Who is behind Caldora Compliance
Caldora Compliance is built and run by Caldora Compliance Limited (company number 17080432), a sister company of Caldora Consulting. It was founded by Paul McIver, who has more than 20 years of senior leadership in UK heat networks, ESCo structuring and Ofgem regulation readiness.
Built by people who run heat networks
Paul negotiated the contract terms and led the mobilisation and operation of the heat and cooling networks at Battersea Power Station. His other projects include Seaham Garden Village and Lombard Square. The platform is built around the questions operators, suppliers and their contractors actually face under Ofgem regulation. Paul’s background.
How the regulatory content is built
- Each authorisation condition is reproduced from Ofgem’s January 2026 authorisation conditions decision, Appendix 2.
- Which conditions apply to a network is worked out from the same rules the public registration checker uses: the company’s role, who it supplies and the kind of network.
- A daily check watches Ofgem’s heat network pages and guidance, the regulations themselves and the government’s HNTAS pages. A change to the rules flags the conditions it affects for review, showing the wording before and after.
Where your data is held
| The application | Vercel, London region |
| The database | Neon, UK (London) |
| Uploaded evidence files | AWS S3, EU (Stockholm), encrypted at rest |
| Error monitoring | Sentry, EU data region |
The AI features send regulatory text, compliance statuses and evidence content with personal data removed first. Our AI provider does not use that data to train its models. The full list of providers is in the privacy notice.
How access is controlled
- Your administrator can require two-step sign-in for everyone in your organisation.
- Each person sees what their role allows. A firm you appoint sees only its own networks and the conditions it works on for you, and loses access the moment the appointment ends.
- Only your own people sign conditions off. Every evidence upload and deletion, status change and sign-off is recorded with who did it and when.
- Traffic is encrypted over HTTPS, passwords are stored as bcrypt hashes, and sign-in and the API are rate limited.
Contact
info@caldoracompliance.co.uk
020 3780 9791