DBAAS LTD

E-Commerce Web development and CRM Support

As an eCommerce website developer with SEO optimized features, we work with the latest technology. We offer all the services that eCommerce businesses need under one roof at DBaaS Ltd. AbanteCard,Drupal, Joomla, Magento, Open Cart,Prestashop,Shopify,Woo Commerce,and WordPress are just a few of the applications we provide on the DBaaS platform.

Features

Secure Fully Managed DBaaS CMS Platform
Business Continuity Process
Database & application coding backups
Disaster Recovery Options
Payment Gateway Integration
Easier browsing & compatiability
Enhanced basket features and Quicker checkout
Flexibility for customers
Flexibility for customers
Faster buying process

Benefits

Easy to use out of box functionality
Fast website deployment
Update content quickly
Manage Your Website from Any Computer
Self-contained system no HTML editing software required
Secure Platform that can scale as required
24x7x365 monitoring, alerting and proactive support
Several payment modes
Faster response to buyer/market demands
Product and price comparison

Education pricing available
Free trial available

Service documents

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at admin@dbaasltd.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

Contact

DBAAS LTD DBaaS Ltd
Telephone: +44 7480 080202
Email: admin@dbaasltd.com

About your service

Service categories

Application Development and Deployment

Application platforms

Model driven application platforms
Robotic process automation

Multi cloud support

Yes

Service scope

Software add-on or extension: Yes
What software services is the service an extension to: Our service extends to popular e‑commerce platforms (Shopify, Magento, WooCommerce), CRM systems (Salesforce, HubSpot, Microsoft Dynamics), and web development frameworks (WordPress, Drupal). It integrates seamlessly with these environments, enhancing functionality through add‑ons and extensions, while remaining fully capable of operating as a standalone SaaS solution.
Cloud deployment model: Hybrid cloud
Service constraints: Our service has minimal constraints. Planned maintenance is scheduled during off‑peak hours with advance notice to buyers. Standard support is available during business hours, with optional premium 24/7 support. The service is compatible with modern browsers and standard operating systems; however, legacy hardware or outdated software may limit functionality. Network connectivity is required, and performance may vary depending on bandwidth. Certain advanced features, such as premium analytics or dedicated infrastructure, are only available on paid plans. These constraints are designed to ensure reliability, transparency, and optimal performance while maintaining compliance with government cloud security principles.
System requirements: Modern web browser (Chrome, Edge, Firefox, Safari latest).

Stable internet connection with minimum 5 Mbps bandwidth.

Operating system: Windows 10+, macOS 11+, Linux supported.

JavaScript and cookies enabled in browser settings.

Updated antivirus or endpoint protection software recommended.

Minimum 4 GB RAM and dual‑core processor.

Screen resolution 1280x720 or higher for optimal interface.

Access to email for account verification and notifications.

No additional software licences required for core functionality.

Optional VPN for secure administrative or management access.

User support

Email or online ticketing support: Yes
Support response times: We aim to respond to all questions as quickly and efficiently as possible. Our standard response time during business days (Monday to Friday) is within 2–4 working hours for general queries and within 1 hour for urgent or time-sensitive issues. For more complex requests requiring investigation, we provide an initial acknowledgment within 2 hours and a full response within the agreed timeframe. At weekends and public holidays, response times may be slightly longer, typically within 6–12 hours, depending on the nature of the query. However, urgent issues reported through our dedicated support channels are always prioritised.
User can manage status and priority of support tickets: No
Phone support: Yes
Phone support availability: 9 to 5 (UK time), 7 days a week
Web chat support: Yes
Web chat support availability: 9 to 5 (UK time), 7 days a week
Web chat support accessibility standard: WCAG 2.2 AA
Web chat accessibility testing: We have not carried out any formal testing with assistive technology users for our web chat solution. At this stage, no dedicated accessibility user-testing sessions have been conducted
Onsite support: Yes, at extra cost
Support levels: We provide tiered support levels to meet different buyer needs:

Standard Support (included): Available during business hours (9am–5pm, Monday–Friday). Includes email and ticketing system access, response within 24 hours, and access to online documentation and knowledge base.

Enhanced Support (extra cost): Extended hours (8am–8pm, Monday–Saturday), faster response times within 4 hours, and phone support. Priced at 10% of the subscription fee per month.

Premium Support (extra cost): 24/7 coverage, priority response within 1 hour, proactive monitoring, and quarterly service reviews. Priced at 20% of the subscription fee per month.

