DBAAS LTD

Website design and Revamp development

We at DBaaS Ltd create high-quality,custom-built websites for our clients. Our website design process is systematic,so you get exactly what you need. You'll get an amazing, effective website that provides the greatest results here.The DBaaS LTD team offers Angular,CodeIgniter,JavaScript, Laravel, PHP, Drupal, Joomla,Salesforce,Pipeliner CRM as well as other web-based technologies.

Features

Cross browser and device testing
Website development
Website revamp
Efficient, agile development methodologies
Create landing pages, section pages, information pages
Add and manage new users with different access rights.
Control website features like image galleries,widgets.
Daily off-site database backups
Easy site maintenance
we offer facilitate enhanced workflow, higher productivity, and scalability.

Benefits

Strict delivery schedules
Agile development minimizes specification-delivery diverge
Fully responsive website
Setup and hosting of build and UAT environments.
Website maintenance and optimisation
Hosting and technical support
Business hours support for website
Advice on security issues
Maintaining UAT website to provide backup
24x7x365 monitoring and alerting

Education pricing available
Free trial available

Service documents

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at admin@dbaasltd.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

Contact

DBAAS LTD DBaaS Ltd
Telephone: +44 7480 080202
Email: admin@dbaasltd.com

About your service

Service categories

Application Development and Deployment

Application platforms

Model driven application platforms
Robotic process automation

Multi cloud support

Yes

Service scope

Software add-on or extension: Yes, but can also be used as a standalone service
What software services is the service an extension to: Our service extends to Microsoft 365 (including Teams, SharePoint, and Outlook), Google Workspace (Gmail, Drive, and Docs), and leading CRM platforms such as Salesforce. Integration enables seamless collaboration, data synchronisation, and workflow automation, while still functioning independently as a standalone solution when required.
Cloud deployment model: Hybrid cloud
Service constraints: Our service has minimal constraints. Planned maintenance is scheduled during off‑peak hours with prior notification to buyers. Support is available across standard hardware and operating systems, though legacy configurations may have limited compatibility. Certain advanced features may require modern browsers or updated client software. Connectivity depends on stable internet access, and service availability is subject to standard cloud provider uptime commitments. These measures ensure reliability while keeping buyers informed of any temporary limitations.
System requirements: Modern web browser (Chrome, Edge, Firefox, Safari latest).

Stable internet connection with minimum 10 Mbps bandwidth.

Operating system: Windows 10+, macOS 12+, Linux supported.

Updated antivirus or endpoint protection software installed.

Minimum 8GB RAM for optimal performance and responsiveness.

Processor: Dual‑core 2.0 GHz or higher recommended.

Screen resolution 1280x720 or higher for full interface visibility.

Secure VPN access for remote administrative management tasks.

TLS 1.2+ enabled for encrypted communications and data protection.

User account with Multi‑Factor Authentication (MFA) enabled.

User support

Email or online ticketing support: Yes
Support response times: We aim to respond to all questions as quickly and efficiently as possible. Our standard response time during business days (Monday to Friday) is within 2–4 working hours for general queries and within 1 hour for urgent or time-sensitive issues. For more complex requests requiring investigation, we provide an initial acknowledgment within 2 hours and a full response within the agreed timeframe. At weekends and public holidays, response times may be slightly longer, typically within 6–12 hours, depending on the nature of the query. However, urgent issues reported through our dedicated support channels are always prioritised.
User can manage status and priority of support tickets: No
Phone support: Yes
Phone support availability: 9 to 5 (UK time), 7 days a week
Web chat support: Yes
Web chat support availability: 9 to 5 (UK time), 7 days a week
Web chat support accessibility standard: WCAG 2.2 AA
Web chat accessibility testing: We have not carried out any formal testing with assistive technology users for our web chat solution. At this stage, no dedicated accessibility user-testing sessions have been conducted.
Onsite support: Yes
Support levels: We provide tiered support levels to meet buyers’ needs:

Standard Support (included at no cost): Access to online documentation, knowledge base, and email support during business hours.

