About the practice
EPX Intelligence exists because EPX IT built the foundation.
EPX Intelligence is the AI and governance practice of EPX IT, based in Stafford and independently owned. This page sets out exactly what we hold, what we do not, and why the AI work sits in its own practice rather than inside the IT business.
In short
EPX Intelligence is the AI practice of EPX IT, a Stafford based UK managed services provider trading for over 20 years and supporting organisations of up to nearly 1,000 users. EPX IT holds Cyber Essentials Plus and is implementing ISO/IEC 27001. EPX Intelligence prepares client firms for ISO/IEC 42001 certification, which is then awarded by a UKAS accredited certification body.
Why a separate practice
Two different buyers cannot be spoken to credibly from one page.
EPX IT serves SMEs of roughly 50 to 120 users who want managed IT support done properly. It is a well established business with a loyal client base, and it continues exactly as it is.
EPX Intelligence points somewhere else: regulated and professional services firms, most often between 100 and 250 users, usually with an in house IT manager alongside an existing provider, who do not need support and do need an answer on AI. Different buyer, different problem, different conversation. Running both from one site would have meant weakening each of them, so each has its own home.
What the two share is what cannot be assembled quickly: two decades of trading, a client base, an engineering team, and the credentials on this page. All of it was earned by EPX IT, and it is the reason a regulated firm can take EPX Intelligence seriously from the first meeting.
How the two work together in practice
They share a team and a track record, and they are sold separately on purpose. EPX Intelligence programmes are bought standalone: they are not bundled into an EPX IT support contract, they do not require you to change IT provider, and they work alongside an incumbent you have every intention of keeping.
The honest position
What we hold, and what we do not.
Compliance buyers check. So here it is, and we will keep this section current.
Held by EPX IT. The independently tested version of the NCSC scheme rather than the self assessed one.
HeldEPX IT is implementing it now, with an external auditor engaged,.
In progressThe AI management system standard, extending ISO/IEC 27001 to cover how AI is chosen, deployed, monitored and retired. This is the standard EPX Intelligence prepares client firms for.
The next standardHeld by EPX IT, most recently in 2025. Industry recognition rather than a certification, and we describe it that way.
Held by EPX ITWinner in 2024, held by EPX IT.
Held by EPX ITWe are going through ISO/IEC 27001 certification ourselves while advising other firms on their own management systems. We think that is the right way round. An implementer who has never had to keep a management system alive between audits does not really know what they are handing you, and the hard part of certification is not getting it, it is still having it in three years.
Where we are
Stafford based, and working with firms across the UK
Regulated firms across the UK
All four pillars are delivered to the same standard wherever the firm is, and we work with regulated firms right across the UK.
Stafford, Staffordshire
We have a real office and you are welcome to visit it. It is where the team sits, not a registered address.
Twenty years of EPX IT
EPX Intelligence is a practice of EPX IT, which has supported UK businesses from Stafford for over twenty years. That is the base this is built on.
Straight answers
Questions about who we are
What certifications does EPX IT hold?
EPX IT holds Cyber Essentials Plus, which is the independently tested version of the NCSC scheme rather than the self assessed one, and is currently implementing ISO/IEC 27001. Going through that implementation while advising other firms on their own management systems is the right way round, because the difficult part of a certification is not gaining it, it is still holding it in three years.
Is EPX Intelligence a separate company?
EPX Intelligence is a practice of EPX IT and not a separate legal entity, so your contract is with EPX IT. We keep the branding separate because the propositions are genuinely different. It is not there to obscure who you are contracting with.
Will you try to sell us managed IT support?
No, EPX Intelligence will not try to sell you managed IT support. If you ask us about it we will happily point you at the EPX IT side, and there is a page on this site describing it. But AI programmes are sold standalone and we will not make a support contract a condition of anything.
Why should we trust EPX Intelligence with something this important?
EPX Intelligence is new, and the reasons to trust it with this are the 20 years behind it, the credentials on this page, the fact that we are going through the same certification process we advise on, and that our first commitment on any engagement is a fixed price assessment rather than a programme. If the assessment is not good, do not buy the rest.
Ask us the awkward questions
Thirty minutes, and we will not dress anything up.
Bring the questions your compliance lead would ask. We would rather answer them on a call than have you find the gap later.