Crunch

Finance & Payments United Kingdom Website Reviewed Sept. 22, 2026

Online accounting software combined with chartered certified accountant support for UK freelancers, contractors and small businesses.

Report an issue with this profile

Compliance Frameworks

GDPR 2016/679
Partial
Named data-protection contact published; no ICO registration number and no DPA template.

Contact & Responsible Disclosure

  • Responsible Disclosure View policy ↗
  • Bug Bounty Platform None — swag and hall of fame only

Assurance position

**No ISO 27001, Cyber Essentials or SOC 2 claim anywhere on crunch.co.uk** (homepage, privacy policy and disclosure page checked; /security returns 404). The privacy policy describes encryption and firewalls but claims no third-party certification. Professional-body affiliations (ACCA, AAT, ICAEW) and "HMRC-recognised / MTD compatible" are not security certifications.

Crunch does publish a **Responsible Disclosure policy** — reports go via a Google Form rather than an email address. In scope: accounts, my, api, oauth, public-api.crunch.co.uk and the mobile apps.

Legal entity E-Crunch Limited, company 06014477. The homepage cites **FCA reference 911589**; an FCA Register entry for E-Crunch Ltd exists but the permission type could not be confirmed — check the Register before relying on it.

Assess Crunch in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register