Skip to main content

Security and assurance

Information security designed for sensitive life events.

Supplier information for public-sector and corporate procurement teams, with the scope and dates of each certification stated plainly.

Certifications and accreditations

  • ISO/IEC 27001:2022 certified

    Information security management system certified by ISOQAR. Certificate 27819-ISMS-001; initial registration 17 September 2026; current expiry 17 September 2029, subject to surveillance audits and continued validity.

    Scope of registration: Information security management for the provision of independent funeral and bereavement navigation, support and information services, including Funeral Experts, Life and Loss/My Life and Loss, digital and telephone-based support services, and referral services delivered in partnership with NHS organisations, local authorities and other organisations, in accordance with Statement of Applicability version 1.9.

  • Cyber Essentials Plus certified

    Whole-organisation scope. Certified by CyberSmart under the IASME Cyber Essentials scheme on 13 December 2025; recertification due 13 December 2026.

  • NHS DSPT: Standards Exceeded (self-assessment)

    2025-26 NHS Data Security and Protection Toolkit self-assessment published at 'Standards Exceeded' (published 17 October 2025; valid to 30 June 2027). This is a self-assessment, not an NHS certification or endorsement.

  • Accredited Living Wage Employer

    Accredited by the Living Wage Foundation (listed as Funeral Experts).

  • APSE Approved Partner

    Listed as an Approved Partner of the Association for Public Service Excellence. This is a partner scheme, not a contract award.

  • Board-approved Carbon Reduction Plan

    Approved 15 September 2026 under PPN 006, with a commitment to net zero by 2050 at the latest.

Our ISO/IEC 27001 certification applies within the scope of registration above. It does not extend to our partners' own systems.

Information security and privacy

We apply organisational and technical controls including role-based access, multi-factor authentication, encryption at rest and in transit, staff training and audit logging.

Personal data is shared with partners only under appropriate data sharing and service level agreements. Controller and processor roles depend on the service and agreement.

Read our Privacy Policy.

Safeguarding and service boundaries

We have dedicated safeguarding leadership and escalation procedures. Personnel working directly with bereaved people are subject to applicable enhanced DBS checks and safeguarding requirements.

Ours is a non-clinical service. We do not provide counselling, therapy, clinical care or emergency response. Where people need that help, our advisers signpost and refer them to appropriate specialist and statutory services.

Social value and sustainability

We are an Accredited Living Wage Employer, and our services provide free, impartial support to individuals and families, including people facing financial vulnerability.

Our Carbon Reduction Plan was approved by the Board on 15 September 2026. It commits us to net zero by 2050 at the latest. Our 2025/26 baseline of 0.87 tCO2e covers Scope 1, Scope 2 and the Scope 3 categories required under PPN 006, and our target is 0.60 tCO2e or less by 31 May 2031. The baseline is not a full value-chain footprint. We operate remotely, without corporate premises, which keeps our footprint small.

Procurement information

Legal name
PHRENETECH Ltd
Company number
13302186, registered in England and Wales
Registered office
14 Cotton's Gardens, London E2 8DN
Trading names
Funeral Experts, Life and Loss UK
Service scope
Standalone, non-clinical funeral and bereavement navigation. Not an employee assistance programme or occupational health service.
Insurance
Insurance evidence is available to procurement teams on request.

Procurement teams can request our supplier evidence pack, including certificates, policies and insurance evidence, through a controlled enquiry.

Request the supplier evidence pack

Please do not include personal details about a bereavement in a procurement enquiry.