COMPANY WATCH LIMITED

Credit Risk Management and Supplier Financial Risk Management Solutions

Company Watch provides advanced credit and financial risk solutions, empowering government agencies to manage risk with confidence. Our solutions include AI and Machine Learning predictive analytics, real-time early warning systems, anti-fraud monitoring, cyber risk, and comprehensive due diligence tools. We enable proactive risk management, operational efficiency, and smarter decision-making.

Features

• Predictive financial risk analytics and transparent credit scores.
• AI machine learning based Director matching and text sentiment analysis
• Coverage of UK and Irish company databases and business information.
• Fully customisable email monitoring and early warning alerts.
• Financial statement and ratio analysis, up to 5 years history
• Unpublished court documents, Companies House data and London Gazette data.
• Data mining tool for supplier benchmarking analysis and competitor analysis
• Vigilance, an award-winning fraud detection solution with risk monitoring
• Cyber risk analysis for data breach monitoring to identify threats
• REST API and cloud integration covering full dataset and monitoring.

Benefits

• Financial risk identification within both new and existing companies.
• Simplify ownership due diligence process.
• Immediate access to accurate financial data and accurate operational data.
• Time reduction through customisable, proactive email alert monitoring
• Export data quickly and in multiple formats to support research
• Gain competitive edge with data that's beyond public domain information
• Automate supplier onboarding resulting in cost optimisation and time efficiency
• Unique insights to identify abnormal indicators and prevent fraud.
• Risk identification, identify key risk intelligence and financial business information
• Automate and integrate risk management decisions, lowering expenses

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at _sales_@companywatch.net. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

514451538481254

Contact

Mike Newman
07402366706
_sales_@companywatch.net

About your service

• Service categories:

  Application Development and Deployment

  Analytics and business intelligence

  • Business Intelligence
  • Advanced and predictive analytics
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Our service is standalone via a web application but the API, cloud integration, or datafeeds allow direct for connections with platforms like Salesforce, Power BI, and SAP Ariba. This enables a high-degree of automation for supplier onboarding, assurance, due diligence, and compliance checks using our vast UK and IE data.
• Cloud deployment model: Private cloud
• Service constraints: We aim to have 24/7 availability for all services with the minimum level of support set to be within 0900 - 1730 GMT on UK business days (non-weekends, non UK public holidays). Outside business hours, we aim for 24/7 availability, apart from scheduled maintenance work which equates to approximately 1 Sunday every 2 months.; With the exception of our customisable solutions, our services are not open to customisation or configuration by the buyer.; Our hosting provider runs automated operating system and database upgrades. These maintenance events are set to occur out of UK working hours (Monday-Friday, 0900-1730).
• System requirements:
  • Latest Chrome, Firefox, Safari or Microsoft EDGE for best performance.
  • An internet connection.
  • Browser cookies and Javascript must be enabled
  • Experience in developing integrations against REST APIs, where appropriate.
  • Experience in ingesting bulk data files where appropriate.
  • Experience in connecting to/ingesting data from Google Cloud Platform.

