1XINTERNET LIMITED

WordPress to Drupal Migration

Drupal experts deliver secure, efficient migrations from WordPress to current Drupal platforms. Includes technical assessment, migration strategy, content and data mapping, custom migration scripting, user account transfer, media handling, URL preservation, testing, and validation. ​​Process designed to maintain service availability, data integrity, SEO investment, and accessibility standards.

Features

• Diamond Drupal Certified Partner among top 20 Drupal agenicies globally.
• Acquia certified senior Drupal developers and solution architects leading projects.
• Comprehensive analysis of WordPress site structure, content types, plugins, dependencies.
• ETL methodology extracting data, transforming to Drupal structures, loading securely.
• Custom migration scripts transferring posts, pages, custom post types, categorisation.
• Transfer and optimisation of media library including images, documents, videos.
• URL structure preservation or intelligent redirects retain SEO investment.
• Migration of user accounts, roles, capabilities, and authentication credentials securely.
• Secure data sovereignty including backups and logs.
• Full quality assurance ensures data integrity, functionality, and accessibility post-migration.

Benefits

• Platform enhancement moving from WordPress to enterprise-grade Drupal architecture.
• Expert-led approach with detailed planning minimises disruption, prevents data loss.
• URL preservation and redirects protect search rankings, maintain organic traffic.
• Comprehensive testing and validation ensures accurate content and configuration transfer.
• Phased migration strategy with rollback procedures maintains operational service availability.
• Security track record trusted by global organisations requiring stringent protection.
• Enhanced scalability supporting complex workflows, multilingual content and advanced content
• Better content governance through granular permissions, workflows, and editorial controls.
• Global community ensuring continued security updates, community support, feature enhancements.
• Experienced Acquia certified developers ensure successful and comprehensive knowledge transfer.

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at j.tillotson@1xinternet.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

334707870921597

Contact

James Tillotson
+44 7745 545031
j.tillotson@1xinternet.com

About your service

• Service categories:

  Applications

  Content workflow and management

  • Document
  • Media Services
  • Creative

  Content services

  • Enterprise Content Management Applications
  • Content Sharing and Collaboration Applications

  Persuasive content management

  • Website Software
  • Digital Asset Management Applications
  • Product Content Management Applications
  • Content Marketing Applications
  • Video Platforms
  • Digital Adoption Platform

  Enterprise portals and digital workspaces

  • Multi-Audience Portals
  • Integrated Employee Workspaces
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: The service extends Drupal CMS and related open source components, including PHP, Symfony, and common web infrastructure services. It may be delivered as a standalone service for new digital applications, or as an enhancement to existing Drupal codebases to improve performance, security, and maintainability.
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: Service delivery is subject to the constraints of the underlying infrastructure. Planned maintenance may be required to apply Drupal core, contributed module and security updates, which is scheduled in advance where possible. Support is provided for supported versions of Drupal, PHP and database platforms only, in line with Drupal community release policies. Services do not extend to unsupported or end of life software, or to bespoke third party systems outside the agreed scope of work.
• System requirements:
  • Drupal GNU General Public License, open source, no licence costs.
  • Supported Linux hosting with Apache or Nginx web server.
  • PHP 8.3+ for Drupal 10, PHP 8.3+ for 11.
  • Composer required for dependency management and secure updates.
  • Supported database MySQL, MariaDB, or PostgreSQL versions only.
  • HTTPS with valid TLS certificates for production environments.
  • PHP memory limit minimum 128MB (per thread) for stable operation.
  • Scheduled maintenance windows required for security and core updates.
  • Access for deployment pipelines and secure administrative accounts.
  • Supported versions key-value store Redis or Memcached min. 1GB storage.

