DATA8 LIMITED

Bank Validation

Validates that Account Numbers and sort codes are correct to avoid failed payments, reduce administration and helps provide a better customer experience. The service also returns BIC, IBAN, Branch name and bank name and services accepted such as Direct Debits for the account.

Features

• Real-time verification of UK bank account and sort code combinations
• Instant modulus checking to confirm structurally valid account details.
• Autocompletes the BIC, IBAN, Branch name and bank name
• Automated error detection to prevent failed payments and incorrect submissions.
• Supports industry-standard banking rules and regularly updated validation tables.
• High-availability cloud infrastructure ensuring consistent, reliable validation performance.
• Detailed response codes enabling precise handling of validation outcomes.
• API-based validation for seamless integration across systems and applications

Benefits

• Reduce failed payments by confirming bank details before processing transactions.
• Improve onboarding efficiency by validating customer payment information instantly.
• Prevent data entry errors through automated real-time financial details checks.
• Reduce operational workload by eliminating manual bank detail verification tasks.
• Enhance customer experience with smoother, faster, error-free payment setup journeys.
• Lower financial risk by ensuring accurate account information enters systems.
• Support compliance by validating details against industry-standard banking rules.
• Minimise costly payment rejections through early detection of invalid details.
• Improve data quality across systems by capturing verified financial information.
• Speed up internal workflows by automating bank detail validation processes.

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at clientsuccess@data-8.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

260897357805295

Contact

Dale Pilling
01513554555
clientsuccess@data-8.co.uk

About your service

• Service categories:

  Applications

  Customer relationship management

  • Digital commerce
  • Customer service
  • Contact centre
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: There are no specific service constraints. Our Bank Validation service needs a stable internet connection and access to supported client systems or APIs. Service performance may rely on client infrastructure, network latency, and API rate limits. No specialist hardware is needed.
• System requirements:
  • Stable internet connection required for real-time bank detail validation requests.
  • API access enabled within client systems to integrate validation functionality.
  • Supported HTTPS environment ensuring secure encrypted communication between systems.
  • Valid authentication credentials required for accessing the Bank Validation API.
  • Adequate server capacity to handle expected validation request volumes.
  • Network firewall rules allowing outbound API calls to service endpoints.
  • TLS 1.2 or higher required for secure data transmission.
  • Standard cloud-based infrastructure supporting RESTful API communication protocols.

User support

• Email or online ticketing support: Yes
• Support response times: All tickets have an automated response acknowledge. During working hours (Monday - Friday 9am - 5:30pm), we provide a guaranteed 2 hour response.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: EN 301 549
• Web chat accessibility testing: Our web chat functionality is delivered via Zendesk, a third‑party solution integrated into our WordPress CMS. We have not conducted independent testing with assistive technology users ourselves. Instead, we rely on Zendesk’s published accessibility documentation, which confirms compliance with WCAG 2.1 AA standards and compatibility with assistive technologies such as screen readers (JAWS, NVDA, VoiceOver) and keyboard‑only navigation.; ; While we have not run formal user testing, our team has carried out internal checks to validate basic usability, including keyboard navigation and screen reader spot‑checks. These checks confirmed that users can initiate, navigate, and exit chat sessions independently.; ; We recognise the importance of inclusive design and are committed to strengthening assurance in future development cycles. This includes monitoring Zendesk’s accessibility updates, engaging assistive technology users in structured testing, and welcoming feedback to identify improvements. Accessibility is embedded in our procurement and QA approach, ensuring that our services remain inclusive and compliant.
• Onsite support: Yes, at extra cost
• Support levels: All our clients are supported by a dedicated Account Management team. Each client is assigned an individual account manager who proactively oversees their requirements, ensuring continuity and consistency of service. To provide seamless cover during holiday or sickness periods, additional team members are cross‑trained and able to step in as needed. Importantly, we do not charge any additional fees for Account Management support.; Our Account Management team acts as a trusted point of contact and communicates effectively with clients. Their responsibilities include, but are not limited to:; ; - Overseeing and managing all aspects of service level agreements; ; - Scheduling and prioritising work to ensure timely delivery; ; - Advising on the most efficient and cost‑effective ways to meet client requirements; ; - Collaborating with the Technical Team to agree input and output formats for processed work; ; - Handling new requests that arise during a contract; ; - Responding promptly to client queries; ; - Ensuring all financial matters are managed accurately; ; - Meeting with clients regularly to review progress and provide updates; ; - Supplying progress reports where appropriate; ; - Acting as the first point of contact for issue resolution; ; - Gathering all necessary information from clients to enable effective delivery
• Support available to third parties: Yes
• AI chatbot: No

