ADDRESSCLOUD LIMITED

Addresscloud Match

API-based address matching and geocoding service providing rooftop-level accuracy for UK addresses. Uses Ordnance Survey AddressBase Premium, AddressBase Premium Islands, and NGD Address data to validate, standardise, and match addresses reliably. Designed for high-throughput, low-latency use cases.

Features

• UK address matching and geocoding via RESTful JSON API
• Rooftop-level geocoding using Ordnance Survey authoritative datasets
• Supports AddressBase Premium, Premium Islands and NGD Address
• High-performance, low-latency API for real-time address matching
• Standardises and validates UK address formats
• Secure HTTPS access with API key authentication
• Scalable serverless architecture with automatic capacity management
• Real-time responses with sub-second performance

Benefits

• Improve address accuracy for UK-based digital services
• Reduce failed deliveries and address-related processing errors
• Integrate reliable geocoding quickly into existing systems
• Support high-volume address matching without infrastructure management
• Enable consistent address data across multiple applications
• Simplify compliance with UK addressing standards
• Improve operational efficiency through automated address validation
• Access enterprise-grade geocoding without long implementation cycles

• Free trial available

Service documents

• Pricing document

  ODS

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@addresscloud.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

137707595583224

Contact

Simon de la Hoyde
01223625360
sales@addresscloud.com

About your service

• Service categories:

  Application Development and Deployment

  Analytics and business intelligence

  • Location and geospatial data management and analytics
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: UK addresses only. No international address coverage. API access only, no user interface.
• System requirements:
  • Ability to make outbound HTTPS requests over the internet
  • Support for RESTful APIs and JSON payloads
  • Secure storage and management of API credentials
  • Network access to UK-hosted cloud services
  • Modern development environment capable of handling HTTP responses

User support

• Email or online ticketing support: Yes
• Support response times: Basic package Email support UK Business Hours, Mon-Fri 9am-5pm.; Ticketing / email support should be used for all non-critical issues.; Tickets will be assigned a status and all reasonable endeavours to respond within the following time periods:; a) critical: 1 Business Hour;; b) serious: 4 Business Hours;; c) moderate: 1 Business Day; and; d) minor: 2 Business Days; Following the initial response to the ticket, will use all reasonable endeavours to respond within the following time periods:; a) critical: 2 Business Hours;; b) serious: 1 Business Day;; c) moderate: 5 Business Days; and; d) minor: 10 Business Days
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: No
• Onsite support: No
• Support levels: Email support, UK business Hours: Mon-Fri, 9am-5pm; ; * Out of Hours Support - ; The support mailbox is not manned outside of UK Business Hours
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Users are onboarded remotely and provided with API credentials and access to online documentation. Getting started does not require installation or onsite training, as the service is accessed via a RESTful API. Support is available via email or ticketing during UK business hours to assist with initial integration and setup.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Addresscloud Match does not store customer data beyond transient processing. All results are returned to users in real time via the API. When the contract ends, API access is disabled and no data extraction is required.
• End-of-contract process: At the end of the contract, access to the Addresscloud Match API is disabled and no further action is required by the user. The contract price includes access to the service, standard support, and operational monitoring.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Via online portals and through your dedicated account manager

Using the service

• Web browser interface: No
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: Addresscloud Match is delivered entirely via a RESTful HTTPS API. Users authenticate using an API key and submit UK address data for matching, validation, and geocoding against authoritative Ordnance Survey datasets. Configuration is handled through API parameters, and responses are returned in JSON in real time. The API is read-only; users cannot modify underlying datasets or manage users through the API. Access is limited to UK addresses only and subject to Ordnance Survey licensing restrictions.
• API documentation: Yes
• API documentation formats: HTML
• API sandbox or test environment: Yes
• Customisation available: No

Scaling

• Independence of resources: Addresscloud Match is built on a serverless, stateless architecture that automatically scales based on demand. Requests are processed independently, ensuring one user’s activity does not impact another’s performance. Capacity is managed dynamically by the underlying cloud platform to maintain consistent response times under varying workloads.

Analytics

• Service usage metrics: Yes
• Metrics types: We log each service request and can run analytics on usage including match rates, response times etc
• Reporting types: Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest: Physical access control, complying with CSA CCM v4.0
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: There is no data export functionality. We can extract logs for customers on demand via a support ticket
• Data export formats: CSV
• Data import formats: Other
• Other data import formats: JSON

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Addresscloud Match is designed to meet a target availability of 99.9%, excluding scheduled maintenance. Availability is monitored continuously, and the service is built on resilient cloud infrastructure across multiple availability zones. If availability falls below the agreed level, service credits may be applied in line with contractual terms. Refunds and remedies are handled through service credits rather than financial penalties and are agreed on a case-by-case basis.
• Approach to resilience: Addresscloud Match is designed using a stateless, serverless architecture deployed across multiple availability zones within the cloud provider’s UK and EEA regions. The service automatically scales and recovers from infrastructure failures without manual intervention, and no single component represents a single point of failure. Datacentre-level resilience and physical security controls are provided by the underlying cloud provider, with further details available on request.
• Outage reporting: Addresscloud Match reports outages and service issues via a public status dashboard at status.addresscloud.com, where users can subscribe to email alerts for incident updates and resolution notifications. The service is monitored in real time with automated alerting, and engineers are on call 24/7 to respond to incidents.

