EU AI Act Article 50 — 20 days to seal |
Get passport
OWNER-GATED P0: Requires Nick's personal information (full name, date of birth, address history 5yrs, Companies House number CSOAI Ltd 16939677, UTR/PAYE if trading >£10K). This walkthrough is the playbook — Nick executes, JEEVES stages. Estimated time: 30 min on portal, then 10 business days validation.
⏰ Target submission: Mon 13 Jul 2026 (Day 10) · Validation ~10 working days → live by ~27 Jul
1 · What is the Defence Sourcing Portal?
The DSP is the single front door for ALL UK Ministry of Defence (MOD) and Defence Equipment & Support (DE&S) supplier registrations, since 2018. It replaced the old DEFFORM system and is operated by the Defence Sourcing Board (DSB) on behalf of the whole UK defence ecosystem including Defence Science and Technology Laboratory (Dstl), Defence and Security Accelerator (DASA), UK Strategic Command (UKStratCom), Strategic Command, and the 4 Front-Line Commands (Navy, Army, Air, Strategic).
Without DSP registration you cannot:
- Bid on DASA open calls (target: defoneos-nato-diana.html style dual-use)
- Receive invitations to G-Cloud 14 / DOS / DPS tender (Cloud Compute, Cloud Software)
- Receive Dstl / R-Cloud / Make-Blue calls
- Apply for Defence Growth Partnership / ATI / Innovate UK defence bilateral
- Appear on Find a Tender service as a defence supplier
2 · Pre-requisites (have these ready BEFORE you start)
| # | Prerequisite | Source / Action | Notes |
| 1 | Company registration | Companies House CSOAI Ltd · Co. No. 16939677 | Already registered |
| 2 | Companies House authentication | Companies House API key OR sign-in via .gov.uk | Use sign-in via gov.uk for fastest |
| 3 | DUNS number | Dun & Bradstreet — free at dnb.com/duns-number | 5-day processing — apply NOW if missing |
| 4 | VAT number (if VAT registered) | HMRC VAT online | CSOAI Ltd is VAT-registered (turnover > £85K threshold) |
| 5 | ICO Data Protection registration | ico.org.uk/fee · fee £40/yr for small orgs | Required for any MOD data handling |
| 6 | BANK account (sort code + account no.) | Business bank | For payment of MOD invoices via PSP |
| 7 | Insurance certificates | Professional Indemnity £1M+ · Public Liability £2M+ | Standard MOD requirement, renew annually |
| 8 | Person with significant control (PSC) | Nick Templeman — sole director, sole PSC | Will require Right to Work check |
| 9 | Modern Slavery Statement | modernslaveryregistry.org (if turnover > £36M — N/A, but upload anyway) | Defence good-practice requirement |
| 10 | Cyber Essentials (recommended, not required for DSP alone) | IASME — £320 (basic) / £600 (Plus) | Required for many MOD contracts downstream |
3 · The 9-Step DSP Registration Walkthrough
Step 1 · Portal entry (2 min)
- Navigate to
https://www.gov.uk/defence-sourcing-portal
- Click "Register as a Supplier" (orange CTA, top-right)
- Read and accept the Defence Sourcing Privacy Notice (covers how your data is shared with MOD)
- Choose "Login or create a gov.uk account" for DSP single sign-on
Step 2 · Create / Link gov.uk account (3 min)
- If you already use gov.uk for HMRC / Companies House — use that ID, just add DSP scope
- If new: provide full name, email, mobile, create password 12+ chars with symbols
- Verify email (check junk, link valid 24h)
Use: nicholas.templeman@csoai.org (or @meok.ai) as primary; +44 mobile for 2FA. Don't use Gmail/Outlook — gov.uk prefers government-aligned domains for trust scoring.
