Skip to main content

Help us improve the Digital Marketplace - send your feedback

INSIGHT DIRECT (UK) LTD

Salesforce Data 360 (formerly Data Cloud) Marketing

Data 360 unifies customer data across sources, creating comprehensive profiles for personalised marketing. It enables segmentation, journey mapping, and campaign targeting based on real-time insights. Marketeers can understand customer behavior, preferences, and engagement patterns to deliver relevant experiences, optimize marketing spend, and drive conversions through data-driven decision-making.

Features

  • Unified Customer Profiles: Single view combining purchase, engagement, behavioral data.
  • AI-Powered Segmentation: Create segments using natural language, no SQL needed.
  • Real-Time Personalization: Sub-second updates enable immediate cross-channel customization.
  • Calculated Insights: Pre-built metrics like lifetime value calculated automatically.
  • Cross-Channel Activation: Push segments to email, ads, commerce, service simultaneously.
  • Predictive Analytics: Einstein-powered churn prediction and conversion forecasting.
  • Marketing Cloud Integration: Seamless audience sync and journey orchestration.
  • Customer Consent Management: Centralized preference tracking ensures compliant outreach.
  • Campaign Performance Attribution: Holistic tracking from awareness to conversion.
  • Partner Data Collaboration: Securely enrich campaigns via clean rooms.

Benefits

  • Unified Customer Profiles: See complete history across all touchpoints instantly.
  • AI-Powered Segmentation: Build complex audiences using everyday language easily.
  • Real-Time Personalization: Respond to customer behavior immediately across all channels.
  • Calculated Insights: Identify high-value customers and predict churn automatically.
  • Cross-Channel Activation: Launch coordinated campaigns across email, ads, and web.
  • Predictive Analytics: Prioritize outreach based on AI-predicted conversion likelihood.
  • Marketing Integration: Sync audiences to journeys without manual file exports.
  • Customer Consent Management: Respect preferences automatically to ensure regulatory compliance.
  • Campaign Performance Attribution: Understand touchpoints driving revenue across the journey.
  • Partner Data Collaboration: Enrich campaigns with external data maintaining privacy.

Pricing

  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at pstenderteam@insight.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

3 9 0 1 6 4 1 9 5 3 5 7 0 8 1

Contact

INSIGHT DIRECT (UK) LTD Public Sector Tender Team
Telephone: 0344 846 3333
Email: pstenderteam@insight.com

About your service

Service categories

Applications

Customer relationship management

  • Marketing campaign management
  • Digital commerce
  • Sales force productivity and management
  • Customer service
  • Contact centre

Advertising

  • Advertising Placement
  • Advertising Measurement
Multi cloud support
Yes

Service scope

Software add-on or extension
Yes, but can also be used as a standalone service
What software services is the service an extension to
Salesforce services are all modular and pre-integrated with AI from einstein built-in. Functionality can be expanded as needed. Typically, customers extend by adding: Service Cloud for case management, Sales Cloud for CRM and 360degree information view, and Marketing Cloud for engagements and customer journeys. Further information here https://appexchange.salesforce.com/ and https://www.salesforce.com/uk/products/
Cloud deployment model
Public cloud
Service constraints
Key considerations (further detail in our Supplier Terms) As Salesforce is multi-tenant, there are 'governor limits' which prevent resources from being monopolised by any single organisation. NB though these limits exist it's rare for customers to be impacted, and even more unusual for our current Public Sector customers. In the unlikely event of a need to increase, limits can be extended with various add-ons separately listed. Hitting a limit is often a sign of an underlying design flaw. A user’s password may not be shared with any other individual.
System requirements
  • A standard browser, either desktop or mobile
  • Connection to the internet
  • Salesforce mobile app is available if preferred to a browser

