Skip to main content

Help us improve the Digital Marketplace - send your feedback

ARRIBATEC UK LTD

EverQuery Legacy System Hosting

WWorking with our partner QuickThink Cloud , Arribatec offers EverQuery, a secure,
browser-based SaaS platform that enables
organisations to safely interrogate,
analyse and export data from
complex ERP and legacy systems. It
delivers pre-defined, governed
queries to non-technical users,
including access to linked documents,
without requiring direct database
access.

Features

  • Role-based access control for users, queries, and admin actions.
  • Multi-tenant isolation to segregate data and configurations securely.
  • Parameterised SQL execution for controlled, repeatable query runs.
  • Query library management create, edit, version, and restore.
  • Report designer and viewer for reusable outputs and dashboards.
  • Audit logging of user actions and query execution events.
  • API authentication via JWT and tenant-scoped API keys.
  • Tenant IP allowlist/blocklist with CIDR support and enforcement.
  • Country allowlist enforcement using GeoIP lookup capabilities.
  • Rate limiting to reduce abuse and protect availability.

Benefits

  • Improves governance with auditable actions and controlled access.
  • Reduces risk through tenant separation and least-privilege controls.
  • Allows Legacy Systems to be decommissioned safely
  • Cuts manual reporting by standardising outputs and templates.
  • Supports compliance via logging, traceability, and access controls.
  • Enables secure integrations using API keys and scoped endpoints.
  • Improves resilience with rate limiting and transient fault handling.
  • Simplifies administration through central tenant and security settings.
  • Reduces errors via parameterised queries and consistent execution.
  • Supports remote access policies using IP and country restrictions.

Pricing

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales.uk@arribatec.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

9 4 7 5 3 5 4 5 3 0 6 8 3 2 9

Contact

ARRIBATEC UK LTD Allan Burrows
Telephone: 0333 444 1005
Email: sales.uk@arribatec.com

About your service

Service categories

Application Development and Deployment

Data management

Database management systems

  • Relational Database Management Systems
  • Low-Code Database Management Systems
  • Navigational Database Management Systems
  • Fixed Record Database Management Systems
  • Object-Oriented Database Management Systems
  • Multivalue Database Management Systems
  • Non-Schematic Database Management Systems
  • Document-Oriented Database Systems
  • Key-Accessible Database Systems
  • Graph Database Management Systems
  • In-Memory Shared Data Managers
  • Data Lake Management Systems

Database administration and development

  • Database Development and Optimization

Data integration and intelligence

  • Data Ingestion and Transformation Software
  • Data Access Infrastructure Software
  • Composite Data Framework Software
  • Master Data Intelligence Software
  • Metadata Management Software
  • Data Archiving and Information LifD-Cycle Management
Multi cloud support
Yes

Service scope

Software add-on or extension
No
Cloud deployment model
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
Service constraints
Modern, supported browser
technology required.
System requirements
  • Modern web browser (Edge/Chrome/Firefox) with JavaScript enabled.
  • Network access to EverQuery frontend and API endpoints.
  • TLS/HTTPS permitted through buyer network proxies/firewalls.
  • Single Sign-On licence if using Microsoft Entra ID.
  • API key management process for integrations and external clients.
  • Excel desktop and support for ExcelFlux add-in (if needed).

User support

Email or online ticketing support
Yes
Support response times
Our response time is 1 hour, which is
the same at weekends.
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.2 AA
Phone support
Yes
Phone support availability
24 hours, 7 days a week
Web chat support
Yes
Web chat support availability
24 hours, 7 days a week
Web chat support accessibility standard
WCAG 2.2 AA
Web chat accessibility testing
None so far.
Onsite support
Yes, at extra cost
Support levels
All our cloud hosting solutions come
with full managed service support.
The support levels are calculated
based on the size of the system and
its complexity, but there are gradual
increases depending on the number
of users, complexity, etc. as might be
expected. These are documented in
the associated documentation. All
contracts include Technical Project
Management, Account Management
& Cloud Support as standard.
Support available to third parties
Yes
AI chatbot
No

