Compliance · Public sector procurement
What the Procurement Act 2023 means for SME software suppliers
October 2026 · 9 min readRead →
The Act limits what a public body can demand of a small supplier before it will read a tender: no audited accounts from audit-exempt companies, no insurance before award, no pre-qualification on most below-threshold contracts, and 30-day payment that flows down to subcontractors. Section by section, with what to do this month.
Product · Commissioning software
Build, buy or configure: how to decide what software your organisation actually needs
"Build or buy" is usually the wrong question. Six questions that decide between buying, configuring an established platform, and building, plus the warning signs you chose wrong.
October 2026 · 8 min readRead →
Public sector · Data & security
UK hosted vs UK resident: the data residency questions that actually matter
A UK data centre is not the same commitment as UK data residency. The four questions worth asking any compliance SaaS vendor about where data is processed, who can reach it, and what happens during failover, and why you should put the same questions to us.
June 2026 · 7 min readRead →
Public sector · Procurement
How to write a software procurement brief that gets useful responses
Most procurement briefs filter out the suppliers best placed to help and attract the ones best placed to write proposals. This guide covers the seven things every software brief must include, what to leave out, why stating the budget is not a negotiating weakness, and why a problem-led brief lets a supplier tell you when you do not need a new build.
May 2026 · 7 min readRead →
Public sector · Procurement
What public sector organisations can ask an SME supplier during due diligence
The questions that distinguish a capable, accountable small supplier from one that will be difficult to hold to account, covering legal standing, Cyber Essentials, GDPR, delivery credibility, and post-launch support. With a practical verification checklist.
April 2026 · 8 min readRead →
Security · Credentials
Tiri.Tese achieves Cyber Essentials certification
What the five technical controls cover, what certification confirms, and how to verify our certificate independently on the NCSC certificate search at iasme.co.uk, without taking our word for it.
July 2026 · 6 min readRead →
Credentials · Responsible business
Tiri.Tese achieves Good Business Charter accreditation
The GBC is the UK's benchmark for responsible business. We set out what the ten components require, from the Real Living Wage to prompt payment to ethical sourcing, and what our accreditation means in practice for the organisations we work with.
July 2026 · 5 min readRead →
Public sector
How public sector procurement officers evaluate SME digital suppliers
What does a procurement officer actually look for when shortlisting SME software suppliers? We break down the evaluation criteria used in practice, from Cyber Essentials and GDPR evidence through to pricing transparency and post-contract accountability.
In preparationComing soon
Compliance · Documents
E-signature in regulated industries: what the law actually requires
Not all e-signatures carry equal legal weight. We look at what the Electronic Communications Act 2000 and the UK eIDAS Regulations require for different document types, and where a simple electronic signature is sufficient versus when you need a qualified one.
In preparationComing soon
Product
Why compliance software is so hard to use, and what good design actually looks like in a regulated environment
Compliance tools have a usability problem. They are built by people who understand the regulation but not the person doing the job. We apply all ten of Nielsen's heuristics to real compliance interface decisions and show what changes when you take them seriously.
In preparationComing soon