01
Procurement Act 2023
Workflows are designed around the transparency notices, assessment summaries and record-keeping duties placed on contracting authorities.
Official source · legislation.gov.ukPublic Sector
Registered, evidenced, ready for due diligence
Verified company and supplier information, responsible-use controls and the frameworks considered when supporting UK public-sector procurement.
Honey-B2024 Ltd is a private UK company registered as a supplier on the UK Central Digital Platform. Registration does not imply government affiliation, accreditation, pre-qualification or endorsement.
- PPON
- PLLZ-1139-QCCD · Find a Tender Service
- Companies House number
- 15744305 · View the Companies House record
- Incorporated
- 26 May 2024
- ICO registration
- ZC178845 · Tier 1 · View the ICO register entry
Regulatory frameworks
Statements below describe design intent and operating practice. They do not claim certification or guarantee compliance.
02
UK GDPR & Data Protection Act 2018
Processing is limited to contract performance and legitimate interests under Art. 6(1)(b) and (f), with DSAR support and documented retention periods.
Official source · legislation.gov.uk03
Building Safety Act 2022
Document intelligence supports the golden thread of information: version control, traceable evidence and auditable change history.
Official source · legislation.gov.uk04
ISO/IEC 27001 controls
Security practices are reviewed against relevant ISO/IEC 27001 control themes. Honey-B2024 does not claim certification on this page.
Official source · iso.org05
NCSC Cyber Essentials
Endpoint hardening, access control, patching and malware protection follow the Cyber Essentials technical controls.
Official source · ncsc.gov.uk06
Public Sector Equality Duty
Accessibility and plain-English output guidance are part of every deployment, supporting WCAG 2.2 AA targets for public-facing material.
Official source · gov.uk
Data handling principles
Data minimisation
Only the documents and fields required for the stated procurement or assurance task are ingested. No speculative harvesting of authority data.
UK / EEA residency
Transfer locations and safeguards are documented for each applicable service. Where UK personal data is transferred internationally, an applicable UK safeguard is used.
No training on your data
Client material is not used to train shared or third-party models without explicit agreement. Service-specific handling terms are documented with the client.
Human in the loop
Outputs are AI-assisted drafts. A named officer reviews and signs off before any submission, decision or publication.
Our obligations
- Data controller: Honey-B2024 Ltd, registered in England & Wales, company no. 15744305.
- ICO registration ZC178845 (Tier 1).
- Named point of contact for DSARs, FOI-related enquiries and incident notification: Info@honeyb2024.tech.
- Potential personal data breaches are assessed and notified in accordance with the applicable legal role and client agreement.
- Sub-processor register maintained and available to customers on request.
- Records of processing activity (ROPA) kept under UK GDPR Art. 30.
Guidance for authority users
- Do not upload material classified above OFFICIAL without a written agreement covering handling requirements.
- Redact special category data unless it is strictly necessary for the task and covered by a lawful basis.
- Treat all generated text as a draft: verify figures, dates, statutory references and pricing against source documents.
- Record the reviewer and review date for any AI-assisted content included in a formal decision record.
- Do not rely on outputs as legal, financial or quantity surveying advice.
- Report suspected inaccuracy, bias or unsafe output to Info@honeyb2024.tech so it can be logged and investigated.
Need our compliance pack for a tender?
We can supply a due-diligence pack covering security controls, sub-processors, data flows, retention schedules and AI transparency statements for your procurement file.