Onboarding and offboarding

Getting started
We help users get started quickly
through a structured onboarding
process designed for public sector
organisations. Each customer
receives an initial setup and
configuration, including secure
environment provisioning and user
access configuration. We work with
administrators to define roles,
permissions and query groups aligned
to the same organisational policies as
the legacy system. Predefined
queries are supplied as part of
onboarding, allowing users to access
value immediately without needing
technical skills. Where required,
additional queries can be created or
tailored to customer needs. Users are
supported with clear documentation
and guided walkthroughs covering
logging in, running queries, filtering
results, viewing documents and
exporting data. The service is intuitive
and browser-based, so no local
installation or specialist configuration
is required. We provide responsive
support during onboarding to resolve
questions quickly and ensure users
are confident using the service.
Optional follow-up sessions can be
provided to introduce advanced
features and best practices. This
approach ensures users are
productive from day one, with minimal
disruption and low training overhead.
Service documentation
Yes
Documentation formats
  • HTML
  • ODF
  • PDF
End-of-contract data extraction
Users can extract data in two ways.
First, because EverQuery runs
queries against the buyer’s own
databases, the underlying source
data remains in their control and can
be accessed directly using their
normal database tools and processes.
Second, users can export query and
report results from the EverQuery
interface (for example to Excel/CSV
where available) or retrieve results via
the API by executing saved queries
with parameters and downloading the
returned dataset. On contract end, the
buyer can also request an export of
their original database (unchanged) or
the EverQuery-managed
configuration data (for example saved
queries, parameters, report
definitions, and audit logs) for their
tenant, subject to agreed off-boarding
procedures and security controls.
End-of-contract process
At the end of the contract, customers
retain full control over their data. Prior
to contract expiry, we work with the
customer to confirm whether they
wish to renew the service, transition
to a new arrangement, or exit the
platform. If the service is not renewed,
we support an orderly off-boarding
process. Customer data can be
securely exported in agreed formats
to enable retention, migration, or
archival in line with organisational and
regulatory requirements. Access to
the service is then disabled to prevent
further use. All customer data hosted
within the EverQuery environment is
securely deleted after a mutually
agreed retention period, in
accordance with contractual terms,
data protection legislation, and
industry best practices. Deletion
activities are logged and can be
confirmed on request. There are no
proprietary lock-ins that prevent
customers from moving away from
the service. The process is designed
to be transparent, controlled, and
compliant, ensuring customers can
exit confidently without operational
risk or data loss.
Documentation accessibility standard
WCAG 2.2 AA

Using the service

Web browser interface
Yes
Supported browsers
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
Menu disappears when returning data
to maximise screen real estate. It can
be recalled at any time.
Service interface
Yes
User support accessibility
WCAG 2.2 AA
Description of service interface
Description of service interface
EverQuery provides a web-based
user interface and a REST API. The
web UI supports authentication,
tenant administration, query and
report management, execution and
results viewing/export. Administrative
screens cover users, roles, access
control, security settings and audit
logs. The REST API exposes JSON
endpoints under /api, including login,
query and report operations, tenant
and settings management and an
external integration surface for API
key clients. Authentication uses JWT
bearer tokens for interactive users
and API keys for integrations.
Accessibility standards
WCAG 2.2 AA
Accessibility testing
None as yet, but have significant
capacity to conduct co-operative
testing.
API
Yes
What users can and can't do using the API
EverQuery’s API lets authenticated
clients interact with the platform over
HTTPS using JSON. Interactive users
authenticate with JWT bearer tokens,
then can retrieve permitted queries
and reports, execute queries with
parameters, and access tenant
scoped configuration allowed by their
role (for example, administrators can
manage users, RBAC assignments,
connections, and security settings).
The API also supports audit and
security features such as viewing
access telemetry, managing IP
allow/block rules, and configuring
tenant security enforcement, subject
to role restrictions (ADMIN or
UBER_ADMIN). For integrations,
EverQuery exposes an API-key
interface intended for external tools
(for example ExcelFlux Add-In or
Power BI). API-key clients can list
available saved queries for their
tenant, retrieve query definitions
(including parameters and column
metadata), and execute those queries
by supplying parameter values.
Results are returned as structured
tabular data. What clients can’t do
depends on policy and role. Non
admins can’t access admin endpoints
or cross tenant boundaries. API keys
are tenant-scoped and don’t grant
RBAC administration or user
management. Queries may be
blocked from destructive SQL
statements by tenant policy, and
execution is constrained by
configured timeouts and maximum
row limits.
API documentation
Yes
API documentation formats
Open API (also known as Swagger)
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
Users customise EverQuery primarily
through configuration, access controls
and content. Administrators can
create and manage tenants and
users, assign roles,and define data
roles and query groups so different
user cohorts see only approved
queries and reports. They can build
and maintain a curated query library:
create queries, define parameter sets,
add descriptions and categories,
configure result columns (visibility,
headers, and formatting), and use
version history to track changes and
restore prior versions. Service
connectivity is configurable:
administrators can register database
connections per tenant (including a
primary/default connection) so
queries execute against the correct
data sources without changing
application code. Query execution
behaviour can be tuned per tenant
using engine settings such as
maximum rows returned, execution
timeout, caching options and whether
potentially destructive SQL is blocked.
Security controls are also
customisable. Tenants can enforce IP
allowlists/blocklists with CIDR rules,
optionally add country allowlist
enforcement using GeoIP lookups
and manage API keys for
integrations. The UI includes
preferences and settings screens so
operational teams can adjust
behaviour without redeployment,
while still maintaining audit logs and
tenant boundaries.