User support

• Email or online ticketing support: Yes
• Support response times: Response times are established within our Service Level Agreements (SLAs) and customised for each client’s needs. We conduct regular reviews to verify that all SLA services are being met.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Yes, at an extra cost
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: We have not undertaken testing of this type with web chat interfaces.
• Onsite support: Yes, at extra cost
• Support levels: 1xINTERNET provides tiered support covering both Drupal application and hosting infrastructure. Support levels are customized to organizational requirements and defined within individual SLAs.; Standard tiers include: Basic (Monday-Friday, 9am-5pm), Extended (7 days/week, 9am-5pm), Premium (extended hours 8am-8pm), and Enterprise (24/7 coverage). Each tier encompasses incident response, troubleshooting, maintenance coordination, and technical guidance.; Pricing is tailored based on selected coverage hours, response time commitments, and service scope—detailed in customer-specific agreements.; For Enterprise-level engagements, we assign dedicated technical account managers who provide strategic guidance, proactive monitoring, and serve as primary points of contact for both operational and architectural matters.
• Support available to third parties: Yes
• AI chatbot: No

Onboarding and offboarding

• Getting started: Our approach is adaptable to the specific requirements of the buyer and the particular project.; ; During onboarding, we hold meetings to allow team members to meet, undertake knowledge transfer of existing systems and documentation, and arrange appropriate access. ; ; We align on meeting arrangements, communications, tools, standards, constraints, and guidelines, whilst establishing progress tracking, risk management processes, and clear escalation points.; ; As part of our service, 1xINTERNET provides tailored training sessions on the system being developed. Training can be delivered at your preferred location or via online services to suit operational needs.; ; We record demonstrations of key functionality, enabling users to refer back to these resources at any time. This is particularly valuable for onboarding new team members and ensuring consistent understanding across the organisation.; ; Additional training sessions, user guides, and application support can be provided as part of an ongoing maintenance agreement following project completion.; ; Our solution architects prepare comprehensive technical documentation detailing the end-to-end design of your solution, explaining how the software, hardware, and data work together to meet requirements.; ; In line with the GOV.UK Service Standard, we ensure that training and support materials are accessible and user-focused.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • ODF
  • PDF
• End-of-contract data extraction: Drupal is built on open standards and provides multiple mechanisms for data extraction, ensuring users retain full ownership and control of their content at contract end.; ; Complete database dumps can be extracted in standard SQL format, containing all content, configuration, and user data. Drupal's built-in migration framework enables structured export of content to various formats, whilst RESTful APIs and JSON:API endpoints allow programmatic data extraction.; ; Content can be exported via contributed modules in standard formats such as CSV or XML for import into other systems. All uploaded media, documents, and assets are stored in accessible file directories that can be retrieved independently.; ; Our solution architects provide comprehensive documentation of the data structure, database schema, and content architecture, ensuring technical teams can understand and extract data efficiently without dependency on 1xINTERNET.; ; All data remains accessible in open, non-proprietary formats, aligning with GOV.UK Service Standard point 13 regarding the use of open standards, common components, and patterns. This approach ensures no vendor lock-in and provides users with complete flexibility to migrate their data to alternative platforms or maintain it independently following contract conclusion.
• End-of-contract process: Operational Deliverables: Provision of source code and clear documentation at all times, enabling independent continued operation of the software by the Customer.; Knowledge Transfer: Deliver complete documentation of system configuration, operational procedures and technical specifications. Conduct handover sessions with the client team and or incoming supplier to ensure continuity.; Access Management: Disable all client accounts and revoke system access in line with the off-boarding schedule. Confirm deactivation in writing.; Performance Documentation: Prepare a final service report evidencing delivery against agreed metrics and service levels. Address any outstanding contractual obligations.; Asset Management: Arrange return or disposal of client-owned equipment and materials as instructed.; Data Handling: Return or securely delete all client data in line with GDPR and contractual requirements. Provide written certification of data destruction within agreed timeframes.; Financial Settlement: Submit final invoices promptly with supporting documentation. Reconcile all charges through the Marketplace system and resolve outstanding queries.; Record Retention: Retain all contract documentation in line with regulatory requirements.; Professional Closure: Maintain constructive client relationships through courteous communication and effective exit procedures, supporting future procurement activity.