{
  "version": "2026-10-03",
  "organisation": {
    "legalName": "Heimdell Tech Ai Ltd",
    "tradingName": "Heimdell Tech Ai",
    "companiesHouse": "16478408",
    "icoRegistration": "ZC079121",
    "duns": "233836391",
    "sicCodes": [
      "62012",
      "62020"
    ],
    "sicDescriptions": [
      "Business and domestic software development",
      "Information technology consultancy activities"
    ],
    "foundingDate": "2025-05-28",
    "founder": "Andrew James-Smith",
    "address": {
      "streetAddress": "11 Lower Croft",
      "addressLocality": "Preston",
      "addressRegion": "Lancashire",
      "postalCode": "PR1 9DJ",
      "addressCountry": "GB"
    },
    "email": "contact@heimdell-tech-ai.co.uk",
    "openingHours": "Mon–Fri 08:30–17:30, Sat 09:30–15:00",
    "website": "https://heimdell-tech-ai.co.uk/",
    "description": "UK software development and IT consultancy firm (SIC 62012, 62020) in Preston, Lancashire. Helps businesses get ready for AI agents (A2A, AP2, UCP, MCP and Knowledge Catalog), builds custom software, apps, client portals, websites and AI systems, and also provides managed third-party verification (TPV) and compliance services for telecom resellers, brokers and D2D sales teams.",
    "member": {
      "name": "RemoteAbility CIC",
      "url": "https://remoteability.org.uk",
      "description": "Community Interest Company providing employment pathways for disabled and neurodivergent professionals through Access to Work funded placements."
    }
  },
  "serviceAreas": [
    {
      "name": "United Kingdom",
      "coverage": "national",
      "notes": "England, Scotland, Wales and Northern Ireland. Based in Preston, Lancashire."
    }
  ],
  "expertise": [
    "AI agent readiness",
    "Agent2Agent (A2A) protocol",
    "Agent Payments Protocol (AP2)",
    "Universal Commerce Protocol (UCP)",
    "Model Context Protocol (MCP)",
    "Google Cloud Knowledge Catalog",
    "Structured data (schema.org) and llms.txt",
    "Third-Party Verification (TPV) for telecom sales",
    "Commission clawback prevention",
    "PECR 2003 compliance",
    "Data (Use and Access) Act 2025 (DUAA 2025)",
    "UK GDPR",
    "Ofcom General Conditions (including GC C1 fraud prevention)",
    "Consumer Contracts Regulations 2013",
    "ICO audit preparation and SAR response",
    "CRM workflow design and sales systems automation",
    "Compliance audit-trail software"
  ],
  "products": {
    "flagship": {
      "name": "AI Agent Readiness",
      "url": "https://heimdell-tech-ai.co.uk/ai-agent-readiness.html",
      "description": "A free agent-readiness scanner plus implementation of the standards AI agents use (A2A, AP2, UCP, MCP) and the data foundations they rely on, for UK businesses."
    },
    "other": [
      {
        "name": "Verified Agreements & TPV Platform",
        "url": "https://heimdell-tech-ai.co.uk/third-party-verification.html",
        "description": "Tamper-evident, cryptographically secured records of what terms were presented, who acknowledged them, and which agreement version applied — for subscriptions, sales, payments and contracts. Powers the telecom TPV service offered on this site."
      },
      {
        "name": "REVdating",
        "description": "A dating app for UK motorcycle riders."
      },
      {
        "name": "RoundFlow",
        "description": "Round, route and payment management for service businesses."
      },
      {
        "name": "E-Responder",
        "description": "A FREC3 emergency response platform for emergency response and healthcare teams."
      },
      {
        "name": "CTSA",
        "description": "Counter-Terrorism Security Audits to help venues implement Martyn's Law."
      }
    ]
  },
  "services": [
    {
      "id": "ai-agent-readiness",
      "name": "AI Agent Readiness",
      "summary": "A free scan and then fixes to the structured data, product information and policies AI agents rely on to find, trust and buy from a business.",
      "pricingModel": "Review from £500; implementing a standard from £1,500 to £4,000. The agent-readiness scan is free.",
      "url": "https://heimdell-tech-ai.co.uk/ai-agent-readiness.html"
    },
    {
      "id": "a2a-implementation",
      "name": "A2A (Agent2Agent) Protocol Implementation",
      "summary": "Agent Card, secure endpoint and booking integration so AI agents can discover and book a business.",
      "pricingModel": "From £2,500, quoted per project. The agent-readiness scan is free.",
      "url": "https://heimdell-tech-ai.co.uk/a2a-protocol-implementation.html"
    },
    {
      "id": "ap2-agent-payments",
      "name": "AP2 (Agent Payments Protocol) Implementation",
      "summary": "Accept payments from AI agents with verifiable proof of what each customer authorised.",
      "pricingModel": "From £4,000, quoted per project. The agent-readiness scan is free.",
      "url": "https://heimdell-tech-ai.co.uk/ap2-agent-payments.html"
    },
    {
      "id": "ucp-readiness",
      "name": "UCP (Universal Commerce Protocol) Readiness",
      "summary": "Profile check, product data quality and checkout readiness so AI shopping agents can find and buy from an online shop.",
      "pricingModel": "From £1,500, quoted per project. The agent-readiness scan is free.",
      "url": "https://heimdell-tech-ai.co.uk/ucp-universal-commerce-protocol.html"
    },
    {
      "id": "mcp-servers",
      "name": "MCP (Model Context Protocol) Servers",
      "summary": "Scoped, permissioned MCP servers that let AI assistants use a business's booking, product or knowledge systems safely.",
      "pricingModel": "From £2,000, quoted per project. The agent-readiness scan is free.",
      "url": "https://heimdell-tech-ai.co.uk/mcp-model-context-protocol.html"
    },
    {
      "id": "knowledge-catalog-readiness",
      "name": "Knowledge Catalog and Business Data Readiness",
      "summary": "Organising, describing and governing business data for Google Cloud Knowledge Catalog and AI agent use.",
      "pricingModel": "From £1,500, quoted per project. The agent-readiness scan is free.",
      "url": "https://heimdell-tech-ai.co.uk/knowledge-catalog-readiness.html"
    },
    {
      "id": "tpv-verification",
      "name": "Third-Party Verification (TPV)",
      "summary": "Independent post-sale verification calls confirming customer identity, contract terms, cooling-off rights and Direct Debit authority within 24 hours of a sale, producing an audit-ready compliance certificate.",
      "pricingModel": "Pay-as-you-go credits. £20/100 credits, £90/500 credits, £320/2,000 credits. Phone verification = 5 credits (80p–£1/call). Link verification = 1 credit. No subscription, no setup fee.",
      "url": "https://heimdell-tech-ai.co.uk/third-party-verification.html"
    },
    {
      "id": "tpv-system-capabilities",
      "name": "TPV System Capabilities",
      "summary": "The underlying software/AI platform behind the managed TPV service: automated Ofcom GC auditing, fraud/AIT detection, regulatory risk scoring, compliance document generation.",
      "pricingModel": "Same pay-as-you-go credit model as TPV verification, from 80p per call.",
      "url": "https://heimdell-tech-ai.co.uk/system-capabilities.html"
    },
    {
      "id": "commission-clawback-audit",
      "name": "Commission Clawback Audit",
      "summary": "A free 15-minute audit identifying GC C1 (Ofcom General Conditions) vulnerabilities and quantifying revenue leakage from commission clawbacks.",
      "pricingModel": "Free.",
      "url": "https://heimdell-tech-ai.co.uk/commission-clawback-audit.html"
    },
    {
      "id": "regulatory-risk-assessment",
      "name": "Regulatory Risk Assessment",
      "summary": "A structured review of business processes against PECR 2003, DUAA 2025 and UK GDPR to identify compliance gaps before they become ICO fines or enforcement action.",
      "pricingModel": "From £500.",
      "url": "https://heimdell-tech-ai.co.uk/regulatory-risk-assessment.html"
    },
    {
      "id": "gdpr-ico-compliance-audit",
      "name": "GDPR & ICO Compliance Audit",
      "summary": "An ICO-aligned assessment of data protection practices covering UK GDPR, PECR 2003, DUAA 2025 readiness and SAR (Subject Access Request) response preparation.",
      "pricingModel": "From £750.",
      "url": "https://heimdell-tech-ai.co.uk/ico-gdpr-compliance-audit.html"
    },
    {
      "id": "compliance-protocol-setup",
      "name": "Compliance Protocol Setup",
      "summary": "Initial deployment of The Telecom Verification Protocol: voice-log infrastructure, identity verification, CRM audit locks and automated provider-ready compliance certificates, typically 2–3 weeks.",
      "pricingModel": "From £1,500 one-off project fee.",
      "url": "https://heimdell-tech-ai.co.uk/compliance-protocol-setup.html"
    },
    {
      "id": "compliance-protocol-implementation",
      "name": "Compliance Protocol Implementation",
      "summary": "A larger, end-to-end rollout of the compliance protocol: PECR 2003 compliance, DUAA 2025 readiness, ICO audit preparation, CRM integration, automated evidence generation and operational handover.",
      "pricingModel": "From £3,000 one-off project fee.",
      "url": "https://heimdell-tech-ai.co.uk/compliance-protocol-implementation.html"
    },
    {
      "id": "systems-architecture",
      "name": "Systems Architecture & Fractional Ops",
      "summary": "CRM automation, compliance workflow design, KPI dashboards and provider audit infrastructure for reseller agencies scaling beyond 100 monthly sign-ups.",
      "pricingModel": "From £800/day.",
      "url": "https://heimdell-tech-ai.co.uk/systems-architecture.html"
    },
    {
      "id": "provider-audit-preparation",
      "name": "Provider Audit Preparation",
      "summary": "Getting audit-ready for Virgin Media, O2, Sky and other provider reviews: compliance documentation, verification records and sales evidence preparation.",
      "pricingModel": "From £500.",
      "url": "https://heimdell-tech-ai.co.uk/services/telecom-provider-audit-preparation.html"
    },
    {
      "id": "high-volume-partners",
      "name": "High-Volume Partner Program",
      "summary": "For call centres and large telecom brokerages processing 10,000+ deals/month: guaranteed 24-business-hour verification turnaround, bulk credit pricing, no need to hire additional compliance staff.",
      "pricingModel": "Bulk credit pricing from £0.16/credit at volume.",
      "url": "https://heimdell-tech-ai.co.uk/high-volume-partners.html"
    },
    {
      "id": "channel-vendor-compliance",
      "name": "Channel & Vendor Compliance",
      "summary": "Sold to telecom networks/vendors to police their own reseller channel: independent verification catching reseller mis-selling before it reaches the network's billing system.",
      "pricingModel": "Custom quote per network.",
      "url": "https://heimdell-tech-ai.co.uk/telecom-vendors.html"
    },
    {
      "id": "website-upgrades",
      "name": "Website upgrades for SEO, AI search and AI agents",
      "summary": "Fast, SEO-structured website upgrades: structured data, llms.txt, speed and clear pricing, so Google, ChatGPT and AI agents understand your business.",
      "pricingModel": "Quoted per project. See https://heimdell-tech-ai.co.uk/pricing.html for current starting prices.",
      "url": "https://heimdell-tech-ai.co.uk/website-upgrades.html"
    }
  ],
  "policies": [
    {
      "id": "privacy-policy",
      "title": "Privacy Policy",
      "url": "https://heimdell-tech-ai.co.uk/privacy-policy.html"
    },
    {
      "id": "terms-of-service",
      "title": "Terms of Service",
      "url": "https://heimdell-tech-ai.co.uk/terms-of-service.html"
    }
  ],
  "reviewsAndTestimonials": {
    "status": "none_published",
    "note": "No verified customer reviews or testimonials are published yet. This section will be populated once real, attributable reviews exist — not before."
  },
  "callTranscriptInsights": {
    "status": "none_published",
    "note": "No call transcript excerpts are published yet. This section will be populated with real, anonymised excerpts if and when the business chooses to share them."
