Starlight AI

Agentic AI Process Automation: Integrate with any system

AI Honeycomb is a secure cloud platform for deploying and operating AI systems in public sector environments. It provides a controlled execution layer for AI workloads and observability, enabling organisations to run AI services with governance, security, and transparency. It supports deployment in customer cloud environments or Starlight-managed infrastructure.

Features

• Secure EU-hosted cloud infrastructure for AI workloads
• API-driven AI orchestration and service management platform
• Scalable compute and storage using public cloud services
• Secure identity, access control, and role-based permissions
• Integrated monitoring, logging, and auditability features
• Support for AI model deployment and execution pipelines
• Data ingestion, transformation, and processing capabilities
• Infrastructure automation and configuration management
• High availability and resilience with defined service levels
• Integration with existing government and enterprise systems

Benefits

• Deploy AI services securely within UK and EU regulations
• Reduce infrastructure complexity for AI-enabled digital services
• Scale AI workloads efficiently based on operational demand
• Maintain auditability and accountability for AI-driven processes
• Integrate AI capabilities into existing government systems
• Improve reliability and resilience of AI service delivery
• Accelerate deployment of compliant AI platforms
• Centralise management of AI infrastructure and services
• Support experimentation without compromising production stability
• Enable faster delivery of AI-enabled public services

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at shahbaz@starlight.inc. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

170916115884517

Contact

Shahbaz Ahmad
02080681677
shahbaz@starlight.inc

About your service

• Service categories:

  PaaS

  Application Platforms

  • Robotic process automation

Service scope

• Service constraints: The service is a cloud-based service and requires deployment within a supported cloud environment. Service performance and availability depend on the underlying cloud infrastructure and any third-party services integrated by the buyer. Planned maintenance may require short periods of reduced availability, which are communicated in advance where possible. Support is provided during UK business hours unless otherwise agreed. Certain configurations, security controls, or deployment models may require additional setup time during onboarding.
• System requirements:
  • Supported public or private cloud hosting environment
  • Internet connectivity for management and monitoring access
  • Secure identity provider for user authentication
  • Modern web browser for administrative access
  • API access for system integrations
  • Appropriate cloud permissions for deployment and configuration
  • Secure network connectivity between integrated systems
  • Customer-managed cloud account where applicable
• Cloud deployment model:
  • Public cloud
  • Private cloud