We also provide a dedicated Technical Account Manager (TAM) or Cloud Support Engineer for Premium Support customers. This ensures buyers receive personalised guidance, escalation management, and strategic advice on optimising their service usage.
Support available to third parties: Yes
AI chatbot: Yes

Onboarding and offboarding

Getting started: We help users start using the service through a combination of training, documentation, and support resources.

Onboarding support includes:

Online training: Interactive sessions and webinars to guide users through setup, configuration, and best practices.

User documentation: Comprehensive guides, FAQs, and step‑by‑step instructions available in HTML and PDF formats.

Onsite training (optional): For larger deployments, we can provide tailored onsite workshops to train administrators and end‑users.

Knowledge base: Self‑service articles and tutorials covering common tasks and troubleshooting.

Dedicated support: Access to helpdesk and technical support teams during onboarding.

This blended approach ensures users can quickly adopt the service, whether they prefer self‑paced learning or guided instruction.
Service documentation: Yes
Documentation formats: HTML

ODF

PDF
End-of-contract data extraction: When the contract ends, users can securely extract their data using standard export options provided through the service interface and API. Data can be downloaded in open formats such as CSV, JSON, PDF, or ODF to ensure portability and compliance with government requirements. Administrators initiate the export process via the management dashboard or API endpoints, selecting the scope of data (e.g., user records, reports, configurations).

All exports are encrypted during transfer to protect sensitive information. Bulk data extraction is supported, but infrastructure or proprietary system settings are excluded to maintain service integrity. After extraction, data remains accessible for a defined period before secure deletion.
End-of-contract process: At the end of the contract, users retain full control of their data. They can securely export all information in open formats (CSV, JSON, PDF, ODF) via the interface or API. Once data extraction is complete, the service remains accessible for a defined period to allow transition, after which all data is securely deleted in line with compliance requirements.

Included in the price of the contract:

Access to the core service platform and its standard features

User accounts, role management, and configuration tools

API access and documentation

Online training sessions and user guides

Standard support (helpdesk, knowledge base, FAQs)

Secure data extraction at contract end

Additional costs may apply for:

Optional on-site training or tailored workshops

Advanced customisation or bespoke integrations beyond standard API use

Premium support packages (e.g., 24/7 dedicated support, priority response)

Extended data retention beyond the standard transition period

Consultancy services for migration or optimisation
Documentation accessibility standard: WCAG 2.2 AA

Using the service

Web browser interface: Yes
Supported browsers: Microsoft Edge

Firefox

Chrome

Safari

Opera

Other
Application to install: No
Designed for use on mobile devices: Yes
Differences between the mobile and desktop service: The mobile service offers a streamlined, responsive interface optimised for smaller screens, ensuring access to core features such as authentication, data entry, and reporting. Some advanced functions, including complex analytics dashboards and administrative configuration, are best experienced on desktop due to screen size and layout. Mobile users benefit from touch‑friendly navigation and simplified menus, while desktop provides full functionality with enhanced multitasking and integration options. Both platforms maintain secure access, consistent performance, and compliance with government cloud principles, but the desktop version supports richer visualisations and extended customisation features not fully available on mobile devices.
Service interface: Yes
User support accessibility: WCAG 2.2 AA
Description of service interface: The service interface is a secure, browser‑based dashboard designed for ease of use. It provides intuitive navigation with role‑based access controls, enabling users to manage e‑commerce, CRM, and web development functions from a single platform. Features include configurable menus, real‑time analytics, reporting tools, and integration management. The interface supports responsive design for desktop and mobile, ensuring consistent performance across devices. Administrative users can access advanced settings, while end‑users benefit from simplified workflows and clear visualisations. Audit logs, notifications, and help resources are integrated directly into the interface to support transparency, compliance, and efficient day‑to‑day operations.
Accessibility standards: WCAG 2.2 AA
Accessibility testing: We have conducted structured interface testing with users of assistive technologies to ensure accessibility and compliance with WCAG 2.2 AA standards. Testing included screen reader compatibility (NVDA, JAWS, VoiceOver) to validate navigation, form labels, and error messaging. Keyboard‑only navigation was assessed to confirm all functions are accessible without a mouse. High‑contrast modes and zoom features were tested to ensure readability for users with visual impairments. We also engaged users with speech recognition software (Dragon NaturallySpeaking) to verify command execution and text input. Feedback from these sessions informed improvements such as clearer headings, simplified workflows, and enhanced ARIA attributes. Regular regression testing is performed to maintain accessibility across updates.
API: Yes
What users can and can't do using the API: Users can use the API to set up the service by registering accounts, configuring authentication, and integrating with existing systems through secure endpoints. Initial setup includes provisioning resources, defining user roles, and connecting data sources.

