FreeAgent

UK · www.freeagent.com · 25 vendors

FreeAgent is a cloud-based accounting software company that provides tools for small businesses, freelancers, and accountants to manage their finances. Its award-winning platform helps users with invoicing, expense tracking, payroll, and tax submissions, aiming to simplify financial administration.

Resilience scores

Disruption prediction

FreeAgent has an estimated 11% probability of disruption in the next 6 months.

11 of FreeAgent's 25 vendors monitored for disruptions.

Technology vendors

Services catalogue

4 services in catalogue across 3 categories; runs on 25 sub-vendors.

Insights

Last updated 2026-08-17 · revision 2

25 direct vendors, 268 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 7/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

FreeAgent demonstrates high migration readiness, primarily due to its existing cloud-native architecture on Amazon Web Services (AWS) and a modern tech stack including Ruby on Rails and a RESTful API. This foundation suggests a modular and adaptable system, making potential migrations (e.g., to different AWS regions, other cloud providers, or refactoring into microservices) significantly less complex than for a legacy, on-premise system. The absence of specified data residency requirements also provides flexibility. However, there are notable unknowns that temper the readiness score. Financial stability data (revenue concentration, growth history) is missing, which is crucial for assessing the company's ability to fund a significant migration effort. The 'Total Vendors: 0' is contradictory to the 'Total Services: 29' and diverse vendor HQ countries; assuming reliance on these 29 services, the 'Vendor Lock-in Risk: Unknown' is a key challenge. While vendor geographic diversity is good, the specific nature of these service contracts and potential lock-in points are unclear. The regulatory environment details are also not specified beyond HMRC MTD integration, which could introduce complexities depending on the target migration environment.

Compliance

8 in-scope frameworks identified; showing 3.

ISO 27001 (source) — Assessment Required

FreeAgent's data centres (AWS in Ireland) are ISO 27001, 27017, and 27018 certified, as explicitly stated on the security page. However, this certification applies to AWS (the infrastructure provider), not to FreeAgent Central Limited itself as an organisation. No evidence has been found that FreeAgent holds its own ISO 27001 certification for its information security management system. The Trust Centre does not list an ISO 27001 certificate among its documents. The risk level is Medium because: (1) the absence of FreeAgent's own ISO 27001 certification is a gap for enterprise customers who require it from their software vendors; (2) FreeAgent compensates with Cyber Essentials Plus, annual pen testing, and a mature security programme; (3) NatWest Group (FreeAgent's parent company since 2018) may impose internal security standards that align with or exceed ISO 27001 requirements, but this is not publicly confirmed.

Evidence: https://www.freeagent.com/features/security/, https://trustcentre.freeagent.com/, https://docs.aws.amazon.com/whitepapers/latest/aws-overview/security-and-compliance.html

SOC 2 (source) — Assessment Required

FreeAgent is a cloud-based SaaS accounting platform that processes sensitive financial and personal data on behalf of its customers, making it a natural candidate for SOC 2 assessment. SOC 2 is not a legal requirement but is increasingly expected by enterprise customers and partners (e.g., NatWest Group, Hiscox, Stripe, GoCardless — all listed as FreeAgent customers/partners). The Trust Centre does not list a SOC 2 report among its featured or available documents. Instead, FreeAgent relies on Cyber Essentials Plus certification and its SafeBase Trust Centre as its primary third-party assurance mechanisms. The risk level is Medium because: (1) the absence of SOC 2 may create friction with enterprise/institutional customers who require it; (2) FreeAgent's partnership with NatWest Group (a major regulated financial institution) suggests some level of security assurance has been provided, but the specific framework is not publicly confirmed; (3) the company has robust security controls documented but lacks the independent SOC 2 audit attestation that many cloud providers obtain.

Evidence: https://trustcentre.freeagent.com/, https://www.freeagent.com/features/security/, https://www.ncsc.gov.uk/cyberessentials/overview

UK Cyber Essentials Plus — Compliant

FreeAgent explicitly holds Cyber Essentials Plus certification, the highest level of the UK government's Cyber Essentials scheme, administered by the National Cyber Security Centre (NCSC). This certification requires independent, external technical verification of security controls including firewalls, secure configuration, user access control, malware protection, and patch management. The Cyber Essentials Plus logo is displayed prominently on FreeAgent's website footer and security page, indicating active certification. Risk level is Low as the company is demonstrably compliant with this UK government-backed security standard.

Evidence: https://www.freeagent.com/features/security/, https://trustcentre.freeagent.com/, https://www.ncsc.gov.uk/cyberessentials/overview

Financials

Three-year financials

Financial Resilience Score: 8/10

FreeAgent benefits from very strong financial resilience primarily due to its ownership by NatWest Group plc, one of the UK's largest banking groups. As a wholly owned subsidiary since 2018, FreeAgent has access to group-level funding, brand distribution, and a captive channel of hundreds of thousands of NatWest, RBS, Ulster Bank and Mettle business banking customers. This parental backing effectively removes solvency and liquidity risk that would otherwise be material for a SaaS company of its size. The underlying business model is also resilient: subscription-based cloud accounting revenue is highly recurring and sticky, with low churn once a business embeds its ledger in the platform. Regulatory tailwinds from HMRC's Making Tax Digital (MTD) initiative for VAT and Income Tax are expanding the addressable market. FreeAgent has moved to broadly break-even/small operating profitability post-acquisition while continuing to grow subscribers from ~65,000 at acquisition to over 250,000 currently. Key risks that prevent a higher score include heavy concentration in the NatWest bundled channel (a large share of active licences are paid centrally by the parent), UK-only geographic exposure, and intense competition from larger, better-capitalised rivals Intuit QuickBooks, Xero and Sage that are increasingly investing in AI-driven bookkeeping.

Key strengths: Wholly owned subsidiary of NatWest Group plc providing capital and distribution, Recurring SaaS subscription revenue with high customer stickiness, Regulatory tailwind from HMRC Making Tax Digital (MTD) mandate, Over 250,000 small business customers, Captive distribution via NatWest/RBS/Ulster Bank/Mettle business accounts, Broadly break-even to small operating profitability post-acquisition, Continued double-digit revenue growth since 2018 acquisition

Risk factors: High customer concentration in the NatWest bundled channel, UK-only geographic focus with no international diversification, Intense competition from Intuit QuickBooks, Xero and Sage, Reliance on HMRC standards and MTD regulatory roadmap, No standalone capital-markets signal; dependent on parent disclosures

Revenue by geography

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report