Step 3 · Organisation details (5 min)
- Legal name: CSOAI Ltd
- Trading name: DEFONEOS / MEOK Labs (sub-brand)
- Companies House number: 16939677
- Incorporation date: as per CH certificate
- SIC code: 62012 — Business and domestic software development + add 62020 (information technology consultancy)
- Country of registration: United Kingdom
- VAT number: as registered
- DUNS number: apply now if missing — 5 working day lead time
Step 4 · Registered office & operational address (2 min)
- Registered office: as on Companies House (London)
- Operational address: yours or workspace address (DEFONEOS work happens from Yorkshire / remote)
- Both must be UK addresses. PO Box NOT accepted.
Step 5 · PSC (Person with Significant Control) — Nick's details (3 min)
OWNER-GATED: This is Nick's personal section. Required fields:
- Full legal name (as on passport)
- Date of birth
- Country of residence (UK)
- Nationality (British)
- Right to Work in UK: Yes — British citizen
- Address history (last 5 years) — required for baseline personnel security standard (BPSS)
- Discharged bankrupt / insolvent: No (or disclose if applicable)
- Criminal convictions: declare any unspent convictions (UK Business Link standard declaration)
- Director / PSC since: incorporation date
- Beneficial owner %: 100%
Step 6 · Capabilities & Categories (10 min) — IMPORTANT
Choose the UNSPSC / CPV codes that determine which contract notices you receive:
| Code | Description | Why DEFONEOS Needs It |
| 43232300 | Database software | OSCAL storage / sovereign substrate |
| 43232400 | Data exchange software | STANAG 4607 ingest bridge |
| 43232500 | Information filtering software | RED/BLACK separation, lawful intercept compliance |
| 72150000 | Computer audit / hardware services | Cyber Essentials evidence, BFT council audit logs |
| 81110000 | Computer services | MCP marketplace, PyPI distribution |
| 81160000 | Information technology services | Sovereign substrate integration |
| 81161700 | Telecommunications services | NATO STO / SHAPE bridge |
| 81111500 | Software development services | DEFONEOS core build |
| 85000000 | Healthcare / social services | NHS pilot (defoneos-nhs-dhsc.html) |
| 93000000 | Politics / civil service | FVEY / CPNI products |
Step 7 · Security & Eligibility (5 min)
- Cyber Essentials: tick "Applied for — pending" (provides slot in registration)
- UK SC clearance: tick "Not held — application in progress" (defoneos-cyber-essentials-application.html workflow)
- Disqualification declarations:
- Modern Slavery Act compliance: Yes
- Bribery Act 2010 policies in place: Yes
- Equality Act 2010: Yes
- Health & Safety at Work Act 1974: Yes
- Tax & Social Security: provide UTR, PAYE ref, VAT registration
Step 8 · Insurance & Financial Standing (3 min)
- Professional Indemnity insurance: £1,000,000 minimum — upload cert
- Public Liability insurance: £2,000,000 — upload cert
- Employer's Liability: £5,000,000 — statutory (if any employees)
- Last 3 years' accounts or self-assessment: upload latest filed accounts
Action if gap: DEFONEOS pivot to First Affiliate requires £1M PI as minimum for defence. Check current policy terms; flag renewal date.
Step 9 · Review & Submit (5 min)
- Carefully review all sections — DSP cannot be edited for 24h after submission
- Acknowledge the Supplier Code of Conduct (DEFSTAN 05-136 aligned)
- Submit — receive confirmation email within 1 working day
- Validation: 5-10 working days target, but historic range 14-21 days
4 · Post-submission Actions
- Reply to validation email queries within 48h (sliding clock)
- Use confirmation to claim Find a Tender vendor account (Find a Tender Service)
- Subscribe to DASA alerts via
https://www.gov.uk/government/organisations/defence-and-security-accelerator RSS
- Schedule Cyber Essentials application if not done — IASME approval queue ~7 days
- Begin SC clearance (UK SC = 4-6 weeks; baseline personnel security standard is fast-track via gov.uk sign-in)
5 · Defence + Security Accelerator (DASA) — Direct Route (parallel)
Even without DSP fully validated, you can submit DASA bids via the Innovation Loans / Open Call stream which goes directly to DASA. DASA accepts Expressions of Interest from any UK registered company — DSP just speeds up the contract award post-bid.