Identity and authentication

• User authentication needed: Yes
• User authentication: Other
• Other user authentication: Addresscloud Match authenticates access using unique API credentials issued to each customer. Requests must present a valid API key over HTTPS, and access can be restricted and rotated if required. Administrative access to supporting systems is protected with multi-factor authentication (MFA).
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is restricted to authorised Addresscloud personnel only. Role-based access controls are applied, access is granted on a least-privilege basis, and administrative access is protected using multi-factor authentication (MFA). Access rights are reviewed regularly and removed when no longer required.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Addresscloud utilise Vanta, a governance and compliance platform, to manage our ISO27001 and GDPR policies and ISMS processes. The Trust centre for our company can be found here - https://trust.addresscloud.com/ . We have a full set of information security policies covering all areas such as access management, supplier management, operational security management, incident management and business continuity/disaster recovery etc. Vanta ensures policies are available to all employees and monitors their acceptance (including some elements of asset management, supplier management and vulnerability management). Our ISMS is also audited externally at least twice per year to ensure conformity. Addresscloud's senior compliance officer uses Vanta to report on the performance of our ISMS on a monthly basis to C suite level management where strategy and resourcing decisions can be made in line with our set information security objectives for the year.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Addresscloud uses formal change control procedures to manage changes within the development lifecycle. Significant code changes require peer review and approval before merging into production, and development, testing, and deployment of changes cannot be performed by a single individual without oversight. All software is version controlled, and changes to third-party services are risk-assessed and documented, with internal reviews. In regards to platform configuration, we are working towards alignment with the most recent version of the CIS AWS Foundations benchmark.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Addresscloud assesses potential threats to its services by identifying and characterizing relevant threat sources (such as human, environmental, natural, and system/equipment), determining possible threat events, and identifying vulnerabilities in people, processes, and technologies. ; ; Patches for vulnerabilities are deployed according to severity: critical and high-risk vulnerabilities are remediated within 30 days, medium within 60 days, low within 90 days, and informational as needed. ; ; Information about potential threats is gathered from various sources, including vulnerability scanning software and assessments by the engineering team. The severity of vulnerabilities is evaluated based on our understanding of the technical architecture and real-world exploitability.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Addresscloud identifies potential security compromises through reports from employees, contractors, users, customers, automated monitoring systems, and external third party providers. When a potential compromise is detected, it must be reported immediately via email or Slack; DevOps teams are notified for automated detections, and internal reports are escalated to the CTO and COO. If no acknowledgement is received within 30 minutes, escalation continues by phone to the CTO, and ultimately to the CEO if necessary, ensuring a rapid response to incidents. Our incident management process is aligned with the NIST SP 800-61.
• Incident management type: Supplier-defined controls
• Incident management approach: Addresscloud has a documented Incident Response Plan covering all information security and data privacy events/incidents aligned to the NIST SP 800-61. ; Pre-defined processes and response plans provides structure for system owners. If an incident is identified, the process includes prompt notification via phone/email/Slack to the CTO/COO, and, if necessary, the CEO. ; Incident reports are templated and include specific details such as timeline of events, timeline of decisions/actions and post incident debriefs (lessons learned).
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Addresscloud Match offers a 30-day evaluation trial for eligible customers, subject to evaluation terms. The trial includes limited API access for UK address matching and geocoding. Usage limits apply, and production-scale volumes, enhanced support, and SLAs are not included.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 20%
• Between £500,001 and £1,000,000: 20%
• Between £1,000,001 and £2,500,000: 20%
• Between £2,500,001 and £5,000,000: 20%
• Over £5,000,001: 20%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau
• ISO/IEC 27001 accreditation date: Friday 5 December 2025
• What the ISO/IEC 27001 doesn’t cover: Not applicable. Addresscloud's entire legal entity is covered by our certification.
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: D7a2ab8d-3c22-4c87-85fd-1496a6e6a95c
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
    • Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
    • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
    • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
    • Plans for positive actions with community groups.

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Collection of the views and expertise of disabled people and their representative organisations on successfully supporting disabled employees or applicants
    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Introducing transparency to pay and reward processes
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of issues relating to entering the contract workforce

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition

Service documents

• Pricing document

  ODS

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@addresscloud.com. Tell them what format you need. It will help if you say what assistive technology you use.