Onboarding and offboarding

• Getting started: To start using the Bank Validation service, users must register for an account and receive their API key or platform‑specific credentials. These credentials authenticate requests and grant access to the Bank Validation .; User-friendly setup guides and documentation are provided to help users configure the service, connect to the API, and map validation responses within their chosen system.; ; For organisations using Dynamics or Salesforce, we have integrations and provide step‑by‑step installation instructions and configuration guidance to ensure the service is correctly embedded into existing onboarding or payment workflows. ; ; Our support team is available to assist with initial setup, answer any technical questions, and assist users with testing of the integration to confirm validation responses are being handled as expected.; ; We offer onboarding support via phone, email, and webinar, enabling users to become familiar with the service quickly. Online training sessions can be arranged where required, and onsite training is available at additional cost. Throughout onboarding, users have access to comprehensive documentation, best‑practice guidance, and ongoing support from the Data8 team to ensure a smooth and effective implementation.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: As there is no customer data held within the Bank Validation service at the end of the contract users do not need to extract any data. The service performs real‑time validation of bank account and sort code combinations and does not store, retain, or process customer records beyond the immediate validation request. All validation results and any associated customer information are stored solely within the buyer’s own systems. ; ; As no customer data is held by Data8 as part of the Bank Validation service, there is no data extraction process required at contract end.; Users retain full ownership and control of all data within their own environment throughout the contract period. Once the contract ends, any API keys or credentials associated with the service will be deactivated, and access to the Bank Validation API will cease. No further action is needed from the user, and no data is removed or transferred by Data8, as none is stored within the service.
• End-of-contract process: At the end of the contract, access to the Bank Validation service will be removed and any associated API keys or platform credentials will be deactivated. As the service does not store or retain customer data, there is no data extraction process required. All bank details and validation outcomes generated during the contract period remain solely within the organisations own systems. No uninstall process is required unless the purchase selects to remove connectors or integration components from their environment.; ; The contract price includes access to the Bank Validation service, API usage up to the agreed allowance, platform connectors where applicable, standard support, and user documentation. There may be additional costs for optional services such as onsite training, extended consultancy, bespoke integration work, or usage beyond the contracted volume. There are no additional charges applied specifically at the end of the contract.
• Documentation accessibility standard: WCAG 2.2 A

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Windows
  • ChromeOS
  • Other
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: All core Bank Validation functionality is available via both mobile and desktop devices. Bank account and sort code details are submitted by the user and real‑time validation response is received across all supported platforms. The accuracy, speed, and reliability of the validation process are consistent regardless of device. There are no functional limitations when using mobile; however, administrative tasks including configuration, monitoring usage, and reviewing integration settings may be easier to complete on desktop due to the larger screen layout. Apart from this usability difference, the service operates identically across both mobile and desktop environments.
• Service interface: No
• User support accessibility: WCAG 2.2 A
• API: Yes
• What users can and can't do using the API: The Bank Validation service can be set up by end-users by generating API keys, configuring authentication, and connecting their systems to the Bank Validation API endpoints as described in the service documentation. Via the API, users can submit bank account and sort code details for real‑time validation, adjust request parameters, and manage how validation responses are handled within their applications. Users can also rotate API keys, update endpoint configurations, and manage integration settings within their own environment.; ; The API is designed for validation requests only and must not be used to amend underlying banking reference data, change account‑level service configurations, or manage billing or subscription settings. Users cannot alter validation rules, update datasets, or make structural changes to the service using the API. Any amendments to data sources, system behaviour, or core functionality must be completed by Data8 and cannot be performed programmatically by end‑users.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: End‑users can customise how the Bank Validation service is integrated and how validation responses are handled within their systems. This includes configuring which fields are submitted for validation, defining how response codes are interpreted, and controlling how validation outcomes influence onboarding, payment setup, or internal workflows. Users can also customise API request parameters, response handling logic, and field mappings to ensure the data that is returned matches their operational requirements.; ; Customisation is completed either through configuration options within supported platforms (such as Microsoft Dynamics or Salesforce) or by adjusting API parameters within the user’s own integration. Administrators can personalise default behaviours, manage API keys, set validation rules for different processes, and control access permissions based on team or system needs.; ; Technical users, developers, and system administrators can tailor the service through API configuration or platform‑specific integration settings. Non‑technical users may adjust display preferences or field mappings where supported by their CRM or operational interface. All customisation options are designed to be flexible, enabling organisations to adapt the service to their workflows without requiring changes to the underlying Bank Validation engine.