Scaling

Independence of resources
EverQuery reduces cross-tenant
impact using multi-tenant isolation
and protective controls. Tenant
boundaries are enforced in the
application so users only access their
tenant’s configuration and data.
Request rates can be limited to
prevent abuse; query execution is
constrained with per-tenant timeouts
maximum row limits to stop long
running or high-volume queries
consuming disproportionate
resources. Potentially destructive
SQL blocked by policy. The platform
provides scalable compute and
resource governance; capacity can be
increased when demand grows. While
no system can guarantee zero impact
under extreme load, these controls
are designed to keep usage fair and
predictable across tenants.

Analytics

Service usage metrics
Yes
Metrics types
EverQuery provides operational and
security metrics through its UI and
audit capabilities. It records audit
events for key actions such as logins,
query executions, and administrative
changes, including timestamps, user
identity, tenant context, and outcome.
Query execution responses include
execution time (milliseconds) and row
counts, supporting performance
monitoring. The security interface
provides a live access feed (recent
access telemetry) and session status
indicators reflecting IP allowlist
enforcement and rule matches.
Platform health can be monitored via
standard endpoint checks (e.g.,
authentication endpoint responding
with expected status codes).
Additional metrics (uptime, response
latency) are available via Azure App
Service monitoring.
Reporting types
  • API access
  • Real-time dashboards
Resource tagging
Yes
FOCUS resource tagging
No

Resellers

Supplier type
Reseller providing extra features and support
Organisation whose services are being resold
QuickThink Cloud Ltd

Staff security

Staff security clearance
Conforms to BS7858:2019
Government security clearance
Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
User control over data storage and processing locations
Yes
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 4.0)
Penetration testing frequency
At least once a year
Penetration testing approach
‘IT Health Check’ performed by a CHECK service provider
Protecting data at rest
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
Data sanitisation process
Yes
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
Data sanitisation type
  • Data Erasure
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

Data export approach
Users export data by running saved
queries or reports and downloading
the resulting dataset from the
EverQuery interface (for example to
Excel or CSV where enabled). They
can also export via the API:
authenticated clients execute a saved
query with parameters and receive
the results as structured JSON
(columns plus rows), which can be
saved into spreadsheets, BI tools, or
data pipelines. For Excel users, the
ExcelFlux add-in can pull query
results directly into worksheets for
further analysis and saving. If needed,
customers can always export directly
from their underlying source
database, since EverQuery reads
from customer‑owned data sources.
Data export formats
  • CSV
  • ODF
Data import formats
  • CSV
  • ODF
  • Other
Other data import formats
  • XLS
  • XLSX
  • PDF
  • MD