User support

Email or online ticketing support
Yes
Support response times
Every Salesforce service includes support as standard. The lowest level relies on the Salesforce user community for responses and has a response time of 2 business days, this can be reduced to 15 minutes with the appropriate upgrade in your support plan. https://www.salesforce.com/content/dam/web/en_us/www/cloud-services/documents/premier-success-plans-datasheet.pdf
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.2 AA
Phone support
Yes
Phone support availability
24 hours, 7 days a week
Web chat support
Yes
Web chat support availability
24 hours, 7 days a week
Web chat support accessibility standard
WCAG 2.2 AA
Web chat accessibility testing
Salesforce has not conducted usability studies to verify that the online chat function works effectively with screen reading and other assistive technology. However, the services have been assessed against the WCAG 2.2 standards and existing customers have conducted testing and are using the Salesforce Webchat capability in live services.

Details of our compliance with WCAG 2.2 AA accessibility standards for our web chat products are described in our VPAT statements available here: https://www.salesforce.com/company/legal/508_accessibility/
Onsite support
Yes, at extra cost
Support levels
Every Salesforce service includes community-based support. This can be enhanced with guaranteed response times through Premier Success. For more critical applications we provide Signature Success which provides Salesforce staff with a knowledge of a specific customers applications and configurations and an initial response from your designated support team in as little as 15 minutes, with personalised updates every 30 minutes.
Support available to third parties
Yes
AI chatbot
Yes

Onboarding and offboarding

Getting started
Trailhead Learning Paths
Free, self-paced online modules cover Data Cloud fundamentals, segment building, activation strategies, and calculated insights creation. Interactive badges and super badges validate your expertise through hands-on challenges in practice environments.
Trailhead LIVE & Webinars
Regular live online sessions feature Data Cloud experts demonstrating real-world marketing use cases, best practices for audience segmentation, and cross-channel activation techniques. Recordings remain available on-demand.
Official Documentation
Searchable help articles, implementation guides, and video tutorials cover every feature from profile unification to Einstein predictions. Release notes highlight new marketing capabilities each seasonal update.
Customer Success Resources
Depending on your Success Plan tier, access ranges from online community support to dedicated Customer Success Managers providing strategic guidance. Premier Success includes onsite workshops and customized training sessions for your marketing teams.
Certification Programs
Data Cloud Consultant certification validates advanced expertise in designing marketing solutions, though it requires broader technical knowledge beyond pure marketing use cases.
Partner Enablement
Consulting partners offer customized onsite training, implementation support, and ongoing education tailored to your specific marketing processes and organizational needs.
https://trailhead.salesforce.com/
https://www.salesforce.com/success-gettingstarted/
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
  • Other
Other documentation formats
  • Salesforce also provides free online courses, referred to as 'Trails'
  • A dedicated website called 'Trailhead' gives access to these 'Trails'
  • Each designed with a specific purpose and skill in mind.
  • Further information on Trailhead can be found below:
  • https://trailhead.salesforce.com/en/trails and https://help.salesforce.com
End-of-contract data extraction
There are a number of options available for customers to extract their data from the service, either during the contract or when the contract ends. We encourage customers to export their data during their contract on a periodic basis to maintain a local copy of their salesforce database, rather than wait until the end of the contract These options include: The Weekly Export Service – export data from the service on a periodic basis via a zip file containing .csv files over a TLS link. Export data over the API via an integration or middleware solution. A comprehensive Salesforce exit strategy paper is available on request.
End-of-contract process
After termination of all subscriptions associated with an environment, Customer Data submitted to the Covered Services is retained in inactive status within the Covered Services for 120 days, after which it is securely overwritten or deleted from production within 90 days, and from backups within 180 days.
Physical media on which Customer Data is stored during the contract term is not removed from the data centers that Salesforce uses to host Customer Data unless the media is at the end of its useful life or being deprovisioned, in which case the media is first sanitized before removal. This process is subject to applicable legal requirements.

Within 30 days post contract termination, customers may request return of their respective Customer Data submitted to the Covered Services. Salesforce shall provide such Customer Data via downloadable files in comma separated value (.csv) format and attachments in their native format.

