Where Core HR Sits in the HR Software Spend

Core human resource software is the employee system of record: identity, contract and role history, org structure, absence, documents, permissions and the audit trail under everything else. Payroll, performance, applicant tracking and workforce analytics all read from it. That position makes the category defensible and also slow to sell, because you are asking an employer to move the single file every other HR process depends on.

The global core HR software market was put at $33.1 billion in 2025 and is forecast to reach $89.8 billion by 2035, a 10.5% compound annual growth rate (Market Research Future, 2025). The wider HR software market, counting every module, was valued at $20.5 billion in 2025 and is projected at $56.3 billion by 2033 on a 13.7% CAGR (Grand View Research, 2025).

Those figures disagree because analysts draw the boundary differently. Market Research Future counts the full core HR stack including payroll administration and benefits records; Grand View scopes HR software more narrowly and reports core HR as a share of it, at 33.3% of revenue in 2024 (Grand View Research, 2024). A separate read puts core HR at 36% of the global HR management software market in 2025, inside a category worth $18.43 billion in 2024 and heading to $56.23 billion by 2034 (Market.us, 2025).

Do not paper over that spread. Lenders and seed investors read a single vast market number as a sign the founder skipped segment work. State the definition you are using and then cut to the seat-band arithmetic that actually bounds your revenue. A vendor selling to UK employers of 40 to 300 staff is not addressing a $33 billion market; it is addressing a countable list of employers multiplied by a known price per seat.

What the growth is actually coming from

Three pressures, none of them "digital transformation". First, replacement cycles: employers who bought a first HRIS between 2016 and 2020 are at renewal with data volumes their original tool was never designed for. Second, distributed hiring, which forces multi-country employment records, multi-currency contracts and localised leave rules into tools that assumed one jurisdiction. Third, evidence burden: subject access requests, right-to-work records, bias-audit disclosures and pension assessments all demand retrievable, timestamped records, which is exactly what a spreadsheet cannot produce under scrutiny. Each is a wedge a small vendor can own without out-building the incumbents feature for feature.

If your venture is closer to advisory than product, the HR consulting business plan template models a services P&L instead of a seat-priced one. If payroll processing is the core offer rather than the record, start with the payroll administration business plan template.

Who Signs the Contract

Core HR has an unusual buying committee for a product in its price band. The user is an HR generalist or office manager. The budget holder is a finance director. The blocker is IT or whoever owns data protection. In Germany and much of continental Europe there is a fourth party with a statutory veto, covered further down. Your plan needs to name all of them, because a forecast built on the enthusiasm of the HR user alone is how pipelines stall at 60%.

The consequence: pick one band and build the model around it. Self-serve acquisition economics and enterprise security-review economics are different businesses wearing the same product. Vendors that try to span both end up with a free trial nobody converts and a security questionnaire nobody can answer.

Vertical beats horizontal for a first product

A horizontal core HR tool competes against BambooHR, Rippling, Gusto, Personio, HiBob and Factorial on a feature grid, where the incumbent always looks safer. A vertical tool competes on the records its sector is audited against. Care providers need registration and training-expiry evidence. Construction firms need site certifications and right-to-work checks. Hospitality groups need high-turnover onboarding at volume plus tronc records. Education providers need safeguarding checks with renewal dates. In each case the buyer is comparing you against a spreadsheet and a filing cabinet, not against Workday.

That comparison is winnable and describable in a business plan without a hand-wave. It also gives you a countable market, because regulators publish provider registers, so your addressable market becomes a real list rather than a slice of a global forecast.

SBA and Lender Data for Software Publishers

US founders building core HR software fall under NAICS 513210, Software Publishers, where the SBA size standard is $47 million in revenue (HigherGov, NAICS 513210). That classification matters for two reasons: it determines SBA eligibility, and it determines which lender desk your application lands on.

In 2025 the software and IT segment drew $205.5 million in SBA 7(a) approvals across 488 businesses, at an average loan of $421,000 (GoSBALoans lender ranking, 2025). Three things follow for your plan.

