Skip to content

Clients

Who we work with, and what they were up against

Described by sector and by constraint. Client names and logos appear only where we hold written permission - which is the same standard we would hold a supplier of yours to.

In short

Cloudgap works with organisations in regulated and high-compliance environments across defence supply chain, central government, financial services, retail, media, healthtech, logistics and technology. Engagements are typically triggered by a certification requirement, an AI deployment, or an enterprise customer’s security review.

Client profiles

The constraint matters more than the logo

A logo tells you we worked with someone. The constraint tells you whether we have solved your problem before.

  • Defence and aerospace supply chain

    Assurance flows down from a prime, and the requirements are contractual rather than negotiable.

  • Central government and public sector

    Cyber Essentials is mandatory, supplier assurance is examined, and the estate is large and heterogeneous.

  • Financial services and payments

    DORA has applied since January 2025, and third-party oversight is directly examinable.

  • Retail and luxury e-commerce

    High transaction volume, PCI DSS scope that grows quietly, and a brand that cannot absorb an incident.

  • Media and broadcast

    Continuous availability during live events, and a large third-party production supply chain.

  • Healthtech

    Special category data, AI in clinical or triage pathways, and DPIA obligations that bite before deployment.

  • Technology scale-ups

    Enterprise customers demanding governance the company does not yet have headcount for.

  • Logistics and critical infrastructure

    Operational technology alongside IT, and an aggregate supplier risk nobody has mapped.

Named references

Why there are no logos on this page

Using a client’s name and mark as a security reference without their written agreement is a contractual and trademark exposure, and in some sectors a confidentiality breach. We would raise it if we found it in your supply chain, so we do not do it here. The work below is described by sector and by the constraint that made it hard, which tells you more than a logo does anyway.

  • What we will say

    The sector, the constraint, and what the engagement had to achieve.

  • What we will not

    A client's name or mark, until they have agreed to it in writing.

  • What you can have

    A direct reference call, arranged where the client has agreed.

In the meantime, we will arrange a direct reference call where the client has agreed to it. Ask for a reference.

Start

Three ways in, depending on how close the deadline is.

Or just email a human: hello@cloudgap.ai

We reply within24 hours