UK Critical Third Parties Exposure Mapper

Map your material and important business services onto the four legal entities designated as UK Critical Third Parties (CTPs) with effect from 13 July 2026, split which duties sit with the CTP versus which stay with your firm, and flag provider concentration and indirect chain exposure through sub-outsourcing.

⚠ This tool encodes HM Treasury's 13 Jul 2026 CTP designation and the PRA PS16/24 / FCA PS24/16 Fundamental Rules per the pinned clause snapshot below. Only the four named legal entities are designated; other entities of the same corporate group are not covered by legal-entity-exact matching. The Treasury may designate further providers over time - this tool does not track future designations automatically.

UK CTP PS16/24 Zero PII Client-Side

Scope & reliance: 🔒 All inputs are processed locally in your browser. No data is transmitted. Do not enter real personal data - use synthetic or anonymised service names only. Rules cited from research/clause-snapshots/HMT-PRA-CTP-designation-2026-08-21.excerpt.md (refs D1–D4). Provider-name matching is exact-string against the four designated legal entities; it is not a substitute for your firm's own contractual due diligence. Deterministic logic · no inference · zero PII · CC BY 4.0.

Material / Important Business Services (clause D1, D4)

Provider: type the supplier's legal entity name. An exact match to one of the four designated CTPs is flagged ON-DESIGNATED-CTP. A partial match (e.g. a reseller or non-UK group entity containing "AWS", "Amazon", "Google", "Microsoft", "Azure", or "Oracle") is flagged INDIRECT for manual chain review, per legal-entity-exact matching.

Service Name	Provider (legal entity name)	Substitutability	RTO (hrs)