Enhanced Support (fixed monthly fee): Priority response times, 24/7 availability, and live chat support.

Premium Support (custom pricing): Dedicated technical account manager, proactive monitoring, and tailored guidance for complex deployments.

Costs vary depending on buyer requirements: standard support is free, enhanced support is available for a predictable monthly fee, and premium support is priced individually based on scope and scale.

For higher tiers, we provide a technical account manager or cloud support engineer to ensure buyers receive expert assistance, strategic advice, and direct escalation paths. This structure ensures flexibility, affordability, and enterprise‑grade support when required.
Support available to third parties: Yes
AI chatbot: Yes

Onboarding and offboarding

Getting started: We support users in starting with our service through a combination of training, documentation, and onboarding resources.

User documentation: Comprehensive guides, FAQs, and step‑by‑step instructions are available online to help users quickly understand setup, configuration, and daily use.

Online training: Interactive webinars, video tutorials, and self‑paced e‑learning modules provide flexible learning options for individuals and teams.

Onsite training (optional): For organisations requiring tailored support, we can deliver onsite sessions covering deployment, administration, and best practices.

Onboarding support: Dedicated customer success teams assist with initial configuration, role assignment, and integration, ensuring a smooth transition.

Helpdesk and support channels: Users can access live chat, email, or phone support for immediate guidance during setup.

This multi‑layered approach ensures that buyers can choose the level of assistance that best fits their needs, from self‑service documentation to hands‑on training.
Service documentation: Yes
Documentation formats: HTML

ODF

PDF
End-of-contract data extraction: At the end of a contract, users can securely extract their data using several supported methods:

Self‑service export tools: Users can download their data directly through the web interface in open standard formats (e.g., CSV, ODF, PDF) to ensure portability.

API access: The API allows programmatic extraction of data, enabling automation and integration with external systems during offboarding.

Administrative controls: Administrators can initiate bulk exports of user accounts, activity logs, and configuration settings.

Support assistance: If required, our support team provides guidance or managed export services to ensure complete and compliant data transfer.

All data extraction methods are designed to be secure, auditable, and compliant with contractual and regulatory requirements.
End-of-contract process: At the end of the contract, users retain full control over their data and can securely extract it using the provided export tools or API. Once data extraction is complete, access to the live service is disabled, and accounts are deactivated in line with contractual and compliance requirements.

Included in the price of the contract:

Secure data extraction tools (CSV, ODF, PDF formats)

API access for programmatic data retrieval

Standard offboarding support, including guidance on account closure and configuration export

Documentation and instructions for self‑service data migration

Additional cost (if required):

Managed or bespoke data migration services performed by our support team

Extended access to the platform beyond the contract end date

Specialist consultancy for complex integrations or large‑scale transfers This approach ensures buyers can exit smoothly with no hidden barriers, while optional paid services are available for organisations needing enhanced support.
Documentation accessibility standard: WCAG 2.2 AA