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Our Drupal websites are built with fully responsive design, ensuring consistent content and navigation across all devices. ; ; We use a design system that dynamically adapts the interface to viewport size and device capabilities, including touch input and orientation, to support accessibility and inclusivity. ; ; Media assets are optimised for both screen dimensions and available bandwidth, improving performance and usability.; ; Administrative interfaces follow the same principles, enabling site management on mobile devices as efficiently as on desktops. ; ; This approach ensures that all users, regardless of device or context, experience a coherent, accessible, and performant digital service.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: Drupal provides well defined service interfaces through its administrative user interface, APIs, and integration layers. ; ; Content editors and administrators interact with the service via Drupal’s web (browser) based administration interface, designed to meet accessibility standards. ; ; For system integration, Drupal exposes structured interfaces including REST, JSON:API and GraphQL, enabling secure interaction with external services. ; ; These interfaces support interoperability, automation, and reuse, aligning with the GOV.UK Service Standard principles of using open standards, designing for reuse, and operating reliable, maintainable services.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: The Drupal project incorporates accessibility testing as part of its core quality assurance. Automated accessibility scans are integrated into the continuous integration process, for example using axe tests with Nightwatch against key pages in core themes and administrative interfaces since Drupal 10.1. These scans help identify common WCAG issues early in development.; ; In addition to automated checks, the community uses tools such as WAVE, Axe and Accessibility Insights to evaluate pages during development. We design and extend Drupal in line with established community best practice and accessibility recommendations, helping to maintain ongoing compliance as systems evolve. ; ; During delivery and assurance, we combine automated accessibility testing with hands-on use of assistive technologies, including screen readers and keyboard only navigation. This ensures that custom functionality, templates, and integrations operate correctly for users who rely on additional support, and that accessibility is preserved beyond core Drupal capabilities throughout the lifecycle of the service.
• API: Yes
• What users can and can't do using the API: Drupal is an API-first CMS offering comprehensive programmatic access to all content and functionality. Users can perform full CRUD operations (create, read, update, delete) on content, media, and user data through RESTful APIs, JSON:API, or GraphQL endpoints. The system supports headless/decoupled architectures, enabling content delivery to mobile apps, IoT devices, or third-party platforms.; Drupal APIs facilitate automated content workflows, integrations with external systems, and custom application development. However, certain administrative functions—such as module installation, core updates, or server configuration—remain restricted to authorized administrative interfaces to maintain security and system integrity.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • PDF
  • Other
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Drupal offers extensive customisation across multiple layers to meet specific organisational and user requirements. Key areas include content structure (custom content types, fields, and taxonomies), user roles and permissions for fine-grained access control, and themes and templates for complete control over visual design and responsive behaviour.; ; Functionality can be extended through contributed or custom modules, enabling tailored forms, workflows, integrations, and business logic. The platform supports custom APIs and web services for external system integration, whilst administrative interfaces, dashboards, and editorial workflows can be configured for optimal usability.; ; Customisation is managed through the web-based administration interface, configuration tools, and, where appropriate, custom modules.; ; This allows adjustments to content structure, layouts, menus, and workflows without direct coding. Site administrators, developers, or users with appropriate permissions typically carry out these changes, ensuring modifications remain controlled, secure, and aligned with governance and accessibility requirements.; ; This flexibility enables services to evolve with user needs whilst supporting accessibility, performance, and compliance standards throughout the system lifecycle.

Scaling

• Independence of resources: Our Cloud Platform infrastructure employs robust resource isolation to ensure consistent performance across all users.; ; Each application runs on dedicated Compute Engine VMs with autoscaling groups that dynamically allocate resources based on demand spikes. Cloud SQL and Memorystore (Redis) provide managed, isolated database and caching layers with dedicated capacity allocations.; ; Traffic distribution via load balancers prevents resource contention, while monitoring and alerting enable proactive scaling.; ; This multi-layered approach guarantees that increased demand from one user never impacts another's performance and maintains service quality.

