Dun & Bradstreet Ltd

D&B Connect - Business data connectors supporting record onboarding and maintenance

D&B Connect streamlines data management, matching and validating data. Create a single source of truth for business data across applications such as suppliers and internal records within a CRM e.g., Salesforce, MDM, ERP and AP platforms, leverage the Master Data capabilities utilising the D&B DUNS Number, via D&B Data Cloud.

Features

• Access over 555 million Global business data records
• Pre-built API integrations to systems such as Salesforce
• Full business financial records, risk ratings, payment history and scores
• Including full business family trees, and ultimate beneficial ownership, (UBO)
• Identifying supply chain risk and credit risk
• GDPR compliant data attributes for compliance and due diligence needs
• Providing a consistent data structure across verified business entities
• Accredited for Cyber Essentials, ISO27001 and Hellios FSQS and JOSCAR
• Year-round access with high availability: 24x7x365 at 99.9%
• Standalone web version available for ease of deployment

Benefits

• On demand access to global business information whenever required
• Supports business transformation helping you to make informed business decisions
• Accelerating your due diligence and reducing costs of duplicate screenings
• Compatible for compliance, risk management and fraud detection use cases
• Supports business transformation helping you to make informed business decisions
• Auto-populate your systems with high quality and consistent business data
• The wealth of global data enables business process innovation
• Uninterrupted availability with consistent response times across peak periods
• Fast API response times support high and low transaction volumes
• The modern API enhances developer experience and reduces implementation costs

£10,573 a licence a year

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at PublicSector@dnb.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

470206518081407

Contact

Public Sector Team
0800 001234
PublicSector@dnb.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: There may be planned maintenance windows as required, however, these will be communicated to the customer.
• System requirements:
  • Access to the Internet
  • Web Browser such as Chrome, Internet Explorer, Firefox

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: 24 business hours
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Web chat is available through the D&B website or through the product
• Web chat accessibility testing: D&B do not offer any additional support for assistive technology but offer chat and phone mediums
• Onsite support: Yes, at extra cost
• Support levels: D&B have three levels of support available from basic set up and training ranging to bespoke levels of support including technical and project management support and consultancy. A Statement of Works will be drafted with the client prior to a contracted piece of work.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Users have a range of training support available. Most products run a weekly live training webinar with a product expert in attendance, which is free to all subscribers. Additional bespoke webinars can be run for individual user groups if required. A Web based training environment is also available to all users which includes access to product videos and user guides. Our new generation of products also include extensive help sections which also include training videos within the product.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
  • Other
• Other documentation formats: Other formats available upon request
• End-of-contract data extraction: This is non applicable as the API is to connect to D&B data not host external data.
• End-of-contract process: There will be a loss of access to the application, at the end of the contract.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Administrative interface used by D&B Admin team members to support customers including the setup of new users
• Accessibility standards: None or don’t know
• Description of accessibility: Using accessibility features built in to Windows O/S
• Accessibility testing: None
• API: Yes
• What users can and can't do using the API: D&B Connect acts as a highway, consolidating data silos and executing overwrite and deletion rules. It can be used to identify and standardise data fields. It can be used as a gateway to customised, third party identity resolution and enrichment—capabilities that sit at the core of data quality and master data initiatives and cannot be resolved by software alone.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Yes to the levels designed as part of the individual connectors.

Scaling

• Independence of resources: Autoscaling on the application servers

Analytics

• Service usage metrics: Yes
• Metrics types: Metered product. Usage reported against the available meter (units or dollars)
• Reporting types: Real-time dashboards

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Other
• Other data at rest protection approach: D&B's information security program (GSR - Global Security and Risk) uses the ISO-27001 framework.
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Non applicable.
• Data export formats: Other
• Data import formats: Other
• Other data import formats: Non applicable

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: System is available 99.9% 24*7 except for planned maintenance communicated to the customer. Any outages / downtime outside of this, is communicated immediately with customers and recovery plans will be implemented.
• Approach to resilience: Available on Request
• Outage reporting: 24*7 monitoring for services and application with service alerts and emails to on-call staff and customers.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: All access is role-based. Before a user can access management interfaces and support channels, the user must be approved and assigned to a group with the necessary privileges on a need-to-know, least-privilege basis. Access to any computing resource requires a valid username and complex password.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Username or password
  • Other
• Description of management access authentication: IP authentication; Two-factor authentication is required for VPN access.

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: United Registrar of Systems
• ISO/IEC 27001 accreditation date: 03/07/2017
• What the ISO/IEC 27001 doesn’t cover: All 114 controls are included, none are omitted
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications:
  • D&B Business Information Solutions is accredited to IS027001 security standards
  • D&B Business Information Solutions accredited to IS09001 quality standards
  • D&B UK is authorised and regulated by Financial Conduct Authority
  • Dun & Bradstreet Ltd is accredited to Cyber Essentials Standards
  • Dun & Bradstreet Ltd is an approved JOSCAR supplier
  • Dun & Bradstreet Ltd is an approved HELLIOS supplier
  • Dun & Bradstreet Ltd is accredited with ISO 14001