Using the service

Web browser interface: Yes
Supported browsers: Microsoft Edge

Firefox

Chrome

Safari

Opera
Application to install: No
Designed for use on mobile devices: Yes
Differences between the mobile and desktop service: The mobile service offers a responsive interface optimised for smaller screens, with streamlined navigation and touch‑friendly controls. Core functionality remains the same as desktop, including secure access, collaboration, and support features. However, advanced administrative tools and complex configuration options are more accessible on desktop. Mobile users benefit from push notifications and on‑the‑go access, while desktop provides a fuller workspace for detailed management tasks. Both experiences are designed to be consistent, secure, and user‑friendly, with differences focused on enhancing usability across devices.
Service interface: Yes
User support accessibility: WCAG 2.2 AA
Description of service interface: The service interface is a web‑based dashboard designed for ease of use and secure access. It provides intuitive navigation with clear menus for configuration, monitoring, and reporting. Buyers can manage user accounts, set permissions, and view system performance metrics in real time. The interface includes integrated support features, such as ticket submission and live chat, ensuring quick assistance. Role‑based access controls allow administrators to tailor visibility and functionality for different users. The design is responsive, enabling consistent experiences across desktop and mobile devices, with emphasis on clarity, efficiency, and compliance.
Accessibility standards: WCAG 2.2 AA
Accessibility testing: We have conducted structured interface testing with users of assistive technologies to ensure accessibility and compliance with WCAG 2.2 AA standards. Testing included screen readers (NVDA, JAWS), voice recognition software (Dragon NaturallySpeaking), and screen magnifiers. Users validated navigation, form completion, and content readability. We also tested keyboard‑only navigation to confirm that all functions are operable without a mouse. Feedback from participants guided improvements such as clearer labelling, consistent heading structures, and enhanced contrast ratios. Regular regression testing ensures updates do not compromise accessibility. These efforts demonstrate our commitment to inclusive design and usability for all users.
API: Yes
What users can and can't do using the API: Users can use the API to set up the service by creating accounts, configuring authentication, and integrating with external systems. Setup tasks include provisioning users, assigning roles, and establishing secure connections.

Through the API, users can make changes such as updating user permissions, modifying configurations, retrieving usage data, and automating workflows. The API supports CRUD operations (create, read, update, delete) for core resources, enabling flexible management without relying solely on the web interface.

Limitations include restricted access to administrative functions that require elevated privileges, such as billing management or advanced system configurations. Certain complex tasks, like large‑scale migrations or custom reporting, may require support assistance rather than API execution. Rate limits apply to ensure stability, and buyers must adhere to security policies, including authentication via tokens and encryption standards.

Overall, the API provides robust functionality for integration and automation, while safeguarding critical operations through controlled access.
API documentation: Yes
API documentation formats: Open API (also known as Swagger)

HTML

PDF
API sandbox or test environment: Yes
Customisation available: Yes
Description of customisation: Users can customise the service in several ways to align with organisational needs.

What can be customised:

User roles and permissions

Security and authentication settings

Workflow configurations and integrations

Notifications and reporting preferences

API connections with external systems

How users can customise:

Through the web interface, using the configuration dashboard for settings and permissions

Via the API, enabling automation and integration with third‑party applications

By applying administrative controls, such as custom policies or tailored workflows

Using built‑in options for branding, alerts, and data management

Who can customise:

Administrators have full access to configure system‑wide settings, roles, and integrations

Managers can adjust workflows, reporting, and team‑specific preferences

End users can personalise their own notifications, accessibility options, and interface preferences within the limits set by administrators

This layered approach ensures flexibility while maintaining security and governance.

Scaling

Independence of resources: We guarantee users aren’t affected by other users’ demand through multi‑tenant isolation and elastic scaling. Each customer’s environment is logically separated, ensuring workloads remain independent. Our infrastructure automatically scales resources based on demand, supported by load balancing and capacity management to prevent bottlenecks. Performance monitoring and proactive resource allocation maintain consistent service levels. Service Level Agreements (SLAs) ensure uptime and responsiveness, while throttling and prioritisation mechanisms protect critical operations. This combination of isolation, scalability, and monitoring ensures all users experience reliable performance regardless of overall demand.