User support

• Email or online ticketing support: Yes
• Support response times: Support requests are acknowledged within one UK business day. Initial responses are typically provided during UK business hours, Monday to Friday. Response times may be longer at weekends and public holidays. Where issues impact service availability or delivery, they are prioritised and addressed according to the agreed Service Level Agreement.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: Standard support is included with the service and provides access to email and ticket-based support during UK business hours, Monday to Friday. This level covers general service queries, configuration assistance, and incident investigation in line with the agreed Service Level Agreement.; ; Enhanced support options are available at additional cost and can include extended support hours, faster response times, and priority handling of incidents. These options are agreed contractually based on customer requirements.; ; Where required, customers may be provided with access to a named technical contact or cloud support engineer for coordination of onboarding, service configuration, and ongoing operational support. Dedicated technical account management or onsite support can be provided as an optional, chargeable service.; ; Full details of support options, response times, and associated costs are agreed as part of the contract and reflected in the pricing documentation.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Users are supported through a structured onboarding and enablement process. This includes guided setup sessions, remote onboarding workshops, and access to clear user documentation.; ; Initial onboarding typically covers service configuration, access controls, integration setup, and an overview of operational workflows. Training can be delivered remotely or onsite, depending on user needs and service scope.; ; Users are also provided with written documentation, API documentation, and step-by-step setup guidance to support self-service configuration where appropriate.; ; Ongoing support is available through email, ticketing and phone support to ensure users can adopt and use the service effectively. Where required, tailored onboarding or training sessions can be provided to support more complex deployments or organisational change.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Customers can extract their data at the end of the contract via secure export mechanisms provided through the web interface and API. Data can be exported in standard, open formats (such as CSV, JSON, or structured files relevant to the service). On request, Starlight can support assisted extraction to ensure completeness and continuity. Data remains available for a defined retention period after contract termination, after which it is securely deleted in line with agreed data retention and security policies.
• End-of-contract process: At the end of the contract, the service is transitioned into a controlled exit phase. This includes continued access for a defined handover period, standard data export through the web interface and API, and secure data retention in line with contractual and regulatory requirements. These activities are included in the contract price.; ; Optional additional services such as extended retention periods, bespoke data formats, assisted migration, or on-site support, can be provided at additional cost if requested. Once the exit period concludes, all customer data is securely deleted in accordance with Starlight’s data handling and information security policies.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Using the web interface: The web interface allows authorised users to configure and manage the service, including environment setup, access controls, integrations, and monitoring. Users can view system status, usage metrics, and operational logs through the interface.; ; Configuration changes such as user permissions, integration settings, and service parameters can be made through the web interface, subject to role-based access controls.; ; Certain advanced configuration tasks, infrastructure changes, or deployment actions may require support assistance or API access rather than being performed directly through the web interface. The web interface is not intended for low-level infrastructure management or direct modification of underlying cloud resources.
• Web interface accessibility standard: WCAG 2.2 AA
• Web interface accessibility testing: The web interface has been designed with accessibility considerations aligned to WCAG 2.2 AA standards. Accessibility testing has included keyboard navigation, screen reader compatibility checks, and contrast validation using common accessibility testing tools. Accessibility issues identified during development are addressed as part of ongoing improvement.
• API: Yes
• What users can and can't do using the API: The API allows authorised users to configure, manage, and integrate the service programmatically. Users can set up environments, manage access controls, configure integrations, submit configuration changes, and retrieve operational and usage data through the API.; ; The API supports automation of service configuration and integration with external systems and workflows, subject to authentication and role-based permissions.; ; Certain actions, such as changes to underlying cloud infrastructure, security baselines, or core service architecture, are restricted and may require support involvement rather than being performed directly through the API. API usage is subject to rate limiting and governance controls to ensure service stability and security.
• API automation tools:
  • Ansible
  • Terraform
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
• Command line interface: No

Scaling

• Independence of resources: Users are isolated through tenant-specific configurations, access controls, and workload separation. Each client deployment is scoped, capacity-planned, and governed independently to prevent contention from other users’ demand. Where shared cloud infrastructure is used, industry-standard isolation mechanisms and provider controls are relied upon. Service delivery is actively monitored by Starlight engineers to ensure one client’s usage does not degrade another’s service. If required, additional capacity or dedicated resources can be provisioned by agreement.
• Usage notifications: No

Analytics

• Infrastructure or application metrics: Yes
• Metrics types:
  • HTTP request and response status
  • Number of active instances
• Reporting types:
  • API access
  • Real-time dashboards
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with CSA CCM v4.0
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Data Erasure

Backup and recovery

• What’s backed up:
  • Application databases and structured service data
  • Configuration files and deployment metadata
• Backup controls: Users control backups through the web interface, where they can select which data types are backed up and define retention periods. Backup scope and frequency can be configured per environment, allowing different schedules for production and non-production systems. Changes take effect immediately and are logged for audit purposes.
• Datacentre setup: Multiple datacentres
• Scheduling backups: Users schedule backups through a web interface
• Backup recovery: Users can recover backups themselves, for example through a web interface
• Backup and recovery: Yes
• RPO/RTO: Yes