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: D&B has published and maintains policies addressing information security and privacy requirements, a Code of Conduct, along with standards and procedures documentation as well, e.g., access provisioning. The Internal Audit group is responsible for evaluating compliance against policy. Internal Audit reports audit findings to the Board and tracks findings to completion. Dun & Bradstreet Ltd is certified to the ISO-27001 framework.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Change tickets are opened in the automated change management system. The ticket describes the reason for the change; who requested the change and at what capacity; description of the requirements, risks and impacts; implementation, test, and back-out plans; scheduling information including analysis of potential conflict with other proposed changes. The ticket is reviewed by a Change Advisory Board at a regularly scheduled meeting. The CAB comprises technical and management representatives of each line of service management, reviews and approved or disapproves all change tickets. After the change is executed it is reviewed for post-change impact and metrics analysis.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Servers are scanned weekly for vulnerabilities. Per Policy, vulnerabilities and patches are deployed based upon the criticality of the vulnerability in-scope.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: A SIEM is in place to provide secure collection of server OS security event logs; network device logs; Internet proxy; host/network IDS/IPS; email gateway, etc. The SIEM analyses and correlates information from the various input sources and provides near-real-time analysis and alerting. D&B also maintains a Security Operations Center (SOC), whose staff responds to alerts originating from the SIEM. Incident response documentation is in place.
• Incident management type: Supplier-defined controls
• Incident management approach: Events are evaluated for scope, impact, initial damage assessment and response level by the CSIRT team, Team members are engaged according to the scope and severity and brought into the Incident Management Team's ECC Call. The team is composed of ancillary groups and SMEs. A response plan is created containment strategy, eradication strategy, evidence retention and investigation steps. Execution is governed by the incident coordinator. Regular reports are created and provided to the CSIRT Team; timing intervals for issuing reports depend on the criticality of the event. The CSIRT team documents lessons learned. Post-incident activity is then undertaken.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Dun & Bradstreet is dedicated to promoting sustainability in our own business practices and to providing our employees with opportunities to make a positive impact on the environment. As we build upon the foundation established in 2022, we are proud to reaffirm our environmental protection commitment and continue to promote sustainability across all of our operations. Specifically, our Environmental Policy Statement commits us to the following:; • Engage with vendors and suppliers that use progressive and environmentally friendly products, materials, and technology to advance sustainability across our organization. We continue to advance sustainability through migration of our data centres to hybrid cloud environments.; • Adopt internal policies and practices that enhance our energy efficiency management and resource conservation efforts.; • Create healthy work environments that embrace published sustainability guidelines and promote recycling and responsible consumption.; • Foster a global workforce aligned with our corporate sustainability efforts and engaged in environmental projects and issues in their local areas.; • Explore opportunities to save energy, water, and resources, generate less waste, and consume fewer natural resources.; • Set goals and monitor progress of our sustainability efforts through the collection of key data and establishment of corporate objectives

  Covid-19 recovery

  Over the past two centuries, Dun & Bradstreet has helped clients survive financial downturns, recessions, the Great Depression, wars, pandemics and numerous global changes. We have helped our clients weather these storms through the power of better decisioning based on data and analytics.; ; During the Covid-19 pandemic, D&B took several actions to help customers manage risk and enable growth:; ; • COVID-19 Impact Index for customer portfolio, pipeline, or supply chain to provide a robust, dynamic, and integrated view of the key factors impacting a customer’s business;; • ‘Health Scans’ on customer portfolio, pipeline, or supply chain to determine areas of risk and opportunity, which were provided free of charge;; • COVID-19 Commerce Disruption Tracker to share ongoing insights on businesses able to operate, sales, and employment at a global, country, and state/county level; and; • Continued economic insights to support planning.

  Tackling economic inequality

  For nearly two centuries, Dun & Bradstreet has provided businesses with the information they need to grow their operations through data-driven decision-making. In providing information that enables companies to describe the past, thrive in the present, and anticipate the future, and in turn impact the people and organisations they serve, we recognise a responsibility to both lead in good governance and use our data for good. In today’s rapidly changing landscape, our solutions help organizations meet the growing regulatory, ethical and social demands that come with being a responsible business.

  Equal opportunity

  At Dun & Bradstreet, we are committed to creating the best possible workplace and hiring process. We make employment decisions based on merit and do not discriminate based on race, colour, national origin, religion, creed, gender, sexual orientation, gender identity or expression, civil union or marital status, age, citizenship status, disability status, pregnancy, genetic information, protected military or veteran status, ancestry, medical condition (including cancer or genetic characteristics) or any other characteristic protected by law and as set out in our Equal Employment Opportunity Policy, and any other applicable local policies.; ; In 2023 and for the seventh consecutive year, Dun & Bradstreet earned a score of 100 on the Human Rights Campaign Foundation’s Corporate Equality Index, receiving the Equality 100 Award (formerly known as “Best Place to Work for LGBTQ+ Equality”).

  Wellbeing

  The health and well-being of our employees is of utmost importance to Dun & Bradstreet, and we are constantly striving to provide the best possible working environment. This includes comprehensive medical coverage, dental and vision insurance, and proactive and preventative health programs. Health and safety requirements differ across the organization as we follow the local regulations of the countries in which we operate. The work is governed by local health and safety policies as well as our companywide Speak Up and Non-Retaliation Policy, which ensures employees can report any dissatisfaction anonymously or confidentially.

Pricing

• Price: £10,573 a licence a year
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: A 14 day free trial with limited data downloads.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at PublicSector@dnb.com. Tell them what format you need. It will help if you say what assistive technology you use.