Through the API, users can make changes such as updating configurations, managing user permissions, submitting or retrieving data, and automating workflows. The API supports CRUD operations (create, read, update, delete) for core service objects, enabling seamless integration with third‑party applications.

Limitations include restrictions on administrative functions: certain advanced configurations, billing management, and compliance settings must be performed through the service interface rather than the API. Rate limits apply to prevent misuse, and bulk operations may require batching. The API does not allow direct changes to infrastructure or underlying security policies, ensuring stability and compliance.
Users can set up accounts, configure authentication, and integrate systems through the API. They can make changes such as updating configurations, managing permissions, and automating workflows. Limitations include restricted access to billing, compliance, and infrastructure settings, with rate limits applied to ensure secure and stable operation.
API documentation: Yes
API documentation formats: Open API (also known as Swagger)
API sandbox or test environment: Yes
Customisation available: Yes
Description of customisation: Users can customise the service by configuring key elements to suit organisational needs.

What can be customised:

User roles and permissions

Dashboards and reporting views

Workflow automation and notifications

Integration with third‑party applications via API

Branding elements such as logos and colour schemes

How users can customise:

Through the secure, browser‑based interface with intuitive menus and settings

Using the API to automate changes and connect external systems

By enabling or disabling modules and adjusting configuration options

Who can customise:

Administrative users with full access rights can configure system‑wide settings, integrations, and security policies

Standard users can personalise dashboards, reports, and workflow preferences within their assigned permissions

Developers and technical teams can extend functionality through API integrations

Scaling

Independence of resources: We guarantee users aren’t affected by demand from others through a multi‑tenant architecture with strict resource isolation. Each customer’s workloads are allocated dedicated compute, storage, and bandwidth quotas, preventing performance degradation. Auto‑scaling ensures capacity expands dynamically during peak demand, while load balancing distributes traffic evenly across servers. Continuous monitoring detects bottlenecks early, and service level agreements (SLAs) enforce uptime and responsiveness.

Analytics

Service usage metrics: Yes
Metrics types: We provide detailed service usage metrics to help organisations monitor adoption and performance. Metrics include:

User activity: logins, session duration, and active users over time.

API usage: number of calls, endpoints accessed, and error rates.

Data metrics: volumes of data uploaded, exported, and processed.

Feature utilisation: frequency of key functions such as reporting, dashboards, and integrations.

System performance: uptime, response times, and resource consumption.
Reporting types: API access

Real-time dashboards

Regular reports

Reports on request
Resource tagging: Yes
FOCUS resource tagging: Yes

Resellers

Supplier type: Not a reseller

Staff security

Staff security clearance: Conforms to BS7858:2019
Government security clearance: Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom

European Economic Area (EEA)
User control over data storage and processing locations: Yes
Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
Penetration testing frequency: At least every 6 months
Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
Protecting data at rest: Encryption of all physical media
Data sanitisation process: Yes
Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data Erasure

Explicit overwriting of storage before reallocation / Secure Erase

Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

Data export approach: Users can export their data through the secure service interface or API. Administrators initiate exports by selecting the required datasets, such as user records, reports, or configurations. Data is provided in open formats, including CSV, JSON, PDF, or ODF, to ensure portability and compliance. Exports are encrypted during transfer to protect sensitive information. Bulk extraction is supported, though infrastructure or proprietary system settings are excluded. After the contract ends, data remains accessible for a defined transition period before secure deletion.
Data export formats: CSV

ODF

Other
Other data export formats: JSON

PDF
Data import formats: CSV

ODF

Other
Other data import formats: JSON

XML

Data-in-transit protection

Data protection between buyer and supplier networks: TLS (version 1.2 or above)
Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability: We guarantee a high level of availability through robust infrastructure and service commitments. Our standard Service Level Agreement (SLA) ensures 99.9% uptime per calendar month, excluding scheduled maintenance. Availability is continuously monitored, and redundancy is built into our systems to minimise downtime.

If availability falls below the guaranteed level, we provide service credits as compensation. Credits are calculated based on the percentage of downtime and applied against future invoices. For example, if uptime drops below 99.9%, customers receive a proportional credit aligned with the SLA terms.
Approach to resilience: Our service is designed with resilience at its core, ensuring continuity and reliability even under adverse conditions. We employ a multi‑layered resilience strategy that includes:

Redundant infrastructure: Critical components such as servers, storage, and networking are deployed in high‑availability clusters to eliminate single points of failure.