  },
  "faqs": [
    {
      "id": "pricing-overview",
      "question": "How much does Heimdell Tech Ai charge?",
      "answer": "AI agent-readiness scan: free. AI agent readiness review: from £500. UCP readiness and Knowledge Catalog readiness: from £1,500. Website upgrades: from £1,500. MCP server: from £2,000. A2A implementation: from £2,500. AP2 agent payments: from £4,000. Commission clawback audit (15 minutes): free. TPV phone verification: from 80p per verification, paid as credits (£20 for 100 credits, £90 for 500, £320 for 2,000; a phone verification uses 5 credits, a link verification 1; no subscription, setup fee or minimum). Provider audit preparation and regulatory risk assessment: from £500. GDPR and ICO compliance audit: from £750. Compliance protocol setup: from £1,500. Compliance protocol implementation: from £3,000. Systems architecture and fractional ops: from £800 per day. High-volume partner programme: from £0.16 per credit. Channel and vendor compliance: custom quote. These are starting prices; every project is scoped and quoted after a free call.",
      "tags": [
        "pricing",
        "prices",
        "cost",
        "quote",
        "services"
      ],
      "source": "https://heimdell-tech-ai.co.uk/pricing.html",
      "aliases": [
        "what are your prices",
        "pricing",
        "how much do you charge",
        "starting prices",
        "price list",
        "how much does it cost",
        "what do you charge"
      ]
    },
    {
      "id": "pricing-machine-readable",
      "question": "Is there a machine-readable price list?",
      "answer": "Yes. Heimdell Tech Ai publishes its services and starting prices as JSON at https://heimdell-tech-ai.co.uk/pricing.json, and as structured data on the homepage.",
      "tags": [
        "pricing",
        "json",
        "feed",
        "api"
      ],
      "source": "https://heimdell-tech-ai.co.uk/pricing.json",
      "aliases": [
        "pricing json",
        "price feed",
        "pricing api",
        "prices for AI agents"
      ]
    },
    {
      "id": "pricing-a2a",
      "question": "How much does an A2A implementation cost?",
      "answer": "An A2A implementation starts from £2,500. Every project is scoped and quoted individually after a free call, so the final price depends on your systems and what you need. Get a quote at heimdell-tech-ai.co.uk/contact.html.",
      "tags": [
        "pricing",
        "ai-agents",
        "quote"
      ],
      "source": "https://heimdell-tech-ai.co.uk/pricing.html",
      "aliases": [
        "cost of A2A",
        "A2A price",
        "agent2agent pricing"
      ]
    },
    {
      "id": "pricing-ap2",
      "question": "How much does AP2 agent payments cost?",
      "answer": "AP2 agent payments start from £4,000. Every project is scoped and quoted individually after a free call, so the final price depends on your systems and what you need. Get a quote at heimdell-tech-ai.co.uk/contact.html.",
      "tags": [
        "pricing",
        "ai-agents",
        "quote"
      ],
      "source": "https://heimdell-tech-ai.co.uk/pricing.html",
      "aliases": [
        "cost of AP2",
        "AP2 price",
        "agent payments pricing"
      ]
    },
    {
      "id": "pricing-ucp",
      "question": "How much does UCP readiness cost?",
      "answer": "UCP readiness starts from £1,500. Every project is scoped and quoted individually after a free call, so the final price depends on your systems and what you need. Get a quote at heimdell-tech-ai.co.uk/contact.html.",
      "tags": [
        "pricing",
        "ai-agents",
        "quote"
      ],
      "source": "https://heimdell-tech-ai.co.uk/pricing.html",
      "aliases": [
        "cost of UCP",
        "UCP price",
        "universal commerce protocol pricing"
      ]
    },
    {
      "id": "pricing-mcp",
      "question": "How much does an MCP server cost?",
      "answer": "An MCP server starts from £2,000. Every project is scoped and quoted individually after a free call, so the final price depends on your systems and what you need. Get a quote at heimdell-tech-ai.co.uk/contact.html.",
      "tags": [
        "pricing",
        "ai-agents",
        "quote"
      ],
      "source": "https://heimdell-tech-ai.co.uk/pricing.html",
      "aliases": [
        "cost of MCP",
        "MCP price",
        "model context protocol pricing"
      ]
    },
    {
      "id": "pricing-knowledge-catalog",
      "question": "How much does Knowledge Catalog readiness cost?",
      "answer": "Knowledge Catalog and business data readiness starts from £1,500. Every project is scoped and quoted individually after a free call, so the final price depends on your systems and what you need. Get a quote at heimdell-tech-ai.co.uk/contact.html.",
      "tags": [
        "pricing",
        "ai-agents",
        "quote"
      ],
      "source": "https://heimdell-tech-ai.co.uk/pricing.html",
      "aliases": [
        "cost of knowledge catalog",
        "knowledge catalog price"
      ]
    },
    {
      "id": "pricing-website-upgrades",
      "question": "How much does a website upgrade cost?",
      "answer": "Website upgrades for SEO, AI search and AI agents start from £1,500. Every project is scoped and quoted individually after a free call, so the final price depends on your systems and what you need. Get a quote at heimdell-tech-ai.co.uk/contact.html.",
      "tags": [
        "pricing",
        "ai-agents",
        "quote"
      ],
      "source": "https://heimdell-tech-ai.co.uk/pricing.html",
      "aliases": [
        "website upgrade price",
        "cost of website upgrades"
      ]
    },
    {
      "id": "pricing-readiness-review",
      "question": "How much does an AI agent readiness review cost?",
      "answer": "An AI agent readiness review starts from £500, and the scan itself is free. Every project is scoped and quoted individually after a free call, so the final price depends on your systems and what you need. Get a quote at heimdell-tech-ai.co.uk/contact.html.",
      "tags": [
        "pricing",
        "ai-agents",
        "quote"
      ],
      "source": "https://heimdell-tech-ai.co.uk/pricing.html",
      "aliases": [
        "agent readiness review price",
        "readiness review cost"
      ]
    },
    {
      "id": "heimdell-service-area-uk",
      "question": "Do you cover Scotland and Wales?",
      "answer": "Yes. Heimdell Tech Ai works with businesses across the whole United Kingdom: England, Scotland, Wales and Northern Ireland. It is based in Preston, Lancashire, and delivers its AI agent readiness, software and TPV compliance services remotely and nationwide.",
      "tags": [
        "service-area",
        "uk",
        "scotland",
        "wales",
        "northern-ireland",
        "england",
        "coverage"
      ],
      "source": "https://heimdell-tech-ai.co.uk/about.html",
      "aliases": [
        "where do you operate",
        "which areas do you cover",
        "do you work outside England",
        "are you UK wide",
        "service area"
      ]
    },
    {
      "id": "ai-agent-readiness-what-is-ai-agent-readiness",
      "question": "What is AI agent readiness?",
      "answer": "AI agent readiness means a business can be found, understood and transacted with by software acting for a customer, such as AI assistants and shopping agents. It covers accurate structured data, clear prices and policies, a simple way to book or buy, and support for open standards such as A2A, AP2, UCP and MCP. Heimdell Tech Ai helps UK businesses get there.",
      "tags": [
        "ai-agent-readiness",
        "ai-agents",
        "a2a",
        "ap2",
        "ucp",
        "mcp"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ai-agent-readiness.html",
      "aliases": [
        "what does agent ready mean",
        "make my business ready for AI agents",
        "AI agent ready business"
      ]
    },
    {
      "id": "ai-agent-readiness-free-scanner",
      "question": "Is there a free way to check how AI agents see my website?",
      "answer": "Yes. The free agent-readiness scanner on the Heimdell Tech Ai homepage scores a website out of 100, shows the most important fixes and can email the full report. It only reads publicly available pages.",
      "tags": [
        "ai-agent-readiness",
        "scanner",
        "free",
        "ai-agents"
      ],
      "source": "https://heimdell-tech-ai.co.uk/",
      "aliases": [
        "free scan",
        "website scanner",
        "agent readiness score",
        "check my website for AI agents"
      ]
    },
    {
      "id": "ai-agent-readiness-scanner-checks",
      "question": "What does the agent-readiness scanner check?",
      "answer": "It checks whether AI crawlers are blocked in robots.txt, whether there is a sitemap and an llms.txt file, schema.org structured data, whether product data is complete (price, currency, availability, image, identifier), whether policy pages state concrete terms, whether there is a clear booking or checkout path, and whether the site publishes an A2A Agent Card or a UCP profile.",
      "tags": [
        "ai-agent-readiness",
        "scanner",
        "structured-data",
        "llms-txt"
      ],
      "source": "https://heimdell-tech-ai.co.uk/"
    },
    {
      "id": "ai-agent-readiness-cost",
      "question": "How much does AI agent readiness cost?",
      "answer": "The scan is free. An AI agent readiness review starts from £500, and implementing a standard starts from £1,500 (UCP, Knowledge Catalog), £2,000 (MCP), £2,500 (A2A) or £4,000 (AP2). Every project is scoped and quoted individually after a free call, so the final price depends on your systems and what you need. A quote can be requested at heimdell-tech-ai.co.uk/contact.html.",
      "tags": [
        "ai-agent-readiness",
        "pricing",
        "quote"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ai-agent-readiness.html",
      "aliases": [
        "agent readiness price",
        "how much for A2A",
        "cost of AP2 implementation"
      ]
    },
    {
      "id": "ai-agent-readiness-guarantee",
      "question": "Can Heimdell Tech Ai guarantee more customers from AI agents?",
      "answer": "No, and nobody honestly can yet. Heimdell Tech Ai measures how AI assistants describe a business before and after the work and shows the difference.",
      "tags": [
        "ai-agent-readiness",
        "guarantee",
        "results"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ai-agent-readiness.html"
    },
    {
      "id": "ai-agent-readiness-standards-we-work-with",
      "question": "Which AI agent standards does Heimdell Tech Ai work with?",
      "answer": "A2A (Agent2Agent), AP2 (Agent Payments Protocol), UCP (Universal Commerce Protocol), MCP (Model Context Protocol) and Google Cloud Knowledge Catalog, together with the structured data and policy foundations they all rely on.",
      "tags": [
        "ai-agent-readiness",
        "a2a",
        "ap2",
        "ucp",
        "mcp",
        "knowledge-catalog"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ai-agent-readiness.html",
      "aliases": [
        "which protocols",
        "agent protocols you support",
        "supported standards"
      ]
    },
    {
      "id": "ai-agent-readiness-a2a-ap2-ucp-mcp-difference",
      "question": "What is the difference between A2A, AP2, UCP and MCP?",
      "answer": "A2A lets AI agents talk to each other and hand over tasks. AP2 covers how an agent is authorised to pay on a customer's behalf. UCP covers browsing a catalogue, managing a cart and checking out. MCP connects an AI assistant to tools and data. Knowledge Catalog organises and describes business data so agents can trust it. Most businesses need only one or two of these.",
      "tags": [
        "ai-agent-readiness",
        "a2a",
        "ap2",
        "ucp",
        "mcp",
        "knowledge-catalog",
        "comparison"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ai-agent-readiness.html",
      "aliases": [
        "A2A vs MCP",
        "UCP vs AP2",
        "compare agent protocols"
      ]
    },
    {
      "id": "ai-agent-readiness-do-i-need-all-standards",
      "question": "Do I need to support every AI agent standard?",
      "answer": "No. Most businesses should start with accurate structured data, clear prices and policies and a simple way to book or buy. Standards such as A2A, AP2 and UCP are added where they give a real benefit. Several are still changing, so the current specification is checked before anything is built.",
      "tags": [
        "ai-agent-readiness",
        "advice"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ai-agent-readiness.html"
    },
    {
      "id": "ai-agent-readiness-who-for",
      "question": "Who is AI agent readiness for?",
      "answer": "UK businesses that customers may find through AI assistants: online shops, hotels and restaurants, clinics and local services, and any business whose prices, availability or policies customers ask about.",
      "tags": [
        "ai-agent-readiness",
        "audience"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ai-agent-readiness.html"
    },
    {
      "id": "a2a-what-is-a2a",
      "question": "What is the A2A (Agent2Agent) protocol?",
      "answer": "A2A is an open standard that lets AI agents built by different vendors discover each other, exchange messages and hand over tasks. It was launched by Google in 2025, is hosted by the Linux Foundation, and reached version 1.0 in March 2026. Heimdell Tech Ai implements it for UK businesses, from the Agent Card to booking integration.",
      "tags": [
        "a2a",
        "agent2agent",
        "protocol"
      ],
      "source": "https://heimdell-tech-ai.co.uk/a2a-protocol-implementation.html",
      "aliases": [
        "agent to agent protocol",
        "A2A protocol",
        "Agent2Agent"
      ]
    },
    {
      "id": "a2a-agent-card",
      "question": "What is an A2A Agent Card?",
      "answer": "An Agent Card is a machine-readable description of what a business or agent can do and how to reach it, published on its own domain. Other agents read it to discover capabilities such as checking availability, requesting a quote or booking an appointment. Heimdell Tech Ai publishes its own at heimdell-tech-ai.co.uk/.well-known/agent-card.json.",
      "tags": [
        "a2a",
        "agent-card",
        "well-known"
      ],
      "source": "https://heimdell-tech-ai.co.uk/a2a-protocol-implementation.html",
      "aliases": [
        "agent card",
        "agent-card.json"
      ]
    },
    {
      "id": "a2a-replace-website",
      "question": "Does A2A replace my website?",
      "answer": "No. A2A sits alongside your website and booking system and gives AI agents a structured way in.",
      "tags": [
        "a2a",
        "website"
      ],
      "source": "https://heimdell-tech-ai.co.uk/a2a-protocol-implementation.html"
    },
    {
      "id": "ap2-what-is-ap2",
      "question": "What is AP2 (Agent Payments Protocol)?",
      "answer": "AP2 is an open protocol, created by Google and donated to the FIDO Alliance in April 2026, that lets an AI agent make a payment on a customer's behalf. It uses signed records of what the customer authorised, so every agent purchase has verifiable proof. Heimdell Tech Ai implements it for UK businesses.",
      "tags": [
        "ap2",
        "agent-payments",
        "protocol",
        "fido"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ap2-agent-payments.html",
      "aliases": [
        "agent payments protocol",
        "AP2 protocol",
        "AI agent payments",
        "how do AI agents pay for things",
        "can AI agents pay for things",
        "how AI agents pay",
        "agents paying"
      ]
    },
    {
      "id": "ap2-mandates",
      "question": "What is a mandate in AP2?",
      "answer": "A mandate is a signed record of what a customer has authorised an AI agent to do, such as what it may buy and any limits. Mandates give each agent purchase tamper-evident proof of authorisation.",
