Nymo Cloud Hosting
Nymo Cloud Hosting delivers secure, scalable, fully managed cloud infrastructure services for running applications, storing and processing data, and ensuring high availability. It provides automated backups, proactive monitoring, compliance controls, and expert support, enabling public sector organisations to deploy reliable digital services without managing underlying cloud infrastructure.
Features
- Fully managed cloud hosting environment
- High availability and resilient infrastructure
- Automated backups and disaster recovery
- Secure data storage and encryption
- Scalable compute and storage resources
- 24/7 system monitoring and alerts
- Role-based access control
- UK-hosted cloud infrastructure
- Patch management and security updates
- API and remote access support
Benefits
- Run applications without managing infrastructure
- Improve service reliability and uptime
- Scale systems quickly as demand changes
- Reduce operational and maintenance overhead
- Protect sensitive data securely
- Recover services quickly after incidents
- Support remote access for teams
- Meet public sector compliance requirements
- Simplify deployment of digital services
- Focus teams on core business outcomes
Pricing
Service documents
Request an accessible format
Framework
G-Cloud 15
Service ID
3 6 1 5 5 2 9 6 7 4 7 5 4 2 4
Contact
NYMO GROUP LTD
Amir Rashid
Telephone: 07887777040
Email: tenders@nymogroup.co.uk
About the service
- Service categories
-
- Application Development and Deployment
- Application platforms
- Model driven application platforms
- Model driven application platforms
- Model driven application platforms
- Application platforms
- Application Development and Deployment
- Multi cloud support
- Yes
Service scope
- Software add-on or extension
- Yes, but can also be used as a standalone service
- What software services is the service an extension to
- Nymo Cloud Hosting can be used to host and support Nymo Group Ltd software services, including healthcare, education, legal, housing, and enterprise applications, as well as third-party web applications, databases, and APIs requiring secure, scalable, and fully managed cloud hosting infrastructure.
- Cloud deployment model
- Public cloud
- Service constraints
- Nymo Cloud Hosting is delivered as a managed public cloud service and requires a stable internet connection. Planned maintenance may be scheduled outside business hours with advance notice. Some legacy or highly specialised hardware configurations may not be supported. Data residency and compliance options are subject to agreed hosting regions and service configuration.
- System requirements
-
- Reliable internet connection
- Modern web browser
- Supported operating systems
- Secure user authentication credentials
- Compatible application software
- HTTPS-enabled network access
- Firewall rules permitting service access
- Role-based user accounts
- Data migration access permissions
- Standard security policies in place
User support
- Email or online ticketing support
- Yes
- Support response times
- Nymo Cloud Hosting provides email and online ticketing support during standard business hours. Queries are typically acknowledged within one business day. Priority or service-impacting issues are responded to more quickly based on severity. Weekend and public holiday support is available for critical incidents, with response times agreed through the support and service level arrangements.
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- WCAG 2.2 AA
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Onsite support
- Yes
- Support levels
-
Nymo Cloud Hosting provides structured support levels designed to meet different operational needs. Standard Support is included within the service cost and provides email and ticketing support during business hours, covering incident management, service queries, and routine operational assistance. Initial responses are typically provided within one business day.
Enhanced Support is available at an additional cost and offers extended support hours, faster response times, and prioritised incident handling. This level includes access to a dedicated cloud support engineer for technical guidance, performance optimisation, and configuration support.
Premium Support is available by agreement and provides 24/7 support for critical services, with rapid response times for high-severity incidents. This level includes a named technical account manager who acts as a single point of contact, supports service planning, and coordinates ongoing service improvements.
Pricing for Enhanced and Premium support is agreed based on service scope, required response times, and operational complexity. - Support available to third parties
- No
Onboarding and offboarding
- Getting started
-
Nymo Cloud Hosting supports users through a structured onboarding process to ensure a smooth and efficient start. Initial setup is guided by the support team, who assist with environment provisioning, configuration, and access setup. Users are provided with clear online documentation covering service usage, security controls, and operational guidance.