DEFONEOS DASA draft already prepared at defoneos-dasa-application.html — submit Mon 13 Jul, 2pm BST.
6 · 90-Day Compliance Calendar
| Date | Action | Target Status | Blocker |
| 10-13 Jul | DSP submission + ICO renewal | Submitted | Owner info |
| 14-21 Jul | DUNS application if missing | Granted | Free, online |
| 20-22 Jul | Cyber Essentials application with IASME | Submitted | £320 fee |
| 22 Jul - 1 Aug | CE+ evidence gather + audit (Plus tier if bidding MOD-Prime) | Audited | CyberEssentialsPlus body access |
| 22 Jul + | UK SC clearance application (through gov.uk / Disclosure Scotland equivalent) | Submitted | Right to Work + address 5yr history |
| 22 Jul - 13 Aug | Insurance uplift to MOD-minimum | Renewed | £1K-£3K premium uplift |
| 4 Aug - 25 Aug | DSP validation (typical window) | Approved | Defence Sourcing Board |
| ~27 Aug | DSP active — eligible for all MOD contracts | Live | — |
| Q3 | First MOD opportunity bid | Bid filed | Live DSP |
Pro Tip: Don't wait for DSP validation to send first outreach emails to DASA / UKDI / DIANA — DASA Open Call accepts any UK Ltd company; DSP just confirms the award.
7 · The 12-Framework Crosswalk
| Framework / Regulation | DSP Touchpoint | DEFONEOS Coverage |
| Defence Sourcing Portal (DSP) — Supplier Reg | This walkthrough | Submission by 13 Jul |
| DEFSTAN 05-136 (Supplier Code of Conduct) | Step 9 acknowledgement | Built into charter |
| Cyber Essentials / Plus | Step 7 + 90-day | defoneos-cyber-essentials-application.html |
| UK SC (Security Clearance) | Step 7 + 90-day | 4-6 weeks application |
| JSP 936 (Defence AI Safety) | Downstream | defoneos-mod-jsp-compliance.html |
| OSCAL / NIST 800-53 | Evidence vault | defoneos-oscalssp-pipeline.html |
| ATLAS / NATO AC/322-D(2018)0046 | Downstream | Trilateral CSDP/CFE conventions |
| Tactical Edge Compliance (STANAG 4778) | STANAG coverage | STANAG 4778 confidentiality-binding at data layer |
| Modern Slavery Act 2015 | Step 7 declaration | Statement on registry |
| Bribery Act 2010 | Step 7 declaration | Policies published |
| Equality Act 2010 | Step 7 declaration | Standard policy |
| Procurement Act 2023 §19 (Single-Defence Tender) | Future bids | DEFONEOS Tier-2/3 procurement pathway |
8 · Honesty Register — What This Walkthrough Does and Does Not Do
Honesty Register — DSP Registration Walkthrough
- This walkthrough is the procedure. Submission itself is OWNER-GATED — requires Nick's personal data.
- Validation timelines (5-10 working days) are the published target; historic range 14-21.
- The CPV/UNSPSC codes chosen are a starting set; expand once DSP validates and you have DASA feedback.
- Insurance requirements (£1M PI, £2M PL) are the MOD minimum; some contracts require higher (£10M+).
- UK SC clearance is the FIRST step; higher contracts require CTC (Developed Vetting).
- The 90-day calendar assumes no surprises — extend by 4-6 weeks if any insurer underwrites slowly.
- This walkthrough does NOT include VAT registration (assumed); if not VAT-registered, register via HMRC first.
- The DASA / DSP primary paths are illustrative — final compliance route depends on validation outcome.