User support

• Email or online ticketing support: Yes
• Support response times: Our dedicated support team is available Monday-Friday, 0900-1730 through an online ticketing service. All responses receive a same day reply. Depending on the nature of the query, complete resolution times will vary.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Company Watch offers a range of training options, ensuring users can effectively utilise our services. Your dedicated Account Manager provides one-to-one guidance with an initial onboarding session to facilitate new users, and a further free training session (customised to your needs) each contract year.; We provide free online help and assistance through our support team and online ticket desk. We maintain a comprehensive knowledge base (documentation, video content, and user guides) to support users in navigating and maximising the benefits of the platform. Once each quarter, we host a general training webinar, open to all customers, as well as our popular “Power User” webinars, where we focus on specific tools within the platform.; Additional paid services include personalised training sessions, structured around specific customer needs to ensure optimal utilisation. For these additional sessions and any further training required over and above the free services offered, Company Watch will charge as per our Professional Services (Levels 1-5) day rate as set out in our Pricing Sheet.; With our training facilities and fast-response support team, users can quickly become proficient in using Company Watch to identify, assess, and manage financial risk.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Company Watch provides a complete onboarding package that is tailored to each customer's needs. Typically we provide full user-level training onsite or online. We provide a complete online customer knowledge base with full access to documentation, hint/tips/FAQs as well as an immediate user journey online portal app cue for all initial starters. If further training is required onsite, Company Watch reserves the right to make a day rate charge of £250.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
  • Other
• Other documentation formats:
  • Short video content is available in the Company Watch Knowledgebase.
  • Users can access content on the Company Watch Youtube channel
  • Interactive app cues throughout pages of the system
• End-of-contract data extraction: When it comes to offboarding, we aim to make the process as straightforward as possible. If you decide to stop using our service, you will need to provide no less than 90 days’ written notice and we will work closely with you to ensure a smooth transition. Our team will assist you in exporting your data and provide guidance on any necessary steps to discontinue the service. We understand that circumstances may change, and we are committed to supporting you throughout the offboarding process. The customer data can be exported to Excel, CSV or PDF. No charge will be made for this process.
• End-of-contract process: Full customer access at the end of the contract is revoked. All user permissions are revoked and access rights are terminated. There are no charges for offloading.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Our commitment to accessibility extends to all aspects of the onboarding process. Our platform is browser based allowing font increases and decreases. Our materials avoid overly technical language, ensuring their usability for all new users remains paramount. We've centralised all onboarding documents on our user-friendly knowledge base website, fostering easy navigation and retrieval. Recognising diverse preferences, we offer downloadable file formats catering to various needs. Additionally, a powerful search function empowers you to locate specific information within the materials with ease. We prioritise clear and concise communication, eliminating jargon and complexity, with strategically placed visuals incorporated throughout documents to enrich understanding. Finally, a well-defined contents page and clear headings ensure a smooth and efficient user experience. These accessibility features contribute significantly to a streamlined and successful onboarding experience for every new user.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: There are no material differences between the mobile and desktop sites with all data and functionality available in both formats. The only difference of note is that, due to the reduced screen real estate on mobile devices, the data is displayed sightly differently for some of the system screens.
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: By following instructions in the API documents, users can register for an account and will initially receive credentials for the test environment. The Company Watch API is a REST API. All requests made to the service must be authenticated and done over SSL. Responses are returned as JSON unless otherwise specified.; ; There are examples provided in the public API document which are demonstrated using cURL which makes understanding the functionality of the API easier.; ; Use your preferred HTTP client library for your platform to develop the integration. To work with JSON, we’ve provided a list of recommended libraries for various platforms, all detailed in the public API documentation. ; ; There are no limitations to what the user can do in the API, other than those imposed by the subscription package of Bronze, Silver or Gold, where the package determines the datasets available. Changes can be implemented by the user, by configuring the required endpoints needed to retrieve data (provided the subscription covers the endpoints needed). Users can also set up ongoing monitoring of a population of companies (mirroring the alerting function of the front-end platform), which creates push alerts following a change to any trigger even.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: The Company Watch service is available in 3 different subscription packages that determine which datasets are available to customers. Once confirmed, the user can choose all or any of the endpoints from the subscription package. The API documents cover this in detail but in summary, the endpoints cover a wide range of data including basic company information; scores and limits; financial analysis and trends; financial statement data; group structure; ownership data, encompassing current and previous Directors, persons of significant control and shareholders, Enhanced Director matching; Vigilance anti-fraud events; adverse events and cessation of trading filings; Companies House document filings; profit warnings, unsecured creditors and unsecured distressed debtors; and early warning notifications that include winding up petition applications, unadvertised winding up petitions and notices of intention filed in court. Users can customise in the UAT account by simply selecting from the endpoints available before deploying to production.

Scaling

• Independence of resources: Application clusters use auto-scaling to spin up or down instances depending on demand.

Analytics

• Service usage metrics: Yes
• Metrics types: We can provide detailed usage reports that highlight usage at an individual level, covering all actions in the front end application, including time and date stamps per user. We can also provide tracked usage of the API account if relevant.
• Reporting types:
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: NCSC approved service provider
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Company Watch provides customers with simple Excel widgets that allow the user to export their data and our data also, supporting individual company data as well as bulk analysis. Further export options include PDF for portfolio overview visualisation and custom company report building.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Individual company reports available in custom PDF downloads
  • Portfolio risk overview reports available in PDF
  • Financial statement documents available in Excel
• Data import formats:
  • CSV
  • Other
• Other data import formats: Microsoft Excel

