DUN & BRADSTREET LIMITED

Chat D&B and Agentic AI for Economic, Financial Standing and FVRA checks

D&B Data - (620 million business records) integration for grant, visa, applicant or supplier onboarding including Economic and Financial Standing, EFS checks, Financial Viability Risk Assessment FVRA. Accessed via Chat D&B, Agentic AI, (Agent Ready Data), A2A built on the Model Context Protocol (MCP) providing standardised data. Supply chain Management.

Features

• 620 million global businesses for supply chain use cases
• Entity resolution for company verification via the D&B data cloud
• Supplier onboarding and due diligence e.g., EFS, FVRA
• Agent ready global business financial records, risk ratings and scores
• Including full business family trees, and ultimate beneficial ownership, (UBO)
• Modern architecture built on the Model Context Protocol (MCP)
• Accessed via Google Cloud, Snowflake, Databricks data sharing platforms
• Providing a consistent data structure across verified business entities
• Accredited for Cyber Essentials, ISO27001 and Hellios FSQS and JOSCAR
• Including the D&B DUNS Number, unique business identifier

Benefits

• Agent Ready AI on demand 24/7 data access
• Supports business transformation helping you to make informed business decisions
• Accelerating business supply chain processes, for compliance
• Provides global data for business process innovation and regulation
• Compatible for public sector business data mastering use cases
• Auto-populate your systems with high quality and consistent business data
• A2A using MCP enable a risk averse approach to AI
• Uninterrupted availability with consistent response times across peak periods
• The DUNS number aids entity resolution irrespective of use case
• Agents and APIs enhances developer experience reducing costs

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at PublicSector@dnb.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

847811077159917

Contact

Public Sector Team
0808 239 0412
PublicSector@dnb.com

About your service

• Service categories:

  Applications

  Supply chain management

  • Supply chain planning
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Chat D&B and Agent Ready data can be consumed via API , or data sharing platforms such as Snowflake and Databricks into many data mastering systems, for supply chain use cases, dependent upon your workflow. E.G., due entity resolution, or procurement, visa applications, grant management or due diligence applications.
• Cloud deployment model: Private cloud
• Service constraints: If using Agent to Agent (A2A), the constraint is the agent integrated with the D&B Agentic solution. D&B data can be shared via cloud platforms like Google, Databricks, or Snowflake, provided the user has the necessary platform licenses. D&B APIs can also integrate directly into relevant supply chain workflows and user interfaces.
• System requirements:
  • The solution is business data
  • Therefore, it can be consumed into customer systems
  • It can be accessed via data sharing platforms
  • E.G., Google Cloud, Snowflake and Databricks (license permitting)

User support

• Email or online ticketing support: Yes
• Support response times: Tickets are raised via email/phone or chat and an Initial response time: Within 1 business day. Resolution time: Depends on complexity, but simple queries are often resolved on the same day and more complex queries 2–3 business days.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Web chat is included in the software as a service user interfaces and on our website.
• Web chat accessibility testing: Web chat user acceptance and feedback is carried out internally
• Onsite support: No
• Support levels: Digital Service Center: For general issues, and documentation access. 24x7 Portal Available for service disruptions or urgent support needs.
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: For D&B data via the Data Cloud there is a dedicated site for the API, onboarding and integration, D&B also provides delivery consultants and online training to assist with the implementation. For supply chain mapping, a D&B consultant will work with you to support the ingestion of data, matching to the D&B Data Cloud and unmasking the supply chain.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Access to D&B data and enrichment services via D&B Data Cloud will be discontinued after non-renewal. Any D&B data already integrated or exported into your internal systems (CRM, ERP, etc.) before the contract ends will remain in those systems, but you will not receive further updates or enrichment.; Integrations and automated workflows relying on D&B Connect will stop functioning. For data privacy, D&B follows contractual and legal requirements regarding data retention and deletion after service termination.
• End-of-contract process: Access to D&B data and enrichment services via D&B Data Cloud will be discontinued after non-renewal. Any data already integrated or exported into your internal systems (CRM, ERP, etc.) before the contract ends will remain in those systems, but you will not receive further updates or enrichment.; Integrations and automated workflows relying on D&B Connect will stop functioning.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: There is a dedicated site for the API documentation and other digital resources