Scaling

• Independence of resources: The Bank Validation service is delivered via a highly available, load‑balanced cloud infrastructure which is designed to ensure that demand from one user does not impact the performance experienced by others. Capacity, throughput, and system performance are constantly monitored, and if required, additional resources are provisioned to maintain consistent response times. The service is designed to avoid operating at levels that could create contention between users, ensuring reliable, real‑time validation performance regardless of overall demand.

Analytics

• Service usage metrics: Yes
• Metrics types: The Bank Validation service provides usage metrics which show the number of validation requests made, the number of validations which were successful, invalid combinations, and any rejected or failed requests. These metrics help organisations monitor usage levels, data quality, and API performance. Usage reports are accessible via the users Data8 account and these track volumes against their contracted allowance and review overall service activity. In addition insights are available within the buyer’s own systems, but this is dependent on how the service has been integrated and how validation responses are logged internally.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: The Bank Validation service does not store customer data at rest, as all bank details and validation responses are returned directly to the buyer’s systems. However, the underlying platform is protected using encrypted storage, strict access controls, and hardened cloud infrastructure. Access to system components is available when required, for a specific purpose, and on a short‑term basis, with permissions automatically removed every night. API keys and credentials are stored securely and never exposed in plaintext, ensuring the platform is always secure even though no client data is retained within the service.
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: No customer data is stored within the Bank Validation service so no export process is required. All validated bank details and response information are delivered directly into the buyer’s own systems at the point of validation, such as CRM platforms, payment systems, or custom applications. Users retain full control of all data captured or stored within their environment. If organisations wish to export bank‑related data from their own systems, they can do so using their platform’s standard export tools, as this is outside the scope of the Bank Validation service.
• Data export formats:
  • CSV
  • Other
• Other data export formats: Text
• Data import formats:
  • CSV
  • Other
• Other data import formats: Text