      "tags": [
        "ap2",
        "mandate",
        "authorisation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ap2-agent-payments.html",
      "aliases": [
        "AP2 mandates",
        "agent payment authorisation",
        "how does an AI agent get permission to spend"
      ]
    },
    {
      "id": "ap2-human-not-present",
      "question": "What is a 'human not present' payment in AP2?",
      "answer": "AP2 version 0.2, released in April 2026, added 'human not present' payments, where an agent completes a purchase on pre-authorised instructions without the customer being there, for example buying limited-release tickets the moment they go on sale.",
      "tags": [
        "ap2",
        "human-not-present",
        "payments"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ap2-agent-payments.html"
    },
    {
      "id": "ucp-what-is-ucp",
      "question": "What is the Universal Commerce Protocol (UCP)?",
      "answer": "UCP is an open standard announced by Google in January 2026 and co-developed with Shopify. It lets AI agents discover a merchant's products, understand what the merchant supports and complete a purchase inside a conversation. Merchants publish a profile, conventionally at /.well-known/ucp. Heimdell Tech Ai checks UCP profiles and the product data behind them.",
      "tags": [
        "ucp",
        "commerce",
        "protocol",
        "shopify"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ucp-universal-commerce-protocol.html",
      "aliases": [
        "universal commerce protocol",
        "UCP protocol",
        "agentic commerce",
        "how do AI agents buy from my shop",
        "AI shopping agents"
      ]
    },
    {
      "id": "ucp-shopify",
      "question": "Do I need to do anything for UCP if I use Shopify?",
      "answer": "Shopify stores can publish a UCP profile automatically, so there is often little protocol work to do. The bigger job is usually the quality of product data and the clarity of policies, which is what agents actually read.",
      "tags": [
        "ucp",
        "shopify"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ucp-universal-commerce-protocol.html"
    },
    {
      "id": "ucp-vs-ap2",
      "question": "Is UCP the same as AP2?",
      "answer": "No. UCP covers commerce: reading a catalogue, managing a cart and checking out. AP2 covers payments: how an agent is authorised to pay on a customer's behalf. They are designed to work together.",
      "tags": [
        "ucp",
        "ap2",
        "comparison"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ucp-universal-commerce-protocol.html"
    },
    {
      "id": "mcp-what-is-mcp",
      "question": "What is the Model Context Protocol (MCP)?",
      "answer": "MCP is an open standard for connecting AI assistants to tools and data. Anthropic introduced it in late 2024 and donated it to the Agentic AI Foundation, under the Linux Foundation, in December 2025. Heimdell Tech Ai designs and builds MCP servers that expose chosen tools to assistants with permissions the client controls.",
      "tags": [
        "mcp",
        "model-context-protocol",
        "protocol"
      ],
      "source": "https://heimdell-tech-ai.co.uk/mcp-model-context-protocol.html",
      "aliases": [
        "model context protocol",
        "MCP server",
        "connect AI to my systems"
      ]
    },
    {
      "id": "mcp-vs-a2a",
      "question": "How is MCP different from A2A?",
      "answer": "MCP connects an AI assistant to tools and data, such as a booking system. A2A connects AI agents to each other, so one agent can hand a task to another. They solve different problems and are often used together.",
      "tags": [
        "mcp",
        "a2a",
        "comparison"
      ],
      "source": "https://heimdell-tech-ai.co.uk/mcp-model-context-protocol.html"
    },
    {
      "id": "mcp-safety",
      "question": "Is it safe to let an AI assistant use my systems through MCP?",
      "answer": "It can be, if the connection is designed carefully. Heimdell Tech Ai exposes only the specific tools the client chooses, keeps them read-only unless told otherwise, requires approval for anything that changes data, and logs every request.",
      "tags": [
        "mcp",
        "security",
        "permissions"
      ],
      "source": "https://heimdell-tech-ai.co.uk/mcp-model-context-protocol.html"
    },
    {
      "id": "knowledge-catalog-what-is",
      "question": "What is Google Cloud Knowledge Catalog?",
      "answer": "Knowledge Catalog is Google Cloud's metadata management platform, formerly Dataplex Universal Catalog. It discovers data assets, organises them, and adds business context such as descriptions, glossaries, data quality and lineage so that people and AI agents can find and trust data. Heimdell Tech Ai helps businesses prepare their data for it and for AI agent use.",
      "tags": [
        "knowledge-catalog",
        "google-cloud",
        "data"
      ],
      "source": "https://heimdell-tech-ai.co.uk/knowledge-catalog-readiness.html",
      "aliases": [
        "Dataplex Universal Catalog",
        "knowledge catalogue",
        "google knowledge catalog"
      ]
    },
    {
      "id": "knowledge-catalog-dataplex",
      "question": "Is Knowledge Catalog the same as Dataplex?",
      "answer": "It is the renamed Dataplex Universal Catalog. Google renamed it in April 2026, and the API, command-line and permission names did not change.",
      "tags": [
        "knowledge-catalog",
        "dataplex"
      ],
      "source": "https://heimdell-tech-ai.co.uk/knowledge-catalog-readiness.html"
    },
    {
      "id": "knowledge-catalog-without-google-cloud",
      "question": "Do I need Google Cloud to make my business data agent-ready?",
      "answer": "No. The principle is the same on any platform: accurate, structured, well-described facts about your business that agents can read. Heimdell Tech Ai can build that foundation with or without Google Cloud, including structured data, an llms.txt guide and a curated knowledge base.",
      "tags": [
        "knowledge-catalog",
        "business-data",
        "structured-data"
      ],
      "source": "https://heimdell-tech-ai.co.uk/knowledge-catalog-readiness.html"
    },
    {
      "id": "heimdell-what-does-heimdell-do-agents",
      "question": "What does Heimdell Tech Ai do?",
      "answer": "Heimdell Tech Ai Ltd is a UK software development and IT consultancy in Preston, Lancashire. It helps businesses get ready for AI agents (A2A, AP2, UCP, MCP and Knowledge Catalog), builds custom software, apps, websites and AI systems, and also runs managed third-party verification (TPV) and compliance services for UK telecom sales teams.",
      "tags": [
        "company",
        "services",
        "ai-agent-readiness",
        "tpv"
      ],
      "source": "https://heimdell-tech-ai.co.uk/",
      "aliases": [
        "who is Heimdell",
        "what is Heimdell Tech Ai",
        "what services do you offer"
      ]
    },
    {
      "id": "heimdell-still-offers-tpv",
      "question": "Does Heimdell Tech Ai still offer third-party verification (TPV)?",
      "answer": "Yes. Heimdell Tech Ai still runs managed third-party verification for UK telecom resellers, brokers and sales teams, with audit-ready certificates from 80p per phone verification. Details are at heimdell-tech-ai.co.uk/tpv-commission-protection.html and /third-party-verification.html.",
      "tags": [
        "tpv",
        "third-party-verification",
        "services"
      ],
      "source": "https://heimdell-tech-ai.co.uk/tpv-commission-protection.html"
    },
    {
      "id": "third-party-verification-what-happens-if-a-customer-refuses-to-complete-the",
      "question": "What happens if a customer refuses to complete the verification call?",
      "answer": "If a customer refuses or hangs up before verification is complete, the sale is logged as unverified rather than confirmed — it isn't recorded as a pass. In practice this means the agent or provider is alerted immediately so the sale can be followed up, re-attempted, or withdrawn before it's treated as a confirmed order.",
      "tags": [
        "third-party-verification"
      ],
      "source": "https://heimdell-tech-ai.co.uk/third-party-verification.html"
    },
    {
      "id": "third-party-verification-what-happens-if-the-verification-call-goes-unanswe",
      "question": "What happens if the verification call goes unanswered or to voicemail?",
      "answer": "An unanswered call doesn't count as a completed verification — the system logs it as a failed attempt and the call is retried within the verification window. If the customer still can't be reached, the sale stays unverified until contact is made, protecting you from treating an unconfirmed order as a completed sale.",
      "tags": [
        "third-party-verification"
      ],
      "source": "https://heimdell-tech-ai.co.uk/third-party-verification.html"
    },
    {
      "id": "third-party-verification-does-the-verification-call-replace-the-welcome-cal",
      "question": "Does the verification call replace the welcome call some providers require?",
      "answer": "No — a verification call and a welcome call serve different purposes. The verification call independently confirms identity, contract terms, cooling-off rights and Direct Debit authority at the point of sale; a welcome call (where a provider requires one) is typically a later relationship-building touchpoint and isn't a substitute for independently verified consent evidence.",
      "tags": [
        "third-party-verification"
      ],
      "source": "https://heimdell-tech-ai.co.uk/third-party-verification.html"
    },
    {
      "id": "third-party-verification-can-verification-be-done-by-sms-or-link-instead-of",
      "question": "Can verification be done by SMS or link instead of a phone call?",
      "answer": "Yes — link verification is available as a lighter-touch alternative for straightforward cases, costing 1 credit compared to 5 credits for a full phone verification. Phone verification remains the more thorough option since it captures a recorded, agent-led conversation covering identity, terms, cooling-off rights and Direct Debit authority.",
      "tags": [
        "third-party-verification"
      ],
      "source": "https://heimdell-tech-ai.co.uk/third-party-verification.html"
    },
    {
      "id": "third-party-verification-how-much-does-a-single-phone-verification-cost",
      "question": "How much does a single phone verification cost?",
      "answer": "A phone verification costs 5 credits, which works out to roughly 80p–£1 depending on the credit bundle you buy. Credits are sold on a pay-as-you-go basis — £20 for 100 credits, £90 for 500, or £320 for 2,000 — with no subscription or setup fee.",
      "tags": [
        "third-party-verification"
      ],
      "source": "https://heimdell-tech-ai.co.uk/third-party-verification.html"
    },
    {
      "id": "third-party-verification-is-there-a-subscription-contract-or-setup-fee-to-u",
      "question": "Is there a subscription, contract or setup fee to use the service?",
      "answer": "No — there's no subscription, no contract and no setup fee. You buy credits as you need them (£20/100, £90/500, £320/2,000) and each phone verification uses 5 credits, so you only pay for verifications you actually run.",
      "tags": [
        "third-party-verification"
      ],
      "source": "https://heimdell-tech-ai.co.uk/third-party-verification.html"
    },
    {
      "id": "third-party-verification-what-s-the-difference-between-a-verification-call-",
      "question": "What's the difference between a verification call and a standard sales quality-assurance (QA) call?",
      "answer": "A QA call is typically an internal spot-check on a small sample of sales calls to monitor agent performance, while a verification call is an independent check run on every relevant sale to confirm the customer's consent. QA reviews process; verification creates the evidence record that proves the sale itself was valid.",
      "tags": [
        "third-party-verification"
      ],
      "source": "https://heimdell-tech-ai.co.uk/third-party-verification.html"
    },
    {
      "id": "third-party-verification-can-my-commission-still-be-clawed-back-even-after-",
      "question": "Can my commission still be clawed back even after a sale has passed verification?",
      "answer": "Yes — verification protects you against disputes over consent, but it doesn't prevent every clawback. Commissions can still be reversed for reasons unrelated to consent, such as the customer cancelling within a provider's clawback window or failing to pay, since those are billing and churn outcomes rather than consent disputes.",
      "tags": [
        "third-party-verification"
      ],
      "source": "https://heimdell-tech-ai.co.uk/third-party-verification.html"
    },
    {
      "id": "third-party-verification-is-third-party-verification-a-legal-requirement-fo",
      "question": "Is third party verification a legal requirement for UK telecom sales, or just best practice?",
      "answer": "In the UK, third party verification isn't a single named legal mandate the way it is in the US under FCC rules — it's a best-practice mechanism telecom resellers use to demonstrate compliance with Ofcom's General Conditions on consent, contract transparency and mis-selling. Many providers require it contractually even where it isn't a standalone statutory obligation.",
      "tags": [
        "third-party-verification"
      ],
      "source": "https://heimdell-tech-ai.co.uk/third-party-verification.html"
    },
    {
      "id": "third-party-verification-who-actually-makes-the-verification-call-is-it-in-",
      "question": "Who actually makes the verification call — is it in-house staff or an independent third party?",
      "answer": "The verification call is made by an independent agent who isn't involved in the original sale, not by the salesperson or their own team. That independence is what gives the verification evidentiary weight — a self-recorded confirmation by the seller carries far less credibility with providers and regulators.",
      "tags": [
        "third-party-verification"
      ],
      "source": "https://heimdell-tech-ai.co.uk/third-party-verification.html"
    },
    {
      "id": "third-party-verification-does-the-customer-have-to-pay-for-the-verification",
      "question": "Does the customer have to pay for the verification call?",
      "answer": "No — the verification call is free for the customer to receive. The cost is covered by the reseller or provider running the verification, billed in credits (5 credits per phone verification) rather than passed on to the customer.",
      "tags": [
        "third-party-verification"
      ],
      "source": "https://heimdell-tech-ai.co.uk/third-party-verification.html"
    },
    {
      "id": "third-party-verification-how-does-verification-interact-with-the-customer-s",
      "question": "How does verification interact with the customer's 14-day cooling-off period?",
      "answer": "Verification happens within 24 hours of the sale, well inside the standard 14-day cooling-off period for distance and off-premises telecom contracts. The verification call itself reconfirms the customer's cooling-off rights as part of the conversation, rather than starting or ending the cooling-off clock.",
      "tags": [
        "third-party-verification"
      ],
      "source": "https://heimdell-tech-ai.co.uk/third-party-verification.html"
    },
    {
      "id": "system-capabilities-does-the-verification-platform-integrate-with-our-",
      "question": "Does the verification platform integrate with our CRM or sales software?",
      "answer": "Yes — verification requests and results sync with your existing sales workflow rather than requiring a separate standalone tool. Each verification's outcome (confirmed, failed or unreachable) is logged and made available to feed back into your CRM or order system.",
