🚧 Work in progress β€” internal review only. This page is an early-draft mapping of candidate UK-owned vendors across the stack layers. It has not been validated against the certification standard, vendor ownership has not been independently verified, and entries are likely to change. Not for public consumption. Treat every entry as a hypothesis to investigate, not a recommendation.

How to read this page

Each stack layer lists candidate UK-owned vendors that may qualify for certification. A “candidate” is a vendor that β€” on first inspection β€” appears to meet some or all of the sovereignty criteria (UK incorporation, UK ownership, UK data residency, UK-domiciled directors). Full certification requires deeper diligence on shareholder structure, supply chain, and operational control.

Where no qualifying UK vendor is known, the layer is marked Gap. Gaps are where the acqui-build model applies.


Infrastructure layer

Cloud, hosting and colocation

CandidateNotes
CivoUK-based managed Kubernetes; UK data centres.
KrystalUK-owned hosting; SME-focused; UK data centres.
Mythic BeastsUK-owned ISP/hosting; small but reputable; UK data centres.
IomartUK-listed managed services; cloud and colocation.
PulsantUK colocation and managed services.
Custodian Data CentresUK colocation.
MemsetUK-owned hosting (legacy presence; ownership to confirm).

Notes: UKCloud (formerly the flagship UK sovereign cloud) entered administration in 2022 β€” the gap it left has not been fully filled. AWS UK Regions, Microsoft for Government, and Google Cloud UK do not qualify (US-owned, sovereignty-washing).

DNS and domains

CandidateNotes
Mythic BeastsDNS + domain registration.
KrystalDomain registration.
NominetUK registry operator for .uk (not a registrar but adjacent).

Disqualified: 123-reg (owned by Newfold Digital β€” US).

CDN and edge

Gap. No significant UK-owned CDN. Cloudflare, Fastly, Akamai, BunnyCDN are all non-UK. Candidate for acqui-build or partnership.


Productivity and collaboration

Email

CandidateNotes
Mythic BeastsHosted email on UK infrastructure.
KrystalHosted email bundled with hosting.

Disqualified: FastMail (Australia), ProtonMail (Switzerland), Tutanota (Germany), Google Workspace, Microsoft 365.

Documents, sheets, slides

Gap. No mature UK-owned office suite. Open-source self-hosted alternatives (Nextcloud β€” German foundation; CryptPad β€” French; OnlyOffice β€” origin uncertain) do not meet the standard. Likely the largest single gap in the entire stack.

Storage and file sharing

Gap. Self-hosted on UK infrastructure (e.g. Nextcloud on Krystal/Civo) is a workable interim β€” but no native UK-owned product currently competes with Dropbox or Google Drive at the SME level.

Messaging and video

CandidateNotes
ElementUK-based, Matrix protocol; secure messaging and collaboration; used by UK government.

Disqualified: Slack (US), Microsoft Teams (US), Zoom (US), Whereby (Norway).


Business systems

CRM

CandidateNotes
Capsule CRMUK-owned (Manchester); SME-focused.
AttioUK-owned (London); modern relationship-focused CRM; ownership and data-residency to confirm against the standard.

Disqualified: Salesforce, HubSpot, Pipedrive (Estonia), Insightly. Adjacent: OnePageCRM (Ireland β€” not UK).

Accounting and finance

CandidateNotes
SageUK-listed (Newcastle); long-established.
FreeAgentUK-owned (Edinburgh); owned by NatWest.
KashFlowUK-owned (owned by Iris Software Group β€” UK PE-backed; ownership to confirm).
CrunchUK-owned; accounting and bookkeeping platform.
PandleUK-owned (free tier; SME-focused).

Disqualified: Xero (New Zealand), QuickBooks (Intuit β€” US), Wave (US).

Payments and banking

CandidateNotes
GoCardlessUK-owned (London); direct debit and recurring payments.
ModulrUK-owned; payments infrastructure.
TruelayerUK-owned; open banking.
Form3UK-owned; payments infrastructure.
TideUK-owned; SME business banking.
Starling BankUK-owned; SME banking.

Disqualified: Stripe (US), Worldpay (ownership history complex β€” currently US-controlled), PayPal.

