RACKSPACE LIMITED

Rackspace Sovereign Public Sector Cloud (Compute)

A hosted, fully managed, multi- or single-tenant hybrid cloud solution that has been designed from the ground-up for organisations, hosting data at OFFICIAL.

Features

• Dedicated and encrypted enterprise-grade infrastructure environment
• UK sovereign solution UK Infrastructure, tools and staff
• 24x7x365 ITIL aligned service model
• Choice of shared or dedicated infrastrcuture configurations
• Hosted from secure Crown Hosting sites
• Choice of backup options for your RTO and RPO needs
• ServiceNow digital workflow for control and visibility
• NCSC ‘14 Cloud Principles’ aligned and ready for UK-OFFICIAL workloads
• Always available, with secure business continuity and disaster recovery capabilities
• Fully managed and proactive operational management

Benefits

• Save time using a Rackspace managed patched and maintained service
• Choice of cloud platforms and architecture optimise agility efficiency cost
• Open and familiar APIs portability across public and private clouds
• Flexible delivery, hosted on or off-premises
• Security and performance from a multi and/or single-tenant dedicated environment
• Flexible capex/opex models
• Comprehensive lifecycle mangement and automation with policy based governance
• Predictable costs for the lifetime of the contract
• Choice of leading cloud technologies
• Application modernisation is not a requirement, modernise at your pace

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sovereignservices@rackspace.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

215570412143002

Contact

UK Sovereign Services
+44 (0)208 734 8107
sovereignservices@rackspace.co.uk

About your service

• Service categories:

  IaaS

  IaaS Compute

  • Bare metal
  • Container and serverless engine compute

  Virtualised x86

  • General purpose
  • Compute optimised
  • Memory optimised

  Accelerated

  • GPUs

Service scope

• Service constraints: Rackspace will operate your service as a managed solution. From time to time we may require a maintenance window, this will be argeed via the service change control process. The service is built using our architectural standards, changes to this approach will only be possible via the change control process. All server builds will hardened to agreed Rackspace standards. All system will sit behind Rackspace managed firewalls, changes to these policies will require Rackspace security review and approval. Minimum commitment on Multi-Tenant platform is 10 VMs / 1TB storage.
• System requirements:
  • Each environment is designed to customers specifications
  • BYOL licence available for customers
• Cloud deployment model: Hybrid cloud

