Choose a section
Completion guide / Agreement v2.2
Register once.
Add detail when needed.
Complete one supplier record and standing agreement for your legal company. Additional requirements for particular work go into an agreed addendum, using the evidence you already have.
One registration. Relevant schedules.
Complete the core record.
Add schedules when asked.
Pages 1–9 contain the core agreement. Part A (pages 10–11) records work-specific requirements; Part P (pages 12–13) records product origin, traceability and sourcing evidence. Complete only the schedules requested for the actual supply.
When an addendum is neededRCDEN issues the record
Section 01 gives the reference, contact, return route and privacy notice.
You answer and sign
Complete Sections 02–11. Read the terms on pages 7–8 and sign page 9.
Add detail for the work
RCDEN reviews and countersigns. Agree further requirements before the affected activity.
Find the details you need
Start with these official services. Each question below has more practical steps and links for the particular detail you need. External links open in a new tab so you can keep your place here.
- Find your company on Companies House (opens in a new tab)Companies House
Search by name or company number. Open the company record for its registered details, filing history and people with significant control.
- Open your HMRC business tax account (opens in a new tab)HMRC
The official starting point for business taxes, including VAT, Corporation Tax and PAYE. It explains how to use the account and add a tax service.
- Recover access to HMRC online services (opens in a new tab)HMRC
Help with forgotten sign-in details, access codes and problems getting into the right account.
- Find your ICO registration and fee number (opens in a new tab)ICO
Search the public register using the legal or trading name. Match the entity and address to your business before copying its registration number.
Help by form section
Same numbers as your PDFStart the registration
RCDEN identifies this continuing agreement, its contact and the route for returning your record.
Company details and ownership
Identify the legal company once. Reference current public records rather than copying information unnecessarily.
Security contact and clearances
Nominate the person responsible for security. Clearance details are requested separately only when the work needs them.
Current cyber assurance
Record certifications you actually hold. Detailed defence cyber assessment follows the requirements of the relevant work.
Information handling and secure design
Flag likely government information or security-related design work so the right requirements can be agreed.
Export controls and sanctions
Declare known restrictions and unresolved checks. Detailed classifications and permissions are obtained for the relevant activity.
Ethics and statutory statements
Provide the applicable slavery statement and disclose relevant conflicts or adverse findings.
Insurance and financial standing
Confirm legally required cover, record other cover held and disclose material delivery risks.
Quality and goods assurance
Record current quality assurance and your ability to provide product origin, conformity and traceability evidence.
Data protection
Identify whether you will act as RCDEN’s processor, then provide one privacy contact and fee-status reference.
Exceptions and evidence
Explain only the open issues and list the records needed to support your answers.
RCDEN’s registration review
RCDEN records the baseline checks and any conditions on registration.
Agreement and signatures
Sign one standing compliance agreement for these legal entities, then use accepted orders and addenda for particular work.
Work-specific addendum
Request only the additional detail needed for identified work. Reuse the same master agreement and current evidence.
Product origin and traceability
Confirm what is being bought, where it comes from and the evidence supporting the agreed sourcing requirements.
State your actual position.
Initial registration does not require every supplier to hold every certification. Use the choices printed beside each question.
The certificate or cover exists now. Give a current evidence or verification reference.
Give an accurate answer. If the work later requires it, the requirement must be resolved by its deadline.
The answer is not settled yet. Explain a material open issue in 11.1; this is not permission to proceed.
Give details only where requested. An addendum adds the relevant detail; it does not postpone a legal duty or a tender requirement.
Before you begin
How do I find the right HMRC account or recover access?
Start with the sign-in details already used for your company. HMRC explains when to use Government Gateway or GOV.UK One Login; use its recovery route if you have forgotten the details or cannot receive an access code. Your accountant or the person who manages your tax records may be able to supply the VAT number without you needing to regain access first.
A company number, VAT number and HMRC Unique Taxpayer Reference (UTR) are different identifiers. This form asks for the applicable company and VAT details, not your UTR or account credentials. You can search the public Companies House register without signing in.
- Check which HMRC sign-in details to use (opens in a new tab)HMRC
Explains Government Gateway and GOV.UK One Login. Start here if you are unsure which account you already use.
- Recover access to HMRC online services (opens in a new tab)HMRC
Help with forgotten sign-in details, access codes and problems getting into the right account.
What evidence do I need initially?
Start with company and ownership references, an applicable modern-slavery statement, statutory employers’ liability evidence where required, and evidence for certifications you claim. Reference current records. Full accounts, policy manuals, site records and specialist security evidence are requested only when justified.
Prepare the short evidence record →When will RCDEN ask for an addendum?
When the work needs additional terms or assurance: for example government information, an assigned defence cyber level, product security, controlled exports, specific quality or insurance requirements, processing personal data, subcontracting or overseas access. One addendum can cover several identified orders or activities.
Complete the optional addendum →Do I need FSC, CE+ or ISO 9001 just to register?
No blanket certification requirement is created by initial registration. State what you hold. Requirements follow the actual activity and contract. FSC status and personnel assurance are verified separately through an authorised security route when required; do not disclose those details in the general form.
Understand cyber assurance →What does the non-PRC technology requirement mean?
This is RCDEN’s purchasing requirement, including for relevant equipment used internally. Before order acceptance, RCDEN identifies the products, component depth, software, firmware and associated services covered, the prohibited connections and the evidence needed. A UK seller or finished-product country of origin alone is insufficient. Known restricted connections and unknown provenance must be declared and resolved before approval.
Prepare product origin and traceability evidence →Must I follow every policy on this website?
Read the relevant public policies for context. Additional contractual obligations must be expressly identified and supplied, with the relevant title, revision and clauses, in the accepted order or signed schedule. A general link to a changing website does not silently add terms. Applicable legal duties still apply.
How requirements are agreed →Can I reuse the agreement for later orders?
Yes, for the same contracting legal entities. The standing terms apply to orders accepted during registration even if they are not repeated in each order. A separate accepted order or supply contract is still needed. Notify material changes and keep required evidence current. A different supplier legal entity needs a new registration.
What if there is not enough space?
Use a signed continuation with your supplier name, master reference and question number. List it in the evidence record and executed attachment set. Check digital entries remain visible before printing or signing. Use BLOCK CAPITALS if completing by hand.
How do I send the form or controlled evidence?
Use the return route in 1.2. Ask your RCDEN contact for a suitable route before sending anything controlled. Facility clearance, personnel vetting, sensitive technical records and personal datasets do not belong in an ordinary registration email or on this website.
Does the guide change what I sign?
No. Read the PDF, accepted supply terms and signed addenda. The guide explains them; later website edits do not change the agreement. Registration and addendum signatures do not themselves authorise restricted work, disclosure, processing, transfer or subcontracting.
