A Revenue or HMRC investigation does not begin at a good time. It arrives without warning, imposes immediate demands on your team’s time, and puts your client under considerable stress. The practices that manage investigations well are not the ones that react fastest — they are the ones that were already organised before the investigation started.
The Quality of Your Documentation Determines the Outcome
When Revenue or HMRC opens a compliance check or formal investigation, the first thing they will assess is whether the tax returns and filings submitted are supported by credible, complete records. The second thing — often overlooked by practices — is whether the accountant can demonstrate that they followed the appropriate professional standards and due diligence in preparing those filings.
That means an audit trail. Not just the client’s financial records, but evidence of your practice’s own processes: when you communicated with the client, what information was provided to you and when, what queries you raised, and what responses you received. If a discrepancy is found, the ability to show a clear record of professional conduct is the difference between a client issue and a practice liability.
BrightManager by Bright, Bright’s practice management software, maintains a structured audit trail across all client interactions. Task records, workflow stages, communication logs, and document histories are all captured and timestamped — so when an investigator asks how a return was prepared, your practice has a factual, chronological record to draw on rather than relying on individuals to reconstruct events from memory.
AML Compliance Records Are Non-Negotiable — and Must Be Current
Anti-money laundering obligations sit at the foundation of every compliance investigation. Under the Criminal Justice (Money Laundering and Terrorist Financing) Acts in Ireland and the Money Laundering Regulations in the UK, accounting practices are required to maintain up-to-date client due diligence records, including identity verification, risk assessments, and ongoing monitoring.
If Revenue or HMRC — or indeed the Chartered Accountants Regulatory Board (CARB) or the relevant supervisory authority — reviews your practice during or following an investigation, out-of-date or incomplete AML records represent a significant regulatory risk entirely separate from the client’s tax position.
BrightManager by Bright, Bright’s practice management software, supports AML compliance as part of the client onboarding and ongoing management workflow.
Practices can record the current status of AML checks for each client, set review reminders, and maintain a complete log of when checks were conducted and what they found. During an investigation, this means you can demonstrate immediately — and without scrambling — that your practice met its supervisory obligations for the client in question.
This matters in practice. Revenue and HMRC investigators are increasingly aware of the link between weak AML oversight and the tax irregularities they are investigating. A practice that can produce a clean, current AML record signals professional competence. One that cannot creates an additional line of enquiry.
Client Communication During an Investigation Must Be Structured and Consistent
One of the most common points of failure in investigation management is communication — not with the investigator, but with the client. Clients under investigation are anxious, often confused about what is happening, and prone to contacting the practice repeatedly or — more dangerously — making independent contact with Revenue or HMRC without your guidance.
Your practice needs a clear communication framework from the moment the investigation opens. Clients should understand:
- What the investigation covers and what it does not
- What information they will be asked to provide and by when
- What they should and should not say if contacted directly by the investigator
- The likely timeline and next steps at each stage
Regular, structured updates prevent the client from filling information gaps with assumption or anxiety. They also create a record — which matters if the client later disputes the advice they were given, or if the scope of the investigation changes and earlier communications become relevant.
BrightManager by Bright, Bright’s practice management software, enables practices to log all client communications against the relevant client record, track outstanding information requests, and manage the workflow of an investigation as a structured task rather than an ad hoc series of exchanges. In a busy practice managing multiple investigations or compliance deadlines simultaneously, this discipline prevents things from falling through the gaps.
Clients Need to Provide Evidence — and They Must Do So Securely
At some point in almost every investigation, the client will need to provide documentation to your practice: bank statements, contracts, invoices, payroll records, correspondence. The instinctive response — emailing scanned documents, sharing files via consumer cloud storage, or handing over physical copies — creates real GDPR exposure.
Personal financial data is classified as sensitive personal data under the General Data Protection Regulation as applied in both Ireland and the UK (post-Brexit via the UK GDPR). Transmitting it via unsecured channels, or storing it in environments that do not meet appropriate security standards, is a breach risk for the practice — on top of everything else the investigation is already generating.
The BrightManager by Bright client portal provides a GDPR-compliant channel for clients to upload documents directly to your practice. Files are transferred securely, stored in the appropriate client record, and accessible only to authorised team members. The upload creates a timestamped record of what was received and when — which forms part of the audit trail the practice can present to investigators if required.
This is not simply a compliance formality. In the context of an investigation, the ability to show that documents were received on a specific date via a secure, logged channel supports the integrity of the evidence you are presenting. It is materially stronger than a forwarded email chain.
