Endole Ltd

Endole

Endole is a comprehensive business intelligence platform supporting B2B lead generation, risk assessment, and company research.

It combines credit reports, financials, ownership data, and verified contact information with real-time alerts, helping businesses make confident decisions, identify opportunities, and understand UK companies in depth.

Features

• Unlimited Business Credit Reports, including Limits, CCJs, Charges, and Gazettes
• Target companies with 50+ search criteria including Financials & Location-search
• Research ownership structures, including PSCs and UBOs
• Explore key decision makers and key personnel
• On-demand access to comprehensive intelligence on any UK company
• Director profiles displaying backgrounds, connections, and appointments for better understanding
• Real-time monitoring alerts whenever company information changes significantly
• Integrated data enrichment for updating records with new, verified details
• Personalisable dashboards for quick, actionable research
• Explore up to a decade of company activity history

Benefits

• Qualify prospects and connect with decision makers effortlessly
• Make important decisions with authentic, authoritative intelligence
• Grow by targeting and reaching ideal prospects effortlessly
• Be the first to learn about changes companies that matter
• Instantly transform old records with new data in moments
• Perform KYC checks and completely understand who you're working with
• Connect with new companies as soon as they register
• See companies year–on–year creditworthiness and explore their debts
• Discover businesses who are similar to your existing client list

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@endole.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

573590163080558

Contact

Daniel Parker
0121 630 4053
sales@endole.co.uk

About your service

• Service categories:

  Application Development and Deployment

  Analytics and business intelligence

  • Business Intelligence
  • Advanced and predictive analytics
  • Location and geospatial data management and analytics
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: N/A
• System requirements:
  • Active subscription required to access full features and data
  • Optional: PDF reader for downloaded documents

User support

• Email or online ticketing support: Yes
• Support response times: During weekdays, our support aims to respond to all enquiries within 1-2 hours during working hours, and within 8-10 hours after working hours. On weekends, our offices are closed.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: Our support suite is included as standard with the Endole subscription. Users have full access to troubleshooting resources and step-by-step guides, including Endole's Masterclass series that offer visual demonstrations on using Endole. A dedicated account manager is available during business hours for any subscription user via email or phone, providing unlimited, tailored assistance with onboarding, training, and guidance.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: As subscribers use Endole, they'll see step-by-step tutorials to help learn how to perform new tasks. An Account Manager is assigned to each Endole subscriber who offers online training via Zoom/Teams/Google Meet, offering a full demo of the platform and is available for unlimited training. There are also step-by-step guides in the Endole Help Centre and the Endole Masterclasses (video tutorials) that explain how to achieve specific goals in short, easy-to-digest videos.
• Service documentation: No
• End-of-contract data extraction: Users can extract data at any time throughout their subscription period using built-in export functions. Data requests can also be made to our support team at any time, who'll be able to provide this.
• End-of-contract process: At the end of each subscription term, auto-renewal will apply. Renewal occurs at the same price - there are no renewal fees or price increases. Subscriptions are non-contracted and can be cancelled at any time.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: Yes
• Description of customisation: Endole is completely customisable to your preferences, with the ability to create entirely bespoke dashboards where every type of corporate insight can be pinned - ranging from Decision Makers and Financials, to Credit Scores, Shareholders, Group Structures, and more. Targeted lists can be made using over 50+ different filters like Location, Financials, Industry, and more. Once made, you can sort, filter, or add from over 90+ different data columns, including Telephone, Email Address, Director Ages, and more.

Scaling

• Independence of resources: We guarantee resource independence by using Cloudflare to cache static resources, significantly reducing load on our core servers and speeding up delivery for all users. Heavy tasks, such as data cleaning and transformation, are executed on separate, dedicated servers, ensuring these processes do not slow down our primary services. We also benefit from 24/7 monitoring of CPU loads, keeping resource usage consistently low for proactive scaling. Finally, we employ a highly optimised database infrastructure, utilising MySQL and Elasticsearch indexing, to ensure that every data query is processed rapidly, minimising the time resources are tied up by individual requests.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest: Physical access control, complying with CSA CCM v4.0
• Data sanitisation process: Yes
• Equipment disposal approach: In-house destruction process
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure

