SOFTCAT PLC

Cambric - Morse Mobile EPR

Morse provides a secure, integrated Electronic Patient Record platform for managing community and mental health care both online and offline. It records, accesses, and shares patient information, streamlines clinical workflows, supports multidisciplinary teams, and ensures accurate, real-time data is available to improve safety, coordination, and efficiency across services.

Features

• Real-time synchronisation ensuring up-to-date patient records across all clinical teams.
• Offline-first capability allowing full clinical functionality without network connectivity.

Benefits

• Streamlines clinical workflows reducing duplication and simplifying daily patient management.
• Enables clinicians record care offline and synchronise seamlessly when connected.

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at psitq@softcat.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

350916372429104

Contact

Public Sector Tenders
01628 403403
psitq@softcat.com

About your service

• Service categories:

  Applications

  Production and operations

  Service industry and public sector operations

  • Healthcare
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Private cloud
  • Hybrid cloud
• Service constraints: Morse requires scheduled maintenance windows for upgrades and security patching, coordinated with the customer to minimise disruption. The service operates best within supported Windows Server and SQL Server environments or approved cloud equivalents. Where deep integrations are required (PAS, MPI, Portals, GPs, etc), local connectivity and configuration dependencies must be met. Offline-first functionality relies on device encryption, meaning only supported Windows and iPadOS devices can be used. Third-party integrations may require additional customer-side infrastructure or interface availability.
• System requirements:
  • Windows Server environment required for hosting core application components
  • Microsoft SQL Server instance required for database storage and operations.
  • Device-level encryption mandatory for offline client data security compliance
  • Supported Windows or iPadOS devices needed for Morse client usage.
  • Active Directory or Entra-ID required for authentication and access control.
  • Secure network connectivity required for synchronisation and system integrations.
  • Anti-virus protection such as Microsoft Defender required on all servers.
  • F5 or equivalent load balancer recommended for resilient application delivery.
  • Regular OS patching required to maintain platform security and stability.
  • Adequate bandwidth necessary for upstream interoperability with NHS systems.

User support

• Email or online ticketing support: Yes
• Support response times: Our standard support hours are Monday to Friday, 09:00–17:00, with responses typically provided within one working day. Weekend and public-holiday cover is not included in the standard service; however, enhanced SLAs and extended-hours support can be offered at additional cost if required. Urgent issues raised via the ticketing system or email during standard hours are prioritised according to severity, with critical incidents addressed immediately by the support team.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: We provide tiered support levels to meet different organisational needs. Our standard support covers Monday–Friday, 09:00–17:00 (UK time), including incident management, problem resolution, release guidance, and access to our online ticketing and phone support services. This support level is included within the Morse enterprise subscription at no additional cost.; ; For organisations requiring enhanced coverage, we offer extended-hours and 24/7 critical incident support as optional upgrades, priced according to the level of cover, escalation requirements and the scale of deployment. These enhanced support tiers are charged at additional cost and can be tailored to customer operational needs.; ; Support levels include structured SLAs covering response and resolution targets appropriate to incident severity. All customers have access to senior technical specialists when required, and for enhanced-support customers we can provide a dedicated technical account manager, offering proactive oversight, service reviews and coordination of technical activity across upgrades, integrations and deployments.; ; Onsite support, if required, is available at an additional cost and is scoped according to the work effort involved.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We provide a structured onboarding approach to help users begin using Morse confidently and safely. This includes a train-the-trainer model, where Cambric trainers deliver in-depth sessions to service leads, super-users, business analysts and system administrators. These trainers then cascade knowledge across their teams, ensuring local ownership and consistent adoption.; ; We also offer onsite training where required, along with remote training sessions for specific roles such as administrators, form designers and reporting teams. Comprehensive user documentation, quick-reference guides and role-specific materials are supplied to support day-to-day use.; ; During implementation, our project team provides configuration support, workflow mapping, data migration guidance and go-live assistance to ensure services transition smoothly onto Morse.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: At contract end, Cambric provides a structured and fully supported data-extraction process to ensure all customer data can be retrieved safely and completely. Morse stores data in a SQL Server database, allowing us to supply extracts in standard, non-proprietary formats such as CSV, XML or direct database export, depending on the buyer’s preference. Clinical documents, forms, and attachments are provided in their native formats (typically PDF or XML), alongside metadata needed to maintain context and traceability.; ; Extraction includes patient records, clinical activity, cases, appointments, referrals, forms, audit history and configuration data where appropriate. Cambric works with the buyer to scope extraction requirements, confirm data structures and validate completeness. If required, we can support secure transfer to the buyer’s designated environment using agreed protocols. Data deletion from Morse systems occurs only once the buyer confirms successful receipt and integrity.
• End-of-contract process: At the end of the contract, Cambric supports an orderly and transparent offboarding process. Included within the contract price is the provision of full data extraction, covering all patient records, clinical activity, associated documents and configuration data in standard, non-proprietary formats. We also provide reasonable guidance to help the organisation understand the structure of the extracted data. Once the customer confirms successful receipt and integrity, Cambric will securely delete all customer data from our environments in line with agreed retention and governance requirements.; ; Activities that fall outside the contracted price include bespoke extraction formats, complex data transformation, additional consultancy, extended access to non-production environments and any on-site support. If required, we can also offer extended read-only access or phased wind-down arrangements at additional cost, depending on customer needs.
• Documentation accessibility standard: EN 301 549