User support

• Email or online ticketing support: Yes
• Support response times: The service operates 24x7x365 and offers the same response time SLA at all times: P1 response time 15 minutes; P2 response time 1 hour; P3 response time 4 hours.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: No
• Support levels: Each customer is assigned a named Customer Success Manager (CSM) who is accountable for all aspects of support throughout the contract term. The account team also includes a Lead Cloud Engineer (LE), a technical expert responsible for managing the Rackspace solution and ensuring systems meet required standards. The LE understands the customer’s environment and requirements, enabling proactive advice on service improvements and coordination of technical support. Rackspace Sovereign Services (RSS) operates from a secure facility in Cardiff, providing 24×7×365 service desk support. RSS includes a UK-based, security-cleared change management team that oversees all Rackspace-initiated changes impacting the customer’s environment. The managed service incorporates a robust problem management process, with dedicated problem managers tasked with identifying root causes of incidents and implementing permanent resolutions through change requests or known error management. Incident management spans all aspects of the RSS solution. Minor incidents are handled by the service desk team leader, while major incidents trigger assignment of a dedicated incident manager or can be escalated at the customer’s request. Response times are defined as: P1 within 15 minutes, P2 within 1 hour, and P3 within 4 hours.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Following signature, a service kick-off meeting is held including account team introductions, replaying the pre-sales information highlights, a review of the contract deliverables and overview of the Rackspace onboarding process. Shortly after kick-off, a Customer Portal demonstration walkthrough is scheduled covering user creation, user management and permissions, documentation store, CMDB location, how to raise a request, a change or an incident and how to phone into Rackspace support. Throughout the onboarding process, a detailed Customer Handbook is built with the customer acting as a holistic service manual including a walkthrough of each section such as account contacts, roles & responsibilities, products & services information, service model, escalations, customer feedback, ITIL processes (request, change, emergency change, incident, major incident, problem management), security & compliance (e.g. data classifications, secure communications, secure destruction/disposal, audits, staffing and clearance requirements), environment configuration information (antivirus / antimalware, monitoring, vulnerability scanning, patching, backup & restore, disaster recovery). The Handbook is provided as part of service handover / acceptance into the service.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • ODF
  • PDF
• End-of-contract data extraction: Customers can transfer their data using cloud-specific native tools. Rackspace can provide project resources at additional cost to migrate workloads into or out of the platform. Upon request, Rackspace can also optionally attach a portable device to customer’s servers, typically when there is too much data to practically migrate over a network. Customers are responsible for transferring data to the portal device and for ensuring personal data, sensitive personal data, and other types of sensitive data are appropriately protected (encryption).
• End-of-contract process: At the end of the contract, the contract will automatically roll over to a monthly cycle contract unless customer gives 30 days notice to terminate or renew their contract. Rackspace will inform the customer of the roll over taking effect and work with the customer to identify options to formally extend the contract or to initiate a termination as per the call-off contract agreement. In case a customer wishes to terminate its contract, Rackspace agrees to plan, cooperate and provide exit assistance in good time to achieve a smooth transition of services with minimal disruption to customer’s operation and to continue to provide the services until transfer is complete.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Using the web interface: The Rackspace Customer Portal provides access to billing and service information, however as this service is a fully managed environment, Rackspace will manage the the end-to-end environment to prevent changes to the certified design. A customer-facing monitoring portal is available upon request and can show the status of the managed environment directly.
• Web interface accessibility standard: WCAG 2.2 AA
• Web interface accessibility testing: No specific web interface technology testing has been undertaken with assistive technology users, however good practice development methods have been used to optimise the end user experience.
• API: Yes
• What users can and can't do using the API: Customer is able to deploy, change & delete their environment (optional service)
• API automation tools:
  • Ansible
  • Chef
  • Terraform
  • Puppet
• API documentation: No
• Command line interface: No

Scaling

• Independence of resources: Users have the choice between VMs having 4:1 or 1:1 contention against the underlying compute platform. In a shared compute infrastructure VMs are monitored and moved between hosts to ensure that there is sufficient resource available to provide the required compute, and for 1:1 VMs, the VMs on the host will not exceed the total host resources. This scenario also applies to dedicated compute to protect user VMs from user workloads in the same organisation.
• Usage notifications: Yes
• Usage reporting: Email
• Optimising consumption: Yes
• Automatic scaling: Yes

Analytics

• Infrastructure or application metrics: Yes
• Metrics types:
  • CPU
  • Disk
  • HTTP request and response status
  • Memory
  • Network
  • Number of active instances
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Microsoft Azure, Amazon Web Services, Google Cloud Platform

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: The encryption of data hosted on Rackspace Sovereign Cloud platforms is fully segregated by customer, assigning dedicated encryption from the VMs to the data storage area. Two types of encryption keys are used: a device / volume key encryption key (VKEK) pair generated by the encryption service created for each individual VM / server and a unique device encryption key generated by native technologies in each machine’s OS. The device encryption key encrypts the VM / server, the VKEK key protects the device key. All keys are stored separately, ensuring there is no way of accessing the keys without authorisation.
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Explicit overwriting of storage before reallocation / Secure Erase

Backup and recovery

• What’s backed up:
  • Machine Image
  • File level backup
  • SQL level backup
• Backup controls: The backup process is structured to meet customer’s business needs and requests. Rackspace will work with the customer to help define a solution that will meet your specific business needs / demands. Rackspace will be responsible for data restoration should the need arise.
• Datacentre setup: Multiple datacentres with disaster recovery
• Scheduling backups: Users contact the support team to schedule backups
• Backup recovery: Users contact the support team
• Backup and recovery: Yes
• RPO/RTO: No

