UPS

Other United States Website Reviewed Sept. 22, 2026

Global package delivery and supply chain logistics company providing domestic and international express, freight and contract logistics.

Report an issue with this profile

Certifications & Accreditations

Certification Certifying Body Scope Achieved Expiry Status
ISO 9001 Not stated by vendor UPS Healthcare states "our facilities maintain local regulatory licences in addition to ISO 13485 and ISO 9001 certifications". No version, body, number, dates or named legal entity — and no UK entity established. — — Current
ISO 13485 Not stated by vendor Same UPS Healthcare statement; global healthcare network, not a UK entity. — — Current

Compliance Frameworks

ISO 9001:2015
Partial
The only ISO claim is an unattributed statement about "our facilities" across a global healthcare network — it does not establish that any UK UPS entity holds the certificate.
GDPR 2016/679
Partial
Group-wide Binding Corporate Rules and standard contractual clauses published. No DPO named, no DPO contact, no ICO registration found and no customer DPA published.

Weakest documented vendor in this group

No DPO, **no published ICO registration** (register searches for "United Parcel Service" and "UPS Limited" returned nothing), **no security contact, no vulnerability disclosure programme and no security.txt**, and the only ISO claim is an unattributed global-facilities statement on a healthcare page.

ISO 14001, ISO 45001, ISO 50001, ISO 27001 and Cyber Essentials: no public evidence found. The UPS sustainability pages state no ISO certifications.

The UK controller is not named inline in the privacy notice — it refers to a separate "UPS Data Controllers" PDF list.

Assess UPS in your own vendor risk programme

SnapGRC lets you send security questionnaires, track DPA status, manage sub-processors, and maintain a supplier risk register — all audit-ready.

Supplier Management Free Risk Register