Geographically distributed datacentres: Data is replicated across multiple secure facilities to provide disaster recovery and business continuity.

Automated failover: In the event of hardware or software failure, workloads are automatically redirected to healthy systems without user disruption.

Continuous monitoring: Real‑time monitoring and alerting detect anomalies early, enabling rapid response to potential issues.

Regular resilience testing: We conduct disaster recovery drills and penetration tests to validate our resilience measures.

Compliance with recognised standards: Datacentre operations align with ISO/IEC 27001 and CSA CCM v4.0, ensuring robust asset protection and resilience.
Outage reporting: Our service reports outages through multiple transparent channels to ensure customers are promptly informed:

Public dashboard: A real‑time status page is available online, showing current service health, ongoing incidents, and historical uptime data.

API: Customers can integrate with our status API to automatically monitor availability and receive machine‑readable outage information.

Email alerts: Subscribed users receive immediate notifications via email when outages occur, including updates on resolution progress and post‑incident reports.

Identity and authentication

User authentication needed: Yes
User authentication: Multi-Factor Authentication (MFA)

Public key authentication (including by TLS client certificate)

Identity federation with existing provider (for example Google Apps)

Limited access network (for example PSN)

Dedicated link (for example VPN)

Username or password
Access restrictions in management interfaces and support channels: We restrict access to management interfaces and support channels through strict authentication and role‑based controls. Multi‑Factor Authentication (MFA) is mandatory, and access is limited to authorised personnel with least‑privilege permissions. Administrative interfaces are segregated from customer environments and accessible only via secure VPN or dedicated links. All support interactions are logged, monitored, and subject to audit. Sensitive requests require identity verification before action. Network segmentation, encryption, and continuous monitoring further protect management channels. This layered approach ensures only trusted, verified staff can access critical systems, maintaining confidentiality, integrity, and compliance with operational security standards.
Access restriction testing frequency: At least every 6 months
Management access authentication: Multi-Factor Authentication (MFA)

Public key authentication (including by TLS client certificate)

Identity federation with existing provider (for example Google Apps)

Limited access network (for example PSN)

Dedicated link (for example VPN)

Username or password

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: At least 12 months
Access to supplier activity audit information: Users have access to real-time audit information
How long supplier audit data is stored for: At least 12 months
How long system logs are stored for: At least 12 months

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: CSA CSM version 4.0

ISO/IEC 27001
Information security policies and processes: We follow a comprehensive set of information security policies and processes aligned with recognised standards such as ISO/IEC 27001 and CSA CCM v4.0. These policies cover data protection, access control, incident management, vulnerability management, and secure software development practices.

Our reporting structure ensures accountability at all levels:

A board‑level security officer is responsible for overall governance.

A dedicated information security team manages day‑to‑day compliance, monitoring, and risk assessments.

Departmental leads are accountable for implementing security controls within their areas.

To ensure policies are followed:

Mandatory training is provided to all staff on security awareness and compliance.

Regular audits and reviews are conducted to verify adherence to policies.

Automated monitoring tools detect and alert on policy violations or suspicious activity.

Incident reporting procedures ensure that any breach or risk is escalated promptly and addressed.
Software Security Code of Practice: Yes

Operational security

Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
Configuration and change management approach: Our configuration and change management processes ensure security and accountability across the service lifecycle. All components are tracked in a central configuration management database (CMDB) from procurement to decommissioning, with version control and audit trails maintaining traceability. Changes follow a formal request process, including justification and risk analysis. Each change is assessed for potential security impact by the Information Security team, with high‑risk changes requiring senior approval. Testing occurs in controlled environments before deployment, and post‑implementation reviews confirm objectives are met without introducing new risks. This structured approach ensures resilience, compliance, and operational security at all times.
Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
Vulnerability management approach: Our vulnerability management process is aligned with recognised standards to ensure operational security. Potential threats are assessed through continuous monitoring, automated scanning, and risk analysis by our Information Security team. We prioritise vulnerabilities based on severity, exploitability, and potential impact on services. Patches are deployed rapidly, with critical updates applied within 24–48 hours and routine patches scheduled promptly thereafter. Threat intelligence is gathered from trusted sources, including vendor advisories, industry security bulletins, and government‑approved feeds such as NCSC and CERT. This structured approach ensures timely remediation, minimises risk exposure, and maintains resilience across all customer services.
Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
Protective monitoring approach: Our protective monitoring processes use continuous logging, automated threat detection, and anomaly analysis to identify potential compromises. Security Information and Event Management (SIEM) tools correlate events across systems, supported by intrusion detection and behavioural monitoring. When a potential compromise is detected, incidents are escalated to the Information Security team for investigation and containment. Response actions include isolating affected systems, applying patches, and notifying stakeholders. We respond rapidly, with critical incidents addressed within one hour and lower‑risk issues managed according to severity. This ensures timely mitigation, minimises impact, and maintains compliance with recognised operational security standards.
Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
Incident management approach: Our incident management approach follows recognised standards and ensures a rapid, structured response. We maintain predefined processes for common events such as service outages, security alerts, and access issues. Users can report incidents through multiple channels, including a dedicated support portal, email, or phone. All incidents are logged, categorised, and prioritised based on severity. We provide incident reports to affected customers, detailing root cause, impact, and corrective actions taken. Reports are shared via secure communication channels and include timelines and remediation steps. This ensures transparency, accountability, and continuous improvement in our operational security practices.
Post-quantum cryptography secure: Yes

