The UK vape operator audit file: how to prove your duty, stamp and marketing controls in 2026

A UK vape business can have the right policy and still fail an audit if nobody can find the evidence.

That is the practical risk for 2026. Vaping Products Duty, duty stamps, supply-chain movements and ad approval rules do not only create new tasks. They create a question that finance, warehouse, ecommerce and marketing teams all need to answer in the same way: can we prove what we did, when we did it, and why it was allowed?

This guide is for adult-focused UK vape operators that already understand the broad shape of duty and advertising obligations. It does not repeat a basic duty-stamps explainer. Instead, it sets out a working audit file: the records, approvals and review habits that help a business show its controls if HMRC, a supplier, a platform, a complaint handler or an internal reviewer asks. For broader duty context, see our UK retailer guide to vaping products duty and duty stamps.

• UK vape operators need more than a duty calculation sheet. They need a retained evidence file that shows what was sold, where it moved, who approved it, and what claims were checked.
• HMRC guidance confirms Vaping Products Duty is volume-based. The duty applies whether or not the liquid contains nicotine, at £2.20 per 10ml, with duty points depending on manufacture, import, warehouse release and other movements.
• Duty stamps add traceability. They introduce physical stamp requirements, digital features and scanning events in the supply chain.
• Marketing evidence belongs beside tax and stock records. ASA/CAP rules still restrict some advertising for nicotine-containing e-cigarettes that are not licensed as medicines.

Most compliance gaps start as filing gaps. A product launch is priced by finance, listed by ecommerce, moved by warehouse staff, promoted by marketing and reconciled later by accounts. If each team keeps its own version of the truth, the business may struggle to prove the basic chain.

Start with an evidence map. This is a single index of the records that connect a product to its duty, stock and marketing decisions. For each product line or SKU, the audit file should point to the product name, liquid volume, nicotine status where relevant, supplier or manufacturer record, purchase order, warehouse or duty-suspension status, stamp status where relevant, release date, marketing asset IDs and approval notes, and the named owner for the current record.

HMRC guidance matters here because the duty is calculated by reference to vaping liquid volume and the rules apply whether or not the liquid contains nicotine. If the volume on packaging, invoices and internal records does not line up, the business has a proof problem before it has a tax argument.

A useful structure is:

• Product evidence -- SKU, liquid volume, pack format, supplier/manufacturer, version date.
• Movement evidence -- import, production, warehouse entry, duty suspension status, release date.
• Financial evidence -- duty calculation, return period, payment reference, adjustment notes.
• Stamp evidence -- stamp order, allocation, affixing record, digital scan events where applicable.
• Marketing evidence -- channel, audience, asset, claim review, approval owner.

That fifth line is often missed. It should not be. The commercial message is part of the operating record, especially when the same product appears in paid, owned or social channels.

Duty stamps are easy to think about as a packaging requirement. For audit purposes, they are better treated as traceability records.

GOV.UK guidance explains that the Vaping Duty Stamps Scheme sits alongside Vaping Products Duty and affects manufacturers, importers, wholesalers, distributors and retailers in the supply chain. HMRC guidance on how duty stamps work describes physical stamp properties, purchasing controls, digital features and scanning events.

That means the audit file should not simply say “stamped: yes.” It should record the life of the stamp against the product movement it supports.

At minimum, keep:

• stamp purchase date and quantity
• stamp type, including whether transitional or digital arrangements apply
• allocation of stamps to product batches or packaging runs
• affixing date and location
• spoiled, damaged or unused stamp records
• scanning or activation record where digital features apply
• reconciliation between stamps purchased, stamps used and products released

This is where smaller operators can get exposed. A staff member may know that stamps were ordered and applied, but the proof may sit in a supplier email, a warehouse notebook and a spreadsheet nobody else understands. That is fragile. The audit file should make the chain legible to a new finance manager or an external reviewer without relying on memory.

The same applies to transition periods. Keep a dated note explaining which rule applied at the time and which source was checked. Do not rewrite GOV.UK guidance in your own words and treat that as the source. Link the actual page, record the date checked, and keep a version note in your internal SOP.

Marketing review should live beside operational records because a product’s compliance story does not end when stock leaves the warehouse.

