Salesforce Just Won Britain's Taxman: £2B, 15 Years, 39 Million Taxpayers

By TechPulse USA Newsroom — London | 15 October 2026

Photo: The Palace of Westminster at blue hour — illustrative. HMRC's new Salesforce agreement is the biggest AI-for-government deal of the year. (Diliff / Wikimedia Commons, CC BY-SA 2.5)

Salesforce has just landed the biggest AI-for-government deal of the year: a 15-year, up-to-£2 billion agreement to run the customer-service machinery of Britain's tax authority — and with it, the records of more than 39 million citizens and businesses. There is just one wrinkle. The announcement, datelined London, 15 October, is really sixteen days old. The contract was awarded on 29 September, only two companies bid, and the price doubled from HMRC's own original estimate before a single line of code shipped.

That does not make it a bad deal. It makes it a fascinating one. The same AI platform Salesforce is selling to the taxman — Agentforce — spent September in the security headlines after researchers showed that a single poisoned web form could trick it into quietly handing over CRM data, no clicks required. The fixes landed on 21 September, eight days before the contract was awarded. Reassuring? Mostly. Worth knowing before 39 million taxpayers get a 360-degree profile on one American company's platform? Absolutely.

The announcement is 16 days old — here is what the press release leaves out

Start with the bare facts, because the press release reads very differently once you have seen the paperwork. Salesforce announced today that it is HMRC's new strategic Enterprise Customer Relationship Management (ECRM) provider, unifying legacy systems onto a single secure platform with a 360-degree view of every taxpayer interaction. The headline number is "up to £2 billion" over 15 years.

We read the announcement against the contract award notice, and the numbers shift. The tender paperwork puts the ceiling at £2.4 billion including VAT — Salesforce's £2 billion is the ex-VAT figure. And HMRC's own preliminary estimate, back in April 2025, was £1 billion. The budget doubled during procurement. The contract runs to September 2036, with extensions that could stretch it to 2041 — a 15-year lock-in on the country's tax plumbing, exactly as billed.

Then there is the competition, or the lack of it. According to The Register, which broke the award story on 29 September, HMRC received just two final bids. Salesforce beat Pegasystems — better known as Pega — whose platform also blends low-code development, automation and AI. Two bidders for a £2.4 billion public contract is a thin field by any standard, and the award itself arrived late: HMRC had aimed for 1 May 2026 before pushing the date to 1 August.

One small tell about the choreography: Salesforce's release is datelined "LONDON – 15 October," but the contract award was public knowledge on 29 September. Today's announcement is really a partnership launch wrapped around a done deal — sixteen days of PR polish, timed for maximum newsroom impact. We checked the release end to end; it never mentions the September award, the VAT-inclusive figure, Pega, or the doubled budget.

This is also only half the rebuild. In April, HMRC handed Capgemini a contact-centre-as-a-service contract worth up to £600 million — with Route 101 and NiCE as subcontractors — designed to plug directly into the new Salesforce CRM. JP Marks, HMRC's Permanent Secretary and Chief Executive, said the two systems would "join up customer contact across channels and give colleagues the tools they need to provide a faster, more consistent service." Read that as: the phone system and the database are finally being built as one thing.

What Salesforce is actually building

Strip away the procurement drama and the ambition is genuinely large. HMRC serves more than 34 million citizens and five million businesses — the release rounds it to "over 39 million" — and its systems are a patchwork of legacy platforms and fragmented contact channels. Salesforce's job is to fuse them into one secure platform with a 360-degree view: every call, letter, chat and portal login attached to a single taxpayer profile, with real-time insights, automated workflows and AI-assisted tools doing the heavy lifting.

The AI layer is Agentforce, Salesforce's agentic platform, sitting on its Data 360 data platform alongside Public Sector Solutions and Marketing Cloud. In practice: AI agents triaging inbound queries, automating routine casework and routing the hard cases to human specialists — inside, Salesforce stresses, "tightly governed workflows" where "human oversight from trained HMRC staff remains integral to every taxpayer decision." Your tax bill will not be decided by a chatbot. The chatbot will decide which human looks at your file, and how fast.

The fraud angle is where it gets interesting. UK decision-intelligence firm Quantexa is collaborating on the deployment, wiring in tools that connect messy datasets and flag fraud patterns — real-time risk scores for caseworkers and, in Salesforce's words, signals of "hidden fraud networks." That is HMRC-speak for closing the tax gap: the billions in uncollected revenue the department never quite chases down. A 360-degree view of the honest taxpayer is also, inevitably, a 360-degree view of the dishonest one.

The deal comes bundled with industrial policy. Salesforce has committed 15% of its professional advisory services work to UK small and medium-sized businesses, and the release leans on the company's $6 billion, five-year UK investment pledge (2023–2028) plus more than $200 million from Salesforce Ventures into UK AI startups. There is a skills promise too: apprenticeship routes aimed at young people, neurodivergent individuals and underrepresented groups, feeding Salesforce's commitment with the UK Government to train 10 million workers in AI by 2030.

