dns
IT Services & MSPs Supplier Due Diligence
Vendrpulse runs vendor due diligence on it services & msps suppliers across the UK — Companies House filings, director history, insolvency flags and sentiment, scored against the value of the contract in front of you.
What we check for it services & msps suppliers
- check_circleCompanies House filing history and confirmation statements
- check_circleDirector history, disqualifications and prior company failures
- check_circleInsolvency and County Court Judgment (CCJ) flags
- check_circleCharges and mortgages registered against the company
- check_circleSentiment and reputational signals from UK press and reviews
Common risks in it services & msps
- warningLate or overdue accounts and confirmation statements
- warningRecent director resignations or frequent officer churn
- warningDeteriorating liquidity against sector benchmarks
- warningUndisclosed group structure or related-party dependence
Check a it services & msps supplier
Pulse £25 or Pulse Premium £500, both inc VAT. Or get a free sample for this sector first.
IT Services & MSPs due diligence — FAQs
- How do I check whether an MSP's security posture matches their pitch?
- Ask for current Cyber Essentials Plus and ISO 27001 certificates, then verify both on the issuer's register with expiry dates. A Cyber Essentials (non-Plus) badge is self-assessed and weaker than most buyers assume. Also ask for the SOC 2 Type II report if they handle hosted data.
- What does an MSP's customer-concentration risk look like?
- Filed accounts won't break out customers, but you can ask directly: what percentage of recurring revenue comes from your top three clients? Anything above 40% means losing one account would force redundancies and SLA degradation across the remaining book, including yours.
- Should I worry about an MSP being acquired during my contract term?
- Mid-market MSP roll-ups are active in the UK, and post-acquisition you typically see engineer attrition, ticketing-tool migrations and renegotiated commercials at renewal. Check the PSC register and any recent share-allotment filings for signs that PE money has already arrived.
- How do I assess an MSP's exposure to a single vendor stack?
- Many MSPs are deeply tied to one RMM or PSA platform (ConnectWise, Datto, N-able). Ask how they'd handle a price hike or breach at that vendor. An honest answer involves a tested fallback; a hand-wave means you inherit their vendor risk.
- What insurance should an IT services supplier hold for my contract?
- Professional indemnity is the load-bearing cover, and the limit should comfortably exceed the foreseeable cost of a data-loss incident on your estate, often £5m or more. Cyber liability is a separate policy; don't accept PI as a substitute.