Secure development

Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

Connection to public sector networks: No

Pricing

Discount for educational organisations: Yes
Free trial available: Yes
Description of free trial: The free version includes core service features, secure access, and basic support. Advanced functionality, premium integrations, and priority support are not included. The free version is available for a limited trial period of 30 days, enabling buyers to evaluate suitability before committing to purchase.

Discount percentage by annual call-off contract value (excluding VAT)

Less than £250,000: 0%
Between £250,000 and £500,000: 1%
Between £500,001 and £1,000,000: 2%
Between £1,000,001 and £2,500,000: 3%
Between £2,500,001 and £5,000,000: 4%
Over £5,000,001: 5%

Non-mandatory Standards and certifications

ISO/IEC 27001 certification: Yes
Who accredited the ISO/IEC 27001: British Assessment Bureau
ISO/IEC 27001 accreditation date: Friday 5 September 2025
What the ISO/IEC 27001 doesn’t cover: Not Applicable
ISO 28000:2022 certification: No
ISO 9001 certification: Yes
Who accredited the ISO 9001 certification: British Assessment Bureau
ISO 9001 accreditation date: Friday 5 September 2025
What the ISO 9001 doesn’t cover: Not Applicable
Quality management systems (QMS): Yes
CSA STAR certification: No
PCI certification: No
Cyber essentials: Yes
Please provide your Cyber Essentials Certificate Number: 6e047eb3-459e-4edf-9ddd-c1125e3f7dba
Cyber essentials plus: Yes
Please provide your Cyber Essentials Plus Certificate Number: 5e571ec8-9407-499e-826f-6c7e456c241b
Other security certifications: No

Section B - Commitment for Future: Delivery: Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d

Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified

Plans to engage the contract workforce in deciding the most important workplace issues to address

Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce

Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours

Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing

Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment

Activities to cascade good practice on fair working conditions throughout the supply chain

Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave

Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce

Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary

Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible

Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative

Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors

Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract

Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas

Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

Volunteering opportunities for staff

Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented

Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.

How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain

How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk

Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges

Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals

Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals

Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)

Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain

Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder

Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees

Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual

Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract

Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations

Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)

Plans for positive actions with community groups.

Measures for making facilities used in the delivery of the contract available for community groups, education or training

Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered

Plans to respond flexibly and adapt approaches to community engagement and initiatives

Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds

Collaborating with anchor institutions and community groups to make facilities available for education, training or community events

Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

Policy Outcome 6: Employment and training: For those who face barriers to employment

Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract

Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors

Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)

Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors

Collection of the views and expertise of disabled people and their representative organisations on successfully supporting disabled employees or applicants

Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition

Introducing transparency to pay and reward processes

Offering a range of quality opportunities with routes of progression if appropriate, e.g. T Level industry placements, students supported into higher level apprenticeships.

Working conditions which promote an inclusive working environment and promote retention and progression

Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain

Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

Understanding of the issues affecting the development of new skills by target cohort

Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce

Other measures to offer development opportunities for the target cohort(s) in the contract workforce

Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

Understanding of issues relating to entering the contract workforce

Creation of outreach activities to create a pipeline of employees for the future contract delivery

Content of the outreach activity is designed to suit the target cohort

Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion

Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition

Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

Request an accessible format

Cookies on Digital Marketplace

E-Commerce Web development and CRM Support

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

About your service

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Security governance

Operational security

Secure development

Public sector networks

Pricing

Discount percentage by annual call-off contract value (excluding VAT)

Non-mandatory Standards and certifications

Social value

Service documents