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection between networks: Rackspace uses IPsec to protect all customer links to our DCs. These tunnels are configured according to the NCSC guidance on recommended encryption protocols, using the ‘Recommended Profile’ as defined in NCSC Cloud Security Principle 1. IPsec is also used internally for intra-DC links to ensure data is encrypted to the correct level when moving within Rackspace’s facilities for replication purposes, or while performing backups.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: Dedicated customer virtual networks (VLAN / VxLAN) are used to logically segment customers' networks. ; ; Firewalls protecting the customer from the Rackspace public network and from the Internet are implemented, configured and managed by experienced Internet security specialists according to the customer’s explicit requirements. Firewalls are configured with Access Command Lists (ACL), which prevent access to private internal IPs and deny access to all non-administrative ports.; ; For higher levels of assurance, Rackspace offers support using a PSN-accredited, secure management platform.

Availability and resilience

• Guaranteed availability: Platform availability SLA (dual data centre with disaster recovery service option) of 99.999%. Should there be a failure to meet any SLA objectives, the Customer Success Manager will calculate the appropriate performance credit as per the contractual agreement, and complete the necessary internal approval process. Once approved, the credit is issued to the customer account and can be offset against pending or future invoice. A relevant ticket is also created and the credit note stored on the customer portal for long-term record keeping.
• Approach to resilience: Disaster recovery (DR) is typically provided via the OS / application level. Data can be replicated between environments running in different DCs via the OS / application tools. Rackspace can provide multiple data centres in the UK, utilising Rackspace sites, and/or cloud platforms such as Azure. Rackspace will work with customers to understand their disaster recovery / resilience requirements, and will architect a solution designed to meet the defined recovery time / point objectives.
• Outage reporting: Following a major incident, a customer may request an Incident Report from the Rackspace Customer Success Manager. This report will be delivered via email and contains a summary of the events that occurred, along with a root cause analysis and preventative actions.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Other
• Other user authentication: The two primary methods for Customers accessing the service are phone and portal. For phone, users must set a phone PIN and on calling into Rackspace must provide their PIN to be verified to be able to proceed. For the Portal, Multi-Factor authentication is enforced. Customers are able to use common authentication mobile applications such as Microsoft Authenticator or Google Authenticator or choose to receive an email one-time-passcode to be able to access the portal.
• Access restrictions in management interfaces and support channels: Customers do not have direct access to hypervisors. Rackspace access control policies are based on the principles of ‘least privilege’ and ‘segregation of duties'. Customer solutions reside on their own dedicated VLAN. Rackspace administrative access to dedicated customer solutions is performed via the Bastion Servers, which act as segregation points between the Rackspace corporate network and the customer environment. Access via the Rackspace Secure Management Environment is subject to stringent logging and auditing controls.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Multi-Factor Authentication (MFA)
• Devices users manage the service through: Dedicated device on a segregated network (providers own provision)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: ISO 27017 / ISO 27018
• Information security policies and processes: Rackspace’s Chief Information Security Officer (CISO) is responsible for information security. The CISO has reviewed and approved the information security management system (ISMS), which demonstrates the commitment to the establishment, implementation, operation, monitoring, review, maintenance and improvement of the ISMS. The CSO collaborates with Rackspace Legal Counsel to monitor compliance with all local and national laws and regulations that apply to Rackspace. Rackspace has documented policies which meet the recommendations of the ISO 27001 standard (including an Information Security Policy). The Rackspace Information Security Policy is reviewed at least annually or as a significant change occurs, to ensure its continuing suitability, adequacy and effectiveness. Supporting policies include: (01) Corporate Security Management Policy, (02) Corporate Information Technology Risk and Compliance Policy, (03) Corporate Personnel Security Policy, (04) Corporate Physical Security Policy, (05) Corporate Operations Security Management Policy, (06) Corporate Security Monitoring and Response Policy, (07) Corporate Communication Security Policy, (08) Corporate Access Control Policy, (09) Corporate Network Security Policy, (10) Third Party Services Policy, (11) Corporate Application Management Policy, (12) Corporate Information Security Business Continuity Policy, (13) Corporate Information Security Incident Management Policy. Policies and processes are audited internally and externally by an independent assessor.

