Skip to main content
RCDEN
SystemsServicesPartnersNewsAboutAssuranceContactInvestor information
Start a project ↗
RCDEN // NavigationMobile / Active
←Back to RCDEN
01Systems↗02Services↗03Partners↗04News↗05About↗06Assurance↗07Contact↗08Investor information↗
Start a project↗
  1. Home
  2. Policies
  3. Supplier guide
  4. 11 Exceptions and evidence

Supplier registration

Your guide to the form.

—Before you start01Start the registration02Company details and ownership03Security contact and clearances04Current cyber assurance05Information handling and secure design06Export controls and sanctions07Ethics and statutory statements08Insurance and financial standing09Quality and sub-tier duties10Data protection11Exceptions and evidence12RCDEN’s registration review13Agreement and signaturesAWork-specific addendum

Use the copy issued to your company. This website provides guidance; supplier documents are supplied directly by RCDEN.

Choose a section +
—Before you start01Start the registration02Company details and ownership03Security contact and clearances04Current cyber assurance05Information handling and secure design06Export controls and sanctions07Ethics and statutory statements08Insurance and financial standing09Quality and sub-tier duties10Data protection11Exceptions and evidence12RCDEN’s registration review13Agreement and signaturesAWork-specific addendum

Section 11 / Supplier completes

Issued form · page 6

Exceptions and evidence

Explain only the open issues and list the records needed to support your answers.

When this applies

Every supplier identifies relevant evidence. Use None for exceptions if none exist, and reuse current evidence instead of sending a large generic policy pack.

Help with this section

Open a question for help. The numbers match the printed questions and agreement clauses.

11.1

Exceptions or pending checks

+

What to enter

Quote the question, briefly explain the issue and propose an action. Use None if no material exception exists. Use a referenced continuation when necessary. A disclosure is not an agreed departure; the accepted variation must be expressly recorded at signature or in the addendum.

Example wording · adapt to your actual position

Certification requested for a future scope is pending. State the present position and proposed assessment date; do not describe a future certificate as held.

Where to find it / what to do next

  1. Use a short note: question number, what is unresolved, who is checking it and the proposed next action or date.
  2. Continue the questions you can answer. Record the actual position; an exception becomes an agreed departure only when expressly accepted through the agreement's process.
If you are still unsure

You do not need a policy essay. For example: '2.4 - VAT number being confirmed with accountant; confirmation requested today.' Adapt the wording and timing to the facts.

Link to question 11.1 ↗Your issued form · page 6
11.2

Sub-suppliers or overseas access

+

What to enter

Select No currently identified, Yes or Not yet determined. This flags possible follow-up. Only parties involved in actual work need detailed assessment; listing a party does not authorise it.

Where to find it / what to do next

  1. Check whether another supplier, group company or overseas team would be involved in the proposed RCDEN work or have access to its information.
  2. If unsure about cloud or support access, ask your IT provider. This initial question flags the need for follow-up; detailed assessments belong to the relevant scope.

Useful external help

Opens in a new tab so you can keep this question open.

  • Understand overseas access and data transfers ↗ (opens in a new tab)ICO

    Explains when international-transfer rules apply and points to the appropriate safeguards and assessment guidance.

If you are still unsure

Use Not yet determined while the arrangements are being checked. Listing a provider does not itself authorise subcontracting or information access.

Link to question 11.2 ↗Your issued form · page 6
11.3

Evidence and continuations

+

What to enter

Give a short identifier and the document title/date or verified public reference. Initial evidence normally means company and control records, an applicable slavery statement and statutory EL evidence, and support for certificates claimed. Reference signed continuations in the executed record.

Check applicability

Additional accounts, policy manuals, site records or security evidence are requested only when justified. Use authorised verification instead of exposing restricted records.

Where to find it / what to do next

  1. Give each item a short reference, title and date. For public records, use the actual company or certificate record rather than a search-results link.
  2. Reuse current evidence already provided by reference. Keep signed continuations with the completed agreement and use the issued return route for non-public evidence.

Useful external help

Opens in a new tab so you can keep this question open.

  • Find your company on Companies House ↗ (opens in a new tab)Companies House

    Search by name or company number. Open the company record for its registered details, filing history and people with significant control.

  • Look up a Cyber Essentials certificate ↗ (opens in a new tab)IASME

    Search by company name or certificate number and check the level and dates. Confirm a missing or unexpected result with the certificate issuer.

  • Find your ICO registration and fee number ↗ (opens in a new tab)ICO

    Search the public register using the legal or trading name. Match the entity and address to your business before copying its registration number.

Link to question 11.3 ↗Your issued form · page 6
Before you move on

Do not duplicate unchanged documents. Notify material changes and provide proportionate current evidence when requested.

Have these ready

  • References supporting the declarations made.
  • Any material exception, pending assessment or limitation.

Further reading

Start with the practical help beside each question. These official sources explain the underlying rules if you need more detail.

MODClassified subcontracting — ISN 2026/03 (PDF)↗ (opens in a new tab)MODCyber Security Model and sub-tier assessment↗ (opens in a new tab)ICOProcessor and subprocessor contract terms↗ (opens in a new tab)

The signed agreement and identified work-specific schedules determine the obligations. Official guidance explains their legal or contractual basis.

When to use an addendum →
← Previous10 Data protectionNext →12 RCDEN’s registration review

This guide explains form v2.0. It does not amend the issued requirements or approve work, exceptions or information release. Use the external help to find records and understand the rules. For questions about RCDEN's requirements or the proposed work, use the contact in Section 1.2 and quote the question number.

RCDEN

RCDEN | INTELLIGENT UNMANNED SYSTEMS

sales@rcden.co.uk ↗
Follow RCDENLinkedIn ↗ (opens in a new tab)Facebook ↗ (opens in a new tab)
THE RC DEN LTDRegistered in England and Wales · Company no. 14639255Customer-facing workshop: Unit 8, Blackwood Court, Teal Park, North Hykeham, Lincoln, LN6 3AERegistered office: Unit 8 Blackwood Court, Lincoln, England, LN6 3AE
HomeServicesTechnology partnersAboutAssuranceNewsEngineering resourcesRSS updatesPoliciesContactInvestor informationBrand guidePrivacy & cookies

Supplier guidance · Form v2.0 · Reviewed 08 September 2026

© 2026 THE RC DEN LTD