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Data8 are happy to consider Service Level Agreements (SLAs) for the Bank Validation service. The service is delivered through a highly available, load‑balanced cloud infrastructure designed to maintain consistent performance and minimise downtime. We aim to achieve 99.999% uptime (“five 9s”), and availability is monitored independently by a third‑party provider, with uptime statistics made accessible publicly for full transparency.; ; If a formal SLA is agreed as part of the contract, this can include specific availability commitments and the associated service credits or refunds should availability fall below the agreed level. Service credits are usually calculated based on the duration and severity of any outage and are applied to future invoices or renewals.; ; Because Bank Validation is a real‑time API service, we constantly monitor system performance, scale resources proactively, and ensure that demand from one client does not impact another. This approach supports consistently high availability and reliable validation response times throughout the contract period.
• Approach to resilience: The Bank Validation service is designed with high resilience to ensure constant availability and reliable real‑time performance. Data8 operates across two geographically separated data centres, each has its own independent power, networking, and upstream providers. The service runs in an active/active configuration, which allows traffic to be served seamlessly from either location in the event of a data‑centre‑level disruption.; ; Within each data centre, the service is deployed across a load‑balanced cluster of servers, this provides protection against individual server failure and ensures that demand is evenly distributed. Capacity, throughput, and system performance are constantly monitored, with additional resources proactively provisioned to maintain stability during periods of increased usage.; ; All infrastructure components are hardened, monitored, and maintained in accordance with security best practice and the government’s cloud security principle on asset protection and resilience. Further architectural details can be provided on request if required.
• Outage reporting: Transparent outage reporting is provided by Data8 for the Bank Validation service. A public status dashboard is available, displaying real‑time service availability, historical uptime, and details of any current or recently resolved incidents. The dashboard is monitored independently to ensure accuracy and is accessible to all clients without authentication.; ; Where appropriate, Data8 can also provide email alerts to notify clients of significant service interruptions or planned maintenance windows. These notifications provide information regarding the nature of the issue, expected resolution times, and confirmation once normal service has resumed.; ; An API‑based status feed is available on request for organisations who wish to integrate outage information directly into their own internal monitoring or alerting systems. This enables technical teams to track service health alongside their existing operational dashboards.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Username or password
  • Other
• Other user authentication: Users are able to access the Bank Validation service using a standard username and password, or they can configure Single Sign‑On (SSO) using any SAML‑compatible identity provider. Multi‑Factor Authentication (MFA) is also available for organisations who require enhanced security. The service supports public key authentication, including TLS client certificates, for client needing stronger assurance. Each authentication method follows the government’s cloud security principle on identity and access management to ensure that only authorised users can access the service and manage associated API credentials.
• Access restrictions in management interfaces and support channels: Access to the Bank Validation management interfaces is controlled using role‑based authorisation, ensuring users are only able to view or modify areas appropriate to their permissions. Administrative functions are restricted to authorised staff, with all access authenticated, logged, and monitored. Support channels are controlled in a similar manner, with only designated personnel able to view account information or make configuration changes. In addition, sensitive actions require elevated privileges, and all support interactions follow strict verification procedures to ensure that customer accounts and API credentials remain protected at all times.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Username or password
  • Other
• Description of management access authentication: Management access to the Bank Validation service is restricted to only authorised personnel and is protected using multiple authentication methods. Administrators authenticate using a username and password, with Multi‑Factor Authentication (MFA) required for elevated or sensitive access. The service also supports public key authentication, including TLS client certificates, for organisations who require stronger assurance. SAML‑compatible Single Sign‑On (SSO) can be configured to enforce organisational identity policies. Every management action is logged, monitored, and governed by a strict least‑privilege model to ensure secure and controlled access at all times.