      "tags": [
        "system-capabilities"
      ],
      "source": "https://heimdell-tech-ai.co.uk/system-capabilities.html"
    },
    {
      "id": "system-capabilities-is-ai-assisted-call-recording-and-analysis-gdpr-an",
      "question": "Is AI-assisted call recording and analysis GDPR and PECR compliant?",
      "answer": "Yes — verification calls are recorded on a clear lawful basis (consent and legitimate business interest for compliance and dispute resolution), with the recording purpose disclosed to the customer on the call. Recordings are stored securely, consistent with UK GDPR and PECR requirements for electronic communications.",
      "tags": [
        "system-capabilities"
      ],
      "source": "https://heimdell-tech-ai.co.uk/system-capabilities.html"
    },
    {
      "id": "system-capabilities-how-does-the-system-stop-a-verification-recording-",
      "question": "How does the system stop a verification recording from being edited or tampered with after the call?",
      "answer": "Each recording is locked and time-stamped at the point of capture, with the resulting compliance certificate tied to that specific, unedited recording. This creates a verifiable record that can't be quietly altered after the fact, which is what gives it weight in a provider audit or dispute.",
      "tags": [
        "system-capabilities"
      ],
      "source": "https://heimdell-tech-ai.co.uk/system-capabilities.html"
    },
    {
      "id": "system-capabilities-does-the-platform-transcribe-verification-calls-au",
      "question": "Does the platform transcribe verification calls automatically?",
      "answer": "Verification calls are recorded in full, and the platform can produce a written record of the call alongside the audio to make reviewing evidence faster during an audit or dispute. The audio recording remains the primary evidence; the transcript is a convenience layer on top of it.",
      "tags": [
        "system-capabilities"
      ],
      "source": "https://heimdell-tech-ai.co.uk/system-capabilities.html"
    },
    {
      "id": "system-capabilities-how-are-verification-credits-tracked-and-billed",
      "question": "How are verification credits tracked and billed?",
      "answer": "Credits are deducted automatically each time a verification runs — 5 credits for a phone verification, 1 credit for a link verification — with no manual invoicing step. You top up credits as needed (£20/100, £90/500, £320/2,000) and can see usage as verifications are completed.",
      "tags": [
        "system-capabilities"
      ],
      "source": "https://heimdell-tech-ai.co.uk/system-capabilities.html"
    },
    {
      "id": "system-capabilities-does-the-system-check-that-every-required-disclosu",
      "question": "Does the system check that every required disclosure is actually covered on the call?",
      "answer": "Yes — verification calls follow a structured process covering identity confirmation, contract terms, cooling-off rights and Direct Debit authority, so a call isn't marked as verified unless each of those points is addressed. This guards against incomplete or rushed verifications being logged as valid.",
      "tags": [
        "system-capabilities"
      ],
      "source": "https://heimdell-tech-ai.co.uk/system-capabilities.html"
    },
    {
      "id": "system-capabilities-what-technical-metadata-does-the-platform-log-alon",
      "question": "What technical metadata does the platform log alongside the call recording?",
      "answer": "Alongside the audio recording, the platform logs the call timestamp, duration, and the outcome of each disclosure point covered, all attached to the resulting compliance certificate. This metadata is what makes a single verification record searchable and auditable rather than just an audio file.",
      "tags": [
        "system-capabilities"
      ],
      "source": "https://heimdell-tech-ai.co.uk/system-capabilities.html"
    },
    {
      "id": "system-capabilities-does-the-platform-support-digital-or-link-based-ve",
      "question": "Does the platform support digital or link-based verification as well as phone calls?",
      "answer": "Yes — alongside full phone verification, the platform supports a lighter-touch link verification option at 1 credit per use, versus 5 credits for a phone call. This gives resellers a faster option for lower-risk verifications while keeping phone verification as the more thorough method.",
      "tags": [
        "system-capabilities"
      ],
      "source": "https://heimdell-tech-ai.co.uk/system-capabilities.html"
    },
    {
      "id": "system-capabilities-is-verification-data-stored-securely",
      "question": "Is verification data stored securely?",
      "answer": "Yes — call recordings, transcripts and compliance certificates are stored securely rather than kept as loose local files, so they remain accessible and intact when needed for a provider audit or dispute months later.",
      "tags": [
        "system-capabilities"
      ],
      "source": "https://heimdell-tech-ai.co.uk/system-capabilities.html"
    },
    {
      "id": "system-capabilities-can-multiple-sales-agents-or-office-locations-use-",
      "question": "Can multiple sales agents or office locations use the platform under one account?",
      "answer": "Yes — the platform is built to handle verification requests from multiple agents or sales locations feeding into the same account, with credits shared centrally rather than needing a separate account per agent or office.",
      "tags": [
        "system-capabilities"
      ],
      "source": "https://heimdell-tech-ai.co.uk/system-capabilities.html"
    },
    {
      "id": "system-capabilities-what-happens-in-the-system-when-a-verification-fai",
      "question": "What happens in the system when a verification fails or the customer's answers don't match the contract?",
      "answer": "A failed or mismatched verification is logged as such rather than silently discarded, flagging the sale for follow-up instead of letting it pass through as confirmed. That failed-verification record is itself useful evidence — it shows the sale was checked and didn't hold up, rather than never being checked at all.",
      "tags": [
        "system-capabilities"
      ],
      "source": "https://heimdell-tech-ai.co.uk/system-capabilities.html"
    },
    {
      "id": "telecom-provider-audit-preparation-what-s-the-difference-between-a-provider-audit-and",
      "question": "What's the difference between a provider audit and an Ofcom investigation?",
      "answer": "A provider audit is a commercial review carried out by the network or service provider (like Virgin Media, O2 or Sky) checking a reseller's own sales practices and paperwork, while an Ofcom investigation is a regulatory action under the General Conditions, usually triggered by wider complaint patterns or a formal referral. Passing provider audits consistently reduces the chance of ever reaching Ofcom's attention in the first place.",
      "tags": [
        "telecom-provider-audit-preparation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/services/telecom-provider-audit-preparation.html"
    },
    {
      "id": "telecom-provider-audit-preparation-what-percentage-of-my-sales-calls-will-an-auditor-",
      "question": "What percentage of my sales calls will an auditor actually review?",
      "answer": "Auditors typically review a sample of your sales rather than every single one — industry-wide call quality audits commonly sample somewhere in the low single-digit percentage of total volume. Because only a fraction of calls are checked, having consistent, complete verification records across all sales matters more than hoping the ones reviewed happen to be clean.",
      "tags": [
        "telecom-provider-audit-preparation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/services/telecom-provider-audit-preparation.html"
    },
    {
      "id": "telecom-provider-audit-preparation-can-i-lose-my-reseller-agreement-completely-after-",
      "question": "Can I lose my reseller agreement completely after repeated audit failures?",
      "answer": "Yes — providers can terminate a reseller agreement after a pattern of repeated audit failures, not just after a single incident. A history of failed audits, unresolved findings or rising complaint rates is what typically escalates from a warning to suspension to termination.",
      "tags": [
        "telecom-provider-audit-preparation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/services/telecom-provider-audit-preparation.html"
    },
    {
      "id": "telecom-provider-audit-preparation-does-having-verification-records-guarantee-i-ll-pa",
      "question": "Does having verification records guarantee I'll pass a provider audit?",
      "answer": "No — verification records are strong evidence of consent, but auditors also review complaint handling, contract documentation, agent training and clawback history. Verification covers the consent side of the audit thoroughly; it's one major piece of a broader compliance picture, not the whole picture.",
      "tags": [
        "telecom-provider-audit-preparation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/services/telecom-provider-audit-preparation.html"
    },
    {
      "id": "telecom-provider-audit-preparation-what-s-the-difference-between-a-scheduled-audit-an",
      "question": "What's the difference between a scheduled audit and an unannounced spot check?",
      "answer": "A scheduled audit is planned in advance, giving you time to prepare documentation, while a spot check or mystery shop happens without warning to see how sales actually run day to day. Because spot checks can't be prepped for in the moment, the only real defence is having verification and documentation practices consistently in place, not switched on before a known audit date.",
      "tags": [
        "telecom-provider-audit-preparation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/services/telecom-provider-audit-preparation.html"
    },
    {
      "id": "telecom-provider-audit-preparation-is-a-one-touch-switch-ots-compliance-review-the-sa",
      "question": "Is a One Touch Switch (OTS) compliance review the same as a standard provider sales audit?",
      "answer": "No — a One Touch Switch review checks your switching process specifically (how gaining and losing provider handoffs are handled), while a standard provider sales audit looks more broadly at consent, contract terms and sales conduct. A reseller can be fully OTS-compliant and still fail a broader sales audit, or vice versa, since they check different things.",
      "tags": [
        "telecom-provider-audit-preparation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/services/telecom-provider-audit-preparation.html"
    },
    {
      "id": "telecom-provider-audit-preparation-what-happens-to-commission-i-ve-already-been-paid-",
      "question": "What happens to commission I've already been paid if an audit finds a problem with the sale?",
      "answer": "If an audit uncovers a problem with a specific sale — such as unclear consent or a misrepresented term — the commission already paid on that sale is typically clawed back retroactively. This is separate from routine churn-based clawbacks; it's tied directly to the audit finding a fault with how the sale was made.",
      "tags": [
        "telecom-provider-audit-preparation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/services/telecom-provider-audit-preparation.html"
    },
    {
      "id": "telecom-provider-audit-preparation-why-can-t-i-just-review-my-own-sales-calls-instead",
      "question": "Why can't I just review my own sales calls instead of using an independent verification service?",
      "answer": "You can review your own calls, but providers and regulators give self-reviewed records far less weight than independently verified ones, since the seller has an obvious interest in the outcome. Independent verification removes that conflict of interest, which is exactly what auditors are looking to confirm is in place.",
      "tags": [
        "telecom-provider-audit-preparation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/services/telecom-provider-audit-preparation.html"
    },
    {
      "id": "telecom-provider-audit-preparation-what-documents-do-auditors-ask-for-beyond-the-veri",
      "question": "What documents do auditors ask for beyond the verification recording itself?",
      "answer": "Beyond the verification recording, auditors commonly ask for the signed or accepted contract, complaint logs, agent training records, and a history of clawback or cancellation rates. The verification recording proves consent at the point of sale; these other documents show the wider process around it was sound.",
      "tags": [
        "telecom-provider-audit-preparation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/services/telecom-provider-audit-preparation.html"
    },
    {
      "id": "telecom-provider-audit-preparation-how-long-does-a-provider-audit-take-from-notificat",
      "question": "How long does a provider audit take from notification to final outcome?",
      "answer": "Timelines vary by provider, but once notified you should expect a review period of several weeks covering document submission, sample review and any follow-up queries before a final outcome is issued. This is distinct from how far ahead you should prepare — ongoing readiness matters more than the length of the audit itself once it starts.",
      "tags": [
        "telecom-provider-audit-preparation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/services/telecom-provider-audit-preparation.html"
    },
    {
      "id": "commission-clawback-audit-what-is-gc-c1-under-ofcom-s-general-conditions-and",
      "question": "What is GC C1 under Ofcom's General Conditions, and how does it affect my commission?",
      "answer": "GC C1 is the Ofcom General Condition requiring telecom providers to give customers clear, accurate and up-to-date information on pricing, contract terms and exit charges before they sign up. Gaps here — an incomplete verbal price disclosure, a missing contract summary, no timestamped consent record — are the exact evidence providers point to when reversing a sale and clawing back the commission on it. A GC C1 audit checks whether your sales process actually meets the standard before it becomes a dispute.",
      "tags": [
        "commission-clawback-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/commission-clawback-audit.html"
    },
    {
      "id": "commission-clawback-audit-what-is-slamming-and-why-does-it-lead-to-commissio",
      "question": "What is 'slamming' and why does it lead to commission clawbacks?",
      "answer": "Slamming is Ofcom's term for switching a customer's telecom service without their knowledge or genuine consent, and it's one of the clearest triggers for both regulatory action and commission reversal. Ofcom has fined and named providers over slamming cases involving elderly or vulnerable customers, and any sale later found to be a slam is almost always unwound, with commission clawed back from the agent or agency that closed it.",
      "tags": [
        "commission-clawback-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/commission-clawback-audit.html"
    },
    {
      "id": "commission-clawback-audit-does-the-14-day-cooling-off-period-mean-my-commiss",
      "question": "Does the 14-day cooling-off period mean my commission isn't safe until it expires?",
      "answer": "Cancellations made within the 14-day statutory cooling-off period are a common commission clawback trigger, since the sale can be unwound penalty-free under the Consumer Contracts Regulations 2013. This right generally doesn't apply to in-person, doorstep-style sales, which is why D2D teams face a different clawback risk profile than telesales teams selling by phone.",
      "tags": [
        "commission-clawback-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/commission-clawback-audit.html"
    },
    {
