BPSS is a pre-employment screening standard, not a security clearance. It covers four checks, grants access to UK OFFICIAL information as of right, and gates unescorted entry to most defence and civil nuclear sites. Get it done properly and your contractor starts while SC processes behind them.
Key Takeaways
- The Baseline Personnel Security Standard is set by the Cabinet Office. The current document is Version 7.0, June 2024, published on gov.uk on 28 June 2024, and it has not been revised since.
- BPSS v7.0 paragraph 3 states plainly that “BPSS is not a national security vetting (NSV) clearance.” UK Security Vetting calls it “the recognised standard for the pre-employment screening of individuals with access to government assets” and confirms it “is not a formal security clearance” (UKSV, 23 September 2024).
- It covers four checks only: identity, right to work in the UK, employment history for a minimum of three years, and unspent criminal convictions through DBS, Disclosure Scotland and AccessNI.
- BPSS has no validity period (v7.0 paragraph 68) but is not transferable, so it is re-run every time a worker changes employer, which is the single fact that decides mobilisation speed on a contract hire.
- A standard three-year BPSS costs £56 to £81 per candidate excluding VAT on supplier rate cards published through the Crown Commercial Service Digital Marketplace, against £1,371 for an initial DV clearance (Zinc G-Cloud 15 pricing, 23 January 2026; Parliamentary Question 89899, 24 September 2020).
What the four BPSS checks actually cover
Four checks make up BPSS, and nothing else is mandatory. Paragraph 4 of Version 7.0 lists identity verification, right to work in the UK, employment history, and a criminal record check limited to unspent convictions.
Employers can add more. Paragraph 5 permits organisations to “apply security controls and checks in addition to paragraph 4 above”, provided any extra check stays proportionate and lawful under paragraph 66. That is why two sites running the same standard can ask for different paperwork.
Is BPSS a security clearance?
No, and the distinction has practical consequences. BPSS assesses suitability for employment, while national security vetting assesses suitability to hold a clearance, which is why the two sit in different parts of the process and are run by different people.
UKSV does not run BPSS at all. Its applicant guidance states that “BPSS is not a national security clearance and is not carried out by UKSV” (26 July 2024), because the employing or contracting organisation completes the checks itself.
The confusion is understandable, because government bodies use the wrong term too. The Ministry of Justice’s own user clearance guide refers to staff attaining “BPSS clearance”, and the Sizewell C supply chain onboarding page uses the same phrase. The Cabinet Office standard is the authority here, and departmental usage is loose. Our security clearance reference guide sets out where each level sits.
How far back does the employment history check go?
Three years, as a minimum. Paragraph 51 requires employment history “for a minimum of three years prior to BPSS checks being conducted”, and paragraph 52 adds that gaps of six months or more inside those three years should prompt references or other evidence.
That six-month gap rule is where most delays start. A contractor with a six-month break three years ago needs documented explanation before the file closes, and chasing that evidence after an offer has gone out is what pushes a start date back.
Does BPSS check spent convictions?
Unspent convictions only. Paragraph 57 limits the criminal record element to unspent convictions, checked with the Disclosure and Barring Service, Disclosure Scotland and AccessNI depending on jurisdiction.
That narrow scope matters because BPSS is not where most candidates come unstuck. The harder test arrives at vetting, where the 5 automatic disqualifiers for UK security clearance apply and financial conduct, drug use and deception all come into scope.
One exception is worth knowing. Parliament runs its own pass regime at CTC level and its guidance for external organisations asks for spent and unspent convictions, which is a Parliamentary requirement rather than the BPSS standard.
What BPSS gets you access to, and what it does not
BPSS grants UK OFFICIAL as of right. Paragraph 10 is mandatory in its wording: organisations “shall provide individuals who have passed BPSS access to UK OFFICIAL information and assets”, and it can also provide access to international RESTRICTED material where an international agreement requires it.
Above that, the door closes quickly. Paragraph 11 allows “exceptional supervised access” to UK SECRET with written authorisation from security teams, and states that national security vetting is required for regular access.
Can a BPSS-only worker access SECRET material?
Only exceptionally, supervised, and with written sign-off. Paragraph 12 then sets five absolute bars that no authorisation overrides: roles giving a comprehensive picture of a SECRET plan, policy or project; access to another country’s assets or international CONFIDENTIAL and above; overseas suppliers accessing SECRET and above; access to a restricted site during an overseas visit; and “access to any SECRET codeword material or TOP SECRET material.”
For a hiring manager that translates into a simple rule. If the work itself touches protectively marked material regularly, BPSS will not carry it and the role needs CTC, SC or DV from the start.
How BPSS gets you on site before SC lands
Unescorted site access is the thing BPSS actually buys, and the clearest official evidence sits in a MOD contract schedule. Call-Off Schedule 9 for the Built Estate, framework RM6089, version 1.0 dated 1 June 2021, states that “The Supplier’s Staff will be allowed unescorted entry to Employer Establishments only on a BPSS check, and with the relevant Establishment Security Officer’s (“ESyO”) agreement.”