Remote onboarding sessions are available to walk users through the management interface, deployment processes, and best practices. Where required, additional training or configuration support can be arranged. This approach ensures users can quickly and confidently deploy and manage their services within the hosted environment. - Service documentation
- Yes
- Documentation formats
-
- Other
- Other documentation formats
- Microsoft Word
- Documentation accessibility standard
- WCAG 2.2 AA
- End-of-contract data extraction
-
At the end of the contract, users can extract their data from Nymo Cloud Hosting using standard, secure export methods. Data can be downloaded in commonly used, non-proprietary formats through secure file transfer or API access, depending on the service configuration. The support team can assist with data export to ensure completeness and integrity.
Following successful data extraction and confirmation from the user, all remaining data held within the hosting environment is securely deleted in line with agreed data retention policies and data protection requirements. This process ensures users retain full control of their data and can transition to alternative services without restriction. - End-of-contract process
-
At the end of the contract, Nymo Cloud Hosting supports an orderly service closure or transition. The contract price includes standard off-boarding activities such as advance notice of contract end, access to documentation, and a defined period for users to extract their data using secure export methods.
During this period, users retain access to their hosted environment to complete data extraction and service transition activities. Support is available to answer queries and confirm successful data transfer. Once data extraction is completed or the notice period expires, the hosting environment is decommissioned and all remaining data is securely deleted in line with data protection and retention policies.
Any additional services beyond standard off-boarding, such as extended data retention, bespoke migration support, additional export formats, or continued hosting beyond the contract term, are treated as additional costs and agreed separately.
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Opera
- Application to install
- Yes
- Compatible operating systems
-
- Android
- IOS
- MacOS
- Windows
- ChromeOS
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
- Nymo Cloud Hosting is accessed through a web-based management interface that is compatible with modern mobile browsers. Core functions such as service monitoring, status checks, and support ticket access are available on mobile devices. Desktop access provides a larger interface for advanced configuration, detailed reporting, and administrative tasks, while mobile access is optimised for visibility and essential management actions.
- Service interface
- No
- User support accessibility
- WCAG 2.2 AA
- API
- Yes
- What users can and can't do using the API
-
Nymo Cloud Hosting provides APIs that allow users to manage and integrate their hosted environments programmatically. Users can use the API to provision resources, configure environments, manage access permissions, and retrieve service status information. The API supports automation of common tasks such as environment setup, scaling resources, and monitoring usage.
Users can make approved configuration changes through the API, including updating resource allocations and managing credentials, subject to role-based access controls. Actions that could impact platform stability, security policies, or compliance settings are restricted and require approval through support. The API is designed to complement the managed service model, ensuring flexibility while maintaining security and service reliability. - API documentation
- Yes
- API documentation formats
-
- HTML
- API sandbox or test environment
- No
- Customisation available
- No
Scaling
- Independence of resources
- Nymo Cloud Hosting ensures independence of resources through logical isolation, dedicated resource allocation, and capacity controls. User environments are separated using virtualisation and access controls to prevent performance or security impact from other users. Resource limits and monitoring are applied to manage demand, and the platform scales capacity to maintain consistent performance across all hosted services.
Analytics
- Service usage metrics
- Yes
- Metrics types
- Nymo Cloud Hosting provides service usage metrics through its management interface and APIs. Metrics include resource utilisation such as compute, storage, and network usage, service availability, uptime, and basic performance indicators. These metrics help users monitor capacity, understand consumption, and support operational planning and reporting.
- Reporting types
-
- API access
- Real-time dashboards
- Resource tagging
- Yes
- FOCUS resource tagging
- No
Supplier type
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Baseline Personnel Security Standard (BPSS)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
- United Kingdom
- User control over data storage and processing locations
- No
- Datacentre security standards
- Complies with a recognised standard (for example CSA CCM version 4.0)
- Penetration testing frequency
- At least once a year
- Penetration testing approach
- Another external penetration testing organisation
- Protecting data at rest
-
- Physical access control, complying with another standard
- Encryption of all physical media
- Data sanitisation process
- No
- Equipment disposal approach
- Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
Data importing and exporting
- Data export approach
- Users can export their data from Nymo Cloud Hosting using secure, standard methods including encrypted file transfer, downloadable backups, or API-based exports. Data is provided in commonly used, non-proprietary formats to support portability. Support assistance is available to help users complete exports and verify data integrity where required.