      "id": "commission-clawback-audit-what-is-one-touch-switch-and-does-it-add-new-commi",
      "question": "What is One Touch Switch, and does it add new commission clawback risk?",
      "answer": "One Touch Switch (OTS) is Ofcom's process, introduced under General Conditions C7.18-C7.27, that makes the customer's new provider responsible for organising a broadband or landline switch. Because OTS shifts more of the switching process — and the paper trail — onto the acquiring provider, gaps in how a sale is logged at the point of switch are now more visible and more likely to surface later as a clawback dispute.",
      "tags": [
        "commission-clawback-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/commission-clawback-audit.html"
    },
    {
      "id": "commission-clawback-audit-what-s-the-difference-between-a-non-pay-clawback-a",
      "question": "What's the difference between a non-pay clawback and a mis-sell clawback?",
      "answer": "A non-pay clawback happens when a customer never completes payment or defaults early, while a mis-sell clawback happens when the sale itself is found non-compliant — no valid consent, incomplete disclosure, or a slammed switch. Non-pay clawbacks are largely about customer creditworthiness; mis-sell clawbacks are about your sales process, which is what a compliance audit is built to fix.",
      "tags": [
        "commission-clawback-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/commission-clawback-audit.html"
    },
    {
      "id": "commission-clawback-audit-can-a-provider-claw-back-commission-months-after-t",
      "question": "Can a provider claw back commission months after the sale has already closed?",
      "answer": "Yes — clawback windows commonly extend to a customer's first 30, 60 or 90 days, and some provider agreements allow clawback for the length of an early-cancellation clause, not just the initial cooling-off period. The longer the window, the more it matters that your consent and disclosure records are still retrievable and audit-ready when a dispute is raised.",
      "tags": [
        "commission-clawback-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/commission-clawback-audit.html"
    },
    {
      "id": "commission-clawback-audit-how-do-i-dispute-or-challenge-a-commission-clawbac",
      "question": "How do I dispute or challenge a commission clawback?",
      "answer": "The strongest defence against a clawback is documentary evidence that the sale was compliant at the point of sale — recorded consent, a contract summary provided, correct pricing disclosed. Without a timestamped audit trail, most disputes come down to the provider's word against the agent's, which is why unclear or open-ended clawback clauses are flagged as a risk area for the paying company too, not just the seller.",
      "tags": [
        "commission-clawback-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/commission-clawback-audit.html"
    },
    {
      "id": "commission-clawback-audit-what-percentage-of-gross-commission-do-uk-telecom-",
      "question": "What percentage of gross commission do UK telecom agencies typically lose to clawbacks?",
      "answer": "UK telecom agencies typically lose 5-15% of gross commissions annually to clawbacks, disputes and reversals. That range is wide because it depends heavily on how consistently a sales team captures and retains compliant point-of-sale evidence, which is exactly what a clawback audit is designed to tighten up.",
      "tags": [
        "commission-clawback-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/commission-clawback-audit.html"
    },
    {
      "id": "commission-clawback-audit-what-does-a-free-15-minute-commission-clawback-aud",
      "question": "What does a free 15-minute commission clawback audit actually check?",
      "answer": "It's a short review of your current sales verification process against GC C1 and related Ofcom General Conditions, looking for the specific gaps — missing consent records, incomplete disclosures, weak vulnerable-customer safeguards — that providers use as grounds to claw back commission. It's designed to quantify how much revenue you're likely leaking to clawbacks, not to replace a full compliance implementation.",
      "tags": [
        "commission-clawback-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/commission-clawback-audit.html"
    },
    {
      "id": "commission-clawback-audit-how-much-can-ofcom-fine-a-telecom-provider-for-bre",
      "question": "How much can Ofcom fine a telecom provider for breaching the General Conditions, and why does that matter to my commission?",
      "answer": "Ofcom can fine providers up to 10% of turnover for General Conditions breaches, and it has issued penalties as high as £28 million for systemic failures such as blocking customer cancellations. When a provider is under that kind of regulatory pressure, it tightens its own compliance checks on agency-sold contracts, and clawback activity on non-compliant sales tends to rise as a result.",
      "tags": [
        "commission-clawback-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/commission-clawback-audit.html"
    },
    {
      "id": "regulatory-risk-assessment-what-is-pecr-and-how-does-it-apply-to-telecom-sale",
      "question": "What is PECR and how does it apply to telecom sales calls?",
      "answer": "PECR (the Privacy and Electronic Communications Regulations 2003) is separate UK law that sits alongside UK GDPR and specifically governs marketing calls, texts, emails and cookies. For telecom sales teams it sets the rules on which numbers you can call, what consent you need, and what you must disclose during the call — breaching it carries its own ICO fines regardless of your GDPR compliance status.",
      "tags": [
        "regulatory-risk-assessment"
      ],
      "source": "https://heimdell-tech-ai.co.uk/regulatory-risk-assessment.html"
    },
    {
      "id": "regulatory-risk-assessment-what-are-the-legal-hours-for-telemarketing-calls-u",
      "question": "What are the legal hours for telemarketing calls under PECR?",
      "answer": "Unsolicited marketing calls are only permitted between 8am and 8pm on weekdays and 9am and 6pm on weekends and public holidays. Calling outside these windows, or calling a number registered with the Telephone Preference Service without prior consent, is a PECR breach the ICO actively enforces against.",
      "tags": [
        "regulatory-risk-assessment"
      ],
      "source": "https://heimdell-tech-ai.co.uk/regulatory-risk-assessment.html"
    },
    {
      "id": "regulatory-risk-assessment-what-is-the-telephone-preference-service-tps-and-d",
      "question": "What is the Telephone Preference Service (TPS) and do I have to screen against it before calling?",
      "answer": "The TPS is the UK's official opt-out register for unsolicited sales and marketing calls, and PECR requires specific consent to call a TPS-registered number for marketing purposes. Skipping TPS screening is one of the most common breaches cited in real ICO enforcement notices against telemarketing firms.",
      "tags": [
        "regulatory-risk-assessment"
      ],
      "source": "https://heimdell-tech-ai.co.uk/regulatory-risk-assessment.html"
    },
    {
      "id": "regulatory-risk-assessment-what-is-the-soft-opt-in-and-can-telecom-resellers-",
      "question": "What is the 'soft opt-in' and can telecom resellers use it to contact existing customers?",
      "answer": "The soft opt-in lets you market similar products to existing customers without separate explicit consent, but only if their details were collected during an actual sale, they were given a clear opt-out at the time, and every message since has included one. It does not apply to prospects or bought-in contact lists — those still need explicit consent under PECR.",
      "tags": [
        "regulatory-risk-assessment"
      ],
      "source": "https://heimdell-tech-ai.co.uk/regulatory-risk-assessment.html"
    },
    {
      "id": "regulatory-risk-assessment-what-is-duaa-2025-and-when-does-it-take-effect",
      "question": "What is DUAA 2025 and when does it take effect?",
      "answer": "The Data (Use and Access) Act 2025 is the UK's reform of data protection law. It received royal assent on 19 June 2025 and is rolling out in phases, with most provisions taking effect from 5 February 2026 and final measures following in June 2026. It amends UK GDPR, the Data Protection Act 2018 and PECR rather than replacing them outright.",
      "tags": [
        "regulatory-risk-assessment"
      ],
      "source": "https://heimdell-tech-ai.co.uk/regulatory-risk-assessment.html"
    },
    {
      "id": "regulatory-risk-assessment-does-duaa-2025-replace-uk-gdpr",
      "question": "Does DUAA 2025 replace UK GDPR?",
      "answer": "No — DUAA amends UK GDPR, the Data Protection Act 2018 and PECR with targeted changes rather than replacing them. The six lawful bases for processing, core data subject rights and the accountability principle all remain in place, so an existing UK GDPR compliance programme needs updating for DUAA, not rebuilding from scratch.",
      "tags": [
        "regulatory-risk-assessment"
      ],
      "source": "https://heimdell-tech-ai.co.uk/regulatory-risk-assessment.html"
    },
    {
      "id": "regulatory-risk-assessment-what-is-recognised-legitimate-interest-under-duaa-",
      "question": "What is 'Recognised Legitimate Interest' under DUAA 2025?",
      "answer": "It's a new, seventh lawful basis for processing personal data that DUAA adds to UK GDPR, covering specific purposes such as safeguarding vulnerable people, preventing crime or assisting public bodies, without the usual legitimate-interests balancing test. It's narrower than general legitimate interest and doesn't extend to ordinary telecom sales and marketing activity.",
      "tags": [
        "regulatory-risk-assessment"
      ],
      "source": "https://heimdell-tech-ai.co.uk/regulatory-risk-assessment.html"
    },
    {
      "id": "regulatory-risk-assessment-how-much-can-the-ico-actually-fine-a-business-for-",
      "question": "How much can the ICO actually fine a business for a PECR or UK GDPR breach?",
      "answer": "For the most serious UK GDPR breaches the ICO can fine up to £17.5 million or 4% of global annual turnover, whichever is higher; a lower tier of up to £8.7 million or 2% applies to less severe breaches. PECR marketing breaches are enforced separately and have resulted in fines up to £500,000 against telemarketing firms.",
      "tags": [
        "regulatory-risk-assessment"
      ],
      "source": "https://heimdell-tech-ai.co.uk/regulatory-risk-assessment.html"
    },
    {
      "id": "regulatory-risk-assessment-what-fines-have-real-telemarketing-companies-recei",
      "question": "What fines have real telemarketing companies received from the ICO recently?",
      "answer": "Recent ICO enforcement includes a £90,000 fine against a compensation firm for unlawful marketing calls, £340,000 split across two companies for aggressive and unwanted calls, and a historic £500,000 fine against CRDNN for over 193 million automated nuisance calls. The ICO has issued more than £2.4 million in PECR fines since April 2022 alone.",
      "tags": [
        "regulatory-risk-assessment"
      ],
      "source": "https://heimdell-tech-ai.co.uk/regulatory-risk-assessment.html"
    },
    {
      "id": "regulatory-risk-assessment-do-the-duaa-2025-changes-affect-pecr-marketing-rul",
      "question": "Do the DUAA 2025 changes affect PECR marketing rules for telecom sales teams?",
      "answer": "Yes — DUAA makes targeted amendments to PECR alongside UK GDPR, and ICO enforcement powers under both are being strengthened as part of the same Act, including the ability to compel witnesses and demand reports during investigations. A regulatory risk assessment needs to check PECR marketing practices against both the current rules and the DUAA changes taking effect through 2026.",
      "tags": [
        "regulatory-risk-assessment"
      ],
      "source": "https://heimdell-tech-ai.co.uk/regulatory-risk-assessment.html"
    },
    {
      "id": "ico-gdpr-compliance-audit-what-is-the-deadline-for-responding-to-a-subject-a",
      "question": "What is the deadline for responding to a Subject Access Request (SAR)?",
      "answer": "You must respond to a SAR without undue delay and within one calendar month of receipt, extendable by a further two months for complex or numerous requests. The clock starts the day the request arrives — including non-working days — and can only be paused if you need to request clarification from the requester.",
      "tags": [
        "ico-gdpr-compliance-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ico-gdpr-compliance-audit.html"
    },
    {
      "id": "ico-gdpr-compliance-audit-what-happens-if-my-business-misses-the-sar-deadlin",
      "question": "What happens if my business misses the SAR deadline?",
      "answer": "A missed SAR deadline is a UK GDPR compliance failure the ICO can investigate, and it weakens your position if the requester complains directly to the regulator. Most SAR failures stem from not having a clear process for locating, verifying and redacting data quickly enough — exactly what SAR-response readiness testing in a compliance audit is meant to catch before a real request arrives.",
      "tags": [
        "ico-gdpr-compliance-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ico-gdpr-compliance-audit.html"
    },
    {
      "id": "ico-gdpr-compliance-audit-does-duaa-2025-change-how-businesses-must-handle-s",
      "question": "Does DUAA 2025 change how businesses must handle Subject Access Requests?",
      "answer": "Yes — under DUAA, businesses are only required to carry out 'reasonable and proportionate' searches when responding to a SAR, rather than an exhaustive search of every system. This gives some relief on scope, but the one-month response deadline itself is unchanged, so SAR processes still need to be fast and well-documented.",
      "tags": [
        "ico-gdpr-compliance-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ico-gdpr-compliance-audit.html"
    },
    {
      "id": "ico-gdpr-compliance-audit-what-counts-as-a-data-breach-that-has-to-be-report",
      "question": "What counts as a data breach that has to be reported to the ICO within 72 hours?",
      "answer": "Only breaches likely to result in a risk to individuals' rights and freedoms must be reported to the ICO, and the 72-hour clock starts the moment you become aware of the breach, not when it happened. A breach assessed as unlikely to cause harm doesn't need ICO notification, but it must still be logged internally — a distinction many businesses get wrong.",
      "tags": [
        "ico-gdpr-compliance-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ico-gdpr-compliance-audit.html"
    },
    {
      "id": "ico-gdpr-compliance-audit-what-s-the-penalty-for-failing-to-report-a-data-br",
      "question": "What's the penalty for failing to report a data breach within 72 hours?",
      "answer": "Failing to notify the ICO of a reportable breach carries its own fine of up to £8.7 million or 2% of global annual turnover, separate from any fine for the breach itself. The 72 hours are clock hours, not working hours, so there's no pause for weekends or bank holidays.",
      "tags": [
        "ico-gdpr-compliance-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ico-gdpr-compliance-audit.html"
    },
    {
      "id": "ico-gdpr-compliance-audit-what-is-a-data-protection-impact-assessment-dpia-a",
      "question": "What is a Data Protection Impact Assessment (DPIA) and when is one required?",
      "answer": "A DPIA is a structured risk assessment of a data processing activity, required under UK GDPR whenever processing is likely to result in a high risk to individuals — such as large-scale customer data processing or systematic monitoring. It must be completed before the processing activity begins, examining data flows, legal basis and security controls.",
      "tags": [
