Every immigration consultancy loses the same two things: enquiries nobody followed up, and cases nobody can reconstruct nine months later. Most articles treat both as a productivity problem. They are not. For a professional immigration consultant, enquiry follow-up and case management are what you are judged on when something goes wrong — by a regulator, by a client demanding a refund, or by the successor adviser who has asked for the file and is entitled to get it.
This article is about that side of it: what you have to be able to produce, what it costs when you cannot, and what it means for the system you keep it all in.
The five-minute test
Pick a client you signed nine months ago. Without calling anyone, can you produce in five minutes:
- when they first enquired, and through which channel
- who in your office spoke to them, and what was said
- what you advised, and on what date
- every document you received, and when
- every fee taken, and the receipt issued
- the date each stage was filed and what came back
If you can, you have case management. If you cannot, you have memory — and memory is not evidence.
What follow-up means once you are regulated
In the UK, the Immigration Advice Authority Code of Standards is explicit. Code 5.5 requires that each client is kept regularly informed, in writing, of the progress of their case. Code 8.5 requires a complete record of all your dealings with and on behalf of your clients, in the form of attendance notes.
In Canada, the Code of Professional Conduct for College licensees (SOR/2022-128) puts the same duty in section 22(3): timely information to the client in writing concerning the status of their case. Section 37 requires a reliable system of office administration, with records preserved.
Read those two words again — in writing. A reassuring phone call on a Tuesday is good client service and no record at all. A WhatsApp voice note is worse: it is a status update you cannot search, cannot attach to a file, and cannot hand to anybody. Follow-up that leaves no written trace has, for regulatory purposes, not happened.
The file is a deliverable, not a by-product
Consultants tend to think of the client file as the residue of the work. The rules treat it as part of the work.
United Kingdom (IAA Code of Standards):
- Code 5.3 — every prospective client gets an effective client care letter
- Code 5.4 — you keep a record of the client's agreement to it, signed and dated or evidenced electronically
- Code 5.10 — client files and records are retained for at least six years, then securely destroyed
- Code 3.5 — you have, and implement, a written complaints procedure
Canada (Code of Professional Conduct, SOR/2022-128):
- Section 23 — a written consultation agreement before the initial consultation
- Section 24 — a written service agreement before work begins, itemising services, fees, disbursements and the complaints process
- Section 36(1) — within 30 days of completion or termination: return the client's documents, account for funds, issue the final invoice, refund any excess held in trust
- Section 36(3) — transfer the file to a successor representative within 10 business days of the request
- Section 28(1) — client information stays confidential indefinitely, long after the case closes
That 10-business-day clause is the one that exposes a disorganised office. A client leaves, their new representative asks for the file, and you have two working weeks to assemble something currently spread across three WhatsApp threads, a Gmail account, one consultant's laptop and a folder on a shared drive that somebody renamed.
Three failures, in order of what they cost
1. The enquiry nobody contacted
Someone called, someone wrote the number on a pad, nobody called back. This is the cheapest failure on the list, because it only costs revenue. It is also the only one most consultancies measure.
2. The advice nobody wrote down
Eight months later the client says you promised a particular outcome. You did not. But there is no dated note of what you actually said, so it is their account against yours — and the first question asked will not be who is telling the truth, it will be whether the record exists at all. An undated memory loses to a dated file note every time.
3. The file you cannot hand over
The client transfers to another adviser. That is routine and it happens to good consultants. What turns it into a complaint is a file that arrives late, incomplete, or in pieces. You have now given a dissatisfied client a second, much stronger grievance — and this one is about your practice, not your advice.
2026 raised the stakes
Two changes matter for anyone running a consultancy this year.
Canada. New regulations came into force on 15 July 2026. They increase the penalties the College can impose on licensees who breach the rules, clarify how misconduct is investigated, and set formal guidelines for the compensation fund that reimburses clients for financial losses caused by dishonest conduct. From April 2027 the public register of licensed consultants carries more detail. The direction of travel is one way: more scrutiny, more transparency, and a lower tolerance for practices that cannot evidence what they did.
India. The DPDP Rules were notified on 14 November 2025, with the substantive obligations — consent notice, reasonable security safeguards, and breach reporting to the Data Protection Board and to affected individuals — taking effect on 14 May 2027. An Indian consultancy holding passports, bank statements, education records and portal logins for clients abroad is handling exactly the personal data those rules are about. Two years is not a long runway for a practice that currently stores credentials in a spreadsheet.