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: The service utilises a UK sovereign support tooling and resource platform. All change / problem / incident management is via ITIL process.; ; Rackspace utilises technical change management to control changes to the shared infrastructure. Proposed technical changes are subject to Change Board approval according to defined thresholds.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Vulnerability scans are performed on a quarterly basis at a minimum but can be run on-demand if required. Any vulnerabilities that may be identified will generate support tickets as part of the scan process. These tickets are alerted to the assigned Lead Engineer for management purposes and to ensure actions are carried out in a timely manner.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: The service employs sophisticated software-defined service instrumentation and monitoring that integrates at the component or server level, the data centre edge, our network backbone, Internet exchange sites and at the user level. This provides visibility when a service disruption is occurring and pinpointing its cause.; ; Proactive monitoring continuously measures the performance of key subsystems of the services platform against the established boundaries for acceptable service performance and availability. When a threshold is reached, or an irregular event occurs, the monitoring system generates warnings so that operations staff can address the threshold or event.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Rackspace maintains formal incident response processes concerning both corporate network incidents and incidents affecting customer solutions. Incidents that affect more than one customer or Rackspace operations (enterprise-impacting) are managed from a centralised tool that provides alerting and escalation paths and procedures, communication procedures and command, control and communication across all Rackspace facilities.; ; Rackspace will work with you to institute a formal incident response plan for your environment. Rackspace can optionally provide a dedicated Intrusion Detection Service device with managed services for this purpose.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Separation between users

• Virtualisation technology used to keep applications and users sharing the same infrastructure apart: Yes
• Who implements virtualisation: Supplier
• Virtualisation technologies used: Other
• Other virtualisation technology used: Depends on selected cloud platform
• How shared infrastructure is kept separate: On the Multi-Tenant platform infrastructure is only shared between Government customers. Data is encrypted per customer at the storage level, and compute can be either shared, or dedicated compute, selected depending on the workload. Logical network segregation is provided through the use of NSX. Customers have the option of selecting their preferred deployment model: shared everything, dedicated compute, dedicated compute and storage, or dedicated platform.

Energy efficiency

• Energy-efficient datacentres: Yes
• Description of energy efficient datacentres: Rackspace is committed to energy efficiency and demonstrates this through our pledge to achieve net zero carbon emissions by 2045. This is five years ahead of the UN Paris Agreement on Climate Change ambition to limit the global warming of the planet to 1.5 degrees Celsius, compared to pre-industrial levels. ; ; In 2025 we strengthened our commitment by establishing Science Based Targets including:; ; Short Term:; • Reducing Scope 1 & 2 emissions 50% by 2032; • Reducing Scope 3 emissions from purchased goods and services 30% by 2032; Long Term: ; • Net Zero by 2045; ; Our solutions will be hosted in Ark date centres, which are compliant to the EU Code of Conduct on Data Centre Energy Efficiency.; ; Both our UK offices (London and Cardiff) are under ESOS reporting to show any progress to reducing energy use via programs identified within the assessments.; ; Additionally, we continue to partner with our energy providers and data centre owners to source renewable energy power. Approximately 80% of our energy needs globally are from renewable sources. We can demonstrate our commitment to energy efficiency further though our ISO 14001 certification.

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount

• Provide your minimum discount applicable to your baseline prices: 10%

Formula for calculating price of your services

• Formula for calculating price of your services:

  Which of the core deployment models you intend to offer

  • Public Cloud
  • Private Cloud

  Public Cloud - Formula for calculating price of your services

  ---

  Total Cost

  The Total Cost for a buyer's call off requirement in a Public Cloud Deployment

  =

  Baseline Pricing

  Our Sovereign Services are a key part of our multicloud proposition and offer public cloud via; Azure, AWS & Google Cloud Platform. ; ; For pricing purposes, the pricing link below is for Azure

  Baseline Pricing - Web link

  https://azure.microsoft.com/en-gb/pricing

  -

  Minimum Discounting

  10%

  +

  Onboarding Activity

  Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process

  +

  Additional sources of cost

  There are no additional sources of cost. ; ; However, public cloud suppliers apply usage based charges, which are outside of Rackspace control and would be direct responsibility of the customer.