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The service is designed for high availability using cloud infrastructure with built-in redundancy and resilience. We target 99.5% monthly availability, excluding planned maintenance.; ; Availability is supported through the use of managed cloud services, automated monitoring, and rapid incident response processes. Planned maintenance is communicated in advance wherever possible and scheduled to minimise user impact.; ; If availability falls below the stated target in a given month, service credits may be applied in accordance with the contract terms. Refunds or service credits are agreed on a case-by-case basis and proportionate to the impact and duration of the outage.; ; This availability commitment applies to the core service platform and does not include issues caused by factors outside of the supplier’s reasonable control, such as customer configuration errors, third-party integrations, or force majeure events.
• Approach to resilience: The service is designed with resilience in mind, using cloud infrastructure that provides redundancy across multiple components and availability zones. Core services are deployed in a way that avoids single points of failure, with automated recovery mechanisms in place where supported by the underlying platform.; ; Resilience is supported through a combination of infrastructure redundancy, regular backups, monitoring, and alerting. The service is continuously monitored to detect failures or degradation, enabling timely response and remediation.; ; Data is stored and processed within UK and EEA locations using cloud datacentres that comply with recognised security and resilience standards. The underlying datacentre resilience, including power, networking, and physical security controls, is provided by the cloud service provider and details can be made available on request.; ; Planned maintenance and changes are managed to minimise impact on service availability. Where failures do occur, recovery procedures are followed to restore service as quickly as possible in line with operational priorities.
• Outage reporting: Service outages and significant service degradation are communicated directly to customers through agreed communication channels, primarily via email. Where appropriate, customers may also be notified through existing support or account management channels.; ; Outage notifications include a brief description of the issue, the expected impact, and updates as the issue is investigated and resolved. Following resolution, a summary can be provided on request outlining the cause and corrective actions taken.; ; The service does not currently provide a public status dashboard or outage reporting API. However, outage information is shared proactively with affected customers to ensure transparency and timely communication.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is restricted to authorised personnel only. Administrative and support access is role-based and granted on the principle of least privilege. Authentication is enforced for all management access, with strong passwords and multi-factor authentication where applicable. Access is limited to approved accounts, logged, and regularly reviewed. Support channels are controlled through authenticated service desk processes and verified user requests. Public end-user access does not provide access to management or support interfaces.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Devices users manage the service through: Dedicated device on a segregated network (providers own provision)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: The service operates under documented information security policies covering access control, data protection, incident management, change management, and secure system operation. These policies are aligned with recognised good practice and the ISO/IEC 27001 standard.; ; The organisation is currently progressing formal ISO/IEC 27001 certification. Policies, risk assessment, and control implementation are managed in line with the ISO/IEC 27001 framework.; ; Overall responsibility for information security sits with a named board-level authority (or equivalent), who approves policies, oversees risk, and is accountable for security decisions. Day-to-day security controls are implemented by authorised technical staff in accordance with documented procedures.; ; Policies are enforced through role-based access control, least-privilege principles, secure configuration standards, and controlled change processes. Security incidents are reported, assessed, and escalated as required, with lessons learned feeding back into policy and control improvement.; ; Policies are reviewed periodically and updated as the service, threat landscape, or certification status evolves.

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: All service components are version-controlled and tracked throughout their lifecycle using source control, infrastructure-as-code, and documented configuration baselines. Assets, configurations, and dependencies are recorded and maintained to support traceability and audit.; ; Changes follow a defined change management process. Each change is assessed for security, availability, and data protection impact prior to implementation. Higher-risk changes require peer review and explicit approval before deployment.; ; Changes are tested in controlled environments where applicable and deployed using repeatable, auditable processes. Emergency changes are logged, reviewed retrospectively, and incorporated into standard controls to ensure continual improvement.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: The service follows a structured vulnerability management process aligned with ISO/IEC 27001 controls. Potential threats are assessed through a combination of automated scanning, external penetration testing, code review, and risk-based assessment.; ; Vulnerability information is sourced from vendor advisories, CVE databases, cloud provider security bulletins, and penetration testing reports.; ; Identified vulnerabilities are prioritised based on severity, exploitability, and potential impact. Security patches and mitigations are deployed promptly using controlled change management processes, with critical vulnerabilities addressed as a priority.; ; Remediation actions are tracked to completion and reviewed to support continual security improvement.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: The service uses protective monitoring to detect potential security compromises through centralised logging, automated alerts, and continuous monitoring of infrastructure, application, and access events.; ; Logs and alerts are reviewed to identify anomalous behaviour, unauthorised access attempts, or indicators of compromise.; ; When a potential compromise is identified, predefined incident response procedures are triggered, including containment, investigation, and remediation actions.; ; Security incidents are prioritised by severity, with critical incidents responded to immediately and all actions logged for audit and continual improvement.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: The service operates a documented incident management process aligned with ISO/IEC 27001 and NCSC guidance. Pre-defined playbooks exist for common events including availability incidents, security alerts, and data protection issues. Users report incidents via a dedicated support email and service desk during agreed support hours, with critical incidents escalated immediately. All incidents are logged, triaged, and assigned severity levels with defined response targets. Incident reports are provided to customers following resolution, including root cause, remediation actions, and preventative measures.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Third-party
• Third-party virtualisation provider: Public cloud infrastructure providers (AWS, Azure, GCP)
• How shared infrastructure is kept separate: Tenant isolation is provided using cloud-native virtualisation and tenancy controls implemented by the underlying public cloud provider. Each customer environment is logically isolated using provider-managed virtual machines, containers, and networking boundaries. Access is controlled through identity and access management, role-based permissions, and least-privilege principles. Data is segregated at the storage and application layers, and workloads are deployed within tenant-specific configurations to prevent cross-customer access. Isolation mechanisms are continuously enforced and monitored in line with the cloud provider’s security standards and shared responsibility model.