Data-in-transit protection

Data protection between buyer and supplier networks
  • TLS (version 1.2 or above)
  • Other
Other protection between networks
IP Whitelisting
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
EverQuery is provided with a defined
Service Level Agreement covering
availability and service reliability. We
commit to a monthly service
availability target of 99.9%, excluding
planned maintenance. Planned
maintenance is communicated in
advance and scheduled outside of
core UK business hours wherever
possible. Service availability is
measured at the application boundary
and includes user access to the
EverQuery platform. Availability does
not include outages caused by factors
outside our reasonable control, such
as customer network failures, third
party identity providers, or force
majeure events. If availability falls
below the guaranteed level in any
calendar month, customers are
entitled to service credits. Credits are
applied as a percentage of the
monthly service fee and are
calculated on a sliding scale based on
the level of availability achieved.
Service credits are applied to the next
invoice or renewal period and
represent the customer’s sole
financial remedy for availability
breaches. Performance against the
SLA is monitored continuously, and
availability metrics can be shared with
customers on request. The SLA is
designed to be clear, measurable
and aligned with public sector
expectations for transparency and
operational assurance.
Approach to resilience
EverQuery is designed with resilience
as a core architectural principle,
ensuring service continuity, data
protection, and rapid recovery from
failure. The service is hosted in a
secure European cloud data centre
environment that provides resilient
power, cooling, and network
connectivity. The underlying
infrastructure is built to eliminate
single points of failure, with redundant
components across compute,
storage, and networking layers. All
customer environments are logically
isolated to prevent cross-tenant
impact. The application is deployed
using containerised services, allowing
components to be restarted or
redeployed quickly in the event of a
fault. This approach supports rapid
recovery and minimises disruption to
users. Backend databases are hosted
on resilient platforms with built-in
redundancy and automated
monitoring. Data is protected through
regular, encrypted backups stored off
site in geographically separate
locations. Backups are immutable and
retained in line with agreed policies,
enabling reliable restoration in the
event of data corruption, accidental
deletion, or security incidents. Service
health is continuously monitored, with
alerts raised automatically to
engineering staff if issues are
detected. Planned maintenance is
carefully managed to avoid service
disruption wherever possible. Further
detailed information is available on
request, in line with government
guidance on asset protection and
resilience.
Outage reporting
EverQuery itself does not currently
provide a dedicated public status
dashboard, outage-notification API or
built-in email alerting feature for
customers. Service availability can be
checked using standard endpoint
monitoring (for example, the frontend
URL returning HTTP 200 and the API
auth endpoint returning HTTP 401 for
an unauthenticated request).
Operational outage detection and
alerting can be implemented using
Monitor and Application Insights,
including dashboards, webhook/API
integrations, and email/SMS
notifications to nominated contacts.
Where required, we can provide a
customer-facing status page and
agreed incident communications
process as part of service onboarding
and support arrangements.

Identity and authentication

User authentication needed
Yes
User authentication
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
Access restrictions in management interfaces and support channels
Access to management interfaces is
strictly controlled, uses MFA (Multi
Factor Authentication) and does not
include any user access.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
At least 12 months
How long system logs are stored for
At least 12 months

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
EverQuery is operated under a formal
information security management
framework designed to protect
customer data and meet public sector
expectations. QuickThink Cloud
maintains documented information
security policies covering areas
including access control, data
protection, incident management,
vulnerability management, supplier
assurance, and business continuity.
These policies align with recognised
standards and are reviewed regularly
to ensure they remain effective and
up to date. Information security
governance is led by senior
management, with overall
accountability resting at director level.
Operational responsibility is assigned
to designated technical and security
leads who oversee day-to-day
compliance, risk management and
security operations. Policies are
enforced through technical controls,
including role-based access, least
privilege principles, encryption of data
in transit and at rest and secure
configuration management.
Compliance is further supported by
change management processes,
logging, monitoring and regular
security reviews. All staff receive
security awareness training via
ISO27001 and are required to follow
documented procedures as part of
their role. Adherence to policies is
monitored through internal reviews
and audits, and any breaches or
incidents are managed through a
defined incident response process
with escalation, investigation, and
corrective actions. This structured
approach ensures information
security is consistently applied,
monitored, and governed across the
service
Software Security Code of Practice
Yes

