Department for Business and Trade: technology adoption among UK SMEs
Research on adoption stages, barriers and information gaps. Use it to challenge assumptions about readiness, not to claim demand or predict results.
Source register / 06
Start with the authority. Record the decision separately.
These links help a UK organisation identify questions for its commissioning file. Guidance changes, scope matters and the organisation remains responsible for confirming the current requirements that apply.
Information Commissioner's Office: controllers and processors
A starting point for identifying who determines purpose and means and who processes personal information on another party's behalf.
Information Commissioner's Office: international transfers
Use the guide when remote access, hosting or sub-processors may involve restricted transfers. Confirm the actual data path and current mechanism.
National Cyber Security Centre: developers collection
Guidance spanning secure design, development and operation. Convert relevant principles into owned, observable delivery controls.
GOV.UK: Software Security Code of Practice
A voluntary code for software vendors. It can help frame supplier questions but does not make this page or Faith Forge Labs a certification body.
HM Revenue & Customs: VAT place of supply of services
Official notice covering place-of-supply concepts. The organisation or adviser must determine the treatment for its facts before rules are implemented.
GOV.UK: accessibility requirements for public-sector websites and apps
A starting point for public-sector scope and duties. Other organisations may have different legal or contractual requirements.
Source discipline: record the page consulted, access date, applicable fact, decision owner and resulting requirement. A link alone is not a compliance decision.