How the Trustmark Directory works
Where the listings come from, how they are ordered and what each status means. The Directory shows statuses as at 14/11/2026.
Where the listings come from
Assurix sets each provider’s status from the Assurix platform. An Assurix Trusted or On the Journey status has an expiry date. Once it passes, the provider leaves that status at the next update.
Towns, sectors, services, certificates, founding year and staff numbers are what each provider lists. A provider’s description is labelled as its own words. Assurix hasn’t checked any of these.
Years trading come from the company’s incorporation date at Companies House. For providers working with Assurix, a profile can also say “Company active” and “accounts up to date”, with the date Assurix last read the register. Each shows only when it is true, and both are hidden once that date is more than 90 days old.
The Not yet verified listings come from Assurix’s own list of UK IT providers.
How each list is ordered
- Directory home
- One section per status, in alphabetical order within each.
- Region, town and sector pages
- Grouped by status, in alphabetical order within each, so every Assurix Trusted MSP is shown equally.
- Postcode or town search
- Status first, then distance.
- Search by provider name
- Status first, then name.
Reviews and payments play no part in the order. Assurix Trusted and On the Journey providers are Assurix customers whose status Assurix checks, which is why they come first. Committed providers have signed up with a start date booked.
A distance is measured from the middle of your postcode area or town to the provider’s listed location, often its registered office, so it is a guide. Your postcode stays on your device. Only the first half, such as LS1, goes in the address bar.
How enquiries reach a provider
Assurix Trusted, On the Journey and Committed providers take enquiries through the Directory. Assurix passes each one to the provider you chose, with your consent. Not yet verified providers don’t take enquiries through the Directory.
What each status means
- Assurix Trusted MSP
- Independently assessed by Assurix on 59 controls across security and service. It passes all of them, with live evidence from its own tools. A failure left unfixed for 30 days suspends the Trustmark publicly. The controls include sign-in and administrator accounts, backups and recovery, monitoring and incident response, escalation, reporting and what the contract commits to. See the 59 controls.
- On the Journey
- This provider is on the journey to becoming an Assurix Trusted MSP. It has connected its tools, and Assurix is collecting evidence against the 59 controls. It doesn’t hold the Trustmark yet.
- Committed
- Signed up to work towards the Assurix Trustmark, with a start date booked. It doesn’t hold the Trustmark yet.
- Not yet verified
- Listed, but Assurix hasn’t assessed it. Ask what evidence it can show you. It doesn’t mean they do a poor job.
No status covers price, or whether a provider suits your business. Ask each provider what it can show you, and compare quotes. The NCSC’s guidance on choosing a managed service provider lists the questions to ask.
Correct a listing
Use “Report a correction” on the listing’s page to say what is wrong. Statuses, names and websites come from the Assurix platform, so Assurix corrects them there. Companies House details are checked against the register.
The data file
/directory/data.json lists every Assurix Trusted, On the Journey and Committed provider: name, status, town, region, listing address, start date where known, status expiry date, and website for Assurix Trusted MSPs. It is dated, and it changes when the Directory does. Reuse it under CC BY 4.0, crediting “Assurix Trustmark Directory”.