Supplier evaluation
Four registers hold the credentials. Four artefacts hold the commitments.
Certificate 27274, supplier 721548, company 8294 and Companies House 14444817 can be checked in an afternoon without contacting us. The four requirements another supplier is better placed to meet are further down.
Supplier evaluation
Three ways an evaluation loses its evidence
The claim arrives without a reference number
A submission says certified. The panel cannot tell which version, which certification body, whether that body is accredited, or what the scope covers. A number and a register settle all four.
The evidence pack lands after the shortlist
Security questionnaires, sub-processor lists and DPA templates arrive once the decision is already social, so a gap found then becomes a contract condition rather than a reason to look again.
Every claim rests on the supplier’s own word
Evidence has to be capable of being false: a certificate lapses, a framework listing is absent, a company number points at another entity. Where a bid offers nothing a register could contradict, the panel is scoring presentation.
The cost lands two years later at internal audit, when the person who made the decision has moved on and the file holds no reference number anybody can check.
Verifiable, not asserted
Four credentials, with the reference to search and the boundary of each
Each row names the issuer, the number a third party holds, and where the certificate stops.
| Credential | Issuer and reference | Covers | Does not cover |
|---|---|---|---|
| ISO/IEC 27001:2022 | ISOQAR Limited, UKAS-accredited Certification Body 0026 Certificate 27274 Verify → | The management system for delivering IBM Maximo services and MaxIron Cloud. The Statement of Applicability addresses all 93 Annex A controls. | Your own Maximo environment. That sits under the shared responsibility model published on the Trust Centre. |
| ISO 9001:2015 | ISOQAR Limited, UKAS-accredited Certification Body 0026 Certificate 27274 Verify → | Quality management across delivery, audited by the same body against the scope printed on the certificate. | The outcome of any single programme, which is set by the scope and the data behind it. |
| UK G-Cloud 14 | Crown Commercial Service, Digital Marketplace Supplier 721548 Verify → | A buying route for public bodies: implementation, MAS upgrade, managed hosting and application support callable off framework terms, with service definitions downloadable. | An endorsement, or a ranking against the other suppliers on the framework. |
| IBM Partner Plus, Gold tier | IBM Company 8294 Verify → | Service Provider, ISV, SI, MSP and MSSP for IBM Maximo Application Suite, with reseller authorisation, so the licence, the platform and the people sit with one accountable supplier. | Any IBM warranty over our delivery. The contract is with MaxIron Ltd, Companies House 14444817. |
Publication policy
Every figure we publish carries a reference that somebody else maintains.
That rules out a client count, a retention percentage and a satisfaction score, because we run no survey that would survive an audit. Recognition and credentials lists each entry we do publish, alongside what it does not prove.
Commitments
Four commitments, each with the artefact that evidences it
| Ref | Commitment | The artefact that evidences it |
|---|---|---|
| C1 | A price arrives after the measurement | The customisation and integration inventory, a fixed quote against it, and a trial upgrade run in a non-production environment inside a week. How the trial upgrade week runs. |
| C2 | The delivery machinery is documented product by product | Published pages for Pipelines, Change Control and Sentinel, naming who approves a release and where the record is written. |
| C3 | Six engagements are written up at procedure level | Anonymised case studies across airport, ferry, oil and gas, gas distribution, building materials and industrial services, with constraints, in-step decisions and one sequencing judgement noted. |
| C4 | The procurement paperwork is published, dated and signed | A Carbon Reduction Plan to PPN 006, 2025 baseline and net zero by 2050, and an accessibility statement targeting WCAG 2.2 Level AA. |
Codes are stable once published, so C1 to C4 can be cited in an assurance questionnaire. Each artefact is published on this site today or produced before signature.
Due diligence
Check us in one afternoon, without contacting us
In the order a procurement, security or asset management reader would take it. No form, NDA or sales call.
- 01
Open the certificate register
Search 27274 on the ISOQAR register, issued by UKAS-accredited body 0026, then read the scope statement. The scope says what was audited.
Owner Your security reviewer Typically 4 minutes
- 02
Open the framework and partner listings
Supplier 721548 on the Digital Marketplace for the buying route, and company 8294 in the IBM Partner Plus directory for the tier and the roles held against the suite.
Owner Your procurement lead Typically 6 minutes
- 03
Read the engagement closest to your manoeuvre
One anonymised write-up, chosen by the work rather than the sector name. Read it for the decision inside each step and one sequencing judgement noted. The six engagements.
Owner Whoever will run the programme Typically 20 minutes
- 04
Judge published reasoning on ground you know
Take the RFP question set or a guide on ground you know well. Reasoning that fails here has saved you a procurement cycle.
Owner Your asset management lead Typically 30 minutes
Fit assessment
Four requirements another supplier is better placed to meet
Each is named on the first call, with a recommendation on where to look instead.
An award decided on day rate
We price senior practitioners and named accountability. Where the evaluation is a rate card comparison, a supplier built for volume staffing wins it, and our price holds at the level we can staff properly.
A platform other than IBM Maximo
This is a specialist IBM Maximo and MAS practice, and it is the only enterprise asset management platform we carry. A second platform would be learned at your expense, so we decline the work.
A fixed price on an unmeasured scope
We quote fixed against a measured inventory and name the parts that remain judgement. Before the measurement exists you get a range, and the reason it is still a range.
Seats filled with no capability left behind
Where we embed specialists, knowledge transfer is written into the brief and assessed at the end. Where the requirement is headcount alone, a staffing agency is the right supplier.
Choosing MaxIron, questions buyers ask first
- Does being on G-Cloud 14 mean the UK government recommends MaxIron?
- It means a UK public-sector buyer can purchase through that route without a separate tender. The listing is a purchasing mechanism, and it carries no ranking against the other suppliers on the framework. MaxIron Ltd is supplier 721548, described in those terms on the recognition page.
- Why are clients anonymised?
- Contracts require it, and several of these estates sit in critical national infrastructure, where an operator named alongside its platform version, integrations and reporting cycle is a disclosure we withhold. The six anonymised engagements carry the substance, and a named client who has agreed to speak is introduced during proposal.
- Do MaxIron products change what IBM Maximo is responsible for?
- No. MaxIron products complement IBM Maximo and MAS by adding hosting, change control, release automation, monitoring, data quality and field capture around the platform, and Maximo remains the system of record throughout. MaxIron also resells and implements the suite, which is the clearest statement of where we stand on it.
Put the open question to a senior engineer.
Forty minutes, no slides. Describe the estate as it stands and we will name what we would take on, what stays with your team, and where another supplier is better placed.
Useful to have on the call
- Your Maximo or MAS version, fix pack level and number of environments
- The customisation and integration inventory, however incomplete
- The regulator, framework or standard your reporting has to satisfy
- The date that is already fixed, and who fixed it