Compliance software for public sector suppliers.
Tenders ask which certificates you hold, and the answer must be true on the day you submit. Naq holds each certificate's expiry date, flags evidence as it expires and shows where each framework stands in its readiness overview.
.png)
.png)
Every certificate the tender asks for is current on bid day.
The problem
One person often runs quality and security as two systems, with certificates that renew at different times, and a lapse in any of them can lose a bid.
The outcome
The person running quality and security works from one record and a single to-do list in priority order.
How Naq helps
A view before you bid
Before you commit to a bid, open the readiness overview across your frameworks, then follow each one requirement by requirement to see what still needs work.
Scoped to the contract
Hold a framework for a single contract, with its own scope and schedule, beside the one for your whole organisation.
A contract's own standard
A buyer's own standard or a sector code is scoped with you and mapped to your existing controls.
An exportable risk register
Score each risk before and after treatment and set its review date. The register exports when you need a copy.
Next up, your to-do list and every approval waiting on you
Your dashboard shows how many controls are in place and what still needs work. Next up picks out the three things that most need you, and your to-do list collects approvals, reviews and expiries in priority order. Items clear themselves once the work is done.
Frameworks, scopes and controls that share evidence
Choose the frameworks you are measured against and the scope each one covers. One control meets requirements in several frameworks, so the work is done once. Evidence checks run on a schedule, and a control drops back to needs review when its evidence expires.
Policies drafted from templates, approved and acknowledged
Start from a template already mapped to your frameworks. Your organisation’s details fill in, you submit it for approval, and the approved version goes to everyone who must read and acknowledge it. Naq reopens it on its review date.
Suppliers, risks, incidents and corrective actions
Track suppliers and who has access to each one. Score every risk before and after treatment and set its review date. Log incidents with what happened, then follow each corrective action through to closed.
Evidence kept up after the assessment.
A Cyber Essentials certificate is valid for 12 months, and ISO 27001 certification is followed by surveillance audits.
Virtual compliance partnerCertificates that come up in public sector bids.
Cyber Essentials
The NCSC baseline for UK public-sector contracts.
ISO 27001
The information security standard tenders ask for, with the certificate issued by a certification body after its audit.
ISO 9001
The quality management standard tenders ask for, built on the controls you hold for ISO 27001, with shared clauses counted once.
Naq is licensed by IASME as a Cyber Essentials Certification Body. For Cyber Essentials Plus, you choose a Certification Body licensed to run the audit.
Naq AI analyses and suggests. Your team decides.
Nothing is written to your compliance record without a person approving it. Every suggestion is reviewed, confirmed by a named team member and timestamped, so your audit trail stays yours.
OverviewFrameworksPoliciesProcessing recordPeopleYour own DPO and CSO, or a named expert from Naq's partner network.
Some decisions need a person with their name on them: a Clinical Safety Officer signing off a hazard log, a DPO reviewing a transfer clause. Whoever holds the role records their review or sign-off inside your Naq record, so every decision stays in the audit trail.
Bring your existing DPO or CSO into Naq
Invite your in-house or outsourced specialist as a user and assign them the named role. Naq routes the reviews and approvals that need them, and their review or sign-off is recorded against the record.
Access Naq's partner network
Naq partners with specialist firms who take on the named role for you. Meet them before you commit. They work inside your Naq workspace, alongside your team.
ISO 27001, DTAC and DSPT, achieved and kept with Naq.
“Maintaining and demonstrating our credentials in the past has been onerous. The Naq platform makes the whole process remarkably seamless.”
Dr Taz Aldawoud, Founder & CEO, Doc Abode
“Naq has been instrumental in obtaining ISO 27001 certification and shortening our sales cycle by easily demonstrating our compliance to enterprise customers.”
Arnold Bouwman, Co-founder, Vormats
“Naq helped us complete our Cyber Essentials and DSPT toolkit applications. I already know next year’s DSPT Toolkit will be easy with Naq.”
Otesa, NHS supplierYour next tender is a good place to start.
Fifteen minutes is enough to see the readiness overview you would check before a bid.
