Construction compliance guide
Best CIS Software for UK Builders and Contractors
If you pay subcontractors, the Construction Industry Scheme is a monthly legal obligation. Here are the tools that handle it — ranked honestly, including HMRC's free option. And one thing up front: The Site Book is not one of them, and we explain why.

TL;DR
CIS means verifying subcontractors with HMRC, deducting at the right rate and filing monthly. FreeAgent has the strongest built-in CIS workflow for small firms; Xero, QuickBooks and Sage run it inside full accounts; HMRC's free service suits very low volumes. Since April 2026, supply-chain fraud you should have known about can cost you too — Tax Radar's CIS Defence keeps a record of your checks.
CIS handles the tax — handle the site paperwork here
Set up a free account and generate the RAMS, construction phase plan and site induction for one real job. No card needed.
Start free →In this guide
What CIS software actually does
Under the Construction Industry Scheme, a contractor paying subcontractors must verify each one with HMRC before the first payment, deduct tax from their payments at the rate HMRC confirms, give each subcontractor a statement of what was deducted, and file a monthly return. The full rules are in HMRC's CIS 340 guide. Since 6 April 2026, HMRC also has new anti-fraud powers over businesses that knew, or should have known, about fraud in their supply chain — covered in its own section below. Check GOV.UK for the current position rather than relying on any third-party summary, including this one.
CIS software automates that loop: verification from inside your accounts, deductions calculated on each bill at the verified rate, statements generated automatically, and the monthly return pre-filled from what you actually paid. The first four ranked tools below do all of this, and HMRC's free service at #5 covers the legal minimum — the ranking is about who each one fits. A sixth tool, Tax Radar's CIS Defence, does a different job: it checks the businesses you pay and keeps the evidence.
How we ranked these tools
Full disclosure: The Site Book does not sell CIS software, so we have no product to push in this list. We build the health and safety half of a contractor's compliance stack, our customers ask us about the tax half constantly, and this is the answer we give them. The ranking weighs how completely each tool covers the CIS loop, and who it genuinely fits — a sole trader paying two subbies has different needs from a firm with a finance team. We deliberately avoid quoting prices: they change, plans vary, and the vendors' own pricing pages are the only current source.
Tax Radar's CIS Defence sits outside the ranking because it doesn't compete with the five tools on it. It isn't built to calculate deductions or file returns; it covers the due-diligence evidence that the April 2026 anti-fraud rules put a premium on, and it runs alongside whichever CIS tool you choose.
#1 FreeAgent — strongest CIS workflow for small contractors
FreeAgent treats CIS as a first-class feature rather than an add-on: subcontractor verification runs from inside the app, deductions are calculated automatically at the verified rate on each bill, deduction statements are generated for your subcontractors, and the monthly return files to HMRC from the same screen. For subcontractors, CIS deductions suffered flow through to Self Assessment.
It is built for sole traders and micro businesses, which is exactly where most CIS-paying builders sit. If your accounts are simple and CIS is your main tax headache, this is the shortest path to getting it handled.
#2 Xero — CIS inside a full accounts platform
Xero's CIS support covers the contractor workflow — verify subcontractors, calculate deductions on bills, produce statements, and file monthly returns — with the full CIS feature set available as an add-on to its standard plans.
The reason to choose Xero is usually the rest of the platform: if your accountant works in Xero, or you are past the sole-trader stage and need proper multi-user accounts, payroll, and app integrations, having CIS inside the same system beats bolting on a separate tool.
#3 QuickBooks Online — built-in CIS for existing QuickBooks users
The UK edition of QuickBooks Online includes CIS in its core product: turn it on, and subcontractor verification, deduction calculations on bills, deduction statements, and monthly return filing are all handled inside your existing bookkeeping.
If you already run your accounts in QuickBooks there is no reason to look elsewhere for CIS. If you are choosing fresh, the decision usually comes down to which ecosystem your accountant prefers rather than CIS capability differences.
