PQQ rejections on technicalities
The work was good enough, but a certificate, policy date, admin field, or evidence pack was not.
Construction Supply Chain
IT & Cyber Defensibility · For M&E contractors, subcontractors, and specialist trades · UK
Your insurance is in place. Your IT support company says you're covered. Your PQQs are filed. So why can't you prove any of it?
The problem hitting UK subcontractors is not that nothing exists. It is that the evidence is scattered across your Microsoft tenant, backup platform, IT support company tooling, field systems, and inboxes.
This is an IT problem, not a health and safety problem. Axulu closes the proof gap between the declarations you make and the evidence you can produce when an insurer, main contractor, auditor, or board asks for it.
Fixed price · Results in 5 working days · Board-ready output included
Construction Supply Chain
Does any of this sound familiar?
Construction firms rarely fail because they do nothing. They fail because no one can prove the thing was done, by whom, and when.
IT support company verbal assurances
You were told MFA, backup, patching, and endpoint controls were fine, but the logs never arrived.
WhatsApp site photos
Critical evidence lives in phones, chats, and folders that nobody can reliably retrieve under scrutiny.
Payment held on snagging evidence
The argument is no longer whether the work happened. It is whether the proof is complete enough to release money.
Cyber renewal evidence chase
Your broker asks questions your IT support company answers casually, while the insurer expects documented proof.
Single compliance manager risk
One person knows where everything is. If they leave, go off sick, or miss a deadline, the firm is exposed.
The villain
The gap between what you've declared and what you can prove
You can have the right policies, the right IT support company, and the right insurance, while still being commercially exposed.
The failure is proof ownership. Nobody has turned your Microsoft 365 tenant, backup platform, endpoint estate, and IT support company reports into a coherent evidence position.
When scrutiny lands, the question becomes brutally simple: what was true, who owned it, where is the record, and can you produce it quickly enough to matter?
Axulu's scope: IT & cyber evidence · IT support company contract gaps · CAS Sections 16-17 · Microsoft 365/endpoint · Board-level IT governance · NOT: H&S · CDM · ISO 9001
Five threats
The pressure is already moving.
Cyber insurers now evidence-check at claim time
Renewal answers are no longer harmless admin. They become the standard your claim is judged against.
Retention reform moves payment fights forward
As retention practices change, evidence quality becomes part of earlier commercial dispute handling.
CAS V4 and Constructionline admin rejections
Small documentary gaps can now block bigger commercial opportunities.
Building Axulu Safety Act golden thread expectations
The direction of travel is permanent evidence, traceability, and ownership.
Procurement Act 2023 debarment risk
Public procurement scrutiny raises the cost of sloppy cyber and governance evidence.
1 in 4Cyber claims denied
43%UK businesses attacked
£300mBuckingham Group collapse
Failed alternatives
Useful people. Wrong ownership model.
They run systems and tools. They rarely own your commercial evidence position or board-level defensibility.
They coordinate paperwork, but cannot usually validate the technical proof inside the IT estate.
They place cover. They do not build the proof pack that protects the claim later.
It captures some operational evidence, but it does not reconcile cyber, IT support company, insurer, and governance obligations.
RACI ownership
Who actually owns the evidence?
| Evidence obligation | You now | Your IT support company | Axulu |
|---|---|---|---|
| Cyber insurance control evidence | Chased | Partial | Mapped |
| MFA and access proof | Assumed | Reports | Verified |
| Backup restore evidence | Unknown | Operates | Tested |
| Endpoint and patching position | Fragmented | Tooling | Packaged |
| IT support company contract gap review | Unclear | Conflicted | Owned |
| CAS Sections 16-17 support | Manual | Inputs | Structured |
| Board-level IT governance record | Thin | Technical | Board-ready |
| Framework evidence pack | Reactive | Not scoped | Ready |
Dream outcome
The Proof-Ready Subcontractor
- PQQ evidence is current, named, dated, and easy to retrieve.
- IT support company claims are backed by reports, logs, and restore evidence.
- Cyber insurance answers match reality before a the insurance claims assessor asks.
- Board and framework packs explain cyber risk in commercial language.
- Payment, snagging, and project evidence does not depend on one person.
- Main contractors see a supplier who can prove control, not merely claim it.
Matthew - Principal & Founder
Built from the other side of the desk.
Before Axulu, Matthew spent nine years as CEO of an IT managed services company whose client base included construction firms. He has been on the other side of the desk. He knows what an IT support company contract says, what it excludes, and where the evidence gap lands.
Objections
The usual reasons to wait are exactly why the gap persists.
1We have Constructionline Gold
Good. Constructionline Gold proves you passed their check at one moment in time — it doesn't prove you're still defensible today.
2Our IT support company handles security
They may handle tools. The question is whether you can prove what they handle, what they exclude, and what the board owns.
3We have never had a claim denied
The point is to fix the evidence position before the first claim, renewal challenge, or framework deadline exposes it.
4Construction is too chaotic
Exactly. The proof model has to survive site reality, staff turnover, subcontractor pressure, and inbox archaeology.
5We can't afford this
A fixed £950 review is designed to be smaller than one missed framework, disputed payment, or painful renewal scramble.
6We have been burned by consultants
This is not a binder exercise. It is a focused evidence review of the IT and cyber claims you already rely on commercially.
Offer ladder
Start with the smallest useful proof package.
Framework-Ready Review
A 5-working-day review of your IT and cyber evidence gaps, with a board-ready output and clear next steps.
Book a meetingProofOps™
Ongoing evidence maintenance across IT support company reports, insurance requirements, framework obligations, and board records.
Book a meetingFramework-Ready Sprint
A concentrated sprint for urgent PQQ, Constructionline, insurer, or main-contractor evidence demands.
Book a meetingReady before the next scrutiny event.
Start with the smallest useful review, then decide whether the wider proof model needs fixing.