• 488 approvals is a small number. Software is not a high-volume 7(a) category, because the programme is collateral-conscious and a pre-revenue product secures little. Most approvals here go to acquisitions of established software businesses and to agencies with receivables, not greenfield builds.
• $421,000 is close to a realistic core HR build budget. That average is the number your loan officer has in mind. An ask materially above it needs collateral or trading history to explain itself.
• Recurring revenue changes the conversation. With 18 to 24 months of contracted subscription revenue, revenue-based finance and lending against ARR become realistic, without the personal guarantee structures 7(a) usually carries.

What UK founders use instead

Start Up Loans provide up to £25,000 per founder at 6% fixed with mentoring attached, which across two or three founders funds a meaningful slice of the first build. Beyond that, UK core HR ventures use SEIS and EIS equity: SEIS allows up to £250,000 at the earliest stage with 50% income tax relief for the investor, and EIS extends the runway. R&D tax relief can recover part of qualifying engineering spend where the work is genuine development rather than configuration.

Equity is where the serious money sits. Personio, in Munich, has raised $772 million and carried an $8.5 billion valuation at its 2022 Series E (Tracxn). HiBob had raised $574 million at a $2.5 billion valuation as of February 2025 (Calcalist, 2025). Factorial, in Barcelona, raised a $150 million Series D led by General Catalyst above $2.5 billion (People Matters, 2025).

Quote those as evidence the category attracts capital, never as a comparable for your own valuation. The useful version is narrower: capital is available at scale here, and this specific milestone is what the next tranche is priced against.

What It Costs to Get to First Paying Employer

Core HR is a software build with a compliance bill attached. Most estimates circulating online count only the engineering and are therefore wrong by roughly a third. A realistic year-one range for a product sellable to employers above 100 staff is $116,000 to $536,000 (£92,000 to £423,000). The spread is driven by two line items: how much of the MVP you build versus assemble, and whether you attempt a security attestation in year one.

The engineering anchor comes from published build estimates for human resource software, which put a minimum viable product at $50,000 to $250,000 (Startup Financial Projection, 2026). That covers the employee record, org chart, absence booking, document vault and role-based permissions. It does not cover payroll calculation, a separate and far larger undertaking.

Line-by-line cost breakdown

• MVP engineering: $50,000–$250,000 (£40,000–£198,000). Employee record, contract and role history, org chart, absence rules, document vault, permissions, audit log.
• Security and compliance, year one: $25,000–$85,000 (£20,000–£67,000). For a small startup that is roughly $12,000–$30,000 in audit fees, $5,000–$25,000 of readiness support and $8,000–$30,000 a year in automation tooling such as Vanta or Drata (ComplyJet, 2026).
• Integrations and sandbox certification: $7,000–$40,000. Payroll providers, pension schemes, single sign-on, and optionally an aggregator such as Finch or Merge.dev to shortcut the long tail.
• Product design: $8,000–$35,000. Two distinct surfaces, an administrator console and an employee self-service view. Treating them as one screen set is a common cause of rework.
• Cloud infrastructure, backup and disaster recovery: $6,000–$30,000. Budget for per-tenant data isolation and point-in-time restore from the start; retrofitting after a failed security review costs far more.
• Legal: $5,000–$22,000. Data processing agreement, sub-processor register, standard contractual clauses, terms of service, contractor IP assignment.
• Cyber and technology errors-and-omissions insurance: $3,000–$14,000 in year one, with most enterprise contracts specifying a minimum limit.
• Go-to-market: $12,000–$60,000, including the ramp cost of a first commercial hire who will not be productive for two quarters.

The lean version strips the attestation and the commercial hire, serves employers under 100 staff only, and lands near $116,000. That is the path most bootstrapped vertical vendors take. Just do not put lean costs and mid-market revenue assumptions in the same spreadsheet, because the security gate below sits between them.

Three Viable Core HR Business Models

"Core HR software" describes at least three different businesses. They share a product category and almost nothing else: different price points, different acquisition motions, different churn profiles, different capital needs. Your plan should state which one you are and show the numbers that go with it.