For more information on Data Deletion period upon contract termination, please refer ""Deletion of Customer Data"" section of the Security, Privacy and Architecture Documentation for the respective services available on the Trust and Compliance site: https://trust.salesforce.com/en/trust-and-compliance-documentation/
Documentation accessibility standard
WCAG 2.2 AA

Using the service

Web browser interface
Yes
Supported browsers
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
The capability of Salesforce via a browser and on a mobile device, via either a browser or the native Salesforce1 App is broadly similar. However, there are some subtle differences as described here: https://help.salesforce.com/s/articleView?id=sf.limits_mobile_sf1_parent.htm&type=5 Note that the salesforce browser UI can also be accessed on many mobile devices.
Service interface
Yes
User support accessibility
WCAG 2.2 AA
Description of service interface
The interface is a modern and intuitive design, with help functions throughout. The interface can be configured as required

In the platform, it is easy to modify applications to unique requirements. Use the metadata framework and point-and-click tools, custom user interfaces, modify data models, create and edit application business logic and processes. Configuration to modify objects, fields, validation rules, workflow, security settings, formulas, and more without code.

Some functionality is beyond the constraints of a metadata framework. For such cases, developers can create needed functionality in open-ended development environments, using toolkits for most of the common programming languages, or Apex.
Accessibility standards
WCAG 2.2 AA
Accessibility testing
Salesforce is committed to providing applications accessible to all. This includes users working with assistive technology, such as speech recognition software and screen readers. Salesforce follows international best practices in Section 508 of the Web Content Accessibility Guidelines and strives to meet WCAG 2.2 Level AA.

A third party has assessed and documented the accessibility status of Salesforce core products in the VPAT documents published here: https://www.salesforce.com/company/legal/508_accessibility.jsp
API
Yes
What users can and can't do using the API
For developers changing the system, two APIs are applicable for managing customizations and for building tools that can manage the metadata model.

The Tooling API is specifically designed to help developers build IDE apps for salesforce, while the metadata API is for more general-purpose configuration migration. The metadata API allows for migrations, including retrieve, deploy, create, update, or delete customisations for your Salesforce instance and migrate changes from testing to production; the Tooling API gives developers a platform for debugging, code coverage, auto complete, and more.
API documentation
Yes
API documentation formats
  • Open API (also known as Swagger)
  • HTML
  • PDF
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
1. What Can Be Customized
Marketers can customize calculated insights (CLV formulas, engagement scores), segment definitions, activation mappings to external platforms, data model objects and fields, identity resolution rules for profile unification, and Einstein prediction models for their specific business outcomes.
2. How Users Can Customize
Most customization happens through point-and-click interfaces. The Calculated Insights builder lets marketers create metrics using visual formulas without code. Segment creation uses a drag-and-drop query builder or natural language AI prompts. Data model extensions work through standard Salesforce object manager—adding custom fields or creating new data model objects. Identity resolution rules configure through wizards that define matching criteria. Activation mappings use guided flows to connect segments with Marketing Cloud, advertising platforms, or other channels. Einstein models customize through selecting training data and business objectives.
3. Who Can Customize
Marketing operations teams typically handle data model and identity resolution customization, requiring ""Manage Data Cloud"" permission. Campaign managers build segments and calculated insights with ""View Data Cloud"" access. Marketing analysts configure Einstein predictions and complex activations. Salesforce admins manage underlying permissions, integration setup, and platform-level configurations. Most customizations don't require developers—designed specifically for business users with marketing domain expertise.

Scaling

Independence of resources
Salesforce ensures users are not impacted by demands placed on the service by others through its multi-tenant architecture. This architecture allows multiple organisations (tenants) to share the same infrastructure and resources while maintaining strict data isolation and performance reliability. Each organisation’s data and processes are logically separated, ensuring activities of one do not