XMA LIMITED

Tricentis Automated Software Quality and Testing Platform

Tricentis provides a suite of cloud-based continuous testing and quality assurance tools, including Tosca for automated testing, Data Integrity for end-to-end data validation, qTest for test management, NeoLoad for performance testing, LiveCompare for SAP change impact analysis, and SeaLights for software quality intelligence and release optimization.

Features

• Tosca: Model-based automated testing across UI, API, and mobile.
• Data Integrity: Automates data validation and reconciliation across complex systems.
• qTest: Centralized test management with real-time reporting and DevOps integration.
• NeoLoad: Performance and load testing for modern, scalable applications.
• LiveCompare: Analyzes SAP changes to identify risks and testing priorities.
• SeaLights: AI-driven quality metrics for continuous testing and release optimization.

Benefits

• Tosca: Accelerates testing cycles and reduces manual effort dramatically.
• Data Integrity: Ensures trusted, accurate data flows across enterprise systems.
• qTest: Streamlines test collaboration and boosts release visibility across teams.
• NeoLoad: Speeds performance validation to deliver reliable, scalable applications faster.
• LiveCompare: Pinpoints SAP changes, cutting testing effort and deployment risk.
• SeaLights: Optimizes test coverage and improves release confidence continuously.

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bidteam@xma.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

131687758536427

Contact

Nancy Clayton-Schofield
0115 846 4000
bidteam@xma.co.uk

About your service

• Service categories:

  Application Development and Deployment

  Software quality and life cycle

  • Automated software quality
  • Software change, configuration and process management
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Tosca extends SAP, Salesforce, Oracle, ServiceNow and web applications. Data Integrity validates data across SAP, Oracle, Snowflake and ETL systems. qTest integrates with Jira, Azure DevOps and CI/CD pipelines. NeoLoad tests performance of SAP, Salesforce, APIs and platforms. LiveCompare analyses SAP change impact. SeaLights integrates with Jenkins, GitHub, Azure DevOps..
• Cloud deployment model: Hybrid cloud
• Service constraints: No
• System requirements:
  • Tosca & Data Integrity: Browser access; optional execution agents required.
  • Docs.tricentis.com/tosca
  • QTest: Browser-based SaaS; no local installation required.
  • Docs.tricentis.com/qtest
  • NeoLoad: Browser access; optional load generators for test execution.
  • Docs.tricentis.com/neoload
  • LiveCompare: Browser access; SAP connectivity required.
  • Documentation.tricentis.com/livecompare
  • SeaLights: Browser-based SaaS; CI/CD integration optional.
  • Documentation.tricentis.com/sealights

