Supplier oversight for FCA-regulated firms
Material third party reporting takes effect on 18 March 2027, and the first annual register reflects the arrangements a firm holds at 31 December 2026. Quillion is the system of record that makes a regional broker or MGA register-ready, and keeps it that way afterwards.
Core from £275 a month. Unlimited users in every band. Prices exclude VAT.
The problem
A supervisor picks an arrangement that is not on the register and asks how it got left off. The judgement was made eighteen months ago by somebody who has since left, and the working is in an email thread.
A supplier let its cyber cover lapse in March. The spreadsheet still shows it as held, because a spreadsheet has no diary and nobody owns the row.
A provider goes into administration and you learn it on a Tuesday morning, at the same time as everybody else, with no exit plan written and no substitute identified.
What Quillion does
Each module keeps the evidence attached to the judgement it supports, so the answer and the working are found together.
Every arrangement the firm holds, with the materiality tests walked question by question. The engine proposes an outcome and a tier with reasons that cite the rule; the assessor may record something else, with a reason, on the record.
Every materiality call has its working on file.
Financial standing, sanctions screening and information security assessed once per supplier and inherited by every arrangement. Onboarding, continuity and data protection per arrangement. Evidence attaches to the answer it supports.
Assess a supplier once, not once per contract.
A SYSC 8 clause checklist against each contract, and a gap report across the whole estate that tells you which clauses you are missing and where.
One gap report across the whole estate.
Document expiries, diligence validity, review dates and contract ends become outstanding work on the day they fall due.
Nobody has to remember to look.
The stressed and the unstressed case asked separately, on the same four-eyes lifecycle as everything else.
A document you could hand to a supervisor, rather than an intention.
Register readiness, work awaiting approval, proposals the assessor overrode and everything needing attention, tier 1 first.
It prints, because board packs are read on paper.
Why firms use it
An approver who is not the assessor signs each assessment off, and from that moment the version is immutable. When a supervisor asks how a decision was reached, the reasons, the rule and the sign-off are on the record.
One daily pass turns every date the firm has committed to into work waiting for somebody, ordered by tier. A supplier entering administration surfaces from Companies House on the supplier, on the list and on the arrangement.
The annual register is generated in the aligned FCA, PRA and Bank of England template, with a readiness report naming every field the template would reject before you see it rejected.
Users are unlimited in every band, and a read-only role for the board and internal audit costs nothing. Oversight stops being one person's spreadsheet.
How it works
Names, numbers and status come from the Companies House lookup rather than from typing.
The questionnaire walks the FG26/4 tests. An approver who is not the assessor signs it off, and a later change creates a new version that supersedes the old one.
A question that requires a certificate will not submit without one, and the expiry date goes into the diary as it is attached.
The checklist shows what SYSC 8 expects a contract to contain and what your contracts actually say.
One daily pass turns every date the firm has committed to into work waiting for somebody, ordered by tier.
Your firm submits it through FCA RegData. We do not file anything on your behalf, and the submission stays yours.
For brokers and MGAs · included in every band
Insurer security is a different question from third-party oversight, and it is the one a network or an insurer partner asks a broker about first.
For an MGA the same module reads as capacity security and the section is called Capacity. Markets is kept deliberately apart from the third-party register, and a test proves the register export is identical with and without it.
Ratings, solvency, regulatory standing, track record, and the enhanced questions an unrated market needs. The product ships a sensible default policy and your firm makes it yours.
A dated, frozen list of approved and conditional markets with the conditions shown, generated from the record rather than maintained as a document nobody dates.
Premium placed per market against the firm’s stated GWP: the top ten, anything above your own threshold, and what sits with unrated, conditional or declined markets.
Our own oversight pack
The pack we would tell you to demand of a material third party is the pack we owe you about us, including the parts that are not finished.
The architecture assumes UK-hosted data and UK-hosted backups. The hosting contract is not signed and the provider is not selected. You will have the provider, the region and the subprocessor list in writing before you commit to anything.
Every change writes actor, action, entity and the before and after. Nothing updates or deletes an audit row in any code path, including migrations and our own admin tooling. Administrators export the whole log as CSV whenever they want it.
Our staff hold no access to any firm’s business data. The exception is a support grant your administrator approves: time-boxed, reasoned in words you read, shown at the top of every screen for as long as it lasts, and revocable by you at any moment.
An administrator can export every record the firm holds and the full audit log without asking us for anything. Leaving is a button, not a negotiation.
Pricing
And a conversation for anything larger. Bands are counted on material and tier 1–2 arrangements, because those are the ones that carry the work.
Up to 15 material or tier 1–2 arrangements
£2,970per year
Saves £330 against monthly billing
£275per month
Rolling monthly arrangement
Up to 40 material or tier 1–2 arrangements
£7,560per year
Saves £840 against monthly billing
£700per month
Rolling monthly arrangement
About 40 arrangements and above: multiple FRNs, consolidators and networks, insurers
Multi-entity structures are priced per group rather than per seat. How many entities share a register, and how much of it they share, is what drives the work.
Prices exclude VAT. Annual billing saves 10%. Monthly is a rolling arrangement. Going over your band never locks reads or exports; we will talk to you about the next one. Pricing is indicative ahead of general availability.
Design partners, autumn 2026
We are taking a small cohort of firms into the build. The aim is narrow: to have your register finished and defensible before the first submission window opens, and to shape what gets built next while it can still be shaped.
Book a design partner conversation