corrections and late inputs.
Data-protection, confidentiality and breach-notification arrangements.
Record ownership, export and exit arrangements.

Monthly control workflow

Send approved inputs through the agreed secure channel.
Receive and review the draft payroll and variance reports.
Resolve exceptions before the approval deadline.
Approve the payroll in writing.
Confirm RTI submission and save the receipt.
Release employee, HMRC and pension payments through authorised processes.
Reconcile payroll reports to bank payments and accounting records.

Security and access

Payroll data includes salary, tax, bank and identity information. The employer should understand where the data is stored, who can access it, whether multi-factor authentication is available, how files are encrypted, how long records are retained and how access is removed when staff or providers change.

Warning signs

No documented approval step before finalising payroll.
Unclear responsibility for late or rejected RTI submissions.
Payroll data exchanged through insecure personal email accounts.
No audit trail for changes to employee or bank details.
No clear process for retrieving records when the arrangement ends.
Repeated corrections without root-cause review.

Related guidance

For the underlying monthly process, read Payroll Processing Services UK. For reporting and payment obligations, see PAYE Compliance in the UK.

This page provides general educational information and does not recommend a particular payroll provider.

Designing an outsourced payroll arrangement

An outsourced payroll provider can calculate pay, produce reports and make submissions, but the employer still owns the underlying decisions and legal obligations. The safest arrangement is defined by a written responsibility matrix, agreed timetable, secure data exchange and documented approval process.

Define the service boundary

“Payroll outsourcing” can mean very different things. Confirm whether the provider will:

Maintain employee master data or only process files supplied by the employer
Calculate regular and variable pay
Assess statutory pay or rely on employer instructions
Submit FPS and EPS reports
Prepare pension files and communications
Produce BACS or bank-upload files
Prepare P45s, P60s and year-end reports
Support expenses, benefits, P11D or payrolling-benefits work
Post accounting journals
Answer employee queries directly

Anything not written into the scope should be assumed to remain with the employer.

Build a responsibility matrix

Task	Employer	Provider	Approval evidence
Decide contractual pay and changes	Own and approve	Process instruction	Authorised change record
Collect hours and absence	Collect and approve	Validate format	Manager-approved input
Tax codes and notices	Provide access/information	Apply valid notices	Payroll audit trail
Draft payroll	Review exceptions	Calculate and report	Version-controlled draft
FPS/EPS	Authorise arrangement	Submit if in scope	Submission receipt
Employee payments	Authorise and fund	Create file if agreed	Bank approval
HMRC and pension payments	Pay and reconcile	Provide liability reports	Payment and reconciliation

Set service levels around the payroll calendar

The service agreement should state input cut-offs, turnaround times, approval deadlines, query-response times and escalation routes. It should explain how late changes, emergency payments and corrections are handled. A provider should not be expected to guarantee an on-time payroll when approved data arrives after the cut-off.

Include cover arrangements for holidays, sickness, system outages and bank holidays. The employer should know who to contact if the normal payroll manager is unavailable.

Data security and access

Payroll data includes identity, pay, bank and sometimes health or family-leave information. Confirm how information is transferred, encrypted, stored and deleted; where it is processed; who can access it; and how incidents are reported. Access should use individual accounts and multi-factor authentication where available. Avoid sending unprotected spreadsheets by ordinary email.

The contract should address confidentiality, data-processing responsibilities, subcontractors, retention and return or deletion of data when the service ends.

Provider due diligence

Relevant payroll experience and the complexity of clients supported
Named implementation and ongoing contacts
Software used and how updates are managed
Information-security controls and business-continuity arrangements
Professional qualifications or memberships where claimed
Professional indemnity insurance
References appropriate to the employer’s size and sector
How errors, service failures and complaints are handled
Pricing for normal work, corrections, late inputs and year-end services

Implementation and parallel running

A transition should reconcile year-to-date gross pay, tax, National Insurance, pension and statutory-pay data. Check tax codes, National Insurance categories, director indicators, student loans, attachments, leave balances and benefits. For a material or complex payroll, a parallel run can compare the old and new calculations before the provider becomes responsible for live processing.