Civil nuclear runs the same pattern through site vetting units. Hinkley Point C requires staff and contractors to be cleared to at least BPSS before being “set to work unescorted on a civil nuclear industry licensed site” (G4S Site Vetting Unit role via Staffline, 24 June 2025), and Sizewell C applies the identical wording to its contract (G4S, 28 July 2026).
So the sequence that gets work started is BPSS completed, ESyO or site vetting unit agreement obtained, worker on site doing OFFICIAL-level work, with the SC or DV application running behind them.
What does unescorted site access actually require?
BPSS plus the site’s own authorisation. The MOD schedule makes the ESyO agreement a separate condition alongside the BPSS check, which means a completed BPSS file does not by itself open a gate.
Where checks are incomplete, the official guidance is to manage access rather than refuse it. The National Protective Security Authority’s employment screening guide recommends escorting, “zoned/controlled access and distinguishable security passes”, and managing an applicant through “controlled access and/or supervision until all outstanding checks have been successfully completed” (NPSA, April 2023).
One important caveat, stated honestly. No source establishes a universal entitlement for a BPSS-only worker to start while SC processes. It is contract-specific and site-specific, gated on the ESyO or the site vetting unit, and BPSS v7.0 paragraph 3 requires that “A formal offer shall only be made once BPSS is passed.” The practice is starting on a completed BPSS, never on a partial one.
Does BPSS make an SC application faster?
No, and anyone telling you otherwise is selling something. BPSS is a formal prerequisite rather than an accelerator: paragraph 20 requires identity and right to work checks to be completed before an NSV application is initiated, and UKSV confirms BPSS “underpins the national security vetting process at CTC, Level 1B, SC and DV” (23 September 2024).
What BPSS does allow is sequencing. Paragraph 21 lets employment history and criminal record checks run in parallel with the NSV application, provided they finish before clearance is granted, which compresses elapsed time without touching the vetting itself.
The vetting clock is unchanged either way. UKSV’s standard service level agreement times are 25 days for CTC and SC and 95 days for DV, confirmed to Parliament on 2 June 2026 by Cabinet Office minister Dan Jarvis MP, and our analysis of how long SC and DV clearance takes covers what happens between the SLA and reality. Our breakdown of what CTC, SC, DV and eDV clearance mean sets out which level each role actually needs.
Why BPSS is re-run every time you change employer
BPSS has no expiry date and no portability, which sounds contradictory until you look at who holds the evidence. Paragraph 68 states that “BPSS does not have a validity period”, and paragraph 71 adds that “As BPSS is a pre-employment check it cannot be withdrawn.”
Transferability is the catch. Parliament’s guidance for organisations submitting clearance applications, written against BPSS v7.0, states that “BPSS checks are not transferable and must be undertaken as required each time a person changes employer.” The contracting organisation has to hold the underlying evidence itself rather than a third party’s summary certificate, and must retain it for the duration of employment plus two years.
Four triggers force a review even within one employer, under paragraph 68: transferring to another organisation, returning after a break in service of more than 12 months, holding limited entitlement to remain in the UK, or reporting a change in personal circumstances. Paragraph 70 also lets organisations re-review on a risk basis if someone has not started within six months of completing checks.
For anyone moving between contractors on the same site, that is the hidden cost. The clearance may travel with the sponsor, but the BPSS file is rebuilt from scratch.
What BPSS costs and how long it takes
Cost is knowable. The criminal record component is fixed at £20 for a Basic DBS check (DBS guidance, updated 5 October 2026), and a full packaged BPSS runs £56 to £81 per candidate excluding VAT for the three-year version, or £72 to £111 for a five-year version including education, on Zinc’s G-Cloud 15 rate card published through the Crown Commercial Service Digital Marketplace on 23 January 2026. Those are supplier prices, not an official government fee.
Timing is not knowable, and that is worth saying out loud. There is no HMG-published BPSS processing time, because no central body runs the checks. The National Audit Office noted in January 2023 that BPSS “is generally the responsibility of departments’ Human Resources teams”, so no central statistic exists to publish.
The same applies further up. Government does not publish actual vetting processing times either, as the Cabinet Office confirmed on 28 April 2026: “In line with the practice followed by successive administrations, the Government does not disclose granular performance data or specific case details, as to do so could prejudice national security and provide insights into the operational thresholds of our security safeguards.” The last performance figures officially disclosed were a snapshot at 29 February 2024, showing 96% of CTC and SC cases inside the 25-day target and 93.48% of initial DV inside 95 days.