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: The service is hosted on cloud infrastructure provided by major hyperscale cloud providers whose datacentres adhere to the EU Code of Conduct for Energy Efficient Datacentres. These providers operate energy-efficient facilities designed to optimise power usage effectiveness (PUE), use high-efficiency cooling systems, and continuously monitor and improve energy performance.; ; The service is deployed using virtualised, elastic infrastructure to minimise over-provisioning and reduce unnecessary resource consumption. Capacity is scaled dynamically based on demand to avoid idle compute usage.; ; The provider regularly reviews sustainability and energy efficiency commitments published by its cloud infrastructure suppliers and aligns service architecture and deployment practices with those commitments. This approach ensures that the service benefits from ongoing improvements in datacentre energy efficiency without requiring dedicated physical infrastructure.

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount

• Provide your minimum discount applicable to your baseline prices: 2%

Formula for calculating price of your services

• Formula for calculating price of your services:

  Which of the core deployment models you intend to offer

  Private Cloud

  Private Cloud - Formula for calculating price of your services

  ---

  Total Cost

  The Total Cost for a buyer's call off requirement in a Private Cloud Deployment

  =

  Baseline Pricing

  G-Cloud 15 Listing has baseline prices

  -

  Minimum Discounting

  2%

  +

  Onboarding Activity

  Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process

  +

  Additional sources of cost

  No additional costs

  -

  Additional sources of cost reduction

  No additional costs

  ---

• Total Cost: The Total Cost for a buyer's call off requirement in a Private Cloud Deployment
• Baseline Pricing: G-Cloud 15 Listing has baseline prices
• Minimum Discounting: 2%
• Onboarding Activity: Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
• Additional sources of cost: No additional costs
• Additional sources of cost reduction: No additional costs

Mandatory certifications

• Mandatory certifications:

  Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure

  Sole Control of the Infrastructure

  ISO 9001 certification

  Provided

  ISO 14001 certification

  Provided

  ISO 27001 certification

  Provided

  ISO 20000-1 certification

  Provided

  ISO 27017 certification

  Provided

  Are you bidding to provide services under Lot 1b or both Lot 1a and Lot 1b?

  No

Cyber Essentials

• Do you have a Cyber Essentials Plus certificate?: Yes
• Cyber Essentials Plus certificate Number: C9d41a25-45cd-4dec-a9e6-2f404a45826d

Non-mandatory Standards and certifications

• ISO 28000:2022 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
    • How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
    • Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
    • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
    • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
    • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
    • Plans for positive actions with community groups.
    • Measures for making facilities used in the delivery of the contract available for community groups, education or training
    • Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
    • Plans to respond flexibly and adapt approaches to community engagement and initiatives
    • Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds
    • Collaborating with anchor institutions and community groups to make facilities available for education, training or community events

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
    • Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Collection of the views and expertise of disabled people and their representative organisations on successfully supporting disabled employees or applicants
    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Introducing transparency to pay and reward processes
    • Offering a range of quality opportunities with routes of progression if appropriate, e.g. T Level industry placements, students supported into higher level apprenticeships.
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
    • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of issues relating to entering the contract workforce
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery
    • Content of the outreach activity is designed to suit the target cohort
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at shahbaz@starlight.inc. Tell them what format you need. It will help if you say what assistive technology you use.