Analytics

• Service usage metrics: Yes
• Metrics types: Our Cloud Platform provides comprehensive monitoring capabilities across all infrastructure components. ; ; Cloud Monitoring delivers real-time insights into compute resource utilization including CPU, memory, disk, and network performance. ; ; Load balancers expose request volumes, latency distributions, and error rates for traffic analysis. ; ; Managed services like Cloud SQL and Memorystore provide database-specific metrics covering query performance, connection pools, cache efficiency, and resource consumption. ; ; Autoscaling metrics track instance counts and scaling events. ; ; All metrics support custom dashboards, configurable alerting thresholds, and integration with Cloud Logging.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: Drupal’s extensible framework ensures full data ownership and flexibility. ; ; Site owners can extract complete database dumps in standard SQL format, covering all content, configuration, and user data. ; ; The built in migration framework supports structured exports to multiple formats, while RESTful APIs and JSON:API enable programmatic access. ; ; Contributed modules support exports in widely used formats such as CSV and XML. Media, documents, and assets are stored in accessible file directories for independent retrieval. ; ; Comprehensive documentation of data structures and schemas is provided, ensuring alignment with GOV.UK Service Standard requirements and avoiding vendor dependency.
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats:
  • XML
  • SQL
  • JSON
  • Custom
• Data import formats:
  • CSV
  • ODF
  • Other
• Other data import formats:
  • XML
  • SQL
  • JSON
  • Custom

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Availability SLA is 99.95%. ; ; Failure to meet agreed level of availability will result in service credits awarded to to the customer.
• Approach to resilience: Our infrastructure is architected for high availability across multiple layers. The Platform's global network provides geographic redundancy, with resources distributed across multiple zones within a region to protect against single-point failures. Load balancers automatically detect and route traffic away from unhealthy instances, ensuring continuous service availability.; ; Compute Engine autoscaling groups maintain minimum instance counts and automatically replace failed VMs, providing self-healing capabilities. ; ; Application servers are stateless, enabling seamless failover without data loss.; Database resilience leverages Cloud SQL's high-availability configuration with automatic failover to standby replicas. ; ; Multi-zone deployment ensures database continuity even during zone outages, with synchronous replication maintaining data consistency. ; ; Read replicas distribute query load and provide additional redundancy. Automated backups with point-in-time recovery enable rapid restoration if needed.; ; Memorystore Redis utilizes standard tier deployment with automatic failover and data persistence, preventing cache loss during failures. Network-level redundancy through premium tier routing ensures reliable connectivity.; ; Regular disaster recovery testing validates our ability to maintain service continuity under various failure scenarios, ensuring minimal disruption to users.
• Outage reporting: Cloud Platform monitoring triggers alerts on infrastructure anomalies including resource exhaustion, connectivity issues and performance degradation. ; ; Our ELK stack aggregates application logs and triggers alerts on error thresholds or unusual patterns.; ; Our monitoring stack provides external monitoring from multiple global regions, performing HTTPS health checks, SSH connectivity tests and Playwright-based application workflow validation.; ; Incidents trigger immediate notifications via email, Slack, and phone calls to on-call personnel. ; ; Stakeholders can subscribe to relevant notification channels based on their requirements, providing transparent communication during incidents and displaying resolution progress.; ; We provide both public and/or protected status dashboards displaying real-time service availability. ; ; Public dashboards allow users to independently verify service status and view incident history. ; ; Protected dashboards offer detailed metrics for internal teams and authorized clients.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
• Access restrictions in management interfaces and support channels: Access to management interfaces is controlled through Identity and Access Management (IAM) with role-based access control (RBAC). ; ; We implement least privilege principles, granting users only the permissions necessary for their specific roles.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)

