PURPLE WIFI LIMITED

Public, Guest & Staff WiFi

Scalable cloud-native platform providing identity-based access for staff, guests, and residents. It utilises cloud RADIUS infrastructure for SSO integration (Microsoft/Google/Okta) and Passpoint encryption. Replaces shared passwords with unique per-user keys and automated SCIM revocation. Includes centralised management and occupancy analytics to optimise estate utilisation.

Features

• IDP/SCIM: Connect Entra ID or Okta to automate provisioning
• Per User Keys: Assign unique WPA2/3-Enterprise keys to every individual
• Passpoint: Install secure profiles for automatic, enterprise-encrypted device connectivity
• PAN: Use mDNS reflection/iPSK to create virtual network bubbles
• Cloud RADIUS: High-availability global infrastructure replaces on-premise authentication servers
• Vendor-agnostic interoperability with any RADIUS-supporting hardware
• Analytics: Tracks WiFi data to generate occupancy and utilisation reports
• Dashboard: Single interface to manage users, locations, and policies globally
• Security and Compliance Certifications: ISO 27001, 9001, GDPR, and CCPA

Benefits

• Instantly revoke network access when staff members leave the organisation
• Isolates traffic on shared access points to prevent data interception
• Protects users from evil twin attacks and open network vulnerabilities
• Allows personal device communication while remaining invisible to neighbours
• Eliminates technical debt and costs associated with maintaining local hardware
• Prevents vendor lock-in while enabling unified management across mixed estates
• Optimises space usage, reducing property costs by an average 35%
• Centralised control reduces WiFi-related IT support tickets by 80%
• Ensures authentication and data handling meet rigorous government security standards

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at businessoperations@purple.ai. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

307325275540167

Contact

Helen Stonehouse
07525821894
businessoperations@purple.ai

About your service

• Service categories:

  Application Development and Deployment

  Analytics and business intelligence

  • Business Intelligence
  • Advanced and predictive analytics
  • Location and geospatial data management and analytics
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Maintenance windows are typically scheduled outside of UK business hours to minimise disruption. Software customisation of splash pages is limited to HTML/CSS standards supported by modern browsers. Additionally, exact functionality may be dependent on the specific network hardware vendor or local network configurations.; Standard Support Hours: Our standard technical support is available from 07:00 to 23:00 (GMT/BST), Monday to Friday, excluding UK Public Holidays.
• System requirements:
  • WiFi access point (AP) compatibility
  • Network and Firewall Configuration
  • Hardware capable of communicating via RADIUS authentication