HR and payroll

CandidateNotes
CharlieHRUK-owned (London); SME HR platform.
BrightHRUK-owned; part of Peninsula Group.
Sage PayrollUK-listed.
PeopleHRUK-owned (owned by Access Group β€” UK PE-backed).

Disqualified: PayFit (France), Personio (Germany), BambooHR (US).

Customer support and helpdesk

CandidateNotes
Halo ITSMUK-owned; service desk and ITSM.
HornbillUK-owned; service management.

Disqualified: Zendesk, Intercom (Ireland β€” not UK), Freshdesk, HelpScout.


Publishing and content

CMS and publishing platforms

CandidateNotes
GhostOpen-source MIT-licensed publishing platform. Ghost Foundation is non-UK (registered in Singapore), so the hosted Ghost(Pro) service does not qualify under the strict ownership standard β€” but a self-hosted Ghost on UK-owned infrastructure (e.g. Krystal, Civo) is an interesting edge case for the standard. Flag for tiered-certification discussion.

Disqualified (hosted): WordPress.com (Automattic β€” US), Squarespace (US), Wix (Israeli), Webflow (US).


Marketing and social

Social media management

CandidateNotes
BrandwatchOriginally UK (Brighton) β€” acquired by Cision (US) in 2021. Disqualified post-acquisition.

Gap. No significant UK-owned social media management platform at SME scale. Candidate for acqui-build.

Analytics

Gap. Self-hosted Plausible or Matomo on UK infrastructure works as an interim, but no UK-owned analytics product exists at scale. GA4 (Google) dominates the market and is not replaceable on a like-for-like basis.

Email marketing

Gap. Mailchimp (US, owned by Intuit), Klaviyo (US), ConvertKit (US), Brevo (France) β€” no UK-owned mature equivalent.


AI layer

Foundation models

Gap (transitional). No UK-owned frontier foundation model exists. The April 2026 Sovereign AI Fund is seeding the next generation: Callosum, Primamente, Doubleword AI, Cosine, Cursive AI, Odyssey Systems, Twig Bio. Sovereign Tech Stack proposes a sovereign-aligned transitional category for Fund-backed UK AI vendors while UK frontier capability matures.

Applied AI and tooling

CandidateNotes
Stability AIUK Ltd registration; ownership structure complex; image generation.
SynthesiaUK-owned (London); AI video generation.
WayveUK-owned (London); autonomous driving (not SME-applicable today).
ElevenLabsUK/US dual-headquartered; ownership status to confirm.
Faculty AIUK-owned (London); enterprise AI consulting and platform.
QuantexaUK-owned (London); decision intelligence platform.

Development and engineering

Source control and CI/CD

Gap. GitHub (Microsoft β€” US), GitLab (US, with remote teams), Bitbucket (Atlassian β€” Australia), Codeberg (German non-profit). No UK-owned alternative at scale. Self-hosted Gitea or Forgejo on UK infrastructure is a workable interim for in-house teams.

Project management

Gap. Linear (US/Sweden), Asana (US), Monday (Israeli), ClickUp (US), Trello (Atlassian β€” Australia), Notion (US). No UK-owned mature equivalent.


Gap summary

The largest structural gaps β€” where no qualifying UK vendor currently exists at SME scale β€” are:

  1. CDN and edge
  2. Office productivity (docs, sheets, slides)
  3. File storage and sharing
  4. Email marketing and automation
  5. Social media management (post-Brandwatch acquisition)
  6. Project management and task tracking
  7. Source control and CI/CD
  8. Frontier AI foundation models (mitigated transitionally via Sovereign AI Fund alignment)

These are the candidates for the acqui-build component of the platform β€” categories where curation alone cannot deliver a complete certified stack.


What this page is not

This is not the certified vendor directory. It is a working hypothesis list. Every entry needs:

  • Independent verification of UK ownership (Companies House + shareholder structure)
  • Verification of UK data residency and hosting
  • Supply-chain transparency assessment
  • Director domicile confirmation
  • Operational-control review (especially for PE-backed entities with offshore structures)

Entries marked “to confirm” or with ownership flagged should be treated as provisional. Disqualifications listed here are first-pass assessments based on parent-company nationality β€” formal disqualification requires the full standard review.