Analytics

Service usage metrics: Yes
Metrics types: We provide detailed service usage metrics to help buyers monitor and manage adoption effectively. Metrics include:

User activity: logins, session duration, and feature usage

System performance: response times, uptime, and error rates

Resource consumption: storage, bandwidth, and API calls

Operational reporting: audit trails, configuration changes, and administrative actions

Engagement insights: usage trends, adoption rates, and training completion

These metrics are accessible via dashboards and exportable reports, enabling administrators to track performance, ensure compliance, and optimise service use.
Reporting types: API access

Real-time dashboards

Regular reports

Reports on request
Resource tagging: Yes
FOCUS resource tagging: Yes

Resellers

Supplier type: Not a reseller

Staff security

Staff security clearance: Conforms to BS7858:2019
Government security clearance: Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom

European Economic Area (EEA)

Other locations
User control over data storage and processing locations: Yes
Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
Penetration testing frequency: At least every 6 months
Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
Protecting data at rest: Physical access control, complying with CSA CCM v4.0

Physical access control, complying with SSAE-18 / ISAE 3402

Physical access control, complying with another standard

Encryption of all physical media

Scale, obfuscating techniques, or data storage sharding
Data sanitisation process: Yes
Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data Erasure

Explicit overwriting of storage before reallocation / Secure Erase

Degaussing

Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

Data export approach: Users can export their data through self‑service tools in the web interface, which allow downloads in open formats such as CSV, ODF, or PDF. They can also use the API to automate extraction and integrate with external systems. Administrators have access to bulk export options for accounts, logs, and configurations. All exports are secure, auditable, and designed to meet compliance requirements.
Data export formats: CSV

ODF

Other
Other data export formats: PDF
Data import formats: CSV

ODF

Other
Other data import formats: PDF

Data-in-transit protection

Data protection between buyer and supplier networks: Private network or public sector network

TLS (version 1.2 or above)

IPsec or TLS VPN gateway
Data protection within supplier network: TLS (version 1.2 or above)

IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability: We guarantee a high level of availability through robust infrastructure and resilient design. Our standard Service Level Agreement (SLA) commits to 99.9% uptime per calendar month, ensuring that services remain accessible and reliable. Availability is continuously monitored, with proactive measures such as automated failover, redundancy across multiple datacentres, and real‑time performance tracking to minimise downtime.

If availability falls below the guaranteed SLA threshold, customers are entitled to service credits as compensation. Credits are calculated based on the percentage of downtime experienced and applied against future invoices. This transparent refund mechanism ensures accountability and provides financial assurance to users.

By combining resilient architecture, strict monitoring, and clear SLA commitments, we deliver consistent availability while protecting customers against service disruption.
Approach to resilience: Our service is designed with resilience at its core, ensuring continuity and reliability even under adverse conditions. We employ a multi‑layered architecture with redundancy across critical components, including compute, storage, and networking. Automated failover mechanisms and load balancing distribute traffic seamlessly to prevent single points of failure.

Datacentres are built to comply with recognised standards such as ISO/IEC 27001 and CSA CCM v4.0, incorporating strict physical security, environmental controls, and redundant power supplies. Each datacenter operates with geographic diversity, enabling disaster recovery and business continuity through replication across multiple sites.

Data is protected with encryption at rest and in transit, while backup and recovery processes are regularly tested to ensure rapid restoration. Continuous monitoring and proactive threat detection further strengthen resilience.

This combination of robust infrastructure, compliance with international standards, and proactive operational practices ensures that our service remains highly available, secure, and resilient.
Outage reporting: Our service reports outages through multiple transparent and timely channels to ensure customers are always informed. We maintain a public status dashboard, updated in real time, which provides visibility into current service health, ongoing incidents, and historical availability.

For integration into customer systems, we offer a status API that allows automated monitoring and alerting, enabling organisations to track service health within their own tools.

Additionally, we provide email alerts to registered users and administrators. These notifications include details of the outage, expected resolution timelines, and follow‑up communications once the issue is resolved.

This multi‑channel approach ensures customers receive accurate, consistent, and prompt information about outages, supporting operational resilience and transparency.