        "ico-gdpr-compliance-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ico-gdpr-compliance-audit.html"
    },
    {
      "id": "ico-gdpr-compliance-audit-is-an-ico-audit-something-that-happens-to-you-or-c",
      "question": "Is an ICO audit something that happens to you, or can you request one voluntarily?",
      "answer": "ICO audits can be either consensual — requested or agreed voluntarily — or compulsory, where the ICO uses its Data Protection Act 2018 powers to assess an organisation's practices. A voluntary, ICO-aligned self-audit in advance lets a business fix gaps on its own terms rather than under investigation.",
      "tags": [
        "ico-gdpr-compliance-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ico-gdpr-compliance-audit.html"
    },
    {
      "id": "ico-gdpr-compliance-audit-what-s-the-difference-between-uk-gdpr-and-pecr-and",
      "question": "What's the difference between UK GDPR and PECR, and does a GDPR audit cover both?",
      "answer": "UK GDPR governs how personal data is processed generally, while PECR is a separate set of regulations specifically covering marketing calls, texts, emails and cookies — a telecom sales team can be fully UK GDPR compliant and still breach PECR through its calling practices. A proper compliance audit needs to check both, since the ICO enforces them independently with separate fines for each.",
      "tags": [
        "ico-gdpr-compliance-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ico-gdpr-compliance-audit.html"
    },
    {
      "id": "ico-gdpr-compliance-audit-can-i-refuse-or-redact-part-of-a-subject-access-re",
      "question": "Can I refuse or redact part of a Subject Access Request?",
      "answer": "Yes — SAR responses can exclude third-party personal data unless that person consents or it's reasonable to disclose without consent, and statutory exemptions such as legal privilege or crime prevention can also apply. Identity verification is a legitimate reason to pause the process, but it must be proportionate rather than used to stall a genuine request.",
      "tags": [
        "ico-gdpr-compliance-audit"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ico-gdpr-compliance-audit.html"
    },
    {
      "id": "compliance-protocol-setup-how-long-does-compliance-software-setup-take-for-a",
      "question": "How long does compliance software setup take for a small business?",
      "answer": "Compliance Protocol Setup typically takes 2-3 weeks from kickoff to a working system. This covers voice-log infrastructure, identity verification, CRM audit locks and automated provider-ready compliance certificates for reseller agencies selling Virgin Media, O2 or Sky contracts.",
      "tags": [
        "compliance-protocol-setup"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-setup.html"
    },
    {
      "id": "compliance-protocol-setup-how-much-does-compliance-setup-cost-for-a-small-bu",
      "question": "How much does compliance setup cost for a small business?",
      "answer": "Compliance Protocol Setup starts from £1,500 as a one-off fee, not an ongoing subscription. Search data on UK small business compliance spend shows wide variation (from a few thousand pounds up to tens of thousands depending on scope), so a fixed one-off fee for a defined deliverable is notably more predictable than open-ended consultancy retainers or DPO-style monthly fees (commonly £500-£2,500/month).",
      "tags": [
        "compliance-protocol-setup"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-setup.html"
    },
    {
      "id": "compliance-protocol-setup-why-do-businesses-need-to-record-and-store-sales-c",
      "question": "Why do businesses need to record and store sales calls for compliance?",
      "answer": "Call recording is legally permitted under UK rules for compliance monitoring and evidencing sales, but it must be disclosed to the caller and handled as personal data under UK GDPR. Voice-log infrastructure that captures, encrypts and retains only what's necessary (with a defined deletion policy) is a core part of what Compliance Protocol Setup builds, so resellers have a defensible audit trail if a provider or the ICO ever asks for it.",
      "tags": [
        "compliance-protocol-setup"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-setup.html"
    },
    {
      "id": "compliance-protocol-setup-what-s-the-difference-between-compliance-protocol-",
      "question": "What's the difference between Compliance Protocol Setup and Compliance Protocol Implementation?",
      "answer": "Setup (from £1,500) is the initial deployment of the core Telecom Verification Protocol — voice-log infrastructure, identity verification, CRM audit locks and provider-ready certificates — typically delivered in 2-3 weeks. Implementation (from £3,000) is the larger end-to-end rollout that adds PECR 2003 and DUAA 2025 compliance, full ICO audit preparation, deeper CRM integration, automated evidence generation and operational handover — it builds on top of what Setup establishes rather than replacing it.",
      "tags": [
        "compliance-protocol-setup"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-setup.html"
    },
    {
      "id": "compliance-protocol-setup-do-i-need-an-identity-verification-system-if-i-alr",
      "question": "Do I need an identity verification system if I already record sales calls?",
      "answer": "Yes — call recording alone doesn't verify who is on the call or confirm consent was genuinely given by the account holder, which is what providers and the ICO actually check for. Compliance Protocol Setup pairs voice-log infrastructure with identity verification so recordings are tied to a verified identity, not just an audio file.",
      "tags": [
        "compliance-protocol-setup"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-setup.html"
    },
    {
      "id": "compliance-protocol-setup-what-is-a-crm-audit-lock-and-why-would-a-reseller-",
      "question": "What is a CRM audit lock and why would a reseller need one?",
      "answer": "A CRM audit lock prevents sales records from being edited or deleted after a sale is logged, which is what gives a compliance certificate its evidential weight. Without it, a provider or the ICO can't be confident that what they're reviewing is the original record rather than something amended after the fact — Compliance Protocol Setup builds this locking directly into the CRM workflow.",
      "tags": [
        "compliance-protocol-setup"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-setup.html"
    },
    {
      "id": "compliance-protocol-setup-can-i-set-this-up-myself-instead-of-paying-a-consu",
      "question": "Can I set this up myself instead of paying a consultant?",
      "answer": "In theory yes, but most resellers underestimate the work involved in wiring together call recording, identity verification, CRM locking and certificate generation into one auditable system. Compliance Protocol Setup exists because doing it piecemeal in-house typically takes longer than the 2-3 week delivery window and risks gaps that only surface when a provider audit or ICO complaint exposes them.",
      "tags": [
        "compliance-protocol-setup"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-setup.html"
    },
    {
      "id": "compliance-protocol-setup-does-a-compliance-certificate-need-to-be-renewed",
      "question": "Does a compliance certificate need to be renewed?",
      "answer": "It depends on the certificate type, but most provider-facing and regulatory compliance evidence needs periodic refreshing rather than being a one-time document. Compliance Protocol Setup generates certificates automatically as part of the system rather than as a single static PDF, so evidence stays current as sales activity continues.",
      "tags": [
        "compliance-protocol-setup"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-setup.html"
    },
    {
      "id": "compliance-protocol-setup-what-happens-if-i-fail-a-provider-compliance-audit",
      "question": "What happens if I fail a provider compliance audit?",
      "answer": "Providers like Virgin Media, O2 and Sky can suspend commissions, claw back payments, or terminate a reseller agreement if an audit finds inadequate verification records. Compliance Protocol Setup is built specifically to produce the kind of provider-ready evidence — verified identity, locked CRM records, call logs — that these audits check for.",
      "tags": [
        "compliance-protocol-setup"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-setup.html"
    },
    {
      "id": "compliance-protocol-setup-how-is-compliance-setup-different-from-just-buying",
      "question": "How is compliance setup different from just buying compliance software?",
      "answer": "Off-the-shelf compliance software gives you tools; Compliance Protocol Setup gives you a working system tailored to telecom reseller audit requirements, configured and deployed for you within 2-3 weeks. Search data on UK compliance software costs shows subscription tools run from roughly £160-£365/month with no guarantee they're configured correctly for provider audits — Setup is a one-off fee for a system that's already built to that standard.",
      "tags": [
        "compliance-protocol-setup"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-setup.html"
    },
    {
      "id": "compliance-protocol-implementation-what-does-pecr-2003-compliance-actually-require-fo",
      "question": "What does PECR 2003 compliance actually require for telemarketing?",
      "answer": "PECR requires screening call lists against the TPS/CTPS every 28 days, recording an auditable trail of consent before calling anyone who isn't an existing customer, and keeping records of the script and consent basis used. Compliance Protocol Implementation builds these checks into the CRM and evidence layer so PECR compliance isn't a manual, easily-missed process.",
      "tags": [
        "compliance-protocol-implementation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-implementation.html"
    },
    {
      "id": "compliance-protocol-implementation-what-is-the-data-use-and-access-act-2025-and-does-",
      "question": "What is the Data (Use and Access) Act 2025 and does it apply to telecom resellers?",
      "answer": "DUAA 2025 is the UK's updated data protection law, with provisions phasing in through 2025-2026, including a formal complaints-handling procedure requirement from June 2026. Telecom resellers handling customer data need to review consent, automated decision-making and complaints processes against it — Compliance Protocol Implementation includes DUAA 2025 readiness as part of the rollout.",
      "tags": [
        "compliance-protocol-implementation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-implementation.html"
    },
    {
      "id": "compliance-protocol-implementation-how-do-i-prepare-for-an-ico-audit",
      "question": "How do I prepare for an ICO audit?",
      "answer": "ICO audit preparation means having organised, defensible records: documented consent trails, data processing records, retention policies and a named person accountable for data protection decisions. Compliance Protocol Implementation includes full ICO audit prep as part of its end-to-end rollout, rather than leaving resellers to assemble this evidence reactively when a complaint or audit lands.",
      "tags": [
        "compliance-protocol-implementation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-implementation.html"
    },
    {
      "id": "compliance-protocol-implementation-what-s-the-difference-between-compliance-protocol-",
      "question": "What's the difference between Compliance Protocol Setup and Implementation, and which one do I need?",
      "answer": "Setup (from £1,500) deploys the core verification infrastructure in 2-3 weeks; Implementation (from £3,000) is the fuller end-to-end rollout covering PECR 2003, DUAA 2025 readiness, ICO audit prep, CRM integration, automated evidence generation and operational handover. If you're already running Setup's core infrastructure but need broader regulatory coverage and a complete operational handover, Implementation is the step up — most resellers scaling past a handful of sign-ups per month need the fuller scope.",
      "tags": [
        "compliance-protocol-implementation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-implementation.html"
    },
    {
      "id": "compliance-protocol-implementation-how-long-does-full-compliance-implementation-take-",
      "question": "How long does full compliance implementation take compared to basic setup?",
      "answer": "Compliance Protocol Setup runs 2-3 weeks for the core infrastructure; Implementation is a larger end-to-end project covering more regulatory ground (PECR, DUAA, ICO prep, CRM integration and evidence automation) and so takes longer than Setup alone, though it doesn't require redoing Setup's work from scratch. Timelines for comparable full compliance/CRM integration builds elsewhere in the market commonly run 8-12 weeks for multi-system integrations, giving a useful reference point for what a fuller rollout involves.",
      "tags": [
        "compliance-protocol-implementation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-implementation.html"
    },
    {
      "id": "compliance-protocol-implementation-what-does-automated-evidence-generation-actually-m",
      "question": "What does 'automated evidence generation' actually mean in a compliance rollout?",
      "answer": "It means the system continuously pulls documentation — consent records, call logs, CRM audit trails — directly from source systems, rather than someone manually assembling screenshots and reports before an audit. Compliance Protocol Implementation includes this so evidence is always current, not scrambled together reactively when a provider or the ICO asks for it.",
      "tags": [
        "compliance-protocol-implementation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-implementation.html"
    },
    {
      "id": "compliance-protocol-implementation-what-does-operational-handover-mean-at-the-end-of-",
      "question": "What does 'operational handover' mean at the end of an implementation project?",
      "answer": "Operational handover means the reseller's own team is trained and equipped to run the compliance system day-to-day once the consultant's engagement ends, rather than remaining dependent on external support. It typically includes documentation, admin training and a working understanding of how to maintain the evidence trail going forward — part of what distinguishes an implementation project from a stripped-down setup.",
      "tags": [
        "compliance-protocol-implementation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-implementation.html"
    },
    {
      "id": "compliance-protocol-implementation-why-do-compliance-implementation-projects-sometime",
      "question": "Why do compliance implementation projects sometimes take longer than quoted?",
      "answer": "The most common causes are unclear requirements at the outset and underestimating integration complexity — the same reasons cited broadly for software project overruns. A fixed-scope, fixed-fee engagement (Compliance Protocol Implementation starts from £3,000 as a one-off) reduces this risk by defining the deliverables — PECR, DUAA, ICO prep, CRM integration, evidence automation and handover — up front rather than billing open-ended hours.",
      "tags": [
        "compliance-protocol-implementation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-implementation.html"
    },
    {
      "id": "compliance-protocol-implementation-do-i-need-both-compliance-protocol-setup-and-imple",
      "question": "Do I need both Compliance Protocol Setup and Implementation, or can I start with Implementation directly?",
      "answer": "Implementation includes the core infrastructure Setup covers as part of its broader scope, so a reseller can start directly with Implementation if they need the fuller regulatory coverage from day one. Resellers with simpler needs — just the core verification infrastructure for one or two providers — often start with Setup and upgrade to Implementation later as they scale or take on more providers.",