  -

  Additional sources of cost reduction

  Contract term commitments can provide cost reduction through Reserved Instances and Savings Plans.

  ---

  Private Cloud - Formula for calculating price of your services

  ---

  Total Cost

  The Total Cost for a buyer's call off requirement in a Private Cloud Deployment

  =

  Baseline Pricing

  Baseline pricing has been submitted within the G-Cloud Service Lines

  -

  Minimum Discounting

  10%

  +

  Onboarding Activity

  Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process

  +

  Additional sources of cost

  There are no additional sources of cost.

  -

  Additional sources of cost reduction

  Contract term commitments can provide cost reduction through Reserved Instances and Savings Plans.

  ---

• Total Cost: The Total Cost for a buyer's call off requirement in a Public Cloud Deployment
• Baseline Pricing: Our Sovereign Services are a key part of our multicloud proposition and offer public cloud via; Azure, AWS & Google Cloud Platform. ; ; For pricing purposes, the pricing link below is for Azure
• Baseline Pricing - Web link: https://azure.microsoft.com/en-gb/pricing
• Minimum Discounting: 10%
• Onboarding Activity: Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
• Additional sources of cost: There are no additional sources of cost. ; ; However, public cloud suppliers apply usage based charges, which are outside of Rackspace control and would be direct responsibility of the customer.
• Additional sources of cost reduction: Contract term commitments can provide cost reduction through Reserved Instances and Savings Plans.
• Total Cost: The Total Cost for a buyer's call off requirement in a Private Cloud Deployment
• Baseline Pricing: Baseline pricing has been submitted within the G-Cloud Service Lines
• Minimum Discounting: 10%
• Onboarding Activity: Onboarding costs may vary based on your specific requirements, please confirm with suppliers during the clarification process
• Additional sources of cost: There are no additional sources of cost.
• Additional sources of cost reduction: Contract term commitments can provide cost reduction through Reserved Instances and Savings Plans.

Mandatory certifications

• Mandatory certifications:

  Are you are bidding to offer IaaS and/or PaaS as a reseller or are you in sole control of the infrastructure

  Sole Control and also accredited to resell other providers' services

  Cloud service suppliers you intend to resell with evidence

  Organisation 1

  Organisation name

  Microsoft Azure

  Website address/upload for organisation

  Website address

  Website address

  https://www.rackspace.com/en-gb/cloud/azure

  Organisation 2

  Organisation name

  AWS

  Website address/upload for organisation

  Website address

  Website address

  https://www.rackspace.com/en-gb/cloud/aws

  Organisation 3

  Organisation name

  Google Cloud Platform

  Website address/upload for organisation

  Website address

  Website address

  https://www.rackspace.com/en-gb/cloud/google-cloud

  ISO 9001 certification

  Provided

  ISO 14001 certification

  Provided

  ISO 27001 certification

  Provided

  ISO 20000-1 certification

  Provided

  ISO 27017 certification

  Provided

  Are you bidding to provide services under Lot 1b or both Lot 1a and Lot 1b?

  Yes

  ISO 27018 certification

  Provided

Cyber Essentials

• Do you have a Cyber Essentials Plus certificate?: Yes
• Cyber Essentials Plus certificate Number: 546e2335-80a2-4252-bce9-c5e733e4f8d7

Non-mandatory Standards and certifications

• ISO 28000:2022 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Other security certifications: Yes
• Any other security certifications:
  • SOC 1 (SSAE 18), SOC 2, SOC 3
  • PSN Service Connection
  • PSN Service Provider
  • ISO/IEC 27017
  • ISO/IEC 27018

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
    • How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
    • Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
    • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
    • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sovereignservices@rackspace.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.