Using the service

• Web browser interface: No
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: EN 301 549
• Description of service interface: Chat D&B can be utilised for data queries, so can be classified from a data perspective as a service interface.
• Accessibility standards: EN 301 549
• Accessibility testing: D&B uses VPAT as a template used to document a product's conformance with accessibility standards and guidelines to support with features that support accessibility.
• API: Yes
• What users can and can't do using the API: The D&B Direct+ API is a RESTful service that provides real-time and batch access to Dun & Bradstreet Data Cloud, including mastering data, supplier onboarding due diligence data e.g., company profiles, financials, credit risk rating, the full range of D&B scores, such as the Failure Score that can be used for FVRA and EFS contract due diligence and more. search: Find companies by name, D-U-N-S®, or location.; enrich: Retrieve detailed company data, including ESG metrics.; monitor: Set up alerts for changes in underlying data e.g., risk indicators. OAuth 2.0 token-based security. JSON with structured fields for easy integration. Tiered based on subscription; supports high-volume batch processing.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
  • Other
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Customisation includes the Data Block Selection: You can choose which D&B data blocks (e.g., scores and ratings, Company Financials for example) , tailoring the enrichment for your due diligence needs or mastering needs. Select specific data elements within each data block to enrich your records, and configure which fields to append to your data. Also, Integration Options with the API.

Scaling

• Independence of resources: The D&B APIs are elastic on-demand capacity, automatically scaling to deliver high performance

Analytics

• Service usage metrics: Yes
• Metrics types: D&B provides usage metrics based upon the contracted service and data volumes.
• Reporting types: Regular reports
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type: Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: D&B Data Cloud via API A2A MCP is for businesses and the Public Sector to access the D&B data. There is typically, no customer data to export. But, for data privacy, D&B typically follows contractual and legal requirements regarding data retention and deletion after service termination.
• Data export formats: Other
• Other data export formats: Non-applicable
• Data import formats: Other
• Other data import formats: Non-applicable

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Other
• Other protection between networks: D&B APIs require all requests to be made over HTTPS, ensuring data is encrypted in transit between a customer's network and D&B’s systems. Authentication is handled via secure API keys and tokens.; D&B follows industry-standard security protocols to protect data exchanges. WAF, DDoS protection NGFW, DMZ, AntiMalware, NAC, XDR
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: Please see our data privacy and security links on our website ; https://www.dnb.co.uk/utility-pages/privacy-policy.html ; https://www.dnb.co.uk/content/dam/english/dnb-data-insight/DNB_Master_Information_Security_Policy.pdf WAF, DDoS protection, NGFW, DMZ, AntiMalware, NAC, XDR

Availability and resilience

• Guaranteed availability: D&B APIs are Cloud based and uptime is 99.7%
• Approach to resilience: D&B APIs and data runs 100% out of the cloud and is not susceptible to normal Data center disasters. In the case of our cloud environments impacted they run in different availability zones for redundancy in these services.
• Outage reporting: A publicly available dashboard

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Other
• Other user authentication: PAM Privileged Access Managemnent
• Access restrictions in management interfaces and support channels: Only accessible via VPN + PAM
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Other
• Description of management access authentication: PAM (Privileged Access Management)