Using the service

• Web browser interface: No
• Application to install: Yes
• Compatible operating systems:
  • IOS
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The Morse mobile client (iPadOS) provides full clinical functionality, including offline working, appointments, caseloads, forms, referrals, documentation. The core workflows mirror the desktop experience, the interface is optimised for touch interaction, simplified navigation, smaller screen layouts. Some administrative and configuration functions like system management, template design, advanced reporting—are available only on the desktop platform, as these tasks are not typically performed in mobile contexts. Synchronisation, encryption, data-handling operate identically on both platforms. Mobile users benefit from portability, immediate point-of-care access, while desktop users retain access to the full administrative toolset. Morse interface looks and feels the same on each platform.
• Service interface: Yes
• User support accessibility: EN 301 549
• Description of service interface: The Morse user interface is designed for frontline clinical use, prioritising clarity, speed and ease of use in community and mental health settings. It is consistent across Windows (browser-based) and iOS, reducing training needs, supporting flexible working.; The interface is patient-centred and task-focused, with clear navigation to caseloads, diaries, referrals, forms and clinical notes. Information is presented in structured sections to minimise cognitive load and support efficient data entry.; Morse supports offline working, touch and keyboard input, and leverages native Windows/iOS accessibility features. The visual design is clean, professional, practical, enabling clinicians focus on care delivery rather than system navigation.
• Accessibility standards: EN 301 549
• Accessibility testing: Morse has been tested with users who rely on **built-in assistive technologies** available on Windows and iOS, including screen readers, screen magnification, high-contrast display modes, keyboard navigation and touch accessibility features. Testing focuses on real clinical workflows rather than isolated screens, ensuring that core tasks such as caseload navigation, form completion and note entry remain usable with assistive tools enabled. Feedback from users with varying levels of digital confidence has informed layout, navigation order and control sizing. Accessibility testing is carried out alongside routine usability testing, and improvements are incorporated iteratively as part of ongoing product development rather than treated as a one-off activity.
• API: Yes
• What users can and can't do using the API: The API enables secure, controlled integration between Morse and external systems but does not allow users to set up or administer Morse through the API. External systems can retrieve patient-context data, launch Morse in context, access published documents, receive referrals or alerts, and submit specific structured data where integrations permit. All interactions require authenticated access, and endpoints are restricted to predefined functions to maintain patient safety and data integrity.; ; Users cannot configure teams, workflows, templates, permissions, or system settings through the API. Creation of patient records, cases, appointments or forms also cannot be performed directly via the API. Any changes to configuration or operational setup must be made within Morse’s administrative tools rather than programmatically.; ; The API is therefore intended strictly for interoperability, not system configuration.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Morse supports extensive customisation to match local service workflows and organisational requirements. Users can customise electronic forms, clinical pathways, appointment templates, task bundles, alerts, statuses, admin notes, caseload configurations and reporting outputs. Customisation is performed through the built-in Form Designer, management consoles and configuration tools, which allow organisations to adapt data capture, workflow steps, terminology and operational rules without supplier intervention.; ; Authorised system administrators, service leads and trained analysts within the buyer organisation can apply most customisations directly. More complex changes such as new integrations, advanced workflow logic or structural system adjustments are implemented by Cambric on request. Customisation is role-based, ensuring only approved users can modify system behaviour.

Scaling

• Independence of resources: Morse is deployed within a controlled and appropriately resourced environment, ensuring that demand from one service or user group does not negatively affect others. The application uses load-balanced server instances, dedicated SQL resources and optimised synchronisation processes to prevent performance bottlenecks. Each environment is capacity-planned with the customer to match expected concurrency, data volumes and growth. Offline-first design further reduces real-time load by shifting activity to synchronised batches rather than constant live transactions.; ; Where hosted within the buyer’s private infrastructure, resource allocation, monitoring and scaling are coordinated with the local IT team to maintain consistent performance across all users.