Identity and authentication

User authentication needed: Yes
User authentication: Multi-Factor Authentication (MFA)
Access restrictions in management interfaces and support channels: We restrict access to management interfaces and support channels through role‑based access controls (RBAC), ensuring only authorised personnel can perform administrative tasks. All access requires multi‑factor authentication (MFA) and is logged for audit purposes. Privileged accounts are tightly controlled, with least‑privilege principles applied to minimise risk. Support channels are segregated from customer environments, and sensitive actions require elevated approval. Continuous monitoring detects anomalous activity, and periodic reviews validate that access rights remain appropriate. This layered approach ensures secure, accountable, and restricted access to management interfaces and support functions.
Access restriction testing frequency: At least every 6 months
Management access authentication: Multi-Factor Authentication (MFA)

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: At least 12 months
Access to supplier activity audit information: Users have access to real-time audit information
How long supplier audit data is stored for: At least 12 months
How long system logs are stored for: At least 12 months

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: CSA CSM version 4.0

ISO/IEC 27001

Other
Other security governance standards: Our governance standards also comply with SSAE‑18 / ISAE 3402, CAS (Sanitisation), and the NIST Cybersecurity Framework (CSF). In addition, we align with GDPR requirements for data protection and ISO/IEC 22301 for business continuity, ensuring comprehensive coverage across security, privacy, and resilience.
Information security policies and processes: We follow a comprehensive set of information security policies aligned with ISO/IEC 27001 and industry best practice. Policies cover areas such as access control, data protection, incident management, secure development, and acceptable use. They are reviewed regularly to ensure compliance with evolving standards and regulatory requirements.

Our reporting structure ensures clear accountability: the board‑level security officer has overall responsibility, supported by a dedicated information security team. This team oversees daily operations, conducts risk assessments, and manages incident response. Departmental managers are accountable for enforcing policies within their teams, with escalation paths defined for any breaches or concerns.

To ensure policies are followed, we implement mandatory training and awareness programmes, regular audits, and continuous monitoring. Compliance is tracked through internal reviews and external certification audits. Any non-conformance is documented, corrective actions are assigned, and progress is monitored until resolution.

This governance framework ensures that information security policies are not only documented but actively enforced, creating a culture of accountability and resilience across the organisation.
Software Security Code of Practice: Yes

Operational security

Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
Configuration and change management approach: Our configuration and change management processes follow recognised standards to ensure operational security and service integrity. All components of our services are tracked throughout their lifecycle using a centralised configuration management database (CMDB), which records ownership, versioning, and dependencies.

Changes are managed through a formal change control process, requiring documented requests, peer review, and approval before implementation. Each change is assessed for potential security impact, including risk analysis, regression testing, and compliance checks. High‑risk changes undergo additional security review and controlled rollout. This ensures transparency and accountability and minimises disruption while maintaining a strong security posture.
Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
Vulnerability management approach: Our vulnerability management process is proactive and standards‑driven. We assess potential threats through continuous monitoring, automated scanning, and regular penetration testing, supported by risk analysis to prioritise remediation. Patches are deployed rapidly, with critical vulnerabilities addressed within 24–48 hours and routine updates scheduled promptly to minimise exposure.

We source information about threats from trusted feeds and advisories, including vendor security bulletins, NCSC guidance, CVE databases, and industry threat intelligence services. This ensures timely awareness of emerging risks and enables us to maintain strong operational security and resilience.
Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
Protective monitoring approach: Our protective monitoring processes use continuous logging, automated alerts, and threat intelligence feeds to identify potential compromises. Suspicious activity is flagged through anomaly detection, intrusion detection systems, and correlation of security events across platforms.

When a potential compromise is identified, our incident response team investigates immediately, containing the threat, mitigating impact, and initiating recovery procedures. Root cause analysis is performed, and corrective actions are documented.