CAP Code section 22 covers electronic cigarettes and explains that advertising restrictions apply to nicotine-containing e-cigarettes that are not licensed as medicines in some media channels. ASA/CAP advice on media prohibitions gives practical channel guidance and highlights why public social media and other communications can be high risk depending on the content and context.

For an operator, the evidence question is simple: when a public message went live, who checked the channel and claims?

Create a channel approval log for every asset that mentions a vape product, nicotine, flavour, stock, price or promotion. The log should capture the asset title or campaign ID, product or category referenced, channel and placement type, whether the communication is public, paid, owned, one-to-one, trade-only or informational, whether nicotine-containing products are featured, whether there is a call-to-action, claim type, approval owner and date, source guidance checked, and final publish decision.

The strongest approval logs are not long essays. They are short enough for teams to use and strict enough to stop weak claims. Use a red-flag column for wording that should trigger review before publication:

• “safe”, “risk-free” or similar absolute safety language
• health or medical benefit wording
• youth-coded imagery or tone
• broad public promotion of unlicensed nicotine products in restricted channels
• influencer, affiliate or user-generated content where the sales intent is not clearly controlled
• claims that blur nicotine and non-nicotine products in a way that could indirectly promote prohibited products

This is not a recommendation to publish as much as possible with a form attached. It is a way to stop questionable assets before they leave the business. The log also helps when platforms, partners or complaint handlers ask what review took place. A clean answer is stronger than a retrospective explanation.

An audit file has to survive the person who built it. That is the test many businesses fail.

If only one founder, finance lead or marketing manager understands the duty spreadsheet, the control is not mature. The business needs a pack that another adult professional can open and use without a handover call.

Build the pack around four folders:

• Current rule sources -- GOV.UK duty and stamp guidance, HMRC payment and approval guidance, ASA/CAP electronic-cigarette advertising rules and advice, legislation links where the SOP relies on statutory wording.
• Operating SOPs -- duty calculation process, stamp purchase, storage, use and reconciliation, stock movement and release process, marketing approval process, escalation route for uncertain claims or new channels.
• Live registers -- product evidence map, stamp register, duty return/payment register, channel approval log, open issues and corrective actions.
• Monthly review notes -- source pages checked and dates, product or channel changes, exceptions and fixes, staff training or handover notes.

The monthly review note is small but important. It proves that compliance was an operating rhythm rather than a one-off project. Keep it factual: what changed, what was checked, who reviewed it, and what action was taken. Example notes can be as simple as “Checked HMRC duty payment guidance on 23 May 2026; no SOP change required” or “Paused planned public social asset pending CAP/ASA channel review.”

That level of record is useful because it is specific without making legal promises. It shows control, not perfection.

If the business is starting from fragmented spreadsheets, do not try to rebuild every historic record in one week. Fix the forward process first, then backfill the highest-risk gaps.

Start with five actions:

1. Name the record owner -- give one person accountability for the audit file.
2. Choose the product sample -- pick one high-volume or high-risk SKU and trace it from supplier through stock movement, stamp status, duty record and marketing assets.
3. Standardise source names -- use the same product names, SKU codes and campaign IDs across finance, warehouse and marketing records.
4. Add evidence links, not explanations -- point to invoices, returns, screenshots, approval notes and source pages.
5. Create a weekly exception list -- track missing evidence, unresolved campaign approvals, unexplained stock differences and source updates.

For adult vape businesses, this is a credibility exercise as much as a compliance exercise. A careful evidence file signals that the business understands the seriousness of regulated retail and can work with partners without relying on casual assurances.

The next useful step is a 60-minute audit-file drill: choose one SKU, one movement, one campaign asset and one source page. If your team cannot find the records quickly, the system needs tightening before the next launch. If you want the surrounding operational context, our supplier-readiness audit and marketing audit checklist are the natural follow-ups.

1. HMRC: How to pay Vaping Products Duty
2. GOV.UK: Check if you're impacted by Vaping Products Duty and the Vaping Duty Stamps Scheme
3. HMRC: How vaping duty stamps work
4. HMRC: Prepare for Vaping Products Duty and the Vaping Duty Stamps Scheme
5. ASA/CAP: Electronic cigarettes: Media prohibitions
6. CAP Code: Section 22: Electronic cigarettes
7. Finance Act 2026: Part 4: Vaping Products Duty