Kendall Collins — CEO of Missionforce and Government Cloud, the dedicated government-and-national-security unit Salesforce launched in September 2025 — framed it as a trust play: "Governments around the world are entering a new era of transformation powered by trusted AI," calling HMRC "a global leader" in putting people and trust at the centre. Zahra Bahrololoumi CBE, President & CEO of Salesforce UK & Ireland, added that "technology is only one part of the value this contract will deliver," pointing to the skills agenda and a more diverse digital workforce.

Collins is worth a second look. He joined Salesforce in 2023 after serving as chief business officer and chief of staff to Marc Benioff, and Missionforce has since become the spearhead of Salesforce's push into the hardest government work — defence, intelligence, aerospace — complete with an OpenAI partnership piping frontier models into government cloud deployments and NVIDIA compute for agencies running models on their own infrastructure. HMRC is the civilian flagship of that machine.

Photo: Big Ben and the Houses of Parliament across the Thames under heavy cloud — illustrative. HMRC's digital push aims for 90% of services online by 2030. (Mam16600 for Tripyana / Wikimedia Commons, CC BY 4.0)

The uncomfortable part: this AI had a rough September

Now the part Salesforce's release does not mention. On 24 September, security firm Zenity Labs publicly disclosed "SalesBleed" — three flaws in Agentforce, the very platform at the heart of the HMRC deal. The attack chain: an outsider buries hidden instructions in a public web-form entry; when staff later ask Agentforce to summarise that lead, the agent obeys the planted instructions, queries sensitive CRM tables, and exfiltrates data through DNS lookups hidden in image URLs. No clicks, no login.

The timeline is decent: Zenity reported on 1 June, all three flaws were fixed and tested by 21 September, with no evidence of wild exploitation — eight days before HMRC's award. But caveats travel with it: the Slack fix hinges on a confirmation setting one click can disable, and this was the second year running researchers pulled off the same Web-to-Lead prompt-injection trick. Salesforce says the platform meets strict UK data-protection standards, with encryption and role-based access controls. The right answer — and the minimum one, when the CRM holds 39 million taxpayers. Regulators are circling: eight US states sued OpenAI this week over AI safety — HMRC's agents will operate under a microscope.

The taxman Britain loves to hate

The other half of the gamble: the customer this AI serves is furious. The National Audit Office found taxpayers spent 798 years on hold to HMRC in a single year, waits averaging 23 minutes — up from five in 2019 — with up to 45% of calls unanswered. Parliament's Public Accounts Committee accused it of deliberately degrading phone lines to force people online: 43,690 callers cut off after 70-minute waits in eleven months, a 535% jump. HMRC called the claim "completely baseless." The numbers did the talking.

It has not healed. The Times reported complaints hit 93,600 in 2024-25, up from 65,600 in 2019-20. "At one point they could have walked into an office to have one point of contact," Jesmin Rahman of Tax Resolute told the paper. "Now it's become increasingly difficult as HMRC has become a faceless organisation." Against that record, 90%-digital-by-2030 reads two ways: meeting taxpayers where they are — or making the phones someone else's problem.

Our verdict: the boldest bet in Whitehall, and the biggest single point of failure

Said plainly: this is either Whitehall's most ambitious efficiency play or the most expensive single point of failure ever built around 39 million financial lives — and it could be both. The prize: first-contact resolution, fraud networks unravelled in real time, a tax gap that finally closes. The risk: one vendor, one 360-degree database, one AI layer with fresh security scars, bought in a two-horse race whose budget doubled.

The sovereignty question lingers. A US platform now sits at the centre of Britain's revenue machinery — the same week London litigated Palantir's blocked £50 million Met Police AI contract. Europe's governments are all riding the AI moment — Slovenia just banked €440,000 on Trump's 'SI' slip; Britain is betting £2 billion that AI can fix the taxman. One was a windfall. This is a wager — and the house has already been paid.

What happens next

The contract is already running — awarded September 2026 — with Capgemini's contact-centre platform alongside. Watch: whether 90%-digital survives contact with taxpayers needing a human; whether Quantexa's fraud tooling moves the tax gap; and whether a two-bidder, doubled-budget deal draws scrutiny too late.

Your questions answered

How much is the deal really worth?
Up to £2bn ex-VAT (£2.4bn with VAT) over up to 15 years to 2036, extendable to 2041. HMRC's 2025 estimate was £1bn.

Who did Salesforce beat?
Pegasystems (Pega) — HMRC got only two final bids, per The Register.

Was Agentforce hacked?
No. Zenity Labs' "SalesBleed" flaws could have leaked CRM data via poisoned web forms; all patched 21 Sep 2026, no exploitation found.

Will an AI decide my tax bill?
No — agents triage queries and automate routine casework, but "human oversight from trained HMRC staff remains integral to every taxpayer decision."

Sources: Salesforce (15 Oct 2026); The Register (29 Sep 2026); CXM (1 Oct 2026); Zenity Labs "SalesBleed" (24 Sep 2026); National Audit Office; Public Accounts Committee; The Times; Nextgov.

---

TechPulse USA is an independent newsroom covering global tech and AI for readers in the US, UK, Europe, Canada and Australia.