Compliance Centre
A single reference point for our certifications, accreditations, insurance, supplier register, published policies, and service assurance commitments.
VAT
GB374552088
Standards
Certifications & Accreditations
Independently verified and annually audited. Certificates available on request from compliance@coaleypeak.co.uk.
View badges on About page →Public Sector
Government Supplier Frameworks
Government Commercial Agency (GCA) supplier on G-Cloud 15 and DOS 6 & 7. Public sector clients can procure directly through these frameworks. Coaley Peak also held places on G-Cloud 13 and G-Cloud 14.
Formerly Crown Commercial Service (CCS). Rebranded 1 April 2026.
Government Commercial Agency →Government Commercial Agency (GCA)
G-Cloud 15
Current framework
Lot 3: Cloud support services
Government Commercial Agency (GCA)
DOS 6 & 7
Framework supplier
Digital Outcomes and Specialists
Government Commercial Agency (GCA)
G-Cloud 14
Previous award, 2024 to 2026
Cloud support services
Government Commercial Agency (GCA)
G-Cloud 13
Previous award, 2022 to 2024
Cloud support services
Cover
Insurance
Comprehensive business insurance in place. Formal certificates available on request for procurement and due diligence.
Request certificates →The WD- references are Hiscox policy wording references: they identify the type of cover, not the policy itself. Certificates of insurance are sent on request.
Disclaimer: This information is provided for general reference only and does not constitute evidence of insurance or a guarantee that coverage is in force at the time of viewing. For formal confirmation for procurement or due diligence, contact compliance@coaleypeak.co.uk. Verification should always be confirmed independently with the insurer.
Ethics & Governance
Policies & Published Documents
All public policies are available below. Internal ISO policy documents covering 93 controls across A.5–A.8 are available on request.
Request internal policies →Information Security
Ethics & Conduct
Website & Legal
ISO 27001:2022
Internal Policy Controls
93 documented controls across Annex A.5–A.8, aligned to ISO 27001:2022 and ISO 9001:2015 requirements. Operated within our ISMS and BMS.
Request a copy →Supply Chain
Supplier Register
All technology suppliers, cloud providers, and critical third parties. Live operational status is monitored continuously.
View live status →11
Registered suppliers
7
Primary
4
Contingency
| Supplier ID | Name | Role | Usage | Compliance | Status |
|---|---|---|---|---|---|
| AWS_003 | Amazon Web Services (AWS) | Primary | Compute, CDN, Storage | Status → | |
| AZR_044 | Microsoft Azure | Contingency | Compute, AI Services | Status → | |
| GGL_006 | Google Cloud Platform | Contingency | Compute, AI Services | Status → | |
| ALI_045 | Alibaba Cloud | Contingency | Asia-Pacific Compute | Status → | |
| VCL_041 | Vercel | Primary | Hosting, CDN, Edge Functions, Firewall | Status → | |
| CFL_028 | Cloudflare | Primary | DNS hosting | Status → | |
| NMN_011 | Nominet | Primary | Domain Registration (.co.uk, .org.uk, .uk, .ltd.uk) | Status → | |
| GHB_042 | GitHub | Primary | Source Control, CI/CD | Status → | |
| ANT_043 | Anthropic (Claude) | Primary | Foundation Model API | Status → | |
| CGPT_035 | OpenAI | Contingency | Foundation Model API | Status → | |
| SBS_046 | Supabase | Primary | Database (live chat) | Status → |
All suppliers are vetted against applicable data protection legislation and information security standards. Supplier agreements include data processing addenda where applicable. Full supply chain review at /status.
Availability
Service Assurance
Real-time service and supplier status monitoring. Support SLA targets are detailed below.
Force majeure events excluded. See full SLA terms.
Get in touch
Compliance Contact
Compliance & Policies
compliance@coaleypeak.co.ukPolicy documents, certificates, due diligence requests, supplier queries.
Document reference: ISO_webpage_compliance-centre_v1
Last modified: 1 November 2026
Compliance Centre