Preparation Before an Investigation Is the Only Time You Can Get Ahead of It
The practices that manage investigations well share one characteristic: they treated investigation preparedness as a practice management discipline before any investigation began. That means:
- Client records are complete and up to date at all times, not only at filing deadlines
- AML checks are conducted on schedule, with outcomes recorded and reviewed
- Client communications are logged and retrievable, not held in individual email inboxes
- Documents received from clients are stored securely and indexed against the relevant filing or period
None of this requires a separate investigation protocol. It is the natural output of running a well-organised practice — which is precisely what BrightManager by Bright, Bright’s practice management software, is built to support. Workflow automation, task management, client onboarding, and profitability tracking all operate on the same infrastructure that, in the event of an investigation, becomes your practice’s first line of defence.
The practices most exposed during an investigation are typically those where information is fragmented across individual team members, stored in disconnected systems, or simply not recorded consistently. Centralising practice management in a single platform removes that vulnerability.
What to Do When the Investigation Letter Arrives
When a Revenue or HMRC investigation is formally opened, the following steps apply regardless of the investigation’s scope or the client’s circumstances:
- Acknowledge receipt of the investigation notice to the relevant authority within the stated deadline — missing this creates an immediately negative impression.
- Brief the client promptly and clearly, covering what the investigation covers, what will be required of them, and what they should not do independently.
- Pull the file — retrieve all records for the relevant period, including AML records, communication logs, and all documents received from the client.
- Identify gaps — where records are incomplete, note this and begin remediation immediately. Do not wait for the investigator to find the gap first.
- Establish a communication schedule with the client and document every update.
- Log all correspondence with Revenue or HMRC against the client record as it occurs.
A practice running BrightManager by Bright, Bright’s practice management software, can complete steps 3 and 4 in a matter of minutes. Practices relying on fragmented records across email folders, filing cabinets, and individual team members’ memory will find the same steps take considerably longer — and may never be fully complete.
Frequently Asked Questions
What should an accounting practice do when a client receives a Revenue or HMRC investigation notice?
The first priority is to acknowledge receipt of the notice within the stated deadline and brief the client clearly on what the investigation covers. Your practice should then retrieve all relevant records for the period under review — including AML records, client communications, and supporting documents — and identify any gaps before the investigator does. A structured practice management system makes this retrieval significantly faster and more complete.
Why is an audit trail important during a Revenue or HMRC investigation?
An audit trail demonstrates that your practice followed appropriate professional standards in preparing the filings under review. It records when information was received from the client, what queries were raised, and what responses were provided. Without this record, a discrepancy in the client’s return can become a question about the practice’s conduct as well as the client’s tax position.
What are the GDPR requirements for sharing documents during a tax investigation in Ireland or the UK?
Financial records and personal data shared between clients and their accountants during an investigation must be transmitted and stored securely, consistent with GDPR obligations under Irish or UK law. Email and consumer file-sharing platforms typically do not meet the required standard. A secure client portal — such as the one included in BrightManager by Bright, Bright’s practice management software — provides a logged, encrypted channel that satisfies data protection requirements and creates a timestamped record of what was received.
What AML records should an accounting practice maintain for clients under investigation?
Practices should hold current identity verification records, risk assessments, and a log of ongoing monitoring activity for every client. Under Irish and UK AML regulations, these records must be kept up to date — not just completed at onboarding. During an investigation, the ability to produce clean, current AML records demonstrates regulatory compliance and removes an additional line of enquiry from the investigator’s scope.
How should practices communicate with clients during a Revenue or HMRC investigation?
Communication should be structured, regular, and fully documented. Clients need to understand the scope of the investigation, what will be required of them, the likely timeline, and what they should not do independently — particularly direct contact with the investigator without the practice’s involvement. All communications should be logged against the client record so that a complete history is available if it is needed later.
How does BrightManager by Bright support investigation management?
BrightManager by Bright, Bright’s practice management software, maintains a structured audit trail of client communications, task histories, and document transfers. It supports AML compliance workflows with status tracking and review reminders, and includes a secure client portal for GDPR-compliant document upload. Together, these features mean that when an investigation opens, a practice’s records are already organised, accessible, and defensible.
To learn how BrightManager by Bright, Bright’s practice management software, can help your practice build the documentation standards that matter most when it counts, visit brightsg.com or contact the Bright team.
