When a website handles live transactions, staff workflows, or customer accounts, the people responsible for it ask harder questions before bringing in external support. The scrutiny is reasonable.
This is what procurement teams and IT managers typically check, and what it means in practice when you are looking for specialist ExpressionEngine or Craft CMS support.
ICO registration and data protection
Any supplier who handles data related to your users, whether that is contact forms, account details, or order history, needs to be registered with the Information Commissioner's Office. This is a legal requirement under UK data protection law, and it is one of the first things a procurement team will verify.
Expression 37 is registered under ICO reference ZB406232. You can verify this directly on the ICO website.
Professional indemnity and cyber insurance
Enterprise supplier onboarding almost always includes an insurance check. The two that matter for a CMS supplier are professional indemnity (which covers errors and omissions in technical work) and cyber insurance (which covers incidents involving data).
Without these, any claim arising from a mistake or a breach lands with your business rather than the supplier.
Expression 37 is insured through Hiscox. The policy covers professional indemnity to £100,000, cyber and data cover to £100,000, and public liability to £1,000,000. A certificate of insurance is available on request.
Business continuity
For a site that cannot go down, procurement always asks what happens if the person they rely on becomes unavailable.
Expression 37 keeps all client work in version-controlled Git repositories, with detailed developer notes on each codebase. In an emergency, a qualified developer could pick up the work from those notes without ramp-up calls or waiting on handover. A named associate is available for cover and has worked on client sites directly.
Financial standing
Larger organisations sometimes ask for management accounts or a statement of financial standing before onboarding a supplier, particularly when the contract is long-term or the site is mission-critical.
Management accounts are available on request under a mutual NDA. Expression 37 Ltd has been trading since 2013, incorporated in England and Wales under company number 8762730, with platform specialism going back to 2007.
References and active work
A portfolio page shows what a supplier has done. References show whether clients stayed. Ask for two or three clients you can speak to directly, not just names on a case study page.
Expression 37 works with clients on long-term retainer arrangements. Several clients have been on continuous support for five or more years. References from long-term ExpressionEngine and Craft CMS clients are available on request.
If you are at the due diligence stage
If you are running a supplier vetting process and need specific documents, certificates, or references, get in touch. Everything above is available, and anything your procurement process requires we can either provide or explain.


