Choose a section
Completion guide / Agreement v2.0
Register once.
Add detail when needed.
Complete one supplier record and standing agreement for your legal company. Additional requirements for particular work go into an agreed addendum, using the evidence you already have.
Two parts. One supplier relationship.
Complete pages 1–8.
Use pages 9–10 only if asked.
The core agreement records your company, current assurance and standing commitments. The optional addendum identifies extra requirements for specific work. A routine certificate renewal or unchanged order does not require a new registration.
When an addendum is neededRCDEN issues the record
Section 01 gives the reference, contact, return route and privacy notice.
You answer and sign
Complete Sections 02–11. Read the terms on page 7 and sign page 8.
Add detail for the work
RCDEN reviews and countersigns. Agree further requirements before the affected activity.
Find the details you need
Start with these official services. Each question below has more practical steps and links for the particular detail you need. External links open in a new tab so you can keep your place here.
- Find your company on Companies House (opens in a new tab)Companies House
Search by name or company number. Open the company record for its registered details, filing history and people with significant control.
- Open your HMRC business tax account (opens in a new tab)HMRC
The official starting point for business taxes, including VAT, Corporation Tax and PAYE. It explains how to use the account and add a tax service.
- Recover access to HMRC online services (opens in a new tab)HMRC
Help with forgotten sign-in details, access codes and problems getting into the right account.
- Find your ICO registration and fee number (opens in a new tab)ICO
Search the public register using the legal or trading name. Match the entity and address to your business before copying its registration number.
Help by form section
Same numbers as your PDFStart the registration
RCDEN identifies this continuing agreement, its contact and the route for returning your record.
Company details and ownership
Identify the legal company once. Reference current public records rather than copying information unnecessarily.
Security contact and clearances
Nominate the person responsible for security. Clearance details are requested separately only when the work needs them.
Current cyber assurance
Record certifications you actually hold. Detailed defence cyber assessment follows the requirements of the relevant work.
Information handling and secure design
Flag likely government information or security-related design work so the right requirements can be agreed.
Export controls and sanctions
Declare known restrictions and unresolved checks. Detailed classifications and permissions are obtained for the relevant activity.
Ethics and statutory statements
Provide the applicable slavery statement and disclose relevant conflicts or adverse findings.
Insurance and financial standing
Confirm legally required cover, record other cover held and disclose material delivery risks.
Quality and sub-tier duties
Record quality certificates held. Agree additional quality requirements only for the work they cover.
Data protection
Identify whether you will act as RCDEN’s processor, then provide one privacy contact and fee-status reference.
Exceptions and evidence
Explain only the open issues and list the records needed to support your answers.
RCDEN’s registration review
RCDEN records the baseline checks and any conditions on registration.
Agreement and signatures
Sign one standing compliance agreement for these legal entities, then use accepted orders and addenda for particular work.
Work-specific addendum
Request only the additional detail needed for identified work. Reuse the same master agreement and current evidence.
State your actual position.
Initial registration does not require every supplier to hold every certification. Use the choices printed beside each question.
The certificate or cover exists now. Give a current evidence or verification reference.
Give an accurate answer. If the work later requires it, the requirement must be resolved by its deadline.
The answer is not settled yet. Explain a material open issue in 11.1; this is not permission to proceed.
Give details only where requested. An addendum adds the relevant detail; it does not postpone a legal duty or a tender requirement.
Before you begin
How do I find the right HMRC account or recover access?
Start with the sign-in details already used for your company. HMRC explains when to use Government Gateway or GOV.UK One Login; use its recovery route if you have forgotten the details or cannot receive an access code. Your accountant or the person who manages your tax records may be able to supply the VAT number without you needing to regain access first.
A company number, VAT number and HMRC Unique Taxpayer Reference (UTR) are different identifiers. This form asks for the applicable company and VAT details, not your UTR or account credentials. You can search the public Companies House register without signing in.
- Check which HMRC sign-in details to use (opens in a new tab)HMRC
Explains Government Gateway and GOV.UK One Login. Start here if you are unsure which account you already use.
- Recover access to HMRC online services (opens in a new tab)HMRC
Help with forgotten sign-in details, access codes and problems getting into the right account.
What evidence do I need initially?
Start with company and ownership references, an applicable modern-slavery statement, statutory employers’ liability evidence where required, and evidence for certifications you claim. Reference current records. Full accounts, policy manuals, site records and specialist security evidence are requested only when justified.
Prepare the short evidence record →When will RCDEN ask for an addendum?
When the work needs additional terms or assurance: for example government information, an assigned defence cyber level, product security, controlled exports, specific quality or insurance requirements, processing personal data, subcontracting or overseas access. One addendum can cover several identified orders or activities.
Complete the optional addendum →Do I need FSC, CE+ or ISO 9001 just to register?
No blanket certification requirement is created by initial registration. State what you hold. Requirements follow the actual activity and contract. FSC status and personnel assurance are verified separately through an authorised security route when required; do not disclose those details in the general form.
Understand cyber assurance →Can I reuse the agreement for later orders?
Yes, for the same contracting legal entities. The standing terms apply to orders accepted during registration even if they are not repeated in each order. A separate accepted order or supply contract is still needed. Notify material changes and keep required evidence current. A different supplier legal entity needs a new registration.
What if there is not enough space?
Use a signed continuation with your supplier name, master reference and question number. List it in the evidence record and executed attachment set. Check digital entries remain visible before printing or signing. Use BLOCK CAPITALS if completing by hand.
How do I send the form or controlled evidence?
Use the return route in 1.2. Ask your RCDEN contact for a suitable route before sending anything controlled. Facility clearance, personnel vetting, sensitive technical records and personal datasets do not belong in an ordinary registration email or on this website.
Does the guide change what I sign?
No. Read the PDF, accepted supply terms and signed addenda. The guide explains them; later website edits do not change the agreement. Registration and addendum signatures do not themselves authorise restricted work, disclosure, processing, transfer or subcontracting.