#4 Sage — CIS for established finance teams
Sage covers CIS across its range — from Sage Accounting for smaller firms to Sage 50 with its CIS module for businesses with a dedicated finance function. The workflow covers verification, deductions, statements, and monthly returns, with the depth of reporting and audit trail that larger contractors and their auditors expect.
It is rarely the pick for a sole trader — the value shows up when payment volumes are high, several people touch the books, and CIS is one compliance stream among many.
#5 HMRC's free CIS online service — the workable baseline
HMRC's own online service does the two legally required jobs for free: verify a subcontractor before you first pay them, and file your monthly CIS300 return. For a contractor paying one or two subbies, this plus a disciplined spreadsheet is a legitimate setup.
What you give up is everything around those two steps — deduction calculations, statements for your subcontractors, and any connection to your accounts all stay manual. That is where errors and missed deadlines come from as volume grows, and it is the honest case for paying for one of the tools above.
New from April 2026: the ‘knew or should have known’ test
Verify, deduct and file is no longer the whole of CIS. From 6 April 2026, if a business knew or should have known, before making a payment, that someone else in the same supply chain had deliberately failed — or would deliberately fail — to deduct or pay over CIS or PAYE, HMRC can:
- make it pay an amount equal to 20% of that payment (a matching rule makes a subcontractor repay CIS credits it claimed in the same circumstances);
- charge a penalty of up to 30% of that amount — and where a company's failure is down to a director or other officer, pass some or all of the penalty to them personally; and
- cancel its gross payment status with immediate effect, with a five-year bar on reapplying (previously one year).
HMRC's policy paper, Tackling Construction Industry Scheme fraud, explains the intent, and its manual for officers sets out how the rules work. The measures are aimed at businesses that knowingly deal with fraudulent supply chains, but “should have known” can also catch a business that ignores clear signs of fraud — where non-compliance was the only reasonable explanation for the deal.
For an honest contractor, the checking is what counts. The same manual tells officers to look at the due diligence a business did — which checks, when and how often, what they showed and whether it acted on them — and to test whether the checks were genuine rather than just paperwork. HMRC doesn't prescribe a list of checks: it expects them proportionate to the risk and done before a subcontractor is taken on (or immediately after, for urgent work). And it says that where a business genuinely did everything it could to check its supply chain, can show it did, heeded any warning signs and had no other reason to suspect tax would go unpaid, it is unlikely it knew or should have known.
HMRC's guidance on checking for signs of labour fraud in construction is the practical starting point. It asks businesses to check the credibility of their supply chain, carry out due diligence checks and be clear about who pays the workers — and to keep a detailed record of all the checks they do. The warning signs it lists include newly formed subcontractors with no history of gross payment status, frequently changing companies in the chain (‘phoenixing’), directors with a history of going into liquidation, and labour costs that seem too good to be true.
At low volumes, a dated spreadsheet of what you checked, what it showed and what you decided may be enough. As subcontractor numbers and churn grow, that record gets harder to keep by hand — and a newer category of tool has appeared to keep it for you.
Tax Radar CIS Defence — due-diligence evidence alongside your CIS tool
CIS Defence, from Tax Radar, is monitoring software built around the April 2026 rules rather than the deduction loop. It checks each subcontractor's CIS registration and gross payment status with HMRC and re-checks them monthly, and it watches Companies House for phoenix-company warning signs, from serial dissolutions and re-registrations to directors' histories. It also benchmarks labour rates against published pay rates, and lets project managers confirm that the workers on site match the workers being paid.
The output is the point: for each subcontractor, a timestamped PDF evidence file recording the sources checked and when, the risks flagged, the decisions made and the reasoning behind them, and who signed them off — rebuilt monthly and ready to export if HMRC opens an enquiry. That covers the questions HMRC's manual tells its officers to ask: which checks, when and how often, what they showed and whether you acted on them. A record like this is evidence, not a defence in itself: HMRC also weighs whether the checks were appropriate, adequate and timely, and Tax Radar is clear that no tool can promise the outcome.