None of this is legal advice, and the version of a rule that applies to you depends on where you are licensed. Read your own code, or ask someone who reads it for a living. The point here is narrower: every one of these regimes assumes a written, retrievable, per-client record. That assumption is the design brief for your software.
What that means for the system you keep it in
Work backwards from the obligations and the requirements almost write themselves. A system that supports a professional practice has to hold:
- Every enquiry, with a source and an owner. Walk-in, phone, website, referral or agent; one named person accountable; a status that someone has to change deliberately. An enquiry with no owner is the one that gets lost.
- Follow-up as a dated object, not an intention. A next-follow-up date, a reminder, a note history that stays on the record, and a daily list your staff actually work from.
- Case milestones you can see at a glance. Documents, profile ready, offer letter, file ready, visa filed, biometrics, medical, decision. When a client asks where they are, the answer should take one screen, not one phone call to a colleague.
- Credentials in a vault, not a spreadsheet. IRCC, GCKey and college portal logins belong in encrypted storage behind role-based access, not in a shared sheet that three former employees still have a copy of.
- Fees, installments and receipts on the same record as the case. Section 36's accounting duty is far easier to meet when payments were never kept somewhere else.
- A written channel to the client. A client portal where the client sees their own status and uploads their own documents does two jobs at once: it removes a phone call, and it produces the written progress trail you are required to have.
- Capture at the first touch. An enquiry form and a booking widget on your website put the first contact straight onto the record instead of into somebody's inbox.
That list is the specification InfraBit Immigration CRM was built against — enquiry management with a named owner on every record, milestone tracking driven by the visa type, a per-client document checklist, fee and payment tracking with receipt numbers, invoicing, campaigns, HRMS, and a client portal where the client sees the same milestone bar your staff see.
One honest caveat, because it matters more than any feature list: software does not make you compliant. No CRM writes your attendance note, judges whether your advice was sound, or rescues a consultant who told a client what they wanted to hear. What a good system does is make the record a by-product of doing the work, rather than homework you attempt the week a complaint lands.
A checklist you can run this week
- Take three closed files at random and run the five-minute test.
- Search for the last written progress update you sent each active client. If you cannot search for it, that is the finding.
- Find your oldest live client file and ask whether you could still produce it in year six.
- Go through your open enquiries and name the owner of each one out loud. Every "I thought you had it" is a lost client.
- Count the client portal credentials currently sitting in WhatsApp threads and shared spreadsheets.
Frequently asked questions
Is a CRM required by the College or the IAA?
No. Neither the Canadian Code of Professional Conduct nor the UK Code of Standards names any software. What they require is that records exist, that clients are kept informed in writing, that files are retained, and that a file can be produced on request. A CRM is one way to meet that. A genuinely disciplined paper office is another, and it is rarer than people think.
How long do I have to keep immigration client files?
In the UK, the IAA Code of Standards (Code 5.10) requires client files and records to be retained for at least six years and then securely destroyed. In Canada, the Code of Professional Conduct requires a reliable system of office administration with records preserved as the College's by-laws require, and client confidentiality continues indefinitely. Check the code that applies to your licence, since retention periods differ by jurisdiction.
Do WhatsApp messages count as case records?
They can be evidence, but they are a poor record. They live on a personal device, they cannot be searched by case, they cannot be handed to a successor representative in a usable form, and they leave the business when the staff member does. Keep WhatsApp as a contact channel if your clients prefer it, then put the resulting note on the file the same day.
What is the minimum I should record for every enquiry?
Date and source, the owner, what the person asked about, what they were told, the next follow-up date, and the outcome. Six fields. That is the whole difference between a list of names and a defensible record.
Does an immigration CRM make my practice compliant?
No software can do that. A CRM gives you one place to hold enquiries, follow-up history, case milestones, credentials, fee receipts and client documents, which is the raw material a regulator or a client will ask you for. Whether the notes are honest, timely and complete remains the consultant's own responsibility.
Where to go next
If this is a gap you already recognise, these go one level deeper:
- Smart enquiry and follow-up management — how the enquiry-first workflow is structured
- Immigration case management software — milestone tracking in detail
- Moving from Excel and WhatsApp to a CRM — what the migration actually involves
- Connecting your website to your CRM — capturing the enquiry at the first touch
Or book a demo of InfraBit Immigration CRM and bring one messy live case with you. That is a better test than any feature list.
Sources: IAA Code of Standards 2024 · Code of Professional Conduct for College of Immigration and Citizenship Consultants Licensees (SOR/2022-128) · Canada strengthens regulation of immigration and citizenship consultants (IRCC, 2026)