Model A is where published vendor pricing clusters. Rippling lists $8 per employee per month plus a $35 to $40 monthly base, with stacked modules reaching roughly $30 PEPM (Gusto comparison guide, 2025). Personio starts near €5 PEPM for core HR and lands at €8 to €15 with modules, while Gusto runs base-plus-seat from $49 plus $6 per person (Index.dev HRIS comparison, 2026). Competing head-on at those prices without their distribution is the most common way a core HR plan fails on contact with the market.

Model B is where the money is and where the gate is highest. BambooHR publishes Core at $10 PEPM, Pro at $17 and Elite at $25, with a $250 monthly minimum for teams of 25 or fewer (SaaS Price Pulse, 2026). Buyer-side research puts the common HRIS band at $20 to $28 PEPM, with implementation fees of $3,000 to $10,000 for mid-sized buyers (OutSail, 2025). That band is your pricing-ceiling evidence, and far more persuasive than a percentage discount off an unnamed competitor.

Model C is the one we most often steer first-time founders towards, because the plan can be made credible with a countable market and a defensible retention story. It also sidesteps comparison shopping: the buyer is not weighing you against Workday or SAP SuccessFactors, they are weighing you against the audit they failed last year.

Per-Employee Pricing and Unit Economics

Seat-priced software has a quirk that generic SaaS templates miss: your revenue moves with your customers' headcount whether they renew or not. A retained account that cuts 15% of staff hands you a 15% revenue cut with no churn event attached. Any core HR forecast that models only logo retention is overstating revenue, and a competent investor will find it in the first review.

Revenue streams worth modelling separately

• Base subscription (PEPM): seats multiplied by price, with a separate assumption for seat growth or contraction inside the retained base.
• Account floor: a minimum monthly charge that keeps gross margin positive below 25 seats.
• Module upsell: performance reviews, applicant tracking, time and attendance, compliance reporting. This is where net revenue retention above 100% comes from.
• Implementation and data migration: one-off, cash-positive at signature, genuinely useful as year-one runway.
• Integration or API tier: charged to employers pushing HR data into finance or BI systems. Low delivery cost, high perceived value.
• Partner and reseller margin: accountants and HR consultancies reselling to their own client base, frequently cheaper than paid acquisition.

Worked example: a UK vertical vendor

Take a UK core HR product priced at £7 PEPM selling to employers averaging 85 staff. Each account bills £595 a month, or £7,140 of annual recurring revenue. At a 78% gross margin that is £464 of gross profit per month per account. With a blended customer acquisition cost of £6,800 across content, sector events and one part-time salesperson, CAC payback lands at 14.7 months, comfortably inside the roughly 20-month median that funded SaaS companies now report (SaaS Benchmarks 2025). At 16% annual gross revenue churn, lifetime value is about £34,800, giving an LTV to CAC ratio near 5.1 to 1.

That 16% churn assumption is not optimism. Median gross revenue retention across SaaS fell to 84% in 2025, with the top quartile at 91% and the bottom at 76% (Aleph GRR benchmarks, 2026). Use 84% as your base case and show the sensitivity at 76%. A plan that shows the downside case and still works is the one that gets funded.

Worked example: a US mid-market deal

A 220-employee employer at $14 PEPM pays $3,080 a month, $36,960 of ARR, plus a $6,500 implementation fee in month one. Three deals at that size cover a $110,000 engineering salary within the first year. Ten of them put you at $370,000 of ARR, which is roughly the point where bank lending against recurring revenue becomes available and the SBA route stops being the only option.

Net revenue retention: the number that sets your valuation

Median net revenue retention across SaaS has compressed to 101% to 103%, with a stark segment split: SMB deals under $25,000 average contract value sit at 97%, mid-market between $25,000 and $100,000 at 108%, and enterprise above $100,000 at 118% (Optif NRR benchmark, 939 companies). Core HR vendors in mid-market seat bands should plan around 105% to 110% and state where the expansion comes from: seat growth in retained accounts plus module attach, nothing else.

