Modern Slavery Statement.

About Penz Ltd

Penz Ltd, trading as ThePenz, is a London-based cybersecurity, governance, risk and compliance consultancy. We deliver advisory and implementation services to regulated UK and EU enterprises, principally in financial services, healthcare technology, software-as-a-service and the public sector.

Our commitment

We are committed to ensuring that there is no modern slavery or human trafficking — including forced labour, bonded labour, child labour, and human trafficking — in any part of our business or our supply chain. We expect the same commitment from those we engage with.

Our supply chain

Our supply chain is small and predominantly UK-based. It comprises:

• Cloud and digital infrastructure providers (Microsoft Azure, Google Workspace, Anthropic, etc.)
• Professional services suppliers including legal, accounting, audit, and insurance providers
• Office and operational service providers (utilities, telecommunications, training)
• Independent specialist subcontractors engaged occasionally for specific delivery roles

The risk of modern slavery occurring within our direct workforce is assessed as low, given that our staff are predominantly senior cybersecurity professionals working in skilled, well-remunerated roles in the United Kingdom.

The principal risks within our wider supply chain relate to second-tier suppliers in the cleaning, hardware manufacturing, and certain technology hardware supply chains.

Our policies and practices

To address these risks and our wider commitment, we maintain the following:

• Recruitment standards — all team members are recruited through legitimate channels with right-to-work checks and full reference verification
• Fair pay — we pay all staff at or above the Real Living Wage, and the rates we charge subcontractors enable them to pay their own staff fairly
• Supplier due diligence — material suppliers are reviewed for ethical and modern-slavery posture as part of our procurement process
• Whistleblowing — we operate a whistleblowing channel via hello@thepenz.co.uk, allowing concerns to be raised confidentially
• Awareness — staff complete induction training that covers modern slavery indicators and reporting

Effectiveness and ongoing improvement

We review the effectiveness of these measures annually as part of our internal management review. We are not aware of any actual or suspected incidents of modern slavery within our business or supply chain in the period covered by this statement.

As we grow, we will further formalise our supplier assurance processes, including periodic supplier attestation against the principles of the Modern Slavery Act and CIPS guidance.

Approval

This statement has been approved by the Board of Directors of Penz Ltd and will be reviewed and updated annually.