Against that, volumes give a sense of scale. The National Audit Office recorded an average of 164,700 CTC and SC clearances and 17,900 DV clearances a year since 2018 to 2019, and the Defence Nuclear Enterprise alone now supports over 47,000 jobs, heading for about 65,000 by 2030 (MOD Defence Nuclear Enterprise 2026 Annual Update to Parliament, September 2026).
What changed on 1 October 2026
The BPSS standard did not change, but one of its four checks did. Right to work guidance was updated on 1 October 2026, the current employer’s guide runs to 83 pages, and section 48 of the Border Security, Asylum and Immigration Act 2025 widened the illegal working regime beyond standard employment relationships.
Three changes land on contract hiring directly. Businesses engaging individuals under a worker’s contract rather than an employment contract are now in scope, individual subcontractors inside a contractual chain are in scope, and businesses higher up a supply chain can carry liability for workers they hold no direct contract with. Civil penalties reach £60,000 per illegal worker, with criminal liability in serious cases.
There is also a terminology gap worth knowing about. The current right to work regime requires digital identity providers to be registered with the Office for Digital Identities and Attributes and specifically authorised for right to work checks, using the term Right to Work Digital Verification Service Provider. BPSS v7.0 still refers to Identity Document Validation Technology providers, because the standard has not been updated since June 2024.
So a BPSS file built to the letter of the standard can still fail a current right to work check. That is the practical reason to treat the two as separate obligations rather than one, and why engagement model matters: the IR35 and off-payroll working rules decide which party in the chain carries the check and the liability.
How we handle BPSS on a cleared mobilisation
Step 1. We establish the site’s actual access baseline before we shortlist, because a BPSS-baseline site and a clearance-held-on-day-one contract are different searches with different candidate pools and different timescales.
Step 2. We screen employment history against the three-year rule at first contact, so any gap of six months or more surfaces before an offer rather than after one.
Step 3. We run identity and right to work first, since paragraph 20 requires both before an NSV application can be initiated and the 1 October 2026 rules now test them harder.
Step 4. We sequence the remaining checks in parallel with the clearance application where the contract permits it, using the paragraph 21 allowance rather than waiting for a fully closed BPSS file.
Step 5. We confirm ESyO or site vetting unit agreement separately from the BPSS file, because the completed checks alone do not open a gate.
Step 6. We hold the evidence ourselves to the retention standard, employment plus two years, and supply a verification record when a worker moves sponsor or enters an NSV application.
Our defence and MOD recruitment team runs this on every cleared mobilisation, alongside the civil nuclear programmes at Sellafield, Hinkley Point C and Sizewell C.
Frequently Asked Questions
Is BPSS the same as SC clearance?
No. BPSS is pre-employment screening run by the employer, covering four checks, and UKSV states it “is not a formal security clearance”. SC is national security vetting run by UKSV with a 25-day service level agreement. BPSS is a prerequisite for SC rather than a lower grade of it.
How long does BPSS take?
No official processing time exists, because employers run BPSS themselves rather than a central body. The National Audit Office confirms it sits with departmental HR teams. Timing depends on three things: Basic DBS turnaround, the right to work check, and how quickly three years of employment history can be verified.
Can I start work on BPSS while my SC clearance is processing?
On many sites, yes. A MOD contract schedule permits unescorted entry to Defence establishments on a BPSS check with the Establishment Security Officer’s agreement, and Hinkley Point C and Sizewell C both require BPSS before unescorted work. Access stays limited to UK OFFICIAL until clearance lands.
Does my BPSS transfer to a new employer?
No. Parliament’s guidance states BPSS checks “are not transferable and must be undertaken as required each time a person changes employer”. BPSS itself has no expiry date, but each contracting organisation has to complete and hold its own evidence, so the file is rebuilt on every move.
What does BPSS cost an employer?
A packaged three-year BPSS runs £56 to £81 per candidate excluding VAT on supplier rate cards published through the Crown Commercial Service Digital Marketplace in January 2026, with the Basic DBS component fixed at £20. For comparison, UKSV charged £1,371 for an initial DV clearance when that figure was last disclosed in 2020.
Mobilising cleared contractors and losing time to vetting?
Scantec sources BPSS-ready and security-cleared engineers, trades and technical staff into UK defence, MOD and civil nuclear programmes, and manages the screening file so start dates hold.
About the Author
Peter Bates is the founder and Managing Director of Scantec Personnel, the engineering, manufacturing and scientific recruitment business he established in 1990 and still leads from its Birkenhead head office. Over more than 35 years he has built Scantec around four things: delivery, integrity, transparency and compliance.
His teams recruit across nuclear, defence, engineering, manufacturing, FMCG and scientific markets, placing security-cleared and technically qualified staff on permanent, contract and project terms. Scantec holds ISO 9001 certification.
Peter writes on UK technical hiring, security clearance, contractor regulation and sector pay, drawing on the live vacancy and placement data Scantec generates across its own desks.