Margin follows. Cloud core HR runs 72% to 82% gross margin once hosting and support are loaded in, below pure-software benchmarks because HR products carry real support burden around payroll cut-off and year-end. Net margin for a sub-scale operator lands at 8% to 22% by year three, with a disciplined bootstrapped vertical vendor holding 25% to 35%. Anything above that in a year-three forecast needs an explanation, not an adjective.

Implementation, Support and the Integration Backlog

Three operational realities shape a core HR P&L more than anything on the product roadmap.

Data migration is the product. New customers arrive with employee data in spreadsheets, a legacy HRIS export, scanned contracts and somebody's inbox. Whoever turns that into a clean record set fastest wins the account and the reference. Migration quality in week one predicts renewal in month twelve more reliably than any product metric.

Support demand is seasonal and sharp. It spikes around payroll cut-off, the start of the leave year, pay reviews and statutory year-end. Staffing to average demand means missing service levels exactly when customers are most exposed, so model support headcount against peak weeks.

Integrations are the switching cost, so they are strategy. Payroll providers, pension schemes, single sign-on, finance systems and background-check vendors each represent a connection a customer will not want to rebuild elsewhere. Aggregators such as Finch and Merge.dev shortcut the long tail, but the two or three connections your vertical actually uses are worth building natively and owning.

Year-one operating priorities

• Ship an importer with validation, dry-run preview and rollback before any second-order feature.
• Instrument seat counts per account monthly so headcount contraction is visible before it reaches the revenue line.
• Keep a current sub-processor register from the first customer. Every security review asks for it, and assembling it retrospectively takes weeks.
• Define a data-retention and deletion policy with real timers. Deletion requests are the test most early HR products fail.
• Let administrators fix their own data. Every field only your team can correct becomes a permanent support ticket, and support tickets are what quietly take gross margin from 82% to 70%.

How Core HR Vendors Win Accounts

Paid search in HR software is dominated by vendors with eight-figure budgets and affiliate-funded comparison sites. A new entrant bidding into that auction buys clicks from buyers already deep in a shortlist that excludes them. The channels that work for a small core HR vendor are narrower, slower, and should be named in the plan with a cost per account attached.

• Sector associations and trade bodies. In a vertical play, one association endorsement or member-benefit listing reaches a qualified audience paid search cannot buy. Budget for membership and a speaking slot, not impressions.
• Accountants, bookkeepers and HR consultancies as a referral channel. They already hold the client relationship and are asked for recommendations. A margin arrangement costs less than acquiring the same account directly.
• Compliance-event content. Content pegged to a real deadline (a pension re-enrolment date, a sector audit cycle, a bias-audit anniversary) attracts buyers with a timeline rather than browsers.
• Migration offers against a named incumbent. "We will move your records off your current system in two weeks at no charge" removes the only objection that matters.

Tie each channel to a cost per qualified opportunity, a conversion rate and a resulting CAC. If you cannot do that yet, show the test budget and the decision point instead.

For a broader framing of the subscription model and the funding narrative that goes with it, the SaaS business plan template covers the cross-category structure. If your product leans towards performance, succession and development rather than the record itself, the talent management software business plan template is the closer fit.

Compliance Gates by Jurisdiction

Core HR software needs almost no licence to sell and a great deal of evidence to sell at scale. Nobody issues a permit for an employee record system. What exists instead is a set of gates: attestations procurement demands, statutory duties attached to the data you hold, and in some markets a third party with a legal veto over your deployment. Each has a cost and a lead time, and each belongs in the plan's timeline rather than its appendix.

