Sponsorship Management System (SMS): Setup, Access & Governance

Sponsorship Management System (SMS): Setup, Access & Governance

ByBernard Andonian

When your organisation holds a valid UK Home Office Sponsor Licence, the online portal known as the Sponsorship Management System (SMS) becomes a central tool in managing, maintaining and governing your sponsorship duties. Proper setup, secure access and rigorous governance aren’t just best practices; they are mandatory.

What is the Sponsorship Management System (SMS)?

The SMS is the Home Office’s designated online platform for licensed employers to carry out key sponsorship functions. It’s not optional. Once you are authorised to sponsor overseas workers, the SMS becomes the channel through which you:

  • assign Certificates of Sponsorship (CoS);
  • update changes to worker or organisation details;
  • respond to communications from the Home Office;
  • manage user access and system permissions.

Every entry or update you make in the SMS is treated as formal compliance evidence. Errors or omissions can directly expose your licence to enforcement action.

Setting Up the SMS: First Steps

After the Sponsor Licence is granted, you will receive login credentials for the SMS. The initial setup typically includes:

  • Logging in as the Authorising Officer (AO) or designated primary user.
  • Confirming your organisation’s details: name, address, licence number, key contacts.
  • Adding additional users: Level 1 and Level 2 users as required.
  • Securing a secondary/backup Level 1 user to avoid access issues if the primary contact is unavailable.
  • Reviewing any pending system notifications from the Home Office so you can clear them before beginning operational use.

At this stage, you should integrate the SMS into your internal HR and compliance workflows, ensuring the system is not treated as a standalone tool, but as part of your broader governance framework.

User Roles & Access Levels Explained

The Home Office defines key roles in the SMS:

  • Authorising Officer (AO): bears ultimate responsibility for the licence; must be a senior employee.
  • Key Contact: often a liaison with the Home Office, receives key messages.
  • Level 1 User: full operational access, assigning CoS, requesting allocations, updating company info.
  • Level 2 User: more limited access, often operational tasks like assigning CoS or reporting worker changes, but cannot update high-level licence details.

Each role must be assigned thoughtfully and reviewed periodically. Misallocation or out-of-date permissions are common compliance risks. Map your internal roles to these definitions so the right people have the right access.

Access Management & Security: Best Practices

Since the SMS contains sensitive immigration and employment data, access control is critical. Key practices include:

  • Maintaining unique logins for each user; no shared credentials.
  • Ensuring two-factor authentication or OTP mechanisms are enabled where available.
  • Immediately removing or suspending access when employees leave or move roles.
  • Monitoring user activity and keeping audit trails of who made which change and when.
  • Establishing backup users for critical roles (especially the Level 1 user) to avoid licence disruption if someone is unavailable.
  • Reviewing mobile contact details and user credentials regularly so that OTPs and notifications are reliably received.

Failing to manage access and security is one of the most frequent triggers of enforcement action by the Home Office.

Get to know about: List of Companies that can Sponsor Visa in the UK 2025/2026

Governance Responsibilities & Ongoing Compliance

Holding a Sponsor Licence via the SMS isn’t a one-off exercise. Your governance framework must cover:

  • Timely reporting of changes: when a sponsored worker leaves, changes role, has salary changes, or when the company undergoes structural changes. Many updates must be submitted within 10 working days (or 20 for company changes).
  • Record-keeping: internal records must align with SMS entries and be retained for the required period.
  • Audit readiness: the Home Office can make surprise visits or request documentation. Your SMS records, user logs and corresponding internal files must be accurate and accessible at short notice.
  • Review processes: schedule regular internal audits of SMS activity, user permissions, and compliance controls, especially after business changes like M&A, branch openings or restructures.

Effective governance means integrating the SMS into your HR, compliance and recruitment processes, not treating it as an add-on.

Common SMS Errors That Lead to Licence Risk

Some mistakes repeatedly expose sponsors to risk:

  • Failing to update the SMS when a worker leaves employment or is made redundant.
  • Leaving old users active within the system, including former employees.
  • Assigning a CoS for a role that hasn’t been correctly updated in the SMS or does not meet visa eligibility.
  • System lock-outs because only one Level 1 user exists and that person is suddenly unavailable.
  • Inconsistent data: e.g., company address in Companies House differs from the address in the SMS.

Such errors may trigger a licence downgrade, suspension or revocation and can disrupt your ability to sponsor overseas talent.

Best Practices for SMS Governance

To safeguard your licence and maintain operational continuity:

  • Create a written internal SMS governance policy outlining roles, responsibilities, access protocol and audit schedule.
  • Appoint at least two Level 1 users and one Key Contact to ensure redundancy.
  • Conduct quarterly audits of user access, recent SMS actions and alignment with your internal HR database.
  • Train all SMS users on their system functions and underlying compliance duties, they must understand why each update matters.
  • Log and archive all SMS changes alongside your internal records, ensuring a traceable audit trail.
  • Build SMS reporting into your recruitment and onboarding workflows so that sponsorship steps happen early and accurately.

Governance means the SMS becomes part of your business-as-usual rather than a separate immigration task.

You should know about: Major Changes to UK Visa Sponsorship Rules 2025

How Our Experts Can Help

At Sponsor Licence Lawyers, we support UK employers in managing every aspect of Sponsor Licence compliance, including SMS setup, access management and ongoing governance. Our services include:

  • Audit of your existing SMS user roles, user access protocols and system controls.
  • Drafting or review of your internal SMS governance policy and training materials.
  • Hands-on guidance in setting up SMS users, assigning roles correctly and linking it to your business systems.
  • Support during audits or inspections, ensuring your SMS evidence and internal records are aligned.
  • Regular compliance reviews to keep you ahead of Home Office obligations and reduce risks of licence disruption.

Contact us today. Let us help you turn your SMS from a legal obligation into a strategic enabler of your workforce mobility and recruitment ambition.

You Ask, We Answer

FAQs

The Sponsorship Management System (SMS) is the Home Office’s secure online platform used by licensed employers to manage their Sponsor Licence duties. It allows organisations to assign Certificates of Sponsorship, report company or employee changes, and maintain compliance with immigration regulations.

Access to the SMS is restricted to approved users only. These include the Authorising Officer, Key Contact, and Level 1 and Level 2 users. Each role carries specific permissions and responsibilities. Sponsors must ensure that only trusted, trained personnel are granted system access.

Once your Sponsor Licence is granted, the Home Office sends login credentials to your designated Authorising Officer. The AO must activate the account, verify company details, and add Level 1 and Level 2 users. It’s good practice to have at least two Level 1 users to avoid access interruptions.

The Authorising Officer oversees compliance and access control. The Key Contact acts as the main point of communication with the Home Office. Level 1 users have full operational control, while Level 2 users perform limited tasks like assigning Certificates of Sponsorship or reporting worker changes.

Typical errors include failing to report changes promptly, assigning Certificates of Sponsorship incorrectly, leaving inactive users on the system, or providing outdated company details. These mistakes can result in Home Office penalties such as licence suspension, downgrade, or revocation.

You should review user access, activity logs, and company details at least quarterly. Update or remove inactive users immediately, and ensure all contact information and organisational changes are accurately reflected in the system. Regular reviews protect against compliance breaches.

Share This Post

Disclaimer

Our articles serve as general guidance and should not be considered legal advice. We do not accept liability for any consequences resulting from reliance on the information provided in our written materials. All readers should seek professional counsel before making any decisions or taking action based on our articles. If you require further assistance, please don’t hesitate to contact us directly for consultation with a qualified professional.

Similar Posts