User support

• Email or online ticketing support: Yes
• Support response times: Purple will respond within 2 hours, resolution times are then categorised into Low, Medium, High or Critical
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: As a user of the Zendesk SaaS platform, we rely on Zendesk’s comprehensive accessibility testing program to ensure our web chat is inclusive. Zendesk conducts regular audits using third-party accessibility experts and native assistive technology users to validate the Web Widget.; This testing process includes:; Manual Testing with Screen Readers: Verification using JAWS, NVDA (Windows), and VoiceOver (macOS/iOS) to ensure chat messages and status updates are announced correctly.; Keyboard-Only Audits: Ensuring users with motor impairments can navigate all chat functions without a mouse.; Low Vision Testing: Validating compatibility with screen magnifiers and high-contrast settings.; Zendesk documents these results in their Accessibility Conformance Reports (ACRs), which are based on the VPAT 2.5 International edition. Purple.ai monitors these reports annually to ensure that updates to the chat interface maintain high standards for assistive technology users. By leveraging a platform that integrates AT testing into its development lifecycle, we ensure a compliant and usable experience for all citizens.
• Onsite support: Yes, at extra cost
• Support levels: Purple provides four support levels: Standard, SMB, Support+, and Guest Support.; Support Levels and Costs; Standard & SMB Support: Included for all customers at no additional cost.; Support+: Premium support offering faster response times and priority handling. Costs are listed within the SFIA rate card.; Guest Support: Fully managed end-user WiFi support. Costs are listed within the SFIA rate card.; Personnel & Account Management; All customers are assigned an Account Executive to manage their overall relationship. Technical issues are handled by a dedicated team of Support and Senior Support Engineers.; Purple does not provide a standard "Technical Account Manager" or "Cloud Support Engineer" for all tiers. However, customers purchasing Support+ or Guest Support receive a dedicated Senior Support Engineer who acts as a primary technical point of contact and conducts regular service reviews.
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: The onboarding process is a structured journey designed to move a customer from initial planning to a live environment. The process begins with Requirements Gathering to collect network specifications, hardware details, and design preferences, followed by a Kick-Off Call to align stakeholders and outline the project timeline. Implementation then moves into Hardware Setup, where access points and controllers are configured, and Platform Setup, where the Purple portal is customised and integrated with existing systems. ; Before the final launch, rigorous Testing and Quality Assurance are conducted including connectivity checks and User Acceptance Testing (UAT) to ensure the service meets all functional requirements. The journey concludes with the Go Live phase, where the portal is transitioned to a live environment and formal support is handed over to the Purple support team for ongoing maintenance.; Summary of onboarding process:; Requirements Gathering: Collecting network, hardware, and design assets; Kick-Off Call: Aligning project goals, milestones, and responsibilities; Hardware Setup: Configuring APs, WiFi controllers, and content filtering; Platform Setup: Portal configuration and system integrations; Testing and QA: Functional testing, UAT, and connectivity checks; Go Live: Deployment to the live environment and final handover
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Purple manages customer offboarding through a framework aligned with ISO 27001 and UK GDPR standards. Client confidential data is removed at the end of the relationship or immediately upon request, while end-user personal data is automatically anonymised or deleted after 13 months of inactivity. In accordance with standard data processing obligations, Purple commits to the secure destruction of all customer data and associated copies within four business days of the processing end date, unless specific legal obligations require further retention. To ensure a seamless transition, customers may request the return or transfer of their data in a structured, machine-readable format (such as .csv) within two business days of the contract’s conclusion. These files are accessible through the self-service portal, the RESTful API, or via secure transfer. Throughout this transition, Purple maintains strict logical data separation to prevent cross-contamination, ensuring that all administrative access and user rights to the customer’s specific environment are promptly revoked. The final data destruction is executed using industry-standard methods to ensure all information is rendered completely unrecoverable. To maintain a robust audit trail for compliance purposes, the completion of these activities is formally recorded, providing transparent verification that all data handling obligations have been met.
• End-of-contract process: Our offboarding is designed to ensure a secure transition and regulatory compliance through a structured decommissioning phase:; Data Portability & Transfer: Customers can retrieve data in structured formats (e.g., .csv) via the self-service portal, API, or secure transfer within two business days of contract conclusion.; Access Revocation: Immediate termination of all administrative rights and user access to the specific customer environment, maintained through strict logical data separation.; Secure Destruction: Permanent deletion of all confidential and end-user data within four business days of the processing end date, using industry-standard methods to ensure information is unrecoverable.; Compliance Verification: Formal recording of all decommissioning activities to provide a transparent audit trail, ensuring alignment with ISO 27001 and UK GDPR standards.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Purple’s core services, including the administration portal and guest WiFi splash pages, are architected as responsive web applications, providing a consistent functional experience across both desktop and mobile browsers.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: Purple provides a secure web-based administration portal for service configuration and analytics, accessible via HTTPS. For programmatic integration, a RESTful API facilitates data transfer to third-party systems, CRMs, and analytics platforms, supported by configurable connectors and WebHooks for push-based delivery.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: Purple is committed to providing an inclusive experience and aligns its platform with WCAG 2.2 AA standards. While we are in the process of finalizing a formal external audit, we conduct rigorous internal evaluations focused on the native assistive technologies built into end-user devices. This ensures that the service is fully compatible with the tools users already have at their disposal, such as VoiceOver on iOS, TalkBack on Android, and Narrator or High Contrast Mode on Windows when accessing the service.
• API: Yes
• What users can and can't do using the API: Purple’s RESTful API is designed primarily to facilitate secure data export and integration with external systems, such as CRMs and analytics platforms, rather than for service setup or configuration management. Users utilise the interface to programmatically retrieve user and session data or employ WebHooks and connectors for push-based delivery to third-party applications. Access to these functions requires robust authentication via signed requests using public/private key combinations over TLS 1.2 or higher. However, the API does not support the initial setup of the WiFi service or administrative configuration changes; these actions, such as configuring splash pages or managing access hardware, must be performed through the secure web-based Purple Portal. Consequently, users are limited to data consumption and integration tasks via the API, preventing them from making structural or operational changes to the service environment programmatically.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Through the Purple Portal, users with appropriate access levels can fully customise the guest WiFi experience based on their specific license package (Connect, Capture, or Engage). The Onboarding tools allow for the creation of branded Offline, Online, and Out of Hours Splash Pages using either a simplified Standard builder or a Custom HTML editor. Users can tailor Access Journeys by implementing LogicFlows and URL redirects, and define authentication methods such as social media logins or registration forms with Custom Fields for specific data capture. Branding elements like logos, background images, and Terms & Conditions are easily modified to ensure a consistent visual identity. For deeper engagement, the Marketing tools enable the configuration of targeted E-shots and SMS communications. Finally, the platform supports the creation of personalised analytics dashboards to track specific metrics, ensuring that every stage of the user journey, from initial connection to post-visit marketing, is data-driven and fully customised to the venue's needs.