Data importing and exporting

• Data export approach: Data can be exported as a .CSV or a .PDF file using the built-in export features within the platform.
• Data export formats:
  • CSV
  • Other
• Other data export formats: PDF
• Data import formats: Other
• Other data import formats: Text (Paste)

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: We commit to a high level of service availability, aligned with industry best practices – operating at an uptime of 99.99%.; ; In the event that we fail to meet the guaranteed availability specified in a customer's contract, the standard compensation mechanism is a Time-for-Time service credit. This means the customer's subscription will be automatically extended by a duration equivalent to the confirmed period of downtime.
• Approach to resilience: Available on request.
• Outage reporting: Outages are reported via Email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces and support systems is restricted using role-based access control and least-privilege principles. Only authorised personnel can access administrative functions, with access granted based on job role. Authentication is protected using strong passwords and multi-factor authentication where available. Access is reviewed periodically and removed promptly when no longer required. Support channels are restricted to verified staff, and sensitive actions are logged and monitored to prevent unauthorised use.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: We adopt a comprehensive security governance framework based on principles from ISO 27001. Our approach involves continuous risk assessment, formal data classification, and the use of strong access control policies. Security is managed by dedicated personnel who oversee compliance, conduct regular internal audits, and ensure all staff complete mandatory security awareness training. We maintain a formal set of information security policies that are reviewed annually and cover incident response, data handling, and change management. All security decisions are formally documented and approved by senior management.
• Information security policies and processes: We maintain a formal set of information security policies, reviewed and ratified annually by senior management, based on ISO 27001 best practices. ; ; The reporting structure is overseen by a dedicated Information Security Officer (ISO) who reports directly to the Chief Technology Officer (CTO). The ISO is responsible for risk assessment and policy enforcement. We ensure policies are followed through mandatory, role-specific security awareness training for all staff upon induction and annually thereafter. Compliance is verified via continuous monitoring, monthly internal audits, and documented approvals for all security-critical changes.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Endole uses a controlled configuration and change management process to ensure stability, security, and traceability across its services. All system components are version-controlled and tracked throughout their lifecycle, with clear separation between development, staging, and production environments. Changes are reviewed before deployment and assessed for potential impact on security, performance, and availability, including any effects on data handling, access control, or external integrations. Higher-risk changes are tested prior to release, access to configuration is restricted by role, and all updates are logged and monitored to ensure issues can be identified and rolled back quickly if required.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We manage vulnerabilities through regular internal reviews of our infrastructure and application code. Our services operate on a dedicated Linux server using a LAMP stack, with identified risks assessed based on severity and potential impact. Critical vulnerabilities are typically remediated within 12 hours, while non-critical issues are addressed on a weekly and/or ongoing schedule. All changes are manually tested prior to deployment. We maintain continuous uptime monitoring with minute-level checks and securely retain system and application logs for review and investigation.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We identify potential compromises through continuous uptime and availability monitoring, regular review of system and application logs, and alerts for unusual behaviour or failed access attempts. Logs are securely stored and reviewed to support investigation. When a potential compromise is identified, access is restricted where necessary, affected components are investigated, and remediation actions are applied promptly. Incidents are prioritised based on severity and impact. Critical incidents are responded to immediately, with investigation and containment typically beginning within hours, while lower-risk issues are addressed as part of routine operational processes.
• Incident management type: Supplier-defined controls
• Incident management approach: We operate predefined incident management procedures for common events such as service disruption, security alerts, and suspected data issues. Users can report incidents via our support contact channels, which are monitored during business hours. Incidents are logged, assessed, and prioritised based on severity and impact. Where required, access to affected systems is restricted while investigation and remediation are carried out. Incident updates and post-incident summaries are provided to affected users where appropriate, including details of impact, resolution, and any corrective actions taken.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Free trials are available for 7 days at a time, offering complete access to the Endole platform. Trials include unlimited access to Risk, Credit, Financial, and Owner analysis, as well as B2B List Building facilities. Trials can be extended on request. Export capabilities are not available during your trial.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: None of the criteria
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
    • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
    • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
    • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
    • Plans for positive actions with community groups.
    • Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
    • Plans to respond flexibly and adapt approaches to community engagement and initiatives
    • Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds
    • Collaborating with anchor institutions and community groups to make facilities available for education, training or community events

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@endole.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.