Supply chain analysis
Know the vendor market
before it pitches you.
We mapped the UK data vendor landscape. What each vendor trades, the credentials they hold as documented and the distance between what they’re registered for and what’s on their price list.
You query the database. There is no shortlist to bring and nothing to send us. The mapping is already done.
The status quo
Most teams buy data on a shortlist they were handed.
The vendor found you. The deck was theirs. The register was never read, and the first time anyone checks the lawful basis is after the contract is signed.
The shortlist
It came from whoever markets hardest. Three sales calls and a search result is not a survey of a market, it is a survey of who found you.
The register
Nobody read the ICO entry. It is public and it takes a minute. It is also the first place a vendor's own account of itself can be checked against the regulator's.
The price list
The registration and the price list were never put side by side. That is where the gap lives, and it stays invisible until somebody looks.
The market
It moved, and you heard about it at your own renewal, from the vendor whose renewal it was.
The system
Four layers. Each one earns the next.
The whole landscape as a record, what each vendor trades and holds, the signals underneath it and the file you walk away with. Take a layer out and the one above it stops standing up.
Rare data
The UK data vendor landscape, mapped.
Every data vendor in the UK, held as a record rather than found as a search result. This is the layer nobody hands you, and it is the reason the other three can exist at all.
The record
What they trade, and what they hold.
What each vendor sells, the categories and verticals it covers and who they sell it to. Beside it, the credentials they hold as documented.
- ICO registration
- Registered purposes
- SOC 2 Type II
- ISO 27001
- ISO 27701
- Cyber Essentials
- Cyber Essentials Plus
- Published privacy notice
- Named DPO
- Stated lawful basis
- UK GDPR and DPA 2018
- PECR relevance
Signals
What is moving, before it moves you.
A vendor registered for purposes it does not sell into yet. A certification with its renewal date in front of it rather than behind. A privacy notice naming a purpose the price list has not caught up to. Each one is readable in a single pass and each one points forward, and we surface them across the whole category rather than one vendor at a time.
In your hands
The landscape, delivered.
One query across a category returns every vendor in it side by side: what each trades, what each holds as documented and the sources column a DPO can follow value by value. It reads as a comparison, not a stack of vendor profiles, and the cut you need leaves as a file you own.
The work
Four stages, and then it’s yours.
This is how a category gets read before anyone pitches you on it. It starts with the data you need and it stops before the part we have no business doing.
Name the category of data you need, not the vendor. The vendor is the answer. Starting there is how a shortlist gets handed to you.
Read every vendor in the UK trading it. Including the ones with no sales team, no conference stand and no reason to have ever found you.
Put what the category is registered for beside what the category sells. Read one vendor and a gap is a footnote. Read all of them and the outlier is the thing you came for.
Hand the record to procurement, InfoSec and the DPO. It holds up in a room you are not in.
Where the rail stops, two other jobs start.
For the credential detail on a vendor you have already named, that is vendor compliance. For the base you already run, that is vendor base monitoring.
The fence
What a signal is, and what it isn’t
- A signal, not a forecast
- It tells you where the register and the price list disagree, and where to look next. It does not tell you what the vendor will do about it, and anyone selling you that is selling a guess in a better font.
- Point in time
- It reflects the map at the point of the query. Not a live feed.
- No score
- There is no vendor rating, no index and no number standing in for the record. The evidence is the output, and every value traces back to a documented public source.
We would rather hand you evidence than a judgement. The decision stays yours.
FAQ
Frequently asked questions
How do you know what the vendors in a category are registered for?
The ICO register is public and a vendor's own privacy notice is public. We read them across the whole category rather than one file at a time, and hold what they state: the registration, the purposes it names and the lawful basis each vendor claims. Where a vendor documents nothing, we record that rather than infer it, because not documented and not held are different facts. It is what the vendors and the regulator have already published, put in one place and made searchable across the landscape.
How current is the vendor map?
Each record carries what the public sources stated when we last read them: the ICO register entry, the vendor's own privacy notice and what the vendor publishes about what it sells. Where a category matters enough to want it read again before you decide, we scope that with you, and we tell you plainly where the underlying source will not support it.
Is the vendor map GDPR compliant?
Peach Data is registered with the ICO as a data controller. The map is built from what the vendors and the regulator have already published: register entries, published privacy notices and the certifications vendors evidence in public. What comes back describes a company and, where the vendor publishes one, the contact route its own notice states, supplied controller to controller under UK GDPR. Full registration and policy detail sits on our compliance page.
How does the landscape come back?
Read it in the portal, export the cut you need as a CSV or pull it through the API behind auth. You move the map on your terms, and we don't push into your infrastructure. Scope is set by category rather than by vendor, so what comes back is every vendor trading it and not the handful you already knew to name.
Get started
See the market you buy from
Name the category you buy and we'll walk the landscape on the call.