Scaling

• Independence of resources: Purple ensures consistent performance for all users by employing a cloud-native architecture hosted on Google Cloud, which utilises application load balancers to evenly distribute traffic and prevent bottlenecks. We implement autoscaling groups that dynamically expand infrastructure resources in response to real-time demand, ensuring that high activity from one user does not degrade service quality for others. Furthermore, regular capacity planning is conducted to proactively monitor and manage infrastructure limits.

Analytics

• Service usage metrics: Yes
• Metrics types: Purple WiFi’s Analytics platform delivers comprehensive service metrics by tracking network performance, visitor behaviour, and demographics. Key data points include total usage, connection speeds, and latency, alongside behavioural insights like dwell time, bounce rates, and visit frequency. Demographic reports analyse age, gender, and language, while technology metrics detail device types and operating systems. Furthermore, presence analytics monitor footfall and conversion rates from passers-by to active visitors. These insights are fully filterable and exportable, providing a detailed, data-driven view of both network health and user engagement across the entire digital and physical environment.
• Reporting types:
  • API access
  • Real-time dashboards
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Users can export data by selecting the Download or ellipsis options within the Analytics, CRM, and Management sections. In the Analytics and Campaigns area, which includes Micro Surveys and NPS, you can save visual charts as PDFs or raw tables as CSVs. Within the CRM, user profiles, session logs, and social data are available as CSV files, while individual profile cards can be exported as PDFs. Finally, the Licensing Status report provides the most extensive compatibility, supporting Excel, JSON, HTML, Markdown, and TXT formats to ensure data is accessible across various platforms.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: Purple protects data within its network by enforcing strict network segmentation and firewalling to isolate critical components, ensuring that database connections remain internal-only. We apply the principle of least privilege through granular Role-Based Access Control (RBAC), limiting staff access strictly to role requirements. Additionally, all data at rest, including disks and backups, is encrypted using AES-256. To further secure the environment, we utilise automated vulnerability scanning, patch management, and endpoint detection and response (EDR) agents on all compute instances to actively prevent and detect malicious activity.