Agree the opening control totals and document any differences. A migrated payroll that “balances overall” can still contain employee-level errors.

Employer review remains essential

The employer should review each draft payroll for starters, leavers, pay changes, bank changes, unusual deductions, statutory pay and significant movements. It should also reconcile the provider’s reports to bank payments, HMRC, pension submissions and accounting records. An outsourced provider cannot verify a bonus, overtime claim or contractual entitlement that the employer has not approved.

Pricing and hidden extras

Pricing may be per employee, per payslip, per payroll run or a fixed monthly fee. Check charges for setup, additional payrolls, leavers, P11Ds, pension work, corrections, historical reports, employee queries, integrations and urgent changes. Compare total expected annual cost rather than the headline price.

Exit planning

The agreement should state how quickly data, reports, credentials and audit trails will be returned. Confirm the export format and whether another provider can use it. The employer should retain independent access to HMRC, pension and banking systems rather than allowing all access to sit with one supplier.

Warning signs

No written scope or responsibility matrix
Requests to share administrator credentials
No independent payroll approval
No submission receipts or reconciliation reports
Pricing that excludes routine corrections or year-end work
No documented continuity or exit process
Claims that outsourcing transfers the employer’s liability

Related ASH guides

Official guidance

Migration checklist

Agree the implementation plan, owners and first live payday.
Export employee and year-to-date data from the existing system.
Reconcile gross pay, tax, National Insurance, pensions and statutory pay.
Validate tax codes, NI categories, director status, student loans and attachments.
Confirm holiday, absence and benefit data where the provider needs it.
Set up secure user accounts and restrict administrator access.
Test reports, payment files, journals and employee documents.
Run a controlled comparison or parallel payroll where risk justifies it.
Obtain written acceptance of opening balances and unresolved differences.

Monthly provider scorecard

Monitor more than whether employees were paid. Useful measures include inputs received by cut-off, draft turnaround, queries raised, errors found before approval, corrections after payday, submission timeliness, employee-query response and unresolved reconciliations. Review patterns with the provider and document agreed actions.

Incident and error handling

The contract should state how the provider identifies, reports and corrects errors, who communicates with employees and whether additional costs apply. A serious issue may also require data-protection, banking, HMRC or pension escalation. The employer should maintain its own incident record and verify that corrections reached every affected system.

Employee query model

Decide whether employees contact the provider, an internal HR contact or both. Queries about calculations can be handled differently from disputes about contractual entitlement. The provider should not decide whether overtime, bonus or leave is due unless the employer has expressly delegated an appropriate administrative step.

Continuity without dependence

Retain copies of reports, submissions, contracts and configuration information outside the provider’s portal. Maintain at least two authorised employer contacts and direct access to HMRC and pension accounts. Test how payroll would run if the provider’s system or the employer’s normal approver were unavailable.

Governance meetings

Hold a short review at an agreed frequency. Cover service performance, upcoming changes, unresolved queries, legislative updates, security incidents and payroll-calendar risks. Minutes should distinguish provider actions from employer actions and record target dates.

Contract renewal questions

Before renewal, compare actual volumes and extras with the original assumptions. Check whether service levels were met, whether reports remain useful, whether integrations or subcontractors changed and whether exit assistance remains adequate. Renewal should be a control review, not an automatic continuation.

Final acceptance

After implementation or renewal, record that the employer has reviewed the scope, timetable, opening balances, access rights and escalation contacts. This avoids uncertainty about when responsibility moved and which issues remained open.

Three-way payroll reconciliation

At an agreed frequency, reconcile three independent records: the provider’s final payroll report, the amounts actually paid through the bank and the liabilities recorded with HMRC and the pension provider. Differences should be assigned to a named owner and cleared promptly. This control can reveal duplicated payment files, rejected pension submissions, late corrections and journals posted from the wrong payroll version. Retain the reconciliation with the approval evidence so the employer can demonstrate that outsourced outputs were independently checked rather than accepted without review.