Pro2col Due Diligence

Run due diligence on Pro2col: check compliance and get alerts when suppliers change.

UK · www.pro2col.com · 8 vendors

Pro2col is a global specialist consultancy that simplifies the selection, implementation, and support of managed file transfer solutions and workflow automation. The company helps organizations securely transfer and manage data, supporting cybersecurity and regulatory compliance.

Resilience scores

Technology vendors

Insights

Last updated 2026-08-12 · revision 1

8 direct vendors, 132 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

9 in-scope frameworks identified; showing 3.

SOC 2 (source) — No public evidence

Evidence: https://pro2col.com/cloudmft, https://pro2col.com/mft-managed-service, https://pro2col.com/company, https://www.aicpa-cima.com/resources/landing/soc-2-reporting-on-an-examination-of-controls-at-a-service-organization-relevant-to-security-availability-processing-integrity-confidentiality-or-privacy

ISO 9001 — Evidence found

Evidence: https://pro2col.com/company, https://www.iso.org/standard/62085.html, https://www.ukas.com/

UK Cyber Essentials — No public evidence

Evidence: https://pro2col.com/central-government, https://pro2col.com/local-authorities, https://pro2col.com/company, https://www.ncsc.gov.uk/cyberessentials/overview, https://www.cyberessentials.ncsc.gov.uk/cert-search/

Financials

Three-year financials

Financial Resilience Score: 6/10

Pro2col Ltd demonstrates qualitative resilience through 20+ years of continuous trading since 2004, a diversified multi-vendor portfolio of 13+ MFT platforms, and a blue-chip client roster including Visa, BT, National Grid, Ministry of Justice, BBC, and Genomics England. Recurring revenue streams from managed services, CloudMFT hosting, support, and training provide stickiness less exposed to project cyclicality. Regulatory tailwinds from GDPR, DORA, NIS2, PCI DSS, and HIPAA continually drive demand for secure file transfer solutions. However, as a small private consultancy filing abbreviated accounts under UK small-company exemptions, financial transparency is limited and precise revenue, EBIT, and equity figures are not publicly disclosed. The company faces risks from vendor consolidation (Fortra acquiring GoAnywhere/Globalscape, Progress owning MOVEit) which can compress reseller margins, and reputational exposure to vendor security incidents such as the 2023 MOVEit vulnerability. Small-company scale limits financial buffers relative to enterprise clients served, and there is no evidence of external funding or M&A activity. Overall, the company appears operationally stable but with the inherent constraints of a niche founder-owned consultancy.

Key strengths: 20+ years of continuous trading since 2004, Diversified portfolio of 13+ MFT vendor solutions, Blue-chip and public-sector client base (Visa, BT, MoJ, BBC, Genomics England), Recurring revenue from managed services, CloudMFT hosting, and training, Regulatory tailwinds (GDPR, DORA, NIS2, PCI DSS, HIPAA), 1,500+ MFT solutions delivered across 30+ countries, Move up value chain via own-branded CloudMFT and CFTP certification program

Risk factors: Small-company scale with modest financial buffers, Reseller margin dependence on third-party vendor programs, Vendor consolidation risk (Fortra, Progress, Axway), Reputational exposure to vendor security incidents (e.g. MOVEit 2023 breach), Key-person/talent concentration in small specialist team, Limited financial transparency due to small-company filing exemptions, Working capital dependent on project billings

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report