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
EverQuery follows a controlled
configuration and change
management process to maintain
service stability and security. All
service components, including
application code, infrastructure
configuration and dependencies, are
version-controlled and tracked
throughout their lifecycle. Changes
are logged, reviewed and approved
before deployment. Proposed
changes are assessed for operational
and security impact, including
potential effects on availability, data
protection and access controls.
Security-sensitive changes receive
additional scrutiny and testing.
Changes are deployed using
repeatable, auditable processes, with
rollback procedures in place where
required. This approach ensures
traceability, minimises risk, and
maintains the integrity of the service.
Vulnerability management type
Undisclosed
Vulnerability management approach
EverQuery follows a proactive
vulnerability management process to
identify and reduce security risks.
Potential threats are assessed
through continuous monitoring of the
service environment, regular review of
system configurations, and evaluation
of changes to infrastructure or
application components. Identified
risks are prioritised based on severity
and potential impact. Security patches
are applied promptly using a risk
based approach. Critical
vulnerabilities are addressed as a
priority and deployed as soon as
practicable, with less critical updates
applied through scheduled
maintenance. Information on
emerging threats is obtained from
vendor security advisories, cloud
provider notifications, industry best
practice sources, and vulnerability
disclosure programmes.
Protective monitoring type
Undisclosed
Protective monitoring approach
Service activity is logged and
monitored to identify unusual
behaviour, unauthorised access
attempts, or indicators of
compromise. Alerts are generated
automatically for events that breach
defined thresholds or security rules.
When a potential compromise is
identified, incidents are triaged
promptly, access can be restricted if
required, and investigations are
initiated to determine scope and
impact. Corrective actions are taken
to contain and remediate the issue.
Security incidents are responded to
as a priority, with initial assessment
and response initiated as soon as
alerts are raised, in line with
documented incident response
procedures.
Incident management type
Undisclosed
Incident management approach
Service activity is logged and
monitored to identify unusual
behaviour, unauthorised access
attempts, or indicators of
compromise. Alerts are generated
automatically for events that breach
defined thresholds or security rules.
When a potential compromise is
identified, incidents are triaged
promptly, access can be restricted if
required, and investigations are
initiated to determine scope and
impact. Corrective actions are taken
to contain and remediate the issue.
Security incidents are responded to
as a priority, with initial assessment
and response initiated as soon as
alerts are raised, in line with
documented incident response
procedures.
Post-quantum cryptography secure
Yes

Secure development

Approach to secure software development best practice
Supplier-defined process

Public sector networks

Connection to public sector networks
No

Pricing

Discount for educational organisations
No
Free trial available
No

Discount percentage by annual call-off contract value (excluding VAT)

Less than £250,000
0%
Between £250,000 and £500,000
0%
Between £500,001 and £1,000,000
0%
Between £1,000,001 and £2,500,000
0%
Between £2,500,001 and £5,000,000
0%
Over £5,000,001
0%

Non-mandatory Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
Nemko Scandinavia AS
ISO/IEC 27001 accreditation date
Sunday 20 April 2025
What the ISO/IEC 27001 doesn’t cover
The SCOPE of the certificate covers:
Sales, business development, support, operation and maintenance of infrastructure,
IT systems, networks, applications and services related to solutions the supplier has
contractual fresponsibility for with its customers.
Anything not included in the scope as set out is not covered.
ISO 28000:2022 certification
No
ISO 9001 certification
Yes
Who accredited the ISO 9001 certification
British Assessment Bureau
ISO 9001 accreditation date
Monday 28 April 2025
What the ISO 9001 doesn’t cover
The SCOPE of the certificate covers:
Provision of software expertise including consultancy, project management,
support, hosting, technical services in relation to ERP software globally.
Anything not included in the scope as set out is not covered.
Quality management systems (QMS)
Yes
CSA STAR certification
No
PCI certification
No
Cyber essentials
Yes
Please provide your Cyber Essentials Certificate Number
19a08c76-33d5-49ad-ab32-c1d58105f213
Cyber essentials plus
No
Cyber Essentials Alternative
You do not have a current and valid Cyber Essentials Plus certificate, or will not have in place within 12 months of the date of award but have an IASME certified equivalent.
Other security certifications
No

Social value

Section B - Commitment for Future: Delivery
  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
    • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
    • Understanding of issues relating to entering the contract workforce
  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales.uk@arribatec.com. Tell them what format you need. It will help if you say what assistive technology you use.