Analytics

• Service usage metrics: Yes
• Metrics types: We provide several operational and application-level metrics to support monitoring and service assurance. These include server health metrics (CPU, memory, storage utilisation), application availability, synchronisation activity volumes, user session counts, error and exception logs, and integration-level metrics such as referral message flow and document-publishing success rates. Sync conflict reports, offline-session activity and data-integrity checks are also available to support clinical safety monitoring. Additional metrics such as task throughput or form-completion volumes can be supplied using reporting tools connected to the Morse SQL database. These metrics enable customers to monitor performance, identify issues and support capacity planning.
• Reporting types:
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller (no extras)
• Organisation whose services are being resold: Cambric

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: Users export their data through a controlled, supplier-supported process to ensure completeness and integrity. Morse data is held in SQL Server, allowing extraction into standard formats such as CSV, XML or full database export. Clinical documents, forms and attachments are exported in their native formats with accompanying metadata. Cambric performs the extraction on request, validates the output and transfers it securely to the buyer using an agreed method. Users cannot directly export the full dataset themselves; this approach ensures data quality, security and correct packaging for onward use.
• Data export formats:
  • CSV
  • Other
• Other data export formats: XML Structured export of clinical data with accompanying contextual metadata.
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The service provides component-level availability guarantees across its UK datacentre and cloud infrastructure. Core datacentre facilities (Tier III aligned) are covered by an availability SLA of 99.982%. Where Microsoft Azure services are used for geo-resilience, Azure UK availability zones are covered by 99.99% availability targets.; ; Key platform components supporting the service include VMware Cloud Director infrastructure (99.9%), perimeter firewall services (99.9%), traffic management services (99.99%), and database services with high-availability configurations (99.9% H/A) ; ; Availability is measured monthly and excludes scheduled maintenance and external events.; ; Where availability targets are not met, customers are entitled to service credits, calculated in accordance with the contractual SLA and applied to future service charges rather than refunded as cash. Service credits represent the customer’s sole remedy for failure to meet availability targets, consistent with standard public-sector cloud contracting practice
• Approach to resilience: The service is designed to be resilient in line with the government’s Cloud Security Principle on asset protection and resilience. It is hosted in UK-based datacentres engineered for high availability, with resilient power supplies, cooling systems, physical security controls and network connectivity. Datacentre facilities are designed to minimise single points of failure and support continuous operation.; ; At the platform level, the service runs on high-availability virtualised infrastructure with redundant compute, storage and networking components. Core services are continuously monitored, with automated alerting and defined incident response and escalation procedures to support rapid fault detection and recovery.; ; Data resilience is supported through regular backups, with backup data stored separately from live production environments. Disaster recovery arrangements are in place to enable restoration of service following major incidents, and recovery processes are tested periodically as part of operational assurance activities.; ; The service architecture supports scaling and reconfiguration to maintain availability as demand changes, and planned maintenance is managed to minimise disruption.
• Outage reporting: Service availability and outages are monitored continuously as part of routine operational management. Where a service-affecting incident occurs, customers are informed through direct communications, primarily via email alerts to agreed operational and service contacts.; ; Email notifications are used to confirm the identification of an outage, provide updates on investigation and resolution activity, and communicate service restoration. For significant incidents, follow-up communications may include a summary of impact and remedial actions.; ; A public availability dashboard is not provided, as the service is delivered as a secure, customer-specific SaaS platform rather than a mass-market public service. This approach ensures that operational information is shared appropriately with affected customers without exposing service detail publicly.; ; An API for outage reporting is not provided. Service status information is instead communicated through established service management and support channels to ensure accuracy and context.; ; Planned maintenance activities that may impact availability are communicated to customers in advance, typically by email, to minimise disruption and allow operational planning.; ; This approach ensures timely, controlled and appropriate communication of outages, aligned with public-sector service management expectations.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is restricted using role-based access controls (RBAC), enforced through secure login with MFA and audit logging. Only authorised Cambric personnel with appropriate clearance can access administrative functions. Support tools are segregated from production systems and require VPN access. User permissions are tightly controlled, with least-privilege-principles applied. All access attempts and actions logged and regularly reviewed. Access to client environments is only granted when necessary, time-limited, approved through change/incident management procedures aligned with NHS security policies. All access controls audited as part of ISO/IEC 27001 and Cyber Essentials Plus certifications.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: The organisation operates a formal Information Security Management System (ISMS) aligned with ISO/IEC 27001 and UK public-sector security expectations. Information security policies cover areas including access control, data protection, secure development, asset management, incident management, supplier assurance, business continuity and risk management.; ; Overall responsibility for information security sits with senior management, with day-to-day oversight delegated to a designated information security lead. Information security risks, incidents and compliance issues are reported through defined management reporting lines and reviewed regularly as part of governance and risk management processes.; ; Policies are supported by documented procedures and are communicated to all staff. Compliance is enforced through mandatory staff training, role-based access controls, change management processes and segregation of duties. Staff receive regular security awareness training, including refresher training, and are required to acknowledge key policies.; ; Security incidents and suspected breaches are managed through a defined incident response process, including investigation, escalation, remediation and lessons learned. Compliance with policies is monitored through internal reviews, vulnerability management, audit activities and independent external assessments.; ; Policies and processes are reviewed at least annually, or following significant change, to ensure they remain effective, proportionate and aligned with evolving risks and regulatory requirements.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Our configuration and change management processes follow a controlled, documented lifecycle overseen by our technical leads. All components of the Morse service: application modules, APIs, deployment packages, configuration items, are tracked in our internal configuration repository, with version control applied to all code and build artefacts. Changes follow a formal request, assessment, approval process, including security and clinical-safety impact assessment where relevant.; Every change is peer-reviewed, tested in development/test environments, validated against regression and integration scenarios before release. Security considerations are built into the design and review process, ensuring potential risks are identified, mitigated, documented before deployment.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Vulnerability management is delivered through **risk-based, documented process** aligned with recognised security standards. Potential threats identified through routine vulnerability scanning, penetration testing, supplier advisories, security intelligence sources monitoring, vendor notifications, UK-public-sector guidance.; Identified vulnerabilities are **assessed for likelihood and impact**, with prioritisation on clinical risk, data sensitivity, exposure. Remediation actions tracked through to closure.; Security patches and updates are **deployed promptly according to severity**, with critical patches applied as soon as practicable and tested in non-live environments before release. Patch deployment follows formal change control to minimise service risk.; Emerging threats are identified early and addressed in controlled, timely manner.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Protective monitoring uses **continuous monitoring** of infrastructure, platforms applications via centralised logging and automated alerting. Potential compromises identified through log analysis, security alerts, anomaly detection and event correlation across systems.; On detecting potential compromise, we **triage immediately** under incident management process. We may restrict access, isolate affected components and begin investigation to confirm impact and root cause. Incidents are escalated to senior technical and security staff where required.; ; Response times are **risk-based**, with suspected high-impact/security-critical incidents acted on immediately, progressed as a priority. All incidents are recorded, tracked through to resolution, then reviewed to identify lessons learned and prevent recurrence.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Cambric operates a defined incident management process based on ITIL principles. We maintain documented procedures for common events including access issues, data sync failures, and system errors. Users report incidents via our online ticketing system, email or phone, with priority assigned based on impact. All incidents are logged, tracked, and resolved by our UK-based support team. Detailed incident reports, including root cause, resolution, and corrective actions, are provided on request or for high-priority incidents. This ensures transparency, continuous improvement, and minimal disruption to services.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Scottish Wide Area Network (SWAN)

