Privacy first measurement supplier claims and evidence limits

What do these supplier pages establish about privacy first measurement?

Only that these three are public-evidence candidates, not approved, ranked or recommended suppliers. Their published pages describe stated offers, but cannot establish delivery quality, suitability for a particular England brief, or whether a service is currently available without engagement-specific verification.

Candidates came from earlier England supplier research. Inclusion required a live page describing analytics audit or implementation work; no wider market census was attempted. No agency was contacted, paid or invited to demonstrate, and no contract, client reference, code or completed engagement was inspected.

Page claims were not checked against client material or live testing, so this is a review of published descriptions rather than service quality or availability for a particular England engagement. For all three firms, the status remains public-evidence candidate only; confirm client claims and availability for the specific work proposed.

Any live proposal still needs qualified privacy, PECR, accessibility and contract reviewers, alongside a separate security review. Those engagement-specific checks remain necessary because published descriptions and unverified client claims cannot establish whether an advertised service is available or suitable for the proposed work.

How can I check Anders Analytics' scope and independence?

Anders Analytics offers a public starting point, not evidence of independent advice or delivery. Its London agency description lists GA4, server-side tracking, consent, governance and reporting, and states that it takes no vendor kickbacks or sells software licences; confirm that commercial claim in the contract.

Ask Anders Analytics to separate Google product configuration from independent privacy advice. Request a data-flow map, permission-state tests, reconciliation evidence, an accessibility method for reporting outputs, and a handover pack. Ask who performs each task and whether any recommendation would create another commercial relationship for the proposed engagement.

Neither its service claims nor its independence statement was tested. Confirm the people assigned to your work and the commercial relationships relevant to the proposal; the public statement alone cannot prove delivery or show that conflicts are absent for the specific engagement being considered.

Could Metric Owl fit the specialist work I have in mind?

Metric Owl could be considered for a small specialist brief only if its listed scope matches the need; public material establishes neither capacity nor outcomes. It describes an independent London consultant offering GA4 audits, setup, training, BigQuery connection and reporting work for buyers to assess.

Ask which proposed tasks the named consultant will deliver, how cover and incident response would operate, and what happens if availability changes. Request a redacted audit-evidence example, not just a checklist title, and record who owns each artefact when the engagement ends.

Set out who owns code, accounts and documentation at exit. The site uses performance and compliance language, but this review neither adopts nor verifies those claims; require evidence for the proposed task rather than treating promotional wording as assurance for your specific engagement in advance.

What evidence should I request from Measurelab?

Measurelab's solutions page advertises a Foundation Audit, a framing engagement and continuing data assurance. Its stated scope covers tracking, consent, analytics platforms and warehouses; those descriptions do not establish whether the proposed work will achieve a particular outcome for your brief.

Request a redacted sample issue register, the audit test script, severity definitions, retained evidence and acceptance conditions. Ask which proposed deliverables you would own, how continuing assurance identifies changes to definitions or collection, and which named staff and subcontractors would carry out the work.

The desk research confirmed neither Measurelab's client claims nor whether its advertised service is available. Treat both as unresolved and seek evidence connected to the actual proposed engagement. A general service-page description should not substitute for that material before you enter a contract.

How can I compare the proposals without treating a listing as proof?

Use one written evidence request and rubric for all three, but only when each supplier's stated scope matches the problem. None is approved, ranked or recommended; preserve dissent. A Companies House search is an administrative check on an entity or filings, not a measure of service quality.

The official service disclaimer says Companies House filing information has not necessarily been verified. Registration or filing presence is not evidence of supplier quality, so use any search narrowly, to check an entity or filings, and retain it only as an administrative check.

The ICO's controller and processor guidance says actual decision-making and responsibilities determine the parties' data roles, rather than the contract label alone. Agree data protection responsibilities, purposes, access and deletion terms before signing or sharing data with a supplier for the proposed work.

Keep privacy, PECR, security, accessibility and contract checks separate before approval. Consult the ICO's cookies and similar technologies guidance as part of the PECR review, then examine the actual proposal. Neither a service-page claim nor a company filing can replace an engagement-specific assessment for your work.

When should I hold data back or stop?

Hold production data back until the proposed work has been examined. A small paid discovery task using minimised or synthetic data can be scored against one rubric; retain dissent and complete the exercise before approval, alongside qualified privacy, PECR, security, accessibility and contract scrutiny.

Stop if a supplier cannot explain data flows, refuses evidence, merges legal advice with implementation, cannot return buyer-owned artefacts, or leaves essential accessibility or security work without an owner. Recheck supplier pages and conflicts immediately before a tender decision, because this review did not establish that public statements apply to the work proposed.

What should I do first?

Start with written evidence requests and ownership, not production data. Then use paid discovery with minimised or synthetic data, compare the outputs through one rubric, preserve dissent, and ask qualified reviewers to examine the live proposal before making a supplier decision.