United States

• SOC 2 Type II attestation. Not a law, but the de facto gate above roughly 150 seats. Expect $12,000 to $30,000 in audit fees for a small startup, $5,000 to $25,000 of readiness support and $8,000 to $30,000 a year in automation tooling, across a 3 to 6 month observation window and 6 to 12 months end to end (ComplyJet, 2026). Start the clock before you start prospecting, because the observation period cannot be compressed.
• NYC Local Law 144, automated employment decision tools. If any part of your product scores, ranks or screens candidates or employees for promotion in New York City, it triggers an annual independent bias audit, a published summary of the results and advance notice to candidates. Penalties start at $500 and rise to $1,500 for subsequent violations, and the city treats each day of non-compliant use as a separate violation (Warden AI LL 144 guide). Enforcement has been live since 5 July 2023. The commercial angle: producing those audit artefacts for customers is a billable module, not just a cost.
• State privacy law. Processing Californian residents' data brings CCPA obligations, and several other states now have comparable regimes. Employee data is squarely in scope, which catches vendors that assumed consumer privacy law did not apply to them.
• Entity basics. State registration, EIN and the usual commercial contracts. Classification under NAICS 513210 matters for SBA eligibility rather than licensing.

United Kingdom

• ICO data protection fee. As a data controller you register and pay annually. From 17 February 2025 the tiers are £52 (Tier 1), £78 (Tier 2) and £3,763 (Tier 3), set by staff count and turnover (ICO data protection fee guide). Trivial money, and an easy finding against you in any supplier review.
• HMRC Real Time Information compatibility. Only relevant if your product files payroll. There is no HMRC approval kite-mark; HMRC publishes a list of software tested for RTI compatibility, which confirms submissions work and says nothing about PAYE calculation accuracy (ExpertSure RTI guide, 2026). Vendors routinely overstate that listing. Do not.
• Pension auto-enrolment handling. Eligibility is assessed every pay period, with minimum contributions of 3% employer and 5% employee on qualifying earnings between £6,240 and £50,270, opt-outs processed inside the one-month statutory window, and contributions pushed to schemes such as NEST, Smart Pension or The People's Pension (Equisoft pension payroll guide). Even a product that does not run payroll must hold the assessment data correctly.
• ISO 27001. What UK and European procurement asks for where US buyers ask for SOC 2. Budget £10,000 to £40,000 across a three-year cycle, or £6,000 to £15,000 in year one under 50 staff, with the certification audit from £6,800 to £10,000 through a UKAS-accredited body (ISEO Blue, 2026). Cyber Essentials Plus is a cheaper interim signal below 150 seats.
• Companies House and HMRC corporation tax registration, plus professional indemnity and cyber cover that many customer contracts specify by limit.

Germany, and why it changes your European forecast

This is the detail most core HR plans omit and the one that most often breaks a European expansion timeline. Under Section 87(1) No. 6 of the German Works Constitution Act (BetrVG), a works council holds enforceable co-determination rights over the introduction of any technical system objectively capable of monitoring employee conduct or performance. The employer's intent is irrelevant: capability alone triggers the right. Core HR, time tracking and applicant management all qualify. No such system may be deployed without a works-council agreement, and deadlock goes to an Einigungsstelle arbitration board (StartupRad analysis of works-council software deals).

Practically: a signed German contract is not a deployed German customer. Add a consultation stage to the modelled sales cycle, expect to supply architecture, data-flow and sub-processor documentation, and do not forecast German revenue on the UK or US timeline. Vendors who prepare a works-council pack in advance close materially faster.

Across the EU, employment and worker management sits in Annex III of the EU AI Act as a high-risk use case covering CV screening, hiring, promotion, performance monitoring and termination. The Digital Omnibus agreement deferred the standalone Annex III high-risk obligations from 2 August 2026 to 2 December 2027, while transparency duties remain on the earlier timetable (Gibson Dunn, AI Act Omnibus analysis). If your roadmap scores, ranks or flags employees, that deferral is extra runway to build conformity evidence, not permission to skip it.

Other markets, briefly

• Canada: PIPEDA federally, with Quebec's Law 25 adding stricter consent, breach-reporting and automated-decision transparency duties; provincial sales tax registration applies to subscription revenue.
• Australia: Privacy Act obligations, Single Touch Payroll reporting if you file payroll, modern-award interpretation if you handle time and attendance.
• Data residency: European and Canadian public-sector buyers increasingly require in-region hosting, and adding a second region later costs far more than designing for it now.

Six Ways These Plans Fall Apart

Patterns from core HR and HR technology plans our team has reviewed. Each is a specific, fixable modelling error rather than a general caution.