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Data8 understands that confidentiality, integrity, and availability are vital to effective Information Security Management and integral to the delivery of the Bank Validation service. Data8 uses appropriate Information Security Controls in line with the BS ISO/IEC 27001:2022 standard, and our Information Security Policy is designed to operate to the highest standards through continual improvement, formal registration, and annual external review.; ; Responsibility for maintaining these standards is organisation‑wide and supported by the Managing Director, who ensures that information security remains a core competency for all staff. Every employee completes Information Security training during their induction, and this is followed by annual formal training and ongoing reinforcement throughout their role.; ; Compliance with all policies is monitored through regular internal and external audits, with any findings reported directly to the Managing Director. Access controls, change management processes, and operational procedures are consistently enforced across the Bank Validation platform to ensure all policies are followed and risks are effectively managed. These controls ensure that the service operates securely, despite no customer data being stored within the platform.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Every component available within the Bank Validation service are tracked throughout their lifecycle using structured configuration management and version‑control processes. All change requests are formally logged, reviewed, and then linked to the final implementation, including associated code updates and deployment records. Each change undergoes a security impact assessment to identify and mitigate potential risks before release. Only authorised personnel can deploy updates, and every change follows controlled release procedures with full audit trails maintained to ensure accountability, traceability, and compliance with security best practice.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Potential threats to the Bank Validation service are assessed using internal testing, constant monitoring, code reviews, and analysis of information from recognised technology and information‑security sources. Every vulnerability that is identified is logged as a security incident and assigned a severity rating to ensure appropriate prioritisation. Critical patches can be deployed within 30 minutes, while other updates are released regularly once they have been fully assessed and approved. Each change follows controlled deployment processes to reduce any risk and maintain service stability, ensuring the Bank Validation platform remains secure and resilient.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Potential compromises are identified via continuous monitoring, including Intrusion Detection Systems, firewall alerts, and automated anomaly detection across the Bank Validation platform. If a potential compromise is detected, incidents are assessed immediately and appropriate actions are taken, including but not limited to temporarily disabling a service, blocking a source IP address, or isolating affected components. Data8 typically responds to security incidents within 30 minutes, with every action fully logged, reviewed, and used to support effective resolution and ongoing improvement of the service’s security posture.
• Incident management type: Supplier-defined controls
• Incident management approach: Incidents affecting the Bank Validation service follow predefined processes for common events, such as service degradation, connectivity issues, and API errors. Every incident is logged, assigned a severity category, and allocated to the appropriate team for investigation. Users can report incidents via the support portal, email, or telephone. Once the fix is resolved, it is then reviewed and signed off by another member of staff to ensure accuracy and completeness. All affected customers are notified where appropriate, and incident reports can be made available on request to support transparency and post‑incident review.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: A free trial with full API functionality is available for evaluation purposes. The trial includes a limited number of lookup credits and is available for a fixed 30‑day period. High‑volume usage and extended credit allowances are not included in the free version.
• Link to free trial: https://portal.data-8.co.uk/Identity/Account/Register

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 2.5%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 5%
• Between £2,500,001 and £5,000,000: 5%
• Over £5,000,001: 5%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: QAS International
• ISO/IEC 27001 accreditation date: Monday 27 October 2025
• What the ISO/IEC 27001 doesn’t cover: Our ISO/IEC 27001 certification covers the security management system for our core data processing, infrastructure, and operational controls. However, as with most certifications, there are certain areas which sit outside the defined scope. The certification does not cover third‑party systems that customers choose to integrate with independently, it also does not extend to customer‑managed environments, devices, or networks. It does not cover any on‑premise customer deployments, legacy systems which are no longer in active use, or bespoke solutions developed outside the certified service boundary. Physical security of customer sites, customer‑owned hardware, and any external services procured directly by customers are also out of scope. In addition, the certification does not apply to experimental, pre‑production, or sandbox environments used for internal testing or development. Only the defined cloud‑hosted production environment and supporting processes are included within the accredited scope.
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: FISERV/Clover
• PCI DSS accreditation date: Monday 28 April 2025
• What the PCI DSS doesn’t cover: Our PCI DSS certification, the latest certification was awarded on 28/04/2025, applies specifically to the defined cardholder data environment (CDE) and the systems, processes, and controls included within that audited scope. Any areas of the service that fall outside this formally assessed scope are not covered by the certification.; ; The certification does not extend to customer‑managed environments, customer devices, or any third‑party systems or integrations that customers have selected to use alongside our services. It does not include any bespoke customer implementations, optional modules deployed outside the assessed CDE, or any processing, transmission, or storage of payment card data carried out independently by customers.; ; Activities performed by customers or partners, including their own network configurations, access controls, or operational procedures, are outside the certified scope. The certification also does not cover services unrelated to payment card data handling or any environments not explicitly included in the annual PCI DSS audit.; ; We maintain annual recertification, with our next renewal scheduled for April, ensuring continued alignment with PCI DSS requirements for the in‑scope systems and processes.
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 649af319-469d-4f16-9e4c-9a9e6d659211
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
    • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
    • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
    • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
    • Plans for positive actions with community groups.
    • Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds
    • Collaborating with anchor institutions and community groups to make facilities available for education, training or community events

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
    • Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
    • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of issues relating to entering the contract workforce
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery
    • Content of the outreach activity is designed to suit the target cohort
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at clientsuccess@data-8.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.