User support

• Email or online ticketing support: Yes
• Support response times: Severity 1 tickets receive an initial response within 2 hours, 24 × 7, so weekends do not affect that SLA. ; ; Severity 2 issues are answered within 6 business hours and Severity 3 within 12 business hours; these business-hour targets apply Monday–Friday, so lower-severity questions logged at the weekend are handled at the start of the next business day.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.2 AAA
• Web chat accessibility testing: Our web chat support is designed and tested in accordance with accessibility best practices, including compatibility with common assistive technologies. Testing is conducted as part of our internal QA and accessibility processes, and all chat responses are subject to human review. Due to confidentiality reasons, detailed testing procedures are not externally disclosed.
• Onsite support: Yes
• Support levels: Tricentis provides two support tiers. Gold Support, included in the annual subscription fee, offers 24×5 first-line helpdesk access and all updates, upgrades, and patches. Platinum Support, available for an additional fee, extends coverage to 24×7. ; ; Every customer is paired with a Customer Success Manager, and dedicated Technical Account Management packages can be purchased for deeper product and deployment guidance. Support tickets are handled by Tricentis support engineers for both SaaS and self-hosted deployments.
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: Users gain immediate access to our online documentation and Support Portal, which provide product manuals, knowledge-base articles, and troubleshooting resources. The Tricentis Academy offers free, role-based self-paced courses, tutorials, webinars, and certifications, and we can supplement these with instructor-led classroom or onsite training.; ; Product-specific quick-start assetssuch as NeoLoad’s five-step Quick Start, qTest Manager Quick Start Guides, LiveCompare’s “Get started” topic, and Tosca’s installation and first-steps manualshelp teams exe cute their first tests rapidly. For projects requiring extra assistance, our Professional Services consultants deliver packaged starter engagements covering installation, configuration, coaching, and best-practice mentoring; Enterprise SeaLights customers are also provisioned into a dedicated cloud instance during onboarding.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
  • Other
• Other documentation formats:
  • Online HTML portal at documentation.tricentis.com
  • Offline documentation ZIP package for disconnected environments
  • Local HTML files within installed Docs directory
• End-of-contract data extraction: At contract end, customers can self-service export their data before scheduled deletion. For qTest, all requirements, test assets, and defects can be exported in CSV, Excel, HTML, PDF, or via the REST API, and the tenant remains available for 60 days before data is erased. NeoLoad Web SaaS keeps the tenant accessible for 30 days so customers can download test results and reports; backups are retained for a further 30 days before deletion. SeaLights and LiveCompare provide bulk-export capabilities (for example, JSON REST endpoints) for all analytics or analysis datasets, while Tosca data resides in the customer’s own environment, allowing export or backup through existing enterprise tools at any time.
• End-of-contract process: When a subscription ends, customers can export all qTest data for up to 60 days, NeoLoad Web data for 30 days, and SeaLights data for 5 days before it is permanently deleted. The contract price includes this grace-period access and Gold 24 × 5 support for routine off-boarding questions. Platinum Support, specialised data-extraction help, and professional-services engagements for migration are available at additional cost.
• Documentation accessibility standard: WCAG 2.2 AAA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Other
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: WCAG 2.2 AAA
• Description of service interface: Tricentis products provide interfaces appropriate to their delivery model. Tosca offers a Windows-based desktop graphical user interface for test design, execution, and administration. qTest, SeaLights, and NeoLoad Web provide browser-based web interfaces for test management, analytics, dashboards, and reporting, with no local installation required. NeoLoad also includes a desktop controller for test design and execution. LiveCompare provides a web-based interface integrated with SAP environments. All interfaces are role-based, support secure authentication, and are complemented by APIs for integration.
• Accessibility standards: WCAG 2.2 AAA
• Accessibility testing: We evaluate our web interfaces against VPAT accessibility criteria and embed documented accessibility checkpoints throughout the software development lifecycle to address compatibility with assistive technologies.; ; Tosca on prem has undergone accessibility interface testing using the NVDA screen reader, with other screen readers such as JAWS and Microsoft Narrator expected to work correctly. Testing validated keyboard navigation, keyboard shortcuts, alternative navigation without a mouse, focus cursor movement, text modification support, and native Windows accessibility functionality. Accessibility conformance was evaluated against WCAG 2.1 AA and Revised Section 508 (Functional Performance Criterion 302.1 Without Vision) using the Colour Contrast Analyser and NVDA screen reader, with VPAT documentation available via the SafeBase Trust Center (https://security.tricentis.com/).
• API: Yes
• What users can and can't do using the API: Tricentis APIs allow users to integrate with external systems, automate workflows, and programmatically access selected data and functions. Typical use cases include creating and updating test assets, triggering test executions, retrieving execution results, metrics, and reports, and integrating with CI/CD pipelines, ALM, and defect tracking tools. APIs are designed for integration and automation purposes and operate within defined security and permission boundaries. Users cannot modify core product logic, bypass security controls, or perform unsupported administrative actions through the APIs; all access is governed by role-based permissions and product-specific limitations.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Tricentis products are configurable through supported settings such as roles, workflows, dashboards, reports, integrations, and execution options. SaaS products are customised through configuration and APIs, while customer-hosted products allow additional environment-level configuration within the customer’s infrastructure.; ; qTest administrators add custom fields, dashboards, and user profiles through the web UI or APIs, while Insights Editors adjust dashboard panels, tabs, and filters. In NeoLoad, performance teams configure scenario parameters, variables, JavaScript or Java custom actions, attach SLA profiles, create custom metrics, and save project XML files for shared work. LiveCompare analysts create, edit, or import template workflows to suit project needs. Tosca users set personal options in the UI, and administrators modify configuration files to introduce or change global settings.

Scaling

• Independence of resources: Our SaaS products automatically scale compute resources based on real-time utilization metrics, and customers can reserve additional capacity for large planned NeoLoad tests. qTest applies API back-pressure and rate-limiting to absorb burst traffic, while tenant isolation across all services prevents one customer’s load from affecting another. For deployments hosted in the customer’s environment, such as LiveCompare and Tosca, each instance is fully segregated, so other tenants cannot impact performance.

Analytics

• Service usage metrics: Yes
• Metrics types: Tricentis provides service availability and support metrics aligned to the applicable SLA, along with product-level reporting and dashboards. Infrastructure metrics for customer-hosted deployments remain under customer control.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Tricentis

