Terms of use
Last updated 31 July 2026.
What this software is
Bastion Gateway is software that creates digital records. It keeps digital records, works out what is due, and sends it to HMRC on your instruction.
It does not give tax advice. It does not decide your tax position. Figures come from the records you provide, and if those records are wrong what we send will be wrong.
What you are responsible for
- The accuracy and completeness of the records you enter or import.
- Holding the right authorisation to act for each client, and keeping it current.
- Confirming each declaration. Nothing goes to HMRC without someone confirming it, and that confirmation is yours.
- Keeping your account credentials secure, including any multi-factor method.
What we are responsible for
- Sending what you confirmed, unchanged, to HMRC.
- Keeping a record of what was sent and what HMRC returned.
- Telling you plainly when something failed, and whether it is safe to try again.
- Protecting your data as described in the privacy policy.
Where HMRC’s responsibility begins
HMRC operate the service we send to. When HMRC are unavailable, reject something under their own rules, or change how a tax year works, that is outside our control. We will tell you what HMRC said and what it means, and we will not pretend an HMRC outage is something we can fix.
Questions about your tax position, an HMRC penalty, or how HMRC treat a specific figure go to HMRC or to a qualified adviser. Questions about this software come to us.
When an outcome is unknown
Occasionally something leaves this software and no confirmation comes back. When that happens we tell you so explicitly rather than guessing, and we do not send it again automatically — doing so could file the same figures twice. Check with HMRC first, and we will show you everything we know about that attempt.
Availability
We aim to keep the service available and we publish incidents. We do not currently offer a contractual uptime guarantee.
Ending your use
You can stop using the software and ask us to delete your data at any time, subject to the retention rules in the privacy policy. Disconnecting from HMRC revokes our authorisation and deletes the stored credentials.