HMRC Secure Data Exchange Service

Use the Secure Data Exchange Service (SDES) to securely transfer your documents to and from HMRC for certain services.

If you’ve already registered, you can sign in to your SDES account.

This is a Beta service.

SDES is a free, secure way to transfer files to and from HMRC using your Government Gateway user ID and password.

It can only be used to transfer specific types of data and is not for general use. Before you can use SDES, you must register and confirm that the data you want to transfer is supported by the service.

Register for and set up SDES

To check if your data can be transferred using SDES you must first register by contacting the SDES Support Team.

You’ll need to provide the team with details about your organisation, which they’ll use to check if the data you want to transfer is suitable for SDES.

If it is, you’ll receive an email with a service reference number. For security, you must call the number on the email to get your activation code.

Set up SDES for the first time

Before you start, you’ll need:

  • a Government Gateway userID and password linked to your organisation - if you do not have one, ask your organisation’s administrator to set you up as a user, or if your organisation does not have one, you must create a new account

  • your service reference number – found in your email

  • an activation code - you can get this by calling the number in your email

Before using the service, you’ll need to read the terms and conditions. You’ll then need to sign in to SDES and accept the terms and conditions on behalf of your organisation. If you do not have the authority to do this, you should show them to someone that does.

Sign in to SDES and enter your security information.

Using SDES

Once you’ve registered for and set up SDES, you can start to use it to transfer your data using either:

  • your web browser
  • automated transfer via FTPS

Web browser

Using SDES in your web browser is the default option. You can use this option to upload and download files, and update your email preferences.

To use SDES in a web browser, you must have Javascript enabled and be using the latest version of:

  • Internet Explorer
  • Google Chrome
  • Firefox
  • Safari
  • Opera

Automated transfer

Using this option you can transfer your data to and from HMRC automatically. To set this up, you’ll need:

  • software capable of transferring files via FTPS using TLS 1.2 protocol
  • a network with access to the internet
  • a static IP address range for whitelisting

Read the technical guidance about how to set up the automated connection option in SDES.

Security information

SDES can be used to transfer any file formats up to 10GB in size, apart from executable (.exe) and encrypted files, which will be automatically rejected.

Files are retained in SDES for 6 days (144 hours), after which time they’re deleted for security purposes and cannot be recovered.


All connections to SDES are made using industry standard encryption:

  • HTTPS - for web browser transfers
  • TLS 1.2 protocols - for automated transfers

Files are always encrypted during transit or at rest. There’s no direct access to any files within SDES, meaning that even HMRC technical support teams cannot access files.

Test uploads and downloads

SDES has the option to send and receive a test file known as a ‘proving file’. This is a specifically named file that does not interfere with HMRC systems, but gives you the opportunity to verify upload and download capabilities.

To run the proving file test, you must contact the SDES support team.

Manage users

To use SDES, you need to sign in using your organisation’s Government Gateway user ID and password. If someone needs to use SDES but they have not got an account linked to your organisation, you’ll need to add them as a new user.

For security reasons, you must not share your own sign in details with other users.

Add a user

To add a user, sign in to SDES, and follow the steps to add an ‘administrator’ or ‘assistant’.

If you add the new user as an administrator, they’ll automatically have access to SDES.

Remove a user

To remove a user, sign in to SDES, select either ‘Manage Administrators’ or ‘Manage Assistants’ and delete the relevant user.

Service availability

HMRC services may be slow during busy times. Check if there are any current problems with this service, or times it will not be available.

Published 24 January 2018
Last updated 2 July 2018 + show all updates
  1. Guidance in the 'Set up SDES for the first time' section has been updated.
  2. First published.