Peninsula

HR & People United Kingdom Website Reviewed Sept. 22, 2026

UK provider of outsourced HR, employment law and health & safety advice, documentation and software for small and medium-sized employers.

Report an issue with this profile

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO/IEC 27001:2022 A-LIGN Compliance and Security, Inc. Cert ISMS-PE-031725, Peninsula Business Services Group Ltd, with ISO 27017:2015 and 27018:2025 controls. Covers employment law advisory, HR/H&S systems, SaaS, occupational health/EAP and tax consultancy across 7 UK/Ireland sites. July 24, 2026 April 27, 2029 Current
ISO 45001:2018 BSI Assurance UK Limited Cert OHS 827117, Peninsula Business Services Group Limited. Occupational health and safety. March 3, 2020 March 4, 2029 Current
Cyber Essentials Plus Not stated by vendor Claimed on Peninsula’s GDPR compliance statement; no certifying body, date or certificate published. — — Current

Compliance Frameworks

ISO/IEC 27001:2022
Full
A-LIGN certificate ISMS-PE-031725 valid to 27 Apr 2029, with ISO 27017 and 27018 controls; accreditation body not named on the certificate.
Cyber Essentials
Partial
Cyber Essentials Plus claimed on the GDPR statement with no certificate or date.
GDPR 2016/679
Full
DPO appointed ([email protected]); ICO registration Z6085670. No public DPA template — processing terms sit in product T&Cs.

Name-collision warning

**peninsula360.com belongs to Peninsula Petroleum S.L. / Peninsula Petroleum Ltd** (marine bunkering, Spain/Gibraltar) — an entirely unrelated company. Its Bureau Veritas ISO 9001, 14001 and 45001 certificates must not be attributed to Peninsula Business Services.

Also note: the earlier ISO 27001 certificate filename contains "UKAS", but **UKAS is not named anywhere on the certificate itself** — no accreditation body should be recorded.

Croner is part of the same group (see its entry); Croner has no certificate of its own and sits under Peninsula’s ISO 27001 scope.

Assess Peninsula in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register