It works alongside the tools above rather than replacing them — Tax Radar says it does not replace the filing process — so you still need one of the five for deductions and the monthly return. Tax Radar prices it per active subcontractor per month and lists no setup fee or minimum term; see its pricing page for the current rate. It earns its keep when you pay enough subcontractors, or change them often enough, that a hand-kept record of checks would slip. Like the rules it is built for, CIS Defence is new, so there is little independent track record to go on yet.
CIS is the tax half — don't forget the safety half
Every contractor paying subcontractors on site is running two compliance lanes at once. CIS is the tax lane. The safety lane — CDM 2015 — is the one that requires RAMS, a Construction Phase Plan, site inductions, and evidence that your subcontractors' people were inducted and competent before they started. Our guide to what documents subcontractors need covers that side in detail.
That lane is what The Site Book does: RAMS, CPPs, COSHH, site inductions, toolbox talks, and worker records, generated from one project setup and bundled into an audit-ready pack. Pick a CIS tool from the list above for HMRC, and pair it with health and safety software for the HSE — the two together are the whole compliance story.
Dedicated CIS software vs HMRC's free service
Pros
- Deductions calculated automatically at the verified rate — no rate looked up wrong under deadline pressure.
- Payment and deduction statements generated per subcontractor, every month, without a spreadsheet.
- Monthly CIS300 returns pre-filled from actual payment records and filed from the same system.
- One audit trail: verification, payments, deductions, and returns in one place if HMRC comes asking.
Cons
- It is another subscription — at one or two subcontractors, HMRC's free service plus discipline is genuinely enough.
- CIS features are usually tied to a full accounts package, so switching CIS tool can mean switching bookkeeping.
- Software does not remove the legal duty: verification before first payment and the filing deadline are still yours.
- None of these tools touch H&S compliance — RAMS, CPPs, and inductions are a separate lane entirely.
| Tool | Verify subcontractors in-app | Files monthly CIS300 | Deduction statements | Best for |
|---|---|---|---|---|
| FreeAgent | Yes | Yes | Yes | Sole traders and micro contractors |
| Xero (CIS add-on) | Yes | Yes | Yes | Growing firms working with an accountant |
| QuickBooks Online (UK) | Yes | Yes | Yes | Small firms already on QuickBooks |
| Sage Accounting / Sage 50 CIS | Yes | Yes | Yes | Established firms with a finance function |
| HMRC CIS online (free) | Yes | Yes | Manual | Very low subcontractor volumes |
| Tax Radar CIS Defence | Yes, re-checked monthly | No — pair with a tool above | No | Evidencing subcontractor due diligence |
“Under the Construction Industry Scheme (CIS), contractors deduct money from a subcontractor's payments and pass it to HM Revenue and Customs (HMRC).”
Frequently asked questions
Do I actually need CIS software?
It depends on volume. If you pay one or two subcontractors occasionally, HMRC's free CIS online service — verify the subcontractor, file the monthly return by the 19th — is workable, and plenty of small contractors run that way. The case for software builds as volume grows: automatic deduction calculations at the verified rate, deduction statements generated for each subcontractor, monthly returns pre-filled from your payment records, and an audit trail if HMRC asks questions. If CIS admin is costing you hours each month or you have ever missed a return deadline, software pays for itself quickly.
Can I run CIS for free through HMRC?
Yes. HMRC provides a free CIS online service for contractors: you can verify subcontractors before first payment and file your monthly CIS300 returns through it. What it does not do is the surrounding bookkeeping — calculating the deduction on each invoice, producing payment and deduction statements for your subcontractors, or connecting any of it to your accounts. Those gaps are what the paid tools fill. For a contractor paying a handful of subbies, free plus discipline works; past that, the manual steps are where mistakes and penalties creep in.
What changed in CIS in April 2026?