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Our standard SLA determines database availability as 09:00 – 17:30, business hours. Outside these business hours, we aim for 24/7 availability, apart from scheduled maintenance work which equates to approximately 1 Sunday every 2 months. The definition of a Business Day means any day which is not a Saturday, Sunday, or Bank or Public Holiday in England. Business Hours means 09:00 – 17:30 UK time. There will be no scheduled changes, that would result in interruptions to the service during Business Hours.; ; We agree to maintain a minimum service uptime of 99% during the agreed service hours, excluding planned maintenance windows. In the event that the actual service uptime falls below the agreed-upon Service Uptime Objective, the Customer shall be eligible for service credits as compensation. Details of the service credits and how they are calculated is included in the Service Definition Document.
• Approach to resilience: Applications and databases are setup to be resilient within a region (London). Failover to another zone within a region occurs automatically.; The Data Lake and backups are setup to be resilient across multiple regions within the EU.
• Outage reporting: Any planned outages would be communicated well in advance via email and a banner on the main login page of our front end application, and by direct communication with key stakeholders for datafeed and API applications. For unplanned outages, we use a banner on the front end dashboard and login pages which is then consistently updated with expected time to resolution.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Management interfaces are only accessible by Company Watch staff. User support channels are via email and phone only.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cyber Essentials Plus
• Information security policies and processes: Company Watch operates a fully documented Information Security Management System (ISMS) certified to ISO 27001 and supported by Cyber Essentials Plus. Both certifications are independently audited and ensure our policies, controls and processes follow recognised best practice.; ; Our ISMS includes policies covering access control, asset management, data handling, secure development, incident management, supplier security, backup and business continuity. Information security risks are logged, assessed and reviewed through our risk management process.; ; Governance is overseen by the Senior Leadership Team, with day-to-day responsibility held by our Information Security Lead, who ensures policies remain current and that staff follow required procedures. All employees undergo background checks prior to joining and must read and acknowledge relevant security policies during onboarding.; ; To maintain awareness, all staff complete monthly information security training via KnowBe4, covering phishing, social engineering and secure working practices. Additional briefings are issued if policies change or new risks arise.; ; We operate a formal Incident Reporting Procedure enabling staff to report suspected security incidents immediately. Incidents are logged, investigated and escalated when required. Lessons learned are incorporated into our ISMS to support continuous improvement.; ; Further details can be provided on request.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Company Watch follows a formal configuration and change management process within our ISO 27001-certified ISMS. All service components are documented, version-controlled and tracked throughout their lifecycle. Proposed changes are assessed for operational and security impact, following ITIL-aligned review and approval steps. Significant updates are tested and validated internally before deployment, with customer approval obtained where changes may affect functionality or integration. Configuration items are periodically reviewed to ensure accuracy and compliance with policy. All changes are logged, documented and subject to post-implementation review to confirm expected outcomes and identify opportunities for improvement.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Company Watch follows a formal vulnerability and change management process defined within our ISO 27001-certified ISMS. We conduct monthly external vulnerability testing through Invicti and monitor additional threats via vendor security advisories, CVE feeds and system alerts. Identified vulnerabilities are assessed for severity and potential security impact, with critical patches deployed as soon as practicable. All updates and configuration changes undergo internal testing and validation before release. Significant changes follow controlled approval, documentation and review processes to ensure risks are fully understood, mitigated and, where relevant, communicated to customers.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Company Watch uses protective monitoring tools including CrowdStrike, Rapid7, Invicti and Security Scorecard to identify potential compromises, suspicious activity and system anomalies. Alerts are triaged immediately and prioritised based on severity, impact and likelihood. High-severity incidents are investigated as soon as detected, with containment actions taken promptly to prevent escalation. Medium- and low-severity events are reviewed within defined internal timeframes. Our incident response process includes detection, analysis, containment, eradication and recovery steps, with escalation to senior management where required. All incidents are logged, reviewed and used to improve controls as part of our continual improvement process.
• Incident management type: Supplier-defined controls
• Incident management approach: Incident management policies are documented under ISMS (ISO27001 certified). We operate a defined incident management process led by our Information Security Lead, supported by an incident response team. We maintain predefined procedures for common events, including account lockouts, service outages and suspected security breaches. Incidents are reported directly to the Information Security Lead, logged and triaged for severity, with escalation to senior management where required. Impacted customers receive prompt communication through email and platform banners, with regular updates until resolution. A detailed incident report is provided to affected customers after closure. All incidents undergo post-incident review to identify lessons learned.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Company Watch provides a Full Access trial to the main platform, with no limitations to use of our entire range of bronze, silver and gold packages for a maximum 2 week trial period.
• Link to free trial: https://www.companywatch.net

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 20.0%
• Between £250,000 and £500,000: 25.0%
• Between £500,001 and £1,000,000: 40.0%
• Between £1,000,001 and £2,500,000: 45.0%
• Between £2,500,001 and £5,000,000: 50.0%
• Over £5,000,001: 50.0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Amtivo Group Limited t/a British Assessment Bureau
• ISO/IEC 27001 accreditation date: Wednesday 20 November 2024
• What the ISO/IEC 27001 doesn’t cover: All the networks, systems and employees or contractors managed by Company Watch are within scope. Hosted or Cloud platforms are not in scope of the ISMS but are managed accordingly with the Third-party Management Policy, and Cloud Management Security Policy. ; The following system platforms are out of scope: ; Google Workspace, ; Microsoft 365, ; Amazon Web Services (AWS),; Google Cloud Platform (GCP), ; Netwise Data Centre (Contents of our actual rented rack within the data centre is in scope).; Where temporary office space is used, the physical security and environmental controls are out of scope however company assets used in such locations remain within scope and subject to remote working security policies.; ; Control Exclusions:; None of the ISO27001 Annex A controls have been excluded from selection.
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 239b2c8c-9473-4053-affe-62cc4eb7c275
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: Ee06d5ad-1aea-4f3a-a91b-d28da20237fe
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at _sales_@companywatch.net. Tell them what format you need. It will help if you say what assistive technology you use.