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Cambric offers a time-limited free trial of Morse, typically within a sandbox or demo environment. It includes access to core EPR functionality and preconfigured workflows for evaluation. Custom configuration, integrations, and live data use are excluded. Trials are usually available for 30 days and supported by our team.
• Link to free trial: There is no public link to the free version of Morse. Access to the trial environment is arranged directly with Cambric on request. Please contact info@cambric.co.uk to discuss trial access.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: NQA
• ISO/IEC 27001 accreditation date: Monday 8 April 2024
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: NQA
• ISO 9001 accreditation date: Monday 8 April 2024
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: SecurityMetrics
• PCI DSS accreditation date: Friday 10 January 2025
• What the PCI DSS doesn’t cover: N/A
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: E9fd5f85-7cd1-4ff2-aba9-6f9f5f225b1b
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 181966c9-f0aa-42ed-9271-d1b111bdf43b
• Other security certifications: Yes
• Any other security certifications: Security Standards dependant on the vendor solution

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
    • Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
    • Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
    • Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Collection of the views and expertise of disabled people and their representative organisations on successfully supporting disabled employees or applicants
    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Introducing transparency to pay and reward processes
    • Offering a range of quality opportunities with routes of progression if appropriate, e.g. T Level industry placements, students supported into higher level apprenticeships.
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
    • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
    • Understanding of issues relating to entering the contract workforce
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery
    • Content of the outreach activity is designed to suit the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at psitq@softcat.com. Tell them what format you need. It will help if you say what assistive technology you use.