      "tags": [
        "compliance-protocol-implementation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-implementation.html"
    },
    {
      "id": "compliance-protocol-implementation-how-much-does-full-regulatory-compliance-cost-a-sm",
      "question": "How much does full regulatory compliance cost a small UK business?",
      "answer": "General UK compliance cost data shows small businesses spending anywhere from roughly £3,000-£18,000 in year one depending on scope, with GDPR-specific compliance alone often falling in that range. Compliance Protocol Implementation is priced from £3,000 as a one-off fee covering PECR, DUAA and ICO-specific work tailored to telecom resellers, which sits at the lower end of that broader benchmark while being scoped specifically to reseller compliance needs rather than generic GDPR consultancy.",
      "tags": [
        "compliance-protocol-implementation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-implementation.html"
    },
    {
      "id": "compliance-protocol-implementation-what-happens-if-my-crm-isn-t-integrated-with-my-co",
      "question": "What happens if my CRM isn't integrated with my compliance system?",
      "answer": "Without CRM integration, compliance evidence has to be assembled manually from separate systems, which is slower, more error-prone, and harder to defend in an audit. Compliance Protocol Implementation includes CRM integration specifically so consent records, call logs and audit trails live in one connected system rather than being reconciled after the fact.",
      "tags": [
        "compliance-protocol-implementation"
      ],
      "source": "https://heimdell-tech-ai.co.uk/compliance-protocol-implementation.html"
    },
    {
      "id": "systems-architecture-how-much-does-a-fractional-operations-manager-cost",
      "question": "How much does a fractional operations manager cost in the UK?",
      "answer": "UK fractional operations support typically runs £400-£700 per day, with monthly retainers commonly landing between roughly £2,700 and £5,400 for one to two days per week of coverage. Systems Architecture & Fractional Ops is priced from £800/day, positioned within this market range while being scoped specifically to CRM automation, compliance workflow and audit infrastructure for reseller agencies rather than generalist operations management.",
      "tags": [
        "systems-architecture"
      ],
      "source": "https://heimdell-tech-ai.co.uk/systems-architecture.html"
    },
    {
      "id": "systems-architecture-how-much-does-a-fractional-coo-cost-compared-to-hi",
      "question": "How much does a fractional COO cost compared to hiring full-time?",
      "answer": "UK fractional COO engagements typically run £700-£2,000 per day versus £120,000-£220,000 in total annual cost for a full-time hire once salary, NI and on-costs are included. Systems Architecture & Fractional Ops is priced from £800/day specifically so reseller agencies scaling past 100 monthly sign-ups can get senior ops and compliance infrastructure support without committing to that full-time cost.",
      "tags": [
        "systems-architecture"
      ],
      "source": "https://heimdell-tech-ai.co.uk/systems-architecture.html"
    },
    {
      "id": "systems-architecture-at-what-point-does-a-growing-agency-need-dedicated",
      "question": "At what point does a growing agency need dedicated operations support?",
      "answer": "Most agencies feel operational strain between 8 and 15 employees, or once resource conflicts, budget overruns and founder time spent on logistics become regular problems rather than occasional. For reseller agencies specifically, that inflection point tends to show up as sign-up volume scales past roughly 100 per month — which is the threshold Systems Architecture & Fractional Ops is built around.",
      "tags": [
        "systems-architecture"
      ],
      "source": "https://heimdell-tech-ai.co.uk/systems-architecture.html"
    },
    {
      "id": "systems-architecture-what-are-the-signs-a-business-needs-a-fractional-c",
      "question": "What are the signs a business needs a fractional COO or ops consultant?",
      "answer": "Common signs include missed deadlines, the founder spending most of their time on internal logistics instead of growth, departments operating in silos, and recurring bottlenecks that keep resurfacing despite being 'fixed' before. Systems Architecture & Fractional Ops addresses this by building CRM automation, compliance workflows and KPI dashboards so these problems get solved structurally rather than patched repeatedly.",
      "tags": [
        "systems-architecture"
      ],
      "source": "https://heimdell-tech-ai.co.uk/systems-architecture.html"
    },
    {
      "id": "systems-architecture-is-it-cheaper-to-outsource-operations-or-hire-in-h",
      "question": "Is it cheaper to outsource operations or hire in-house?",
      "answer": "Outsourced or fractional operations support typically runs 40-60% less than the fully-loaded cost of an equivalent in-house hire once salary, recruitment, benefits and turnover are factored in. Systems Architecture & Fractional Ops applies this model specifically to reseller agencies, delivering CRM automation and compliance infrastructure at a day rate from £800 rather than the cost of a full-time ops hire.",
      "tags": [
        "systems-architecture"
      ],
      "source": "https://heimdell-tech-ai.co.uk/systems-architecture.html"
    },
    {
      "id": "systems-architecture-what-should-be-on-a-sales-kpi-dashboard",
      "question": "What should be on a sales KPI dashboard?",
      "answer": "A useful sales KPI dashboard tracks a focused set of metrics — deals won/lost/in pipeline, conversion rates, average deal value, sales cycle length and rep activity — rather than trying to track everything at once. Systems Architecture & Fractional Ops builds these dashboards specifically around provider audit and compliance KPIs alongside standard sales metrics, since reseller agencies need visibility into both sales performance and compliance health.",
      "tags": [
        "systems-architecture"
      ],
      "source": "https://heimdell-tech-ai.co.uk/systems-architecture.html"
    },
    {
      "id": "systems-architecture-what-are-the-actual-benefits-of-crm-automation-for",
      "question": "What are the actual benefits of CRM automation for a sales team?",
      "answer": "CRM automation removes manual data entry and follow-up tasks, with studies showing measurable gains in sales productivity and lead conversion once repetitive admin is automated. Systems Architecture & Fractional Ops builds this automation specifically for reseller agencies, pairing it with compliance workflow design so growth doesn't come at the cost of audit-readiness.",
      "tags": [
        "systems-architecture"
      ],
      "source": "https://heimdell-tech-ai.co.uk/systems-architecture.html"
    },
    {
      "id": "systems-architecture-should-i-hire-a-fractional-ops-person-as-a-bridge-",
      "question": "Should I hire a fractional ops person as a bridge before hiring full-time?",
      "answer": "Yes — a common and effective approach is engaging fractional operations support to build the systems and processes first, then hiring a full-time operator later to run what's already been established rather than starting from scratch. Systems Architecture & Fractional Ops is designed to work this way for reseller agencies: building CRM automation, compliance workflows and KPI dashboards that a future in-house hire can inherit and run.",
      "tags": [
        "systems-architecture"
      ],
      "source": "https://heimdell-tech-ai.co.uk/systems-architecture.html"
    },
    {
      "id": "systems-architecture-how-much-does-crm-integration-cost-and-how-long-do",
      "question": "How much does CRM integration cost and how long does it take?",
      "answer": "CRM integration timelines commonly range from 2-4 weeks for simple single-pipeline setups up to 8-12 weeks for multi-stage systems with automation and lead scoring, with UK support retainers typically £150-£600 per month depending on complexity. Systems Architecture & Fractional Ops is priced by day rate from £800 rather than a fixed project fee, since scope varies by how much CRM automation, compliance workflow design and dashboard build-out a given agency needs.",
      "tags": [
        "systems-architecture"
      ],
      "source": "https://heimdell-tech-ai.co.uk/systems-architecture.html"
    },
    {
      "id": "systems-architecture-what-s-the-difference-between-a-fractional-coo-and",
      "question": "What's the difference between a fractional COO and an operations consultant?",
      "answer": "A fractional COO typically takes ongoing accountability for operational outcomes across the business, while an operations consultant is usually engaged for a specific project or system build. Systems Architecture & Fractional Ops sits closer to the project-based model — CRM automation, compliance workflow design, KPI dashboards and audit infrastructure delivered at a day rate — rather than an open-ended executive retainer.",
      "tags": [
        "systems-architecture"
      ],
      "source": "https://heimdell-tech-ai.co.uk/systems-architecture.html"
    },
    {
      "id": "systems-architecture-why-would-a-reseller-agency-need-provider-audit-in",
      "question": "Why would a reseller agency need provider audit infrastructure separate from its CRM?",
      "answer": "A standard CRM tracks sales activity but isn't built to produce the locked, evidential records that provider compliance audits require — those need dedicated audit trail infrastructure layered on top. Systems Architecture & Fractional Ops builds this specifically for agencies scaling past 100 monthly sign-ups, where manual compliance tracking stops being sustainable alongside sales growth.",
      "tags": [
        "systems-architecture"
      ],
      "source": "https://heimdell-tech-ai.co.uk/systems-architecture.html"
    },
    {
      "id": "high-volume-partners-is-outsourcing-sales-verification-cheaper-than-hir",
      "question": "Is outsourcing sales verification cheaper than hiring an in-house compliance team once you're processing thousands of deals a month?",
      "answer": "For most high-volume operations, outsourcing verification costs less than building an in-house compliance department once you factor in recruitment, training, supervision, and technology overhead. An in-house team carries fixed costs that don't flex with deal volume, while a managed service like our High-Volume Partner Program is billed per verification credit (from £0.16 at volume), so cost scales directly with what you're actually processing.",
      "tags": [
        "high-volume-partners"
      ],
      "source": "https://heimdell-tech-ai.co.uk/high-volume-partners.html"
    },
    {
      "id": "high-volume-partners-how-fast-can-a-large-batch-of-sales-verifications-",
      "question": "How fast can a large batch of sales verifications be turned around?",
      "answer": "Our High-Volume Partner Program guarantees a 24-business-hour turnaround on verification batches, regardless of volume. A surge of hundreds or thousands of deals in a single day doesn't create a backlog — every deal is verified and certified within one business day so commission isn't left exposed.",
      "tags": [
        "high-volume-partners"
      ],
      "source": "https://heimdell-tech-ai.co.uk/high-volume-partners.html"
    },
    {
      "id": "high-volume-partners-does-outsourcing-verification-transfer-our-regulat",
      "question": "Does outsourcing verification transfer our regulatory responsibility to the verification provider?",
      "answer": "No — outsourcing verification does not remove a call centre or brokerage's own regulatory responsibility under Ofcom's General Conditions; it strengthens your ability to meet it. Independent third-party verification creates a defensible, provider-ready audit trail showing you took reasonable steps to ensure compliant sales, which is what protects you if a provider or Ofcom investigates.",
      "tags": [
        "high-volume-partners"
      ],
      "source": "https://heimdell-tech-ai.co.uk/high-volume-partners.html"
    },
    {
      "id": "high-volume-partners-can-verification-capacity-scale-up-or-down-with-ou",
      "question": "Can verification capacity scale up or down with our deal volume without renegotiating a contract?",
      "answer": "Yes — the High-Volume Partner Program is built to flex with your pipeline, whether you're processing 500 deals one month and 5,000 the next. Because verification is a managed service rather than an in-house team, capacity scales with volume instead of requiring you to hire, train, or stand down compliance staff to match demand.",
      "tags": [
        "high-volume-partners"
      ],
      "source": "https://heimdell-tech-ai.co.uk/high-volume-partners.html"
    },
    {
      "id": "high-volume-partners-how-does-bulk-pricing-work-for-high-volume-verific",
      "question": "How does bulk pricing work for high-volume verification credits?",
      "answer": "Bulk verification credits are priced on a sliding scale, starting from £0.16 per credit at high volume, so the per-deal cost falls as monthly volume rises. This mirrors standard bulk verification pricing elsewhere in the industry, where heavier usage tiers unlock lower unit rates rather than a flat per-call fee.",
      "tags": [
        "high-volume-partners"
      ],
      "source": "https://heimdell-tech-ai.co.uk/high-volume-partners.html"
    },
    {
      "id": "high-volume-partners-will-high-volume-verification-integrate-with-our-e",
      "question": "Will high-volume verification integrate with our existing CRM or dialler, or do we need to change systems?",
      "answer": "No new systems are required — compliance certificates and call recordings sync directly into your existing CRM, with no manual uploading or duplicate data entry. This matters at scale because manual handoffs between a verification vendor and internal systems are the biggest source of delay and error once volume climbs into the thousands.",
      "tags": [
        "high-volume-partners"
      ],
      "source": "https://heimdell-tech-ai.co.uk/high-volume-partners.html"
    },
    {
      "id": "high-volume-partners-what-happens-if-deal-volume-spikes-unexpectedly-su",
      "question": "What happens if deal volume spikes unexpectedly, such as during a new campaign launch?",
      "answer": "The High-Volume Partner Program is designed to absorb volume spikes without a drop in turnaround, because verification capacity isn't tied to a fixed in-house headcount. This is the practical advantage of a managed verification service over an internal team: capacity can flex by orders of magnitude in weeks, which is much harder to do through recruitment and training for an internal compliance function.",
      "tags": [
        "high-volume-partners"
      ],
      "source": "https://heimdell-tech-ai.co.uk/high-volume-partners.html"
    },
    {
      "id": "high-volume-partners-can-third-party-verification-catch-a-single-rogue-",
      "question": "Can third-party verification catch a single rogue sales agent inside a large team before it triggers a provider audit?",
      "answer": "Yes — independent verification calls every customer directly, so a single agent misrepresenting a sale is caught deal-by-deal rather than surfacing only after a pattern shows up in a provider's own audit. Catching mis-selling at the point of sale, before it reaches the provider's billing system, is what stops one rogue agent from becoming a company-wide clawback event.",
      "tags": [
        "high-volume-partners"
      ],
      "source": "https://heimdell-tech-ai.co.uk/high-volume-partners.html"
    },
    {
