Becoming a Companies House authorised agent is not an account-opening exercise. It is a decision to take responsibility for identity verification and filings that sit at the heart of the UK company register.

The new Authorised Corporate Service Provider, or ACSP, regime changes who can perform that work for clients. It also brings a useful compliance question into focus: when a firm is trusted to verify people and submit information on behalf of others, how does it demonstrate that its people, controls and records deserve that trust?

The terminology needs care. The UK does not have one entirely new, universal “fit-and-proper test for ACSPs”. Companies House authorisation is new. HMRC's fit-and-proper test for trust or company service providers has existed under the Money Laundering Regulations for years. The two regimes meet in practice, but they are not the same thing.

What ACSP authorisation changes

ACSPs are Companies House authorised agents. They can be a business, such as a limited company or partnership, or a sole trader filing for clients. Companies House guidance says that an applicant must be supervised by a UK anti-money laundering supervisory body.

The current rollout is phased. At present, agents that plan to verify clients' identities for Companies House need to register. Companies House says that, in future, all agents filing on behalf of clients will need to register. That gives firms a clear reason to prepare now even if their immediate role does not involve identity verification.

Authorisation brings continuing responsibilities, not a one-off approval. An ACSP must remain registered with an AML supervisory body, notify Companies House of changes to its registered information within 14 days, provide further information when requested and keep records of identity checks for seven years. For a corporate ACSP, all officers are responsible for meeting those legal requirements. A failure can lead to the agent being suspended or ceased, as well as potential enforcement consequences for the people responsible.

This is a material shift from the old assumption that filing access is just a digital convenience. The register is placing accountable, supervised intermediaries between sensitive company information and the public record.

The existing HMRC fit-and-proper test still matters

For trust or company service providers supervised by HMRC, the fit-and-proper test is not new. HMRC's current guidance says the test applies to money service businesses and trust or company service providers as part of AML supervision registration.

It applies not only to the entity. The business's beneficial owners, officers and managers, known as BOOMs, must pass before HMRC will register it. The assessment considers, among other things, relevant unspent convictions, a pattern of non-compliance or money-laundering risk, and the person's honesty, integrity, skills, experience and financial soundness.

That is the important operational point. A company can have polished procedures, a recognised brand and an experienced operations team, yet still fail an eligibility requirement because a relevant individual cannot satisfy the test. HMRC also expects changes in the people running or effectively directing the business to be kept current. New BOOMs need to be added to the registration process, and certain personnel changes have short notification windows.

The ACSP regime does not replace that AML-supervision work. It builds a Companies House authorisation layer on top of it. Firms should therefore avoid treating ACSP registration as a form to be completed by one director in isolation. It is a governance exercise that depends on the firm's people, supervisory status, processes and evidence base.

Prepare the operating model, not only the application

The strongest preparation work is not a last-minute collection of certificates. It is making sure the firm can operate as an accountable agent after authorisation.

Start with the people. Identify every director, senior manager, beneficial owner and person who effectively directs the regulated activity. Confirm who owns the relationship with the AML supervisor, who is responsible for Companies House notifications and who can approve or remove users from the ACSP account. The Companies House account has separate owner, administrator and standard-user roles. Those permissions should mirror real accountability, not simply who happens to be available to complete a filing.

Then test the evidence trail. When an identity verification is completed, can the firm show what evidence it used, who made the decision, when it was made and how exceptions were handled? Can it retrieve that record for the required retention period? If Companies House asks about a specific filing or identity check, the answer should be accessible without rebuilding the case from shared inboxes and personal drives.

Finally, connect the ACSP workflow to the wider AML control framework. Identity verification, entity verification, ownership mapping and PEP/sanctions screening should not create parallel records that cannot be reconciled later. This is especially important for professional firms and investment services businesses handling cross-border structures, SPVs and partnerships. The entity that makes a Companies House filing may be only one part of the customer relationship that needs to be understood.

As the discussion of AML pressure on professional services firms makes clear, the challenge is rarely the absence of a policy. It is converting the policy into a workflow that remains consistent when volumes rise and cases become complex.

The real test is whether the firm can stand behind its work

ACSP authorisation changes the level of accountability attached to acting as an agent. The fit-and-proper framework under AML supervision determines whether the relevant people are suitable. Companies House authorisation determines whether the firm can perform the role on the register. Neither should be approached as a compliance hurdle that ends at registration.

For a purpose-built, end-to-end operating model, the standard is higher and more useful: every identity decision, ownership assessment and filing should be explainable to the firm, its supervisor and the client it represents. AI-first workflows can reduce the manual burden of reviewing documents and mapping complex entities; human oversight remains essential where the evidence is unclear or the risk decision is material.

The firms that treat ACSP status as a durable operating responsibility will be better placed than those that treat it as another filing credential. The company register is becoming more reliable by making the agent accountable. The internal control environment has to keep pace.