• Building payroll before the record is trustworthy. Payroll turns every data defect into a money defect. If contract effective dates, FTE fractions or leave accruals are unreliable, payroll pays the wrong amount and the customer blames the feature rather than the data. Earn the record first.
• Treating SOC 2 as a year-two item while prospecting 200-person employers. The observation window alone is 3 to 6 months. Forecasting mid-market revenue in quarter two while scheduling the attestation for year two leaves a gap nobody can sell through.
• Per-employee pricing with no account floor. A 9-seat customer at $8 PEPM pays $72 a month and absorbs more support than a 90-seat one. BambooHR's $250 minimum below 25 employees exists because the arithmetic demands it. Put a floor in the model or exclude the band.
• Addressable-market claims that ignore the gates. Counting every US employer ignores NYC bias-audit duties on anything that scores candidates; counting every German employer ignores works-council co-determination. Both shrink the market your current compliance posture can serve, and both are easy for a diligence reader to spot.
• Modelling logo churn and calling it churn. Seat-priced revenue leaks through headcount contraction inside retained accounts. Run two lines: logo retention and net seat movement. The 84% median gross revenue retention is a revenue number, not a logo number.
• Treating integrations as backlog. Payroll, pension and identity connections are the switching cost and therefore the retention story. A plan listing them under "future roadmap" has no explanation for why anyone stays.

One more, less common but more damaging: promising a migration you cannot staff. "We will move your data for free" wins the deal and then consumes an engineering quarter. Price it, scope it or template it, but do not improvise it.

Questions Buyers Search Before They Build

Questions that surface repeatedly alongside core HR software searches, answered with the numbers rather than the platitudes. Costs, pricing, profitability and the SOC 2 question are handled in the FAQ further down.

Can a small team compete with Workday and BambooHR?

Not on breadth, and not on a feature grid. Yes on a specific record set that a regulated sector is audited against, on migration quality, on support that answers in the same working day, and on data residency where large vendors will not commit. Every durable small vendor in this category has won on one of those four, not on parity.

How long does an HRIS implementation take?

Self-serve under 60 seats: under an hour if your importer is good. Mid-market 60 to 500 seats: four to ten weeks, with the time going to data cleansing and integration testing rather than configuration. Above 500 seats: a quarter or more, usually with a third-party implementation partner. State which of those you sell, because each implies a different revenue recognition profile and a different cash curve.

Should the plan include payroll from day one?

Rarely. Payroll multiplies regulatory surface area, demands jurisdiction-specific calculation accuracy and turns every data defect into a money defect. A better sequence is to own the record, integrate to an incumbent payroll provider, and add filing only once the record is demonstrably clean across a few hundred accounts. Plans that reverse that order tend to burn the whole build budget on tax tables.

Sample Business Plan Preview

A preview of the structure and financial outputs a buyer receives, using the same seat-priced assumptions set out above.

What's in the Template

Every Avvale business plan template includes these sections, pre-structured for your industry:

• Executive Summary: your business at a glance, written to hook investors in 60 seconds
• Company Overview: legal structure, ownership, location and founding story
• Industry Analysis: market size, growth trends and the regulatory position
• Customer Analysis: target seat bands, buying committee and switching triggers
• Competitor Analysis: named vendor pricing, positioning and your differentiation
• Marketing Plan: channels, messaging and customer acquisition strategy
• Operations Plan: implementation, support, integrations and key milestones
• Management Team: founder bios, advisory board and planned hires

The optional Financial Forecast add-on (included in our $300/£250 and $1,000/£800 packages) provides a 5-year Excel model with income statement, cash flow, balance sheet, break-even analysis and startup capital requirements. For a seat-priced product we build the subscription schedule with separate logo-retention and seat-movement assumptions so the revenue line survives diligence.

Related reading: free business plan template, Avvale client case studies, and the business plan writer service page if you would rather hand the whole document over.

Frequently Asked Questions

Useful Links & Resources

These links were preserved from the live page so important references and partner links are not lost during the page refresh.

• Facebook
• Instagram
• LinkedIn
• YouTube