Audit information for users

• Access to user activity audit information: Users receive audit information on a regular basis
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: We establish clear accountability and continuous oversight of our services and infrastructure. ; ; A designated security lead coordinates security policy implementation and compliance monitoring. ; ; We maintain documented security policies covering access control, data protection, incident response, and change management aligned with NCSC Cloud Security Principles.
• Information security policies and processes: We maintain information security policies covering access management, data classification, encryption standards, vulnerability management, change control, and incident response.; ; Our DevOps team lead reports to senior management on security matters, ensuring executive visibility and accountability.; ; Policy compliance is enforced through technical controls including IAM policies, mandatory MFA, encrypted communications (TLS 1.2+), and automated security scanning in CI/CD pipelines. ; ; Audit Logs provide continuous monitoring of administrative actions and policy violations.; ; Regular internal reviews assess compliance, findings are documented and resolved. ; Security incidents trigger defined response procedures with post-incident reviews to improve processes. ; ; Team members receive security training and acknowledge policy requirements.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Infrastructure is managed through Infrastructure-as-Code (IaC), ensuring all configurations are version-controlled, auditable, reproducible. Changes undergo peer review via merge requests before deployment. ; ; Infrastructure components are tracked in Git repositories, providing complete change history and accountability.; ; Security impact assessments are integrated into change approval process. ; ; Modifications to network configurations, IAM policies, or security controls require explicit security review. ; ; Automated testing validates changes in non-production environments before production deployment. ; ; Cloud asset inventory tracks all resources and configuration states. ; ; Change activities are logged via Cloud Audit Logs, enabling retrospective analysis and compliance verification. ; ; Systematic approach ensures security considerations are evaluated throughout infrastructure lifecycle.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We employ continuous vulnerability assessment across all infrastructure layers. ; ; Cloud Security Command Center scans Compute Engine instances, containers, configurations for known vulnerabilities. Application dependencies are monitored through automated scanning in our CI/CD pipelines.; ; Security patches are deployed based on severity: critical vulnerabilities within 12-24 hours, high-priority issues within 5 working days, following validation in pre-production environments. ; ; OS patches applied via automated update mechanisms from respective OS repositories.; ; Threat intelligence is gathered from multiple sources including Cloud security bulletins, CVE databases, and vendor-specific advisories for technologies in our stack. ; ; Our WAF is automatically updated to defend against newly identified exploits.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Our monitoring detects potential compromises through continuous analysis of logs and metrics. ; ; Cloud Audit Logs track all administrative actions and API calls. ELK stack analyzes application logs for suspicious patterns including failed authentication attempts, unusual access patterns, and privilege escalations.; ; Security incidents trigger immediate alerts to on-call personnel via email, Slack, and phone. Our incident response process includes immediate containment, impact assessment, root cause analysis, and remediation. ; ; All incidents are documented with post-incident reviews to improve detection and response capabilities.
• Incident management type: Supplier-defined controls
• Incident management approach: We maintain documented incident response procedures with pre-defined playbooks for common scenarios including service outages, security breaches, and infrastructure failures.; ; Users report incidents via email, dedicated Slack channels, or direct contact with on-call personnel. Status pages display current service status and ongoing incidents.; ; Incident severity determines response timeline and communication frequency. Post-incident reports documenting root cause, impact, and preventive measures are shared with affected stakeholders within 48 hours of resolution, ensuring transparency and continuous improvement.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: We have invested hundreds of hours creating this fully configured Drupal trial, with free immediate access, so evaluators can experience solutions addressing content creation, teamwork, SEO optimisation, and personalisation challenges. The trial includes intuitive editing, drag-and-drop components, customisable workflows, digital asset management, AI tools, analytics integration, and multilingual capabilities.
• Link to free trial: https://trydrupal.1xinternet.com/

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 2.5%
• Between £500,001 and £1,000,000: 2.5%
• Between £1,000,001 and £2,500,000: 5%
• Between £2,500,001 and £5,000,000: 5%
• Over £5,000,001: 5%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: Bb6ec7d3-1c77-45f3-b4dc-708027898d8c
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Collaborating with anchor institutions and community groups to make facilities available for education, training or community events

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Working conditions which promote an inclusive working environment and promote retention and progression

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at j.tillotson@1xinternet.com. Tell them what format you need. It will help if you say what assistive technology you use.