DUN & BRADSTREET LIMITED

D&B Connect: business data cleansing, enrichment, integration, automation, analytics platform.

D&B Connect for matching and validating business data: enrichment, cleansing, and integration. It streamlines supplier onboarding, supports compliance and credit decisions, improves risk management, and procurement efficiency. The DUNS number persistent key delivers trusted data for buyers to make informed decisions, increase transparency, and drive value for money across processes.

Features

• Access over 650 million Global business data records
• Pre-built API integrations to systems such as Salesforce
• Full business financial records, risk ratings, payment history and scores
• DUNS numbers, business family trees, and ultimate beneficial ownership, (UBO)
• Identifying supply chain risk and credit risk
• GDPR compliant data attributes for compliance and due diligence needs
• Providing a consistent data structure across verified business entities
• Year-round access with high availability: 24x7x365 at 99.9%
• Accredited for Cyber Essentials, ISO27001 and Hellios FSQS and JOSCAR
• Standalone web version available for ease of deployment

Benefits

• On demand access to global business information whenever required
• Supports business transformation helping you to make informed business decisions
• Accelerating your due diligence and reducing costs of duplicate screenings
• Compatible for compliance, risk management and fraud detection use cases
• Supports business transformation helping you to make informed business decisions
• Auto-populate your systems with high quality and consistent business data
• The wealth of global data enables business process innovation
• Uninterrupted availability with consistent response times across peak periods
• Fast API response times support high and low transaction volumes
• he modern API enhances developer experience and reduces implementation costs

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at PublicSector@dnb.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

901315627034934

Contact

Public Sector Team
0808 239 0412
PublicSector@dnb.com

About the service

• Service categories:
  • Application Development and Deployment
    • Data management
      • Data integration and intelligence
        • Data Ingestion and Transformation Software
        • Dynamic Data Movement Software
        • Data Quality Software
        • Data Access Infrastructure Software
        • Composite Data Framework Software
        • Master Data Intelligence Software
        • Metadata Management Software
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Salesforce Customer Relationship Management solution (CRM)
• Cloud deployment model: Private cloud
• Service constraints: None
• System requirements:
  • For standalone version their are no constraints
  • D&B Connect offers native integration with Salesforce CRM
  • Compatible with both the Salesforce Lightning Experience and Salesforce Classic

User support

• Email or online ticketing support: Yes
• Support response times: Tickets are raised via email/phone or chat and an Initial response time: Within 1 business day. Resolution time: Depends on complexity, but simple queries are often resolved on the same day and more complex queries 2–3 business days.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• AI chatbot: Yes
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Web chat is included in the software as a service user interfaces and on our website.
• Web chat accessibility testing: Web chat user acceptance and feedback is carried out internally
• Onsite support: No
• Support levels: Digital Service Center: For general issues, troubleshooting, and documentation access. 24x7 Portal Available for service disruptions or urgent support needs. Developer Portal: Offers documentation, use cases, and integration guides for developers. Technical consultation for API/data integration; Project management for complex deployments; Custom data mapping and transformation; Ongoing support and troubleshooting - supported by customer success managers; Access to developer resources and documentation 24/7
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: For D&B Connect there is a dedicated site for the API, onboarding and integration, D&B also provides delivery consultants and online training to assist with the implementation.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: https://directplus.documentation.dnb.com/html/guides/DNBConnect/DNBConnect.html?; web access and other digital resources
• End-of-contract data extraction: Access to D&B data and enrichment services via D&B Connect will be discontinued after non-renewal. Any D&B data already integrated or exported into your internal systems (CRM, ERP, etc.) before the contract ends will remain in those systems, but you will not receive further updates or enrichment.; Integrations and automated workflows relying on D&B Connect will stop functioning. For data privacy, D&B follows contractual and legal requirements regarding data retention and deletion after service termination.
• End-of-contract process: Access to D&B data and enrichment services via D&B Connect will be discontinued after non-renewal. Any data already integrated or exported into your internal systems (CRM, ERP, etc.) before the contract ends will remain in those systems, but you will not receive further updates or enrichment.; Integrations and automated workflows relying on D&B Connect will stop functioning.

