About CO2 Compliance Services (UK) Ltd
The company behind Citicus ONE — helping organisations manage information risk for over two decades.
Our Company
CO2 Compliance Services (UK) Ltd is a United Kingdom-based software company specialising in information risk assessment and security governance. We develop, host and maintain the Citicus ONE platform, a comprehensive enterprise solution used by organisations worldwide to assess, quantify and manage their information security risks.
Founded with the mission to make rigorous risk assessment accessible and practical, we have built our reputation on delivering a platform that combines academic rigour with real-world usability. Our approach is grounded in established risk management principles and refined through years of working with security professionals across industries.
What We Do
Our core business is the development and operation of the Citicus ONE software-as-a-service platform. We provide:
- Software Development — We design, build and continuously improve the Citicus ONE platform, incorporating feedback from our customers and staying aligned with evolving regulatory requirements and industry standards.
- Cloud Hosting & Operations — We host and manage the platform on secure cloud infrastructure, ensuring high availability, data protection and regular backups.
- Customer Support — We provide direct technical and product support to our subscribers, helping them get the most from the platform.
- Training & Onboarding — We help new customers get up and running quickly with structured onboarding programmes and training materials.
Our Approach
We believe that effective information security governance starts with understanding risk in business terms. Citicus ONE is built on this principle — it helps organisations move beyond checkbox compliance to a genuine understanding of where their risks lie and what they can do about them.
Our methodology produces quantified risk scores that enable objective comparison, trend analysis and clear communication to board-level audiences. This approach has been validated across hundreds of organisations in both the public and private sectors.