      "id": "high-volume-partners-what-s-the-difference-between-call-monitoring-qa-s",
      "question": "What's the difference between call-monitoring QA software and full independent verification of every deal?",
      "answer": "QA software typically samples a small fraction of calls — most contact centres review only 1-5% of interactions — while independent third-party verification checks every deal before it's submitted. That gap matters at volume: a small QA sample can miss a systematic mis-selling pattern for weeks, whereas verifying 100% of deals catches it in the next batch.",
      "tags": [
        "high-volume-partners"
      ],
      "source": "https://heimdell-tech-ai.co.uk/high-volume-partners.html"
    },
    {
      "id": "high-volume-partners-do-we-still-need-our-own-compliance-staff-once-we-",
      "question": "Do we still need our own compliance staff once we're doing 10,000+ deals a month?",
      "answer": "No — the High-Volume Partner Program is built as a fully managed service specifically so operations at this scale don't need to build an internal compliance department. We act as your outsourced verification function, handling the calls, evidence, and reporting, so you keep the commission without added headcount or software costs.",
      "tags": [
        "high-volume-partners"
      ],
      "source": "https://heimdell-tech-ai.co.uk/high-volume-partners.html"
    },
    {
      "id": "high-volume-partners-how-is-verification-evidence-stored-so-it-can-be-p",
      "question": "How is verification evidence stored so it can be produced quickly during a provider audit at high volume?",
      "answer": "Every verified deal generates an instant, provider-ready compliance certificate with recorded consent, stored directly in your CRM alongside the deal record. At high volume this matters because a provider audit can request evidence for hundreds of contracts at once, and having certificates already filed against each deal avoids a scramble to locate recordings after the fact.",
      "tags": [
        "high-volume-partners"
      ],
      "source": "https://heimdell-tech-ai.co.uk/high-volume-partners.html"
    },
    {
      "id": "telecom-vendors-is-a-telecom-network-liable-when-its-reseller-chan",
      "question": "Is a telecom network liable when its reseller channel mis-sells to customers?",
      "answer": "Ofcom has directly fined providers for mis-selling and 'slamming' carried out through their sales channels — cases like Guaranteed Telecom and Met Technologies show enforcement action lands on the entity responsible for the customer relationship, not just the individual salesperson. Because reseller conduct reflects on the network's regulatory standing and billing system, networks increasingly use independent verification to catch mis-selling before it reaches their books, rather than relying solely on reseller self-reporting.",
      "tags": [
        "telecom-vendors"
      ],
      "source": "https://heimdell-tech-ai.co.uk/telecom-vendors.html"
    },
    {
      "id": "telecom-vendors-what-should-a-telecom-network-check-before-signing",
      "question": "What should a telecom network check before signing a new reseller or channel partner agreement?",
      "answer": "Due diligence before onboarding a reseller typically covers licensing, regulatory compliance history, financial stability, and data protection practices, with ongoing obligations written into the channel partner agreement rather than checked only once. Many networks also build in independent verification of the reseller's sales conduct after go-live, since pre-signing due diligence can't catch mis-selling that starts once the partner is actively selling.",
      "tags": [
        "telecom-vendors"
      ],
      "source": "https://heimdell-tech-ai.co.uk/telecom-vendors.html"
    },
    {
      "id": "telecom-vendors-why-isn-t-automated-qa-call-monitoring-enough-to-p",
      "question": "Why isn't automated QA call-monitoring enough to police a reseller channel?",
      "answer": "Automated QA and call-scoring tools typically sample only a small percentage of calls — most contact centres review just 1-5% of interactions — which leaves most reseller-customer conversations unchecked. Independent third-party verification closes that gap by checking every deal rather than a sample, which matters when the reseller itself controls what gets flagged for internal review.",
      "tags": [
        "telecom-vendors"
      ],
      "source": "https://heimdell-tech-ai.co.uk/telecom-vendors.html"
    },
    {
      "id": "telecom-vendors-can-a-network-terminate-a-reseller-s-contract-for-",
      "question": "Can a network terminate a reseller's contract for repeated compliance failures, and what evidence does it need?",
      "answer": "Yes — channel partner agreements typically allow suspension or termination for serious or repeated compliance breaches, but enforcing that requires documented evidence rather than the reseller's own account of what happened. Independent, recorded verification of individual sales calls gives a network defensible, third-party evidence it can act on, rather than relying on the reseller's self-reported compliance data.",
      "tags": [
        "telecom-vendors"
      ],
      "source": "https://heimdell-tech-ai.co.uk/telecom-vendors.html"
    },
    {
      "id": "telecom-vendors-what-s-the-difference-between-a-channel-partner-sc",
      "question": "What's the difference between a channel partner scorecard and independent third-party verification?",
      "answer": "A channel partner scorecard tracks performance metrics the reseller self-reports — deal volume, conversion rates, certification status — while independent verification is a neutral, direct check of what actually happened on the sales call itself. Scorecards measure output; independent verification confirms the underlying sale was conducted compliantly, which a self-reported scorecard can't validate on its own.",
      "tags": [
        "telecom-vendors"
      ],
      "source": "https://heimdell-tech-ai.co.uk/telecom-vendors.html"
    },
    {
      "id": "telecom-vendors-are-resellers-held-to-the-same-ofcom-general-condi",
      "question": "Are resellers held to the same Ofcom General Conditions as the network they sell for?",
      "answer": "Yes — resellers and smaller providers are subject to Ofcom's General Conditions in the same way as network operators; being a channel partner rather than a network doesn't exempt a reseller from consumer protection and sales conduct rules. Most wholesale and channel agreements require resellers to maintain that compliance as a condition of continuing to sell on the network, which is why networks increasingly verify it independently rather than taking it on trust.",
      "tags": [
        "telecom-vendors"
      ],
      "source": "https://heimdell-tech-ai.co.uk/telecom-vendors.html"
    },
    {
      "id": "telecom-vendors-why-would-a-network-pay-for-independent-verificati",
      "question": "Why would a network pay for independent verification instead of relying on the reseller's own compliance reporting?",
      "answer": "Independent verification removes the conflict of interest inherent in a reseller marking its own homework — the reseller has a commercial incentive to under-report problems with its own sales. A neutral third party calling the customer directly verifies what was actually agreed and disclosed, giving the network evidence it can trust for its own regulatory standing rather than the reseller's word alone.",
      "tags": [
        "telecom-vendors"
      ],
      "source": "https://heimdell-tech-ai.co.uk/telecom-vendors.html"
    },
    {
      "id": "telecom-vendors-how-is-channel-and-vendor-compliance-verification-",
      "question": "How is channel and vendor compliance verification priced for telecom networks?",
      "answer": "Channel and vendor compliance programmes are custom-quoted per network rather than sold on a fixed price list, because scope depends on the size of the reseller channel, verification volume, and reporting requirements. This differs from the credit-based pricing used for individual resellers and call centres, reflecting that a network-level programme is a bespoke service covering an entire channel, not a single account.",
      "tags": [
        "telecom-vendors"
      ],
      "source": "https://heimdell-tech-ai.co.uk/telecom-vendors.html"
    },
    {
      "id": "telecom-vendors-what-is-slamming-and-how-can-a-network-detect-it-h",
      "question": "What is 'slamming' and how can a network detect it happening inside its reseller channel?",
      "answer": "Slamming is switching a customer's service without valid consent — an aggressive form of mis-selling that Ofcom has fined providers for, including cases involving elderly and vulnerable customers. Independent verification calls placed to the customer directly, separate from the reseller's own sales process, are what surface unauthorised switches before they show up as a customer complaint or an Ofcom investigation.",
      "tags": [
        "telecom-vendors"
      ],
      "source": "https://heimdell-tech-ai.co.uk/telecom-vendors.html"
    },
    {
      "id": "heimdell-chatbot",
      "question": "Is there a chatbot on your website?",
      "answer": "Yes. The 'Ask Heimdell' chat on this website answers questions about our services, prices, AI agent standards and telecom compliance. Its answers are pre-written and come from our published knowledge catalogue; it does not use generative AI and it does not store your questions. For anything it cannot answer, contact us at https://heimdell-tech-ai.co.uk/contact.html.",
      "tags": [
        "chatbot",
        "assistant",
        "faq"
      ],
      "source": "https://heimdell-tech-ai.co.uk/privacy-policy.html#chat",
      "aliases": [
        "chatbot",
        "chat bot",
        "live chat",
        "can I chat with someone",
        "ask heimdell",
        "virtual assistant"
      ]
    },
    {
      "id": "heimdell-chatbot-human",
      "question": "Am I talking to a person or an AI?",
      "answer": "The chat on this website is an automated assistant that gives pre-written answers from our knowledge catalogue. It is not a person. To speak to a person, email or use the contact page: https://heimdell-tech-ai.co.uk/contact.html.",
      "tags": [
        "chatbot",
        "human",
        "contact"
      ],
      "source": "https://heimdell-tech-ai.co.uk/contact.html",
      "aliases": [
        "real person",
        "is this a bot",
        "human",
        "are you a robot",
        "speak to a human",
        "talk to someone"
      ]
    },
    {
      "id": "guide-what-is-a2a",
      "question": "What is the A2A protocol?",
      "answer": "The Agent2Agent (A2A) protocol is an open standard that lets one AI agent find another agent or business, see what it can do and send it a task. Google launched it in 2025 and it is now run by the Linux Foundation. A business publishes an Agent Card at /.well-known/agent-card.json. Guide: https://heimdell-tech-ai.co.uk/what-is-a2a-protocol.html",
      "tags": [
        "a2a",
        "protocol",
        "agents"
      ],
      "aliases": [
        "what is agent2agent",
        "explain a2a",
        "a2a meaning"
      ],
      "source": "https://heimdell-tech-ai.co.uk/what-is-a2a-protocol.html"
    },
    {
      "id": "guide-what-is-ap2",
      "question": "What is the Agent Payments Protocol (AP2)?",
      "answer": "AP2 is an open standard from Google, announced in September 2025, that lets an AI agent pay on a customer's behalf. Signed digital mandates (an intent mandate and a cart mandate) record exactly what the customer approved, so the shop, the payment provider and the customer share proof. Guide: https://heimdell-tech-ai.co.uk/what-is-ap2-agent-payments-protocol.html",
      "tags": [
        "ap2",
        "payments",
        "mandates"
      ],
      "aliases": [
        "what is ap2",
        "agent payments protocol explained",
        "what is a mandate",
        "can ai agents pay"
      ],
      "source": "https://heimdell-tech-ai.co.uk/what-is-ap2-agent-payments-protocol.html"
    },
    {
      "id": "guide-a2a-mcp-ap2-ucp",
      "question": "What is the difference between A2A, MCP, AP2 and UCP?",
      "answer": "MCP connects an AI assistant to tools and data. A2A lets AI agents talk to each other. AP2 lets an agent pay with signed proof of what the customer approved. UCP lets shopping agents browse and buy from online shops. Most businesses need only one or two. Guide: https://heimdell-tech-ai.co.uk/a2a-vs-mcp-vs-ap2-vs-ucp.html",
      "tags": [
        "comparison",
        "a2a",
        "mcp",
        "ap2",
        "ucp"
      ],
      "aliases": [
        "a2a vs mcp",
        "which protocol do i need",
        "difference between mcp and a2a",
        "compare agent protocols"
      ],
      "source": "https://heimdell-tech-ai.co.uk/a2a-vs-mcp-vs-ap2-vs-ucp.html"
    },
    {
      "id": "guide-readiness-checklist",
      "question": "How do I get my website ready for AI agents?",
      "answer": "Make your facts accurate and consistent, put prices and policies in plain text, add structured data, let AI crawlers in, publish an llms.txt file, keep pages fast with short answers at the top, then add the right protocol (MCP, A2A or UCP) and test with real AI questions. Checklist: https://heimdell-tech-ai.co.uk/ai-agent-readiness-checklist-uk.html",
      "tags": [
        "checklist",
        "readiness",
        "agents"
      ],
      "aliases": [
        "agent readiness checklist",
        "how to prepare for ai agents",
        "make my website ai ready"
      ],
      "source": "https://heimdell-tech-ai.co.uk/ai-agent-readiness-checklist-uk.html"
    },
    {
      "id": "guide-llms-txt",
      "question": "What are llms.txt, agent-card.json and robots.txt?",
      "answer": "robots.txt says which crawlers may visit your site. llms.txt is a short Markdown summary of your business for AI systems; it is a proposal rather than an official standard. agent-card.json describes what your business can do for AI agents using A2A. Guide: https://heimdell-tech-ai.co.uk/llms-txt-agent-card-robots-explained.html",
      "tags": [
        "llms.txt",
        "robots",
        "agent card"
      ],
      "aliases": [
        "what is llms.txt",
        "what is an agent card",
        "should i block ai crawlers"
      ],
      "source": "https://heimdell-tech-ai.co.uk/llms-txt-agent-card-robots-explained.html"
    },
    {
      "id": "guide-agentic-commerce",
      "question": "What is agentic commerce and what should a small business do?",
      "answer": "Agentic commerce means AI agents find, compare and buy on a customer's behalf. A small business should first make its products, prices and policies clear and machine-readable, then choose one protocol that fits, keep logs and decide what an agent may do without a person. Guide: https://heimdell-tech-ai.co.uk/agentic-commerce-uk-small-business.html",
      "tags": [
        "agentic commerce",
        "agents",
        "small business"
      ],
      "aliases": [
        "what is agentic commerce",
        "will ai agents shop for customers",
        "ai shopping agents"
      ],
      "source": "https://heimdell-tech-ai.co.uk/agentic-commerce-uk-small-business.html"
    },
    {
      "id": "case-studies-published",
      "question": "Do you have case studies or customer testimonials?",
      "answer": "Not yet. Heimdell Tech Ai has no published client case studies or testimonials. Results will be published only when a named client agrees. You can try the free agent-readiness scan or the free commission clawback audit instead. More: https://heimdell-tech-ai.co.uk/case-studies.html",
      "tags": [
        "case studies",
        "testimonials",
        "reviews"
      ],
      "aliases": [
        "do you have references",
        "customer reviews",
        "proof of results"
      ],
      "source": "https://heimdell-tech-ai.co.uk/case-studies.html"
    }
  ]
}