Supplier Vetting for Energy & Utilities — UK Checklist

The sector's unique risks center on director governance and beneficial ownership concentration. Our analysis of 21,046 director records shows average risk score 3.1, while beneficial ownership concentration from 18,016 PSC records averages 12.8—significantly elevated. Prioritize identifying single points of control (sole directors, concentrated ownership), examining director histories for prior company failures, and understanding true beneficial owners through PSC filings. Energy & Utilities operates critical infrastructure where supplier failure cascades immediately to customer impact. Director stability and clear accountability chains matter more than in many sectors because supplier problems directly affect operational continuity and regulatory compliance.

Rapid market entry since 2020 created a cohort of 8,358 new suppliers without extensive operating history to evaluate. Traditional vetting relies on multi-year financial performance, references from completed projects, and demonstrated safety records. Recent entrants may have founders with prior sector experience but lack documented track records in their own operations. Enhanced due diligence for newer suppliers should emphasize: founder and management team backgrounds, evidence of similar work under previous employers, financial backing and ownership stability, professional insurance at levels matching contract scope, and potentially performance bonds or phased contract structures until capability is demonstrated. Their low dissolution rate (0.8% sector-wide) is encouraging but doesn't eliminate individual assessment necessity.

Companies House data provides verified, objective information directly addressing governance and ownership transparency. Officer records reveal director backgrounds, tenure, potential conflicts through cross-directorships, and connections to companies that failed. PSC filings expose beneficial ownership structures that contracts and initial documentation may obscure. Accounts and financial statements document financial health objectively. For Energy & Utilities suppliers, these data sources are essential because the sector's regulatory environment (Ofgem, HSE, environmental authorities) requires documented due diligence demonstrating you understood counterparty risk before engagement. Companies House data creates an auditable trail showing diligent risk assessment. If supplier failure later triggers regulatory investigation, Companies House-based due diligence demonstrates you performed reasonable precautions.

Insurance requirements vary by supplier role, but critical infrastructure suppliers typically need: public liability minimum £10 million for major projects, professional indemnity £5-25 million depending on design/engineering responsibility, employer liability £10+ million if managing subcontractors, and potentially statutory liability and environmental impairment insurance. Verify current coverage, check that your company is named as interested party, and confirm the insurer maintains adequate capital (check Lloyd's or ratings agencies). Suppliers unable to obtain adequate insurance may face uninsurable risks indicating operational or safety problems. Request certificates 90 days before contract commencement and establish renewal reminders. Insurance lapses create unmanaged exposure and suggest poor supplier administration.

Ofgem's Standards of Conduct explicitly require energy companies to demonstrate fair treatment of customers, which depends fundamentally on having competent, reliable suppliers. The regulator expects documented supplier due diligence procedures showing you assessed counterparty financial stability, technical capability, safety practices, and regulatory compliance before engagement. During regulatory investigations or customer complaint investigations, Ofgem reviewers examine whether suppliers received adequate oversight. Failure to document due diligence becomes evidence of inadequate governance controls. HSE requirements for managing contractors mandate risk assessments and competence verification. Data protection regulations create liability when suppliers handle customer data. Comprehensive supplier vetting isn't optional compliance theater—it's the foundational governance control supporting multiple regulatory requirements. Companies House data, combined with reference checks and financial analysis, creates the documented evidence base regulators expect.