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: We generate tenant-specific AES-256 keys in AWS KMS or FIPS 140-2 Level-3 HSMs, store them exclusively in those vaults, and restrict access to service principals so no personnel can view plaintext material. Keys are created with secure randomness, fully logged, and rotated at least annually or sooner when risk warrants to maintain isolation between tenants; Tosca stores the limited registration data it retains with OS-protected keys.
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Degaussing
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: Users can retrieve their information at any time. Test-management data exports support Excel, CSV, HTML, PDF, and API retrieval. Performance results may be downloaded as PDF, CSV, or PNG and accessed via REST APIs. Quality-risk analytics offers REST/JSON APIs, SDKs, and CLI tools for bulk or query-based extraction. Change-impact grids provide an Excel export option. Desktop test-automation projects allow full repository or object-level exports as database or subset files.
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats:
  • PDF
  • Excel XLSX– Spreadsheet enabling offline analysis, pivoting, and filtered calculations;
  • CSV– Plain-text comma-separated table for integrations, bulk loaders, scripting tasks
  • HTML– Web page export supporting viewing, hyperlink navigation, and archiving;
  • Word DOCX– Narrative report with text, screenshots, and embedded annotations;
  • JPG– Compressed image capturing exploratory steps, annotations, and marked defects;
  • PNG– High-resolution graphic of dashboards, charts, analyses for effective presentations;
  • PowerPoint PPTX– Slide deck summarizing outcomes, impact analyses, and metrics;
  • TRACE– Session archive retaining playback metadata for detailed defect triage;
  • OSV Scenario– Virtualization package exportable for replay during API testing.
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Microsoft Excel (.xls/.xlsx) spreadsheets for parameters, datasets, bulk data uploads.
  • Microsoft Word DOCX documents for requirements and test case uploads.
  • CSV files containing tabular data imported into parameters, datasets, variables.
  • Fixed Length files with positional records supporting interface data uploads.
  • HL7 message files imported for healthcare integration validation and testing.
  • SAP IDOC files uploaded for comprehensive SAP process integration testing.
  • XML project files import externally generated Tosca objects via interface.
  • Database schema dump files bulk load relational data for testing.
  • SQLite .db files uploaded as external data sources for analysis.
  • Windows Perfmon log files imported into NeoLoad performance result dashboards.