Availability and resilience

• Guaranteed availability: Purple.ai guarantees a service uptime rate of not less than 99.9%. Our availability is backed by 24x7x365 proactive monitoring of the platform.; ; Service Level Agreements (SLAs): Our SLAs are structured by issue severity once a fault is identified as a Purple platform issue:; ; Critical Level Issues: 4-hour fix.; ; High Level Issues: Fix within 12 hours (Standard 1) or 5 days (Standard 2).; ; Medium Level Issues: Fix within 24 hours (Standard 1) or 10 days (Standard 2).; ; Low Level Issues: Fix within 7 days (Standard 1) or 30 days (Standard 2).; ; Standard 1 applies to issues resolvable by the 2nd Line Support team, while Standard 2 applies to those requiring additional development work.; ; Refund Mechanism: If downtime (measured in 30-minute periods from the identification of a Critical Level Issue) exceeds 0.1%, Purple.ai will refund the proportion of the Subscription Fee applicable to that downtime. This excludes scheduled maintenance, which is notified to users at least 24 hours in advance.
• Approach to resilience: Purple’s service resilience is underpinned by a cloud-native architecture primarily hosted on the Google Cloud Platform. The platform employs high-availability principles, including multi-zone redundancy within specific geographic regions, which ensures that services remain operational even in the event of a single zone failure. Critical components are designed with automated failover and scaling capabilities, supported by load balancers that distribute traffic to healthy instances to maintain service continuity. Purple maintaind a Recovery Time Objective (RTO) and Recovery Point Objective (RPO) of four hours, validated through annual failover simulations and database recovery tests. Data integrity is preserved through automated, encrypted backups stored within the same cloud region to verify data residency compliance while ensuring recoverability. These measures, combined with continuous monitoring and specific protections against threats such as Distributed Denial-of-Service (DDoS) attacks, ensure the platform remains robust against both technical failures and external threats.
• Outage reporting: Purple manages outage reporting through a formal Incident Response Plan and Business Continuity Plan aligned with ISO 27001 standards. Internally, the NOC Team utilises automated monitoring and alerting tools, to identify and respond to critical service disruptions immediately. When an outage or disruption triggers recovery activities, the designated incident leader is responsible for coordinating external communications. This involves notifying affected customers and partners via electronic channels, such as updating status pages or sending direct emails, to ensure transparency regarding the incident's impact and estimated resolution time. For security-related outages or data breaches, Purple commits to notifying affected parties at the earliest opportunity. Regular updates are provided throughout the incident lifecycle until full resolution is achieved, ensuring compliance with regulatory obligations and maintaining trust during service interruptions.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Purple enforces strict access control throughRBAC based on the principle of least privilege, ensuring users only access data necessary for their specific role. Management interfaces require Multi-Factor Authentication and are restricted to authorised personnel, often requiring VPN connectivity for privileged cloud access. We prohibit shared administrative accounts to ensure full accountability. For support channels, access to customer data is logged and monitored to prevent unauthorised usage. Access rights undergo formal review every six months to verify ongoing necessity and compliance with ISO 27001 standards.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Purple operates an ISO 27001 certified ISMS that governs all aspects of information security, ensuring confidentiality, integrity, and availability. This framework is underpinned by a comprehensive suite of policies, including an Access Control and Password Policy that enforces RBAC and MFA to strictly limit system access. We adhere to a Secure Development Policy requiring peer reviews and automated testing throughout the software lifecycle, alongside a Vulnerability and Patch Management Policy that mandates regular scanning and annual CREST-accredited penetration testing to proactively address threats. To ensure robust data protection, we implement a Cryptographic Controls Policy utilizing AES-256 encryption for data at rest and TLS 1.2+ for data in transit. Our operational resilience is maintained through Business Continuity and Incident Response Plans, which are tested annually. Furthermore, we align with Cyber Essentials Plus standards and GDPR requirements, conducting regular internal audits and DPIAs to mitigate risks associated with processing activities.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Purple tracks all service components throughout their lifecycle using comprehensive asset registers and version-controlled repositories for code and infrastructure configurations. We manage changes strictly via ticketing systems to ensure full auditability from initiation to retirement. Every change undergoes a rigorous security impact assessment, including mandatory peer reviews, automated static analysis, and pre-production security sign-offs. Significant updates trigger a DPIA to evaluate privacy risks. We enforce a separation of environments, deploying changes through test and staging before production to validate security and stability, ensuring all modifications are authorised, tracked, and secure.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Purple maintains a vulnerability management program that identifies threats through regular internal and external scanning, architecture reviews, and automated static code analysis. We actively monitor vendor notification lists and threat intelligence inventories to detect emerging risks. Upon identification, vulnerabilities are scored using CVSS to determine priority. Adhering to our Vulnerability and Patch Management Policy, we mandate the deployment of critical security patches within 72 hours and high-risk patches within 7 days. All updates are validated in separated test environments prior to production release to ensure system stability and security integrity.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Purple identifies potential compromises by centralising logs and alerts in a SIEM system, supported by an EDR on all endpoints and Google Cloud native tools. Our internal Security team monitors these daily to detect anomalies. Upon finding a potential compromise, the Incident Response Team initiates a formal SANS-based plan to assess, contain, and eradicate the threat. We require immediate internal reporting of suspected incidents and commit to notifying affected customers and authorities within 72 hours of a confirmed breach.
• Incident management type: Supplier-defined controls
• Incident management approach: Purple follows a formal Incident Response Plan based on the SANS framework, utilising pre-defined playbooks for common security and operational events to ensure consistent and effective handling. Staff, customers, and the public report incidents via a dedicated email address, security@purple.ai, which automatically generates a tracked ticket for our Security Team to triage. We are committed to transparency and notify affected parties within 72 hours of a confirmed breach, or 24 hours where contractually required, subsequently providing detailed post-mortem reports that outline the root cause, impact, and remediation steps taken.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Help
• Link to free trial: https://onboarding.purple.ai/customer

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 20%
• Between £250,000 and £500,000: 20%
• Between £500,001 and £1,000,000: 20%
• Between £1,000,001 and £2,500,000: 20%
• Between £2,500,001 and £5,000,000: 20%
• Over £5,000,001: 20%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Citation
• ISO/IEC 27001 accreditation date: Wednesday 17 December 2014
• What the ISO/IEC 27001 doesn’t cover: Nothing
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: Citation
• ISO 9001 accreditation date: Monday 9 June 2014
• What the ISO 9001 doesn’t cover: Nothing
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: None of the criteria
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 169C4E72-1B54-465B-B120-772A5C6E240D
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Creation of outreach activities to create a pipeline of employees for the future contract delivery
    • Content of the outreach activity is designed to suit the target cohort
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at businessoperations@purple.ai. Tell them what format you need. It will help if you say what assistive technology you use.