Risk Ledger Ltd Due Diligence

Run due diligence on Risk Ledger Ltd: check compliance and get alerts when suppliers change.

United Kingdom · riskledger.com · 41 vendors

Risk Ledger is a third-party risk management platform that enables organisations to identify, measure and mitigate supply chain risks by running a comprehensive, security-led due diligence programme on their third-party vendors.

Resilience scores

Technology vendors

Insights

Last updated 2026-08-15 · revision 15

41 direct vendors, 269 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Compliance

10 in-scope frameworks identified; showing 3.

GDPR (source) — Evidence found

Evidence: https://riskledger.com/privacy, https://riskledger.com/security-profile, https://riskledger.com/resources/press-release-risk-ledger-expands-united-states, https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/, https://www.legislation.gov.uk/ukpga/2018/12/contents/enacted

ISO 27001 (source) — Evidence found

Evidence: https://riskledger.com/security-profile, https://riskledger.com/, https://www.bsigroup.com/en-GB/iso-27001-information-security/, https://www.ncsc.gov.uk/cyberessentials/overview

UK Cyber Security and Resilience Bill — No public evidence

Evidence: https://www.gov.uk/government/publications/cyber-security-and-resilience-bill-factsheet, https://riskledger.com/communities/critical-national-infrastructure, https://riskledger.com/security-profile

Financials

Three-year financials

Financial Resilience Score: 5/10

Risk Ledger Ltd is an early-stage, venture-backed cybersecurity SaaS company with approximately £10M+ in total disclosed funding, including a £6.25M Series A extension in March 2024 led by Mercia Ventures. The company benefits from strong VC backing, a growing sector tailwind driven by regulations such as DORA, NIS2, and the UK Cyber Security & Resilience Bill, and a defensible network effect with 16,000+ connected supplier organisations on its platform. Marquee customers span financial services (Allica Bank, Admiral, Simply Business), critical national infrastructure (Anglian Water, Pennon), and transport (GTR), providing vertical diversification. However, the company remains sub-scale relative to global TPRM competitors like OneTrust, SecurityScorecard, and Prevalent, which have raised hundreds of millions. As a small private company filing abbreviated accounts, detailed P&L visibility is limited, and typical early-stage SaaS cash burn implies ongoing dependence on venture capital. The 2025 US market expansion increases cost base ahead of revenue, adding execution risk. Overall resilience is moderate — well-funded for its stage but reliant on continued VC access and successful international scaling.

Key strengths: £6.25M Series A extension raised March 2024 led by Mercia Ventures, Strong VC backing from Firstminute Capital, Seedcamp, Episode 1, Village Global, CyLon, LORCA, Network effect with 16,000+ connected supplier organisations, Regulatory tailwinds from DORA, NIS2, UK Cyber Security & Resilience Bill, Diversified marquee customers across financial services, CNI, transport, insurance, ISO/IEC 27001 and Cyber Essentials certified

Risk factors: Early-stage cash burn typical of pre-profit SaaS scale-ups, Small absolute scale versus well-funded US TPRM competitors (OneTrust, SecurityScorecard, Prevalent), Crowded competitive TPRM market, US expansion increases cost base ahead of revenue, Potential customer concentration risk given company size, Limited public financial disclosure due to small-company filing status, Dependence on continued access to venture capital

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report