From 6 April 2026, if a business knew or should have known, before making a payment, that someone else in the same supply chain had deliberately failed — or would deliberately fail — to deduct or pay over CIS or PAYE, HMRC can make it pay an amount equal to 20% of that payment and charge a penalty of up to 30% of that amount, some or all of which it can pass to a director or other officer personally where the failure is down to them. It can also cancel the business's gross payment status with immediate effect, with a five-year bar on reapplying (previously one year). A matching rule makes a subcontractor repay CIS credits it claimed in the same circumstances. HMRC's policy paper, Tackling Construction Industry Scheme fraud, and its manual page CISR85010 set out the detail. The verify, deduct and file routine still applies — the change raises the stakes on who you pay, not just how you pay them.
What due diligence should I do on subcontractors?
HMRC doesn't prescribe a list of checks — it expects due diligence proportionate to the risk, done before you take a subcontractor on. Its guidance on labour fraud in construction asks businesses to check the credibility of their supply chain, carry out due diligence checks, be clear about who pays the workers, and keep a detailed record of all the checks they do. In practice that usually includes verifying CIS status with HMRC, looking up the company and its directors on Companies House, checking VAT registration, and noting any warning signs HMRC lists — a newly formed subcontractor with no history of gross payment status, directors with a history of liquidations, labour costs that seem too good to be true — along with what you did about them. Checking only your direct subcontractors may not be enough when the work passes further down a chain. A spreadsheet can hold that record at low volumes; monitoring tools such as Tax Radar's CIS Defence re-check subcontractors monthly and keep a timestamped evidence file for each one.
What is the difference between CIS compliance and CDM compliance?
They are two different legal regimes that both land on construction contractors. CIS — the Construction Industry Scheme — is tax: HMRC rules about deducting money from subcontractor payments and reporting it monthly. CDM 2015 is health and safety: the regulations that require RAMS, Construction Phase Plans, site inductions, and a managed site. The software markets are separate too — accounts packages handle CIS, and tools like The Site Book handle the CDM side. A contractor paying subcontractors on site typically needs both lanes covered.
Does The Site Book handle CIS?
No — and we would rather say that plainly than imply otherwise. The Site Book covers the health and safety half of a contractor's compliance: RAMS, Construction Phase Plans, COSHH assessments, site inductions, toolbox talks, worker records, and the audit trail behind them. For CIS you need an accounts or payroll tool from the list above (or HMRC's free service). The two work side by side: your accounts package proves you paid subcontractors correctly, and The Site Book proves your site was run safely.
Related guides
What Documents Do Subcontractors Need?
RAMS, insurance, CSCS cards, and the rest of the pre-start pack.
What Paperwork for a Construction Job?
The full checklist across tax, insurance, and safety.
Best Tools for Builders Paperwork
The safety-paperwork side of the software stack, ranked.
What is CDM?
The safety regulations that sit alongside CIS.
The safety half, sorted today.
CIS covered? Good. Now get the RAMS, CPP, and inductions your subcontractors will be asked for — generated from one project setup. No credit card required.
Sources
- What is the Construction Industry Scheme (CIS)? — GOV.UK · Accessed 4 July 2026
- Construction Industry Scheme: a guide for contractors and subcontractors (CIS 340) — GOV.UK · Accessed 4 July 2026
- Tackling Construction Industry Scheme fraud (policy paper) — GOV.UK · Accessed 29 September 2026
- Check for signs of labour fraud in construction — GOV.UK · Accessed 29 September 2026
- Finance Act 2004, section 62A (inserted by Finance Act 2026 from 6 April 2026) — legislation.gov.uk · Accessed 29 September 2026
- CISR85010 — CIS fraud measures: introduction (HMRC internal manual) — GOV.UK · Accessed 29 September 2026
- CISR85080 — CIS fraud measures: due diligence and risk assessments (HMRC internal manual) — GOV.UK · Accessed 29 September 2026
- CISR85090 — CIS fraud measures: HMRC guidance on due diligence (HMRC internal manual) — GOV.UK · Accessed 29 September 2026
- CIS Defence: monitoring for UK construction supply chains — Tax Radar · Accessed 29 September 2026
- CIS verification: what it actually checks (and what it doesn't) — Tax Radar · Accessed 29 September 2026
- CIS Defence pricing — Tax Radar · Accessed 29 September 2026