Using the service

• Web browser interface: No
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: D&B Connect is a platform that allows you to seamlessly connect, clean, and enrich your business data with Dun & Bradstreet’s global data and insights. It helps you Integrate D&B data directly into your CRM, ERP, MAP, and MDM systems using pre-built, no-code integrations. You can visualise and assess your data health with intuitive dashboards. Identify and fix data gaps, discrepancies, and duplicates. Map and match your company data to D&B’s database, linking it to D-U-N-S® Numbers for deeper insights. Automate data enrichment and maintenance, reducing manual work and improving data quality providing a single, trusted source of business data to support better decision-making and operational efficiency.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
  • Other
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Customisation includes the Data Block Selection: You can choose which D&B data blocks (e.g., Finance, Supply, Compliance, Master Data) to purchase and use, tailoring the enrichment to your business needs. Custom Enrichment Configuration: Select specific data elements within each data block to enrich your records, and configure which fields to append to your data. Also, Integration Options: Connect natively with Salesforce, and automate workflows. ; Master Data Management: Use MDM as a Service to resolve duplicates and create trusted golden records using AI-driven entity clustering. Custom Match Rules: Save and reuse match configurations and templates for matching your data to D&B’s database. Custom Fields and Exclusions: In Salesforce, you can add custom fields (like exclusion checkboxes) to control which records are processed. Dashboards and Visuals: Visualise and segment your data by various attributes (location, revenue, employee count, etc.) using customisable dashboards.

Scaling

• Independence of resources: The D&B APIs are elastic on-demand capacity, automatically scaling to deliver high performance

Analytics

• Service usage metrics: Yes
• Metrics types: D&B provides usage metrics based upon the contracted service and data volumes.
• Reporting types: Regular reports
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation / Secure Erase
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: D&B Connect is an application to surface D&B data to a customer's solution via integration. There is typically, no customer data to export. But, for data privacy, D&B typically follows contractual and legal requirements regarding data retention and deletion after service termination.
• Data export formats: Other
• Other data export formats: Non-applicable
• Data import formats: Other
• Other data import formats: Non-applicable

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Other
• Other protection between networks: D&B APIs require all requests to be made over HTTPS, ensuring data is encrypted in transit between a customer's network and D&B’s systems. Authentication is handled via secure API keys and tokens.; D&B follows industry-standard security protocols to protect data exchanges. WAF, DDoS protection also NGFW, DMZ, AntiMalware, NAC, XDR
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: Please see our data privacy and security links on our website ; https://www.dnb.co.uk/utility-pages/privacy-policy.html ; https://www.dnb.co.uk/content/dam/english/dnb-data-insight/DNB_Master_Information_Security_Policy.pdf; WAF, DDoS protection also NGFW, DMZ, AntiMalware, NAC, XDR

Availability and resilience

• Guaranteed availability: The D&B APIs are available 24/7 and uptime is generally 99%
• Approach to resilience: D&B Connect runs 100% out of the cloud and is not susceptible to normal Data center disasters. In the case of our cloud environments impacted they run in different availability zones for redundancy in these services.
• Outage reporting: A public dashboard can be accessed for service issues

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
• Access restrictions in management interfaces and support channels: For D&B Connect Admin User Roles: Only users with admin privileges can access sensitive management features such as the "Check RUM Usage" tab, which provides transparency into Records Under Management (RUM) usage and transaction details.; Authentication: Access to D&B Connect and its APIs is secured using OAuth 2.0 authentication. API keys and secrets are managed at the tenant level and distributed only to authorised administrators.; Credential Management: It is the customer’s responsibility to keep credentials confidential and limit access to authorized personnel only.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Other
• Description of management access authentication: PAM (Privileged Access Management)