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection between networks: Data exchanged between customer environments and Tricentis services is encrypted in transit with TLS 1.2 or higher over HTTPS, and APIs are authenticated with tokens or OAuth 2.0. When dedicated connectivity is required, we provide VPN or IPSec tunnels secured by multi-factor authentication. NeoLoad encrypts controller-to-load-generator traffic with AES-256 using FIPS 140-2 approved ciphers, and SeaLights isolates development from production networks, routing any cross-network traffic through encrypted gateways.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: We guarantee at least 99.0 % monthly availability for our SaaS products, calculated each subscription month as (total minutes – downtime) ÷ total minutes, with scheduled maintenance (notified 48 hours in advance) and force-majeure events excluded. If this target is not met, we automatically issue service credits applied to the customer’s next subscription invoice, and Platinum Support customers may instead apply equivalent credits toward their support renewal. Availability guarantees and related credits do not apply to customer-hosted deployments such as Tosca or LiveCompare, where infrastructure uptime is under the customer’s control.
• Approach to resilience: QTest, NeoLoad SaaS and SeaLights run in AWS facilities certified to ISO 27001 and SOC 2. Each service spans multiple Availability Zones; qTest and NeoLoad rely on AWS Elastic Load Balancing with automated health checks and auto-scaling, while SeaLights uses AWS monitoring and auto-scaling to adjust resources proactively. ; ; Backups are taken at least daily every six hours for NeoLoad and replicated to a second AWS region, enabling NeoLoad’s six-hour RPO and <24-hour RTO, regional fail-over for qTest, and an alternate processing site for SeaLights.; ; Annual, senior-management-approved Business Continuity and Disaster Recovery tests validate these controls, and data-centre resilience is reinforced by N+1 architectures, redundant power feeds, UPS systems, generators and diverse network paths. Additional details are published in the Tricentis Security Trust Center (https://security.tricentis.com/).
• Outage reporting: We publish real-time incident updates and historical availability data on our public status dashboard at https://status.tricentis.com, which also exposes a machine-readable API feed. When an outage is confirmed, our Incident Commander posts updates on the dashboard and sends email notifications to registered contacts supplemented by telephone or postal mail when contractually required while product teams such as qTest and SeaLights can trigger in-product or portal alerts.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Dedicated link (for example VPN)
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is gated through single sign-on with multi-factor authentication over VPN-scoped connections. Role-based access control enforces least privilege: vetted administrators or Ops staff receive time-bound production rights, developers stay in lower environments, and segregation of duties is reviewed quarterly. All sessions—including break-glass support access—are logged to a read-only repository and regularly reviewed. Product-specific roles further limit access to projects, objects, and resources, and organizational policies restrict su/root actions based on documented need-to-access.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: ISO 27001, ; ISO 27701, ; ISO 9001, ; SOC 2, ; NIST SP 800-171, ; NIST Cybersecurity Framework, ; COBIT, ; CSA Cloud Controls Matrix, ; National Infrastructure Assurance (NIA) guidelines, GDPR.
• Information security policies and processes: Tricentis operates an ISO 27001-certified Information Security Management System covering Tosca, Tosca Cloud, Vision AI, LiveCompare, NeoLoad, qTest, Testim, Vera, and Tricentis Test Management for Jira. ; ; Executive management approves the corporate Information Security Policy, while the Head of Governance, Risk & Compliance and the Chief Information Security Officer review it through the Information Risk Council and the Information Security Risk Committee.; ; A dedicated Information Security team reporting to the CISO drives execution. Policies address secure SDLC, least-privilege access, encryption, change management, incident response, and business-continuity planning; they are reviewed at least annually and communicated through mandatory onboarding and annual security-awareness training. ; ; Compliance is enforced by role-based access controls, integrated change-control workflows, weekly vulnerability reports to leadership, internal audits, and annual external SOC 2 Type II, ISO 27001, and third-party penetration audits. Further information is available at the Tricentis Security Trust Center (https://security.tricentis.com/).
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Tricentis records each hardware, software, and service asset in a configuration-management database, including owner, classification, and approved baseline versions. All proposed production changes are logged in a ticketing system, risk-assessed for security impact, and reviewed by a cross-functional Change Advisory Board; the Product Security Team issues the final go/no-go decision. Once approved, baseline records under version control are updated, and continuous automated monitoring detects any unauthorized deviations from the authorized state.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Tricentis runs continuous SAST, SCA, DAST and daily network scans, consolidated into weekly reports reviewed by the Information Risk Council. Findings are triaged with CVSS; Critical (≥9) issues are mitigated within 48 hours and patched within 14 days, High within seven and 30 days. Most security patches are auto-deployed as soon as vendors release them. Monthly enterprise scans, annual external penetration tests and product-level scans (e.g., NeoLoad, SeaLights) confirm coverage. Threat intelligence comes from CVE feeds, government and vendor advisories, commercial services and ISACs, allowing rapid alerts and incident-class handling of internet-facing critical flaws.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Tricentis centrally aggregates logs from all hosted services into a 24×7-monitored SIEM enriched with intrusion-detection, EDR, and threat-intelligence feeds. About 50 correlation and anomaly rules flag authentication failures, KMS access, or other suspicious patterns and automatically page on-call Security Operations engineers. SOC analysts triage alerts using severity-based procedures, investigate indicators of compromise, and escalate confirmed incidents through the Incident Response Program; critical alerts receive immediate attention. Weekly log reviews and periodic incident-response drills refine detection thresholds and playbooks.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Tricentis maintains a documented Incident Response Program with predefined procedures for identification, containment, eradication, recovery, and post-incident review. Our 24×7 Security Operations Center monitors environments and initiates the relevant procedure upon detecting anomalies. Customers report suspected incidents to Customer Support, which escalates them to the security team. Affected customers receive notification within 72 hours and a written incident report detailing the issue, impact, corrective actions, and preventive steps. Post-incident lessons learned are captured in formal reviews to enhance controls.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Tricentis may offer time-limited trials, demonstrations, or proof-of-concept environments for selected products, subject to product type and commercial qualification. Availability and scope of any free trial are assessed on a case-by-case basis and coordinated through Tricentis Sales.
• Link to free trial: Tricentis provides trial and evaluation options for select products. A free qTest trial is available via the official product page (https://www.tricentis.com/products/unified-test-management-qtest ) and a NeoLoad free trial is offered via documentation links (https://docs.tricentis.com/all/manuals/neoload.htm ). For other enterprise products such as Tosca, LiveCompare, and SeaLights, trials or proof-of-concept engagements are typically provided through Tricentis Sales and Partner channels.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: LRQA Limited
• ISO/IEC 27001 accreditation date: Thursday 27 November 2025
• What the ISO/IEC 27001 doesn’t cover: The certificate scope covers the full company business operations, across all business locations, applicable and relevant to the delivery, deployment and management of IT solutions, support and services in accordance with Statement of Applicability Version 4, and is audit against the new 2022 standard.
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: LRQA Limited
• ISO 9001 accreditation date: Monday 17 February 2025
• What the ISO 9001 doesn’t cover: The certificate scope covers the full company business operations, across all business locations, applicable and relevant to the Delivery, Deployment and Management of IT Solutions, Support and Services.
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: Barclaycard
• PCI DSS accreditation date: Thursday 9 January 2025
• What the PCI DSS doesn’t cover: Our PCI DSS certification applies exclusively to payment processing systems and hosted payment gateways and does not extend to non‑payment systems, corporate IT infrastructure, or business applications outside the cardholder data environment.
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: B5f066ef-ff99-48a9-94b0-23f1f0ee595b
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 2d75659c-9df3-4d75-9406-9052a6e68c4b
• Other security certifications: Yes
• Any other security certifications: IASME CYBER ASSURANCE LEVEL ONE

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bidteam@xma.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.