Three separate jobs
Most services treat vetting as one thing. It is three, and they behave differently, so build them separately.
There is what you collect from a sitter when they join. There is where that material is stored and who can see it. And there is the small, carefully chosen part of it that appears on your public website. Confusing the third with the first is how certificate images end up on a public page.
Get the separation right at setup and the rest is administration rather than anxiety.
Decide your standard before you build anything
Write down, in one place, what a sitter must have before they take a booking. Identity confirmed from documents seen in person. A stated number of references from settings where they cared for children, taken up by phone. Background checking of the kind that applies where you operate. Current paediatric first aid. Whatever else you require, such as a minimum age, driving licence or experience with a particular age group.
Name the background checking regime accurately for your country. In England and Wales that means the Disclosure and Barring Service, with levels of check and eligibility rules attached to the role. Scotland has the PVG scheme through Disclosure Scotland, Northern Ireland has AccessNI, and outside the UK arrangements vary widely by country and by state. Where you are not certain which level of check your sitters are eligible for, take advice before you write it down. Treat everything here as orientation towards the right questions rather than as legal advice, and check the current position with the regulator or scheme where you operate.
Collect it once, properly
Build a sitter onboarding form rather than gathering things by email. Email attachments end up in three inboxes and none of them are a record.
The form asks for the facts: name, contact details, areas they can cover, age groups, availability, first aid provider and date of the certificate, background check status and date, referee names and phone numbers, and their consent for a first name and photograph to appear on your site.
Documents themselves need somewhere more careful than a website. Store them in access-controlled storage that only you and anyone genuinely responsible for vetting can open, keep as little as you need for as long as you need it, and write down what your retention period is. Sensitive personal data about your sitters should not be sitting in a shared drive, an open messaging thread or your website's media library.
References are a phone call
The reference is the part most services do worst and parents value most. A written letter tells you the person can write a letter. A conversation tells you what they were like on a bad afternoon.
Ask three questions of every referee: in what capacity did you know them and for how long, how were they with children when things were difficult, and would you have them back. Write down the answer, the date and who you spoke to. That note is the record; the letter is not.
Hold everything as fields with dates
The practical failure is not the checking. It is the drift afterwards. A first aid certificate from four years ago written into a paragraph on an about page looks exactly like a current one.
So hold each sitter as a record with dated fields: first aid date, check date, references completed date, consent given date. Anything with a date can be sorted, and anything that can be sorted can be reviewed. Once a quarter, sort by the oldest first aid date and act on the top of the list.
Where your booking tool holds staff records, keep the same fields there so the person who is bookable and the person who is checked are the same person. A sitter whose certificate has lapsed should come off the bookable list, not stay on it with a note in your head.
Now decide what the public page shows
The public version is short, and it is about the process rather than the paperwork.
Show what you check, in order, in plain language. Show that references are taken up by phone. Show that sitters hold paediatric first aid and how recently it was renewed. Show what you can produce for a parent on request when you meet. Show your safeguarding policy in ordinary words, who to contact with a concern, and what happens next.
On each sitter profile, where you publish them, show first name, photograph used with written consent, areas, age groups, and a check and first aid status. Fields, not prose, so nothing goes stale silently.
Do not show certificate images, disclosure reference numbers, surnames, addresses or dates of birth. Do not describe a check as a licence or a certification. A check is a disclosure at a point in time and saying so honestly makes you more credible, not less.
Keep it current
Put one recurring reminder in the diary: a quarterly review of the sitter records. Renew what is due, chase what is missing, remove anyone who has left. Update the public page whenever the standard changes, and note the date it was last reviewed at the bottom of it. Parents notice a reviewed date, and so do you when you are wondering whether the page is still true.
Where this sits
Vetting and first aid stated per sitter, with sitter profiles held as records and a plainly written safeguarding page, is standard in a babysitting service website, and the same approach to staff, checks and inspection runs through the other childcare and family websites. What each package covers is on pricing. Set the standard first, then build the fields to match it.