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: Between 6 months and 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Dun & Bradstreet 's Chief Information Security Officer is responsible for security at Dun & Bradstreet . Dun & Bradstreet ’s executive management established the Global Security and Risk Group (GSR), whose mandate is the management and control of information risk across the enterprise, including such activities as risk management, identity & access management, threat and vulnerability analysis, policy and standards documentation management, data loss prevention, application security and SDLC, security awareness and secure application development training and vendor risk management. GSR is staffed by experienced security and audit professionals, and roles and responsibilities are clearly defined within the organizational structure. Staff certifications include GSLC, GCED, GCIA, CISSP, CISA, CISM, CPA, among others; ; Dun & Bradstreet ’s information security team is responsible for: · Creation, review and approval of information security policies and the effectiveness of information security policy implementation. · Manage assignment of specific roles and responsibilities for information security and technology. · Develop and maintain an overall strategic security plan, which includes consistent implementation of information security across different parts of the organization. · Monitor significant changes in the exposure of information assets. · Review and monitor information security / privacy incidents or events.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Change management policy applies to all technical changes, including hardware, software and facilities. A change ticket is entered into the automated change management system. The ticket describes the change in technical and non-technical terms. The ticket is reviewed by a Change Advisory Board (CAB) at a regularly scheduled meeting. The CAB comprises technical and management representatives of each line of service and service management, reviews and approved or disapproves all change tickets.; ; Procedures that identify requirements for implementing an emergency change exist. Only individuals authorized by management have the ability to initiate an emergency change. Emergency changes are reviewed post-implementation.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Dun & Bradstreet 's Technical Vulnerability Management program requires that patches, hot fixes, and other technical or security updates identified as applicable be applied and validated; ; All patches or other technical remediation must be made through standard change control Dun & Bradstreet 's Technical Vulnerability Management program requires that patches, hot fixes, and other technical or security updates identified as applicable be applied and validated; ; All patches or other technical remediation must be made through standard change control procedures according to the following remediation timetable: Critical - 7 Days High - 30 Days Medium - 120 Days Low - Discretionary
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Our organization has developed a continual monitoring program that includes correlation and analysis of security-related information generated by assessments and monitoring, Our monitoring program includes open source information sites (e.g. social media) for unauthorized disclosure of company information, Our organization tracks and documents information system security incidents; ; The Logging and Monitoring Policy requires that the Technology Operations team validate audit log settings for each hardware device and the software installed on it, for the purpose of ensuring that logs include a date, timestamp, source addresses, destination addresses, and various other useful elements of each packet and/or transaction.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: D&B has a well-established Global Incident and Breach Response Procedure that addresses containment, preservation, recovery and regulatory and customer notices. D&B’s robust Incident Response Plan and supporting procedures are updated based on lessons learned activities, changes in the evolving threat landscape, with new tools/processes to address system/organizational changes and protect customer data. The Incident Response Plan is distributed and communicated to the appropriate teams when any updates are made. D&B has a well-established Global Incident and Breach Response Procedure that addresses containment, preservation, recovery and regulatory and customer notices. D&B has a security incident response team 24x7 to respond
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: D&B Provide a free two week trial of our services in general, however, for API and Connectors there is a development key that will be provided as part of the package.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 20%
• Between £250,000 and £500,000: 30%
• Between £500,001 and £1,000,000: 35%
• Between £1,000,001 and £2,500,000: 37%
• Between £2,500,001 and £5,000,000: 40%
• Over £5,000,001: 45%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Standards Institution
• ISO/IEC 27001 accreditation date: Wednesday 1 May 2024
• What the ISO/IEC 27001 doesn’t cover: Customer Service / Help Desk are excluded form ISO27001 however ,D&B also has ISO27701 and ISO14001
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: None of the criteria
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: Yes
• Any other security certifications:
  • Hellios FSQS Certification
  • Hellios JOSCAR

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
    • How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
    • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
    • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
    • Plans for positive actions with community groups.

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Introducing transparency to pay and reward processes
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of issues relating to entering the contract workforce
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery
    • Content of the outreach activity is designed to suit the target cohort
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at PublicSector@dnb.com. Tell them what format you need. It will help if you say what assistive technology you use.