Referral audit trails: what good evidence looks like

Doing the right thing and being able to prove you did it are two different skills, and in a regulated context you need both. Months or years after an introduction, a client, a professional body, or your own supervisor might ask how a referral came about. If your answer is a vague recollection, you are exposed even if you behaved impeccably. If your answer is a clear, contemporaneous record, the question resolves almost immediately.

An audit trail is simply the collection of records that show, step by step, that a referral was handled properly. It is not bureaucracy for its own sake; it is the evidence that protects you. The effort of keeping it is trivial compared with the difficulty of reconstructing events after the fact under scrutiny. Good record keeping is quiet insurance.

A strong audit trail captures the key moments of the referral without drowning in detail. At minimum, it should evidence that you disclosed your fee, that the client consented to their data being shared, that the introduction went to a properly vetted firm, and when each of these happened.

• A record that the referral fee was disclosed before the client committed
• Evidence of the client's consent to share their personal data
• The identity of the vetted, regulated advice firm the client was introduced to
• Dates for the disclosure, consent, and introduction
• A note that you acted as introducer, not adviser

Together these show the referral was compliant on every dimension that matters: disclosure, consent, appropriate destination, and correct role. That is the spine of good evidence.

The single most important quality of good evidence is that it was created at the time, not assembled afterwards. A note made on the day the introduction happened carries far more weight than a summary written months later when a question arises. Contemporaneous records are harder to doubt because they were made before anyone had a reason to shape them.

This is why building record keeping into the referral process itself is so valuable. If disclosure, consent, and the introduction are logged as they occur, the audit trail assembles itself. A well-run referral network often supports this by capturing key steps automatically, so the evidence exists without you having to remember to create it. The goal is a trail that is a natural by-product of doing the referral properly, not a separate chore.

Good evidence is complete on the essentials but does not hoard unnecessary personal data. The principle of data minimisation applies to your records as much as to what you share: keep what you need to demonstrate the referral was handled correctly, not an indiscriminate archive of everything about the client. An audit trail that captures disclosure, consent, destination, and dates is proportionate; one that stockpiles sensitive detail with no clear purpose creates risk rather than reducing it.

Think of the trail as answering a specific set of questions: was the fee disclosed, did the client consent, was the firm vetted, and when. Records that answer those questions cleanly are exactly what you want. Records that go far beyond them add data protection exposure without strengthening your position. Aim for clear and sufficient, not voluminous.

Evidence is only useful if you can find it. A trail scattered across emails, memory, and loose notes is barely better than none, because under pressure you will struggle to pull it together. Keep referral records where they belong, in the client file or in the network's tracking system, so that any single introduction can be reconstructed in minutes rather than hours.

Retention also matters: keep records for a period consistent with your professional obligations and data protection principles, then dispose of them appropriately. The aim throughout is simple. If anyone ever asks how a referral was handled, you can show, from records made at the time, that you disclosed your fee, obtained consent, introduced the client to a vetted, regulated advice firm, and stayed firmly within your role as an introducer. When your evidence tells that story clearly, a question about a referral stops being a worry and becomes a formality. That is what a good audit trail buys you: not just compliance, but calm.