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: Between 6 months and 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: ISO/IEC 27001

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Dun & Bradstreet 's Chief Information Security Officer is responsible for security at Dun & Bradstreet . Dun & Bradstreet ’s executive management established the Global Security and Risk Group (GSR), whose mandate is the management and control of information risk across the enterprise, including such activities as risk management, identity & access management, threat and vulnerability analysis, policy and standards documentation management, data loss prevention, application security and SDLC, security awareness and secure application development training, vendor risk management. GSR is staffed by experienced security and audit professionals, certifications include GSLC, GCED, GCIA, CISSP, CISA, CISM, CPA, among others
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Dun & Bradstreet 's Technical Vulnerability Management program requires that patches, hot fixes, and other technical or security updates identified as applicable be applied and validated; ; All patches or other technical remediation must be made through standard change control procedures according to the following remediation timetable: Critical - 7 Days High - 30 Days Medium - 120 Days Low - Discretionary
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Our organization has developed a continual monitoring program that includes correlation and analysis of security-related information generated by assessments and monitoring, Our monitoring program includes open source information sites (e.g. social media) for unauthorized disclosure of company information, Our organization tracks and documents information system security incidents; ; The Logging and Monitoring Policy requires that the Technology Operations team validate audit log settings for each hardware device and the software installed on it, for the purpose of ensuring that logs include a date, timestamp, source addresses, destination addresses, and various other useful elements of each packet and/or transaction.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Post-quantum cryptography secure: No
• Incident management approach: D&B is compliant with ISO27001 and has set policy and procedures for incident management. D&B has a well-established Global Incident and Breach Response Procedure that addresses containment, preservation, recovery and regulatory and customer notices. D&B’s robust Incident Response Plan and supporting procedures are updated based on lessons learned activities, changes in the evolving threat landscape, with new tools/processes to address system/organizational changes and protect customer data.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: D&B Provide a free two week trial of our services in general, however, for API and Connectors there is a development key that will be provided as part of the package.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 20%
• Between £250,000 and £500,000: 30%
• Between £500,001 and £1,000,000: 35%
• Between £1,000,001 and £2,500,000: 37%
• Between £2,500,001 and £5,000,000: 40%
• Over £5,000,001: 45%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: British Standards Institution
• ISO/IEC 27001 accreditation date: Wednesday 1 May 2024
• What the ISO/IEC 27001 doesn’t cover: Customer Service / Help Desk are excluded form ISO27001 however ,D&B also has ISO27701 and ISO14001
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: None of the criteria
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: Yes
• Any other security certifications:
  • Hellios FSQS Certification
  • Hellios JOSCAR

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
  • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
  • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
  • Plans to engage the contract workforce in deciding the most important workplace issues to address
  • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
  • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
  • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
  • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
  • Activities to cascade good practice on fair working conditions throughout the supply chain
  • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
  • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
  • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
  • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
  • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
  • Volunteering opportunities for staff
  • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
  • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
  • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
  • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
  • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
  • How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
  • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
  • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
  • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
  • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

  • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
  • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
  • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
  • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
  • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
  • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
  • Plans for positive actions with community groups.
• Mission: Make Britain a clean energy superpower:

  To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

  Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
  • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it
• Mission: Break down barriers to opportunity:

  By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

  Policy Outcome 6: Employment and training: For those who face barriers to employment

  • Introducing transparency to pay and reward processes
  • Working conditions which promote an inclusive working environment and promote retention and progression
  • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

  • Understanding of issues relating to entering the contract workforce
  • Creation of outreach activities to create a pipeline of employees for the future contract delivery
  • Content of the outreach activity is designed to suit the target cohort
  • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
• Mission: Build an NHS fit for the future:

  That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

  Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

  • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
  • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
  • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
  • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at PublicSector@dnb.com. Tell them what format you need. It will help if you say what assistive technology you use.