We respond to incidents within defined SLA timeframes, with critical events addressed in under one hour, ensuring rapid containment and minimising disruption to services.
Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
Incident management approach: Our incident management approach is structured and standards‑based. We maintain predefined processes for common events such as malware, unauthorised access, outages, and data breaches, with clear escalation and containment steps. Users report incidents via a dedicated portal, email, or 24/7 helpdesk, ensuring all cases are logged and tracked. Our incident response team investigates promptly, containing threats, mitigating impact, and performing root cause analysis. After resolution, we provide formal incident reports to affected customers, including event summaries, actions taken, and recommendations. This ensures transparency, accountability, and continuous improvement in line with recognised security standards.
Post-quantum cryptography secure: Yes

Secure development

Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

Connection to public sector networks: No

Pricing

Discount for educational organisations: Yes
Free trial available: Yes
Description of free trial: The free version includes core service features, basic user access, and standard support. Advanced functionality, premium integrations, and priority support are not included. The free version is available for a limited trial period of 30 days, allowing buyers to evaluate suitability before purchase.

Discount percentage by annual call-off contract value (excluding VAT)

Less than £250,000: 0%
Between £250,000 and £500,000: 1%
Between £500,001 and £1,000,000: 2%
Between £1,000,001 and £2,500,000: 3%
Between £2,500,001 and £5,000,000: 4%
Over £5,000,001: 5%

Non-mandatory Standards and certifications

ISO/IEC 27001 certification: Yes
Who accredited the ISO/IEC 27001: British Assessment Bureau
ISO/IEC 27001 accreditation date: Friday 5 September 2025
What the ISO/IEC 27001 doesn’t cover: Not Applicable
ISO 28000:2022 certification: No
ISO 9001 certification: Yes
Who accredited the ISO 9001 certification: British Assessment Bureau
ISO 9001 accreditation date: Friday 5 September 2025
What the ISO 9001 doesn’t cover: Not Applicable
Quality management systems (QMS): Yes
CSA STAR certification: No
PCI certification: No
Cyber essentials: Yes
Please provide your Cyber Essentials Certificate Number: 6e047eb3-459e-4edf-9ddd-c1125e3f7dba
Cyber essentials plus: Yes
Please provide your Cyber Essentials Plus Certificate Number: 5e571ec8-9407-499e-826f-6c7e456c241b
Other security certifications: No

Section B - Commitment for Future: Delivery: Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d

Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified

Plans to engage the contract workforce in deciding the most important workplace issues to address

Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce

Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours

Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing

Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment

Activities to cascade good practice on fair working conditions throughout the supply chain

Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave

Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce

Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary

Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible

Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative

Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors

Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract

Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas

Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

Volunteering opportunities for staff

Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented

Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.

How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain

How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk

Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges

Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals

Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals

Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)

Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain

Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder

Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees

Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual

Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract

Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations

Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)

Plans for positive actions with community groups.

Measures for making facilities used in the delivery of the contract available for community groups, education or training

Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered

Plans to respond flexibly and adapt approaches to community engagement and initiatives

Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds

Collaborating with anchor institutions and community groups to make facilities available for education, training or community events

Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

Policy Outcome 6: Employment and training: For those who face barriers to employment

Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract

Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors

Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)

Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors

Collection of the views and expertise of disabled people and their representative organisations on successfully supporting disabled employees or applicants

Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition

Introducing transparency to pay and reward processes

Offering a range of quality opportunities with routes of progression if appropriate, e.g. T Level industry placements, students supported into higher level apprenticeships.

Working conditions which promote an inclusive working environment and promote retention and progression

Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain

Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

Understanding of the issues affecting the development of new skills by target cohort

Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce

Other measures to offer development opportunities for the target cohort(s) in the contract workforce

Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

Understanding of issues relating to entering the contract workforce

Creation of outreach activities to create a pipeline of employees for the future contract delivery

Content of the outreach activity is designed to suit the target cohort

Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion

Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition

Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

Request an accessible format

Cookies on Digital Marketplace

Website design and Revamp development

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

About your service

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Security governance

Operational security

Secure development

Public sector networks

Pricing

Discount percentage by annual call-off contract value (excluding VAT)

Non-mandatory Standards and certifications

Social value

Service documents