- Data export formats
-
- CSV
- ODF
- Data import formats
-
- CSV
- ODF
Data-in-transit protection
- Data protection between buyer and supplier networks
- TLS (version 1.2 or above)
- Data protection within supplier network
- TLS (version 1.2 or above)
Availability and resilience
- Guaranteed availability
-
Nymo Cloud Hosting is designed to provide high availability through resilient cloud infrastructure and proactive monitoring. The service targets a minimum monthly availability of 99.9% for core hosting services, excluding planned maintenance agreed in advance.
Availability is measured on a monthly basis. If the guaranteed availability level is not met, users may be eligible for service credits in line with the service level agreement. Service credits are calculated based on the proportion of downtime experienced and are applied against future invoices. Full SLA terms, including measurement methodology, exclusions, and credit thresholds, are agreed at contract commencement. - Approach to resilience
- Nymo Cloud Hosting is built for resilience using redundant cloud infrastructure, high-availability design, and automated failover. Services are hosted in resilient data centres with redundant power, networking, and cooling. Automated backups, continuous monitoring, and proactive capacity management help ensure service continuity. Detailed resilience and data centre information is available on request.
- Outage reporting
-
Nymo Cloud Hosting reports service outages through multiple communication channels to ensure users are kept informed. Service status and incidents are visible through a real-time service dashboard, providing up-to-date information on availability and resolution progress. Users can also access service status information programmatically through an API.
Email alerts are issued for confirmed outages, significant incidents, and planned maintenance, ensuring timely communication. Where applicable, updates are provided throughout the incident lifecycle, including investigation, mitigation, and resolution. This approach ensures transparency and allows users to respond effectively to service disruptions.
Identity and authentication
- User authentication needed
- Yes
- User authentication
-
- Multi-Factor Authentication (MFA)
- Username or password
- Access restrictions in management interfaces and support channels
- Nymo Cloud Hosting restricts access to management interfaces and support channels using role-based access controls and authenticated user accounts. Access is granted only to authorised users based on their assigned roles and responsibilities. Secure authentication methods are enforced, and access activity is logged and monitored. Support channels are restricted to verified customer contacts to prevent unauthorised requests or changes.
- Access restriction testing frequency
- At least once a year
- Management access authentication
-
- Multi-Factor Authentication (MFA)
- Identity federation with existing provider (for example Google Apps)
- Username or password
Audit information for users
- Access to user activity audit information
- Users contact the support team to get audit information
- How long user audit data is stored for
- At least 12 months
- Access to supplier activity audit information
- Users contact the support team to get audit information
- How long supplier audit data is stored for
- At least 12 months
- How long system logs are stored for
- At least 12 months
Security governance
- Named board-level person responsible for service security
- Yes
- Software Security Code of Practice
- Yes
- Security governance certified
- No
- Security governance approach
- Nymo Cloud Hosting follows a structured security governance approach based on recognised industry best practices. Security responsibilities, policies, and controls are clearly defined and reviewed regularly. Access is managed using role-based controls, with monitoring and logging in place to detect and respond to incidents. Data protection, risk management, and compliance requirements are embedded into service delivery, with security oversight and governance processes maintained throughout the service lifecycle.
- Information security policies and processes
-
Nymo Cloud Hosting operates under defined information security policies covering access control, data protection, incident management, risk management, and business continuity. These policies are approved by senior management and are reviewed regularly to ensure continued effectiveness and alignment with legal and regulatory requirements.
Security responsibilities are clearly assigned, with oversight provided through an internal governance structure. Compliance with policies is enforced through role-based access controls, monitoring, logging, and regular reviews. Security incidents are reported through established escalation processes and managed in line with documented incident response procedures. This approach ensures information security policies are consistently applied and adhered to across the service.
Operational security
- Configuration and change management standard
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Configuration and change management approach
- Nymo Cloud Hosting follows a controlled configuration and change management process. Service components are documented and tracked throughout their lifecycle, including configuration, updates, and decommissioning. Proposed changes are assessed for operational and security impact before implementation. Changes are approved, tested, and scheduled to minimise risk and service disruption, with monitoring in place to confirm successful deployment.
- Vulnerability management type
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Vulnerability management approach
- Nymo Cloud Hosting manages vulnerabilities through continuous monitoring and regular security assessments. Potential threats are identified using vulnerability scanning, risk assessment, and review of service components. Security updates and patches are prioritised based on severity and are deployed promptly, with critical patches applied as soon as practicable. Information about potential threats is obtained from trusted security advisories, vendor notifications, and industry best-practice sources.
- Protective monitoring type
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Protective monitoring approach
- Nymo Cloud Hosting uses continuous monitoring and logging to identify potential security compromises. Alerts are generated for unusual activity, access anomalies, or performance issues. When a potential compromise is detected, incidents are investigated promptly, containment measures are applied, and affected services are secured. Response times are prioritised based on incident severity, with critical incidents addressed immediately and escalated through defined incident management procedures.
- Incident management type
- Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
- Post-quantum cryptography secure
- No
- Incident management approach
- Nymo Cloud Hosting follows a defined incident management process with pre-defined procedures for common service and security events. Users can report incidents through email or an online ticketing system. Incidents are logged, prioritised, and managed according to severity. Status updates and post-incident reports are provided to users, outlining the issue, actions taken, and resolution details.
Secure development
- Approach to secure software development best practice
- Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)
Public sector networks
- Connection to public sector networks
- No
Pricing
- Discount for educational organisations
- No
- Free trial available
- No
Discount percentage by annual call-off contract value (excluding VAT)
- Less than £250,000
- 0%
- Between £250,000 and £500,000
- 2%
- Between £500,001 and £1,000,000
- 5%
- Between £1,000,001 and £2,500,000
- 8%
- Between £2,500,001 and £5,000,000
- 10%
- Over £5,000,001
- 12%
Standards and certifications
- ISO/IEC 27001 certification
- No
- ISO 28000:2022 certification
- No
- ISO 9001 certification
- No
- Quality management systems (QMS)
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- No
- Cyber Essentials Alternative
- In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
- Cyber essentials plus
- No
- Cyber Essentials Alternative
- In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
- Other security certifications
- No
Social value
- Mission: Kick start economic growth
-
To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority
- New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
- New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
- Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
- Plans to engage the contract workforce in deciding the most important workplace issues to address
- Ensuring new workers are informed of their right to join a trade union
- Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
- Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
- Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
- Activities to cascade good practice on fair working conditions throughout the supply chain
- Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
- Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
- Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
- Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
- Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
- Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Volunteering opportunities for staff
- Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
- Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
- Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
- How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
- How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
- How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
- Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract
Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.
- Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
- Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract
Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises
- Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
- Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
- Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
- Plans for positive actions with community groups.
- Measures for making facilities used in the delivery of the contract available for community groups, education or training
- Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
- Plans to respond flexibly and adapt approaches to community engagement and initiatives
- Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds
- Collaborating with anchor institutions and community groups to make facilities available for education, training or community events
- Mission: Make Britain a clean energy superpower
-
To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero
Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.
- Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
- Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it
- Mission: Break down barriers to opportunity
-
By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 6: Employment and training: For those who face barriers to employment
- Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
- Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
- Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
- Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
- Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
- Collection of the views and expertise of disabled people and their representative organisations on successfully supporting disabled employees or applicants
- Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
- Introducing transparency to pay and reward processes
- Offering a range of quality opportunities with routes of progression if appropriate, e.g. T Level industry placements, students supported into higher level apprenticeships.
- Working conditions which promote an inclusive working environment and promote retention and progression
- Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain
- Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
- Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition
Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.
- Understanding of the issues affecting the development of new skills by target cohort
- Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
- Other measures to offer development opportunities for the target cohort(s) in the contract workforce
- Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
- Understanding of issues relating to entering the contract workforce
- Creation of outreach activities to create a pipeline of employees for the future contract delivery
- Content of the outreach activity is designed to suit the target cohort
- Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
- Mission: Build an NHS fit for the future
-
That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.
Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.
- Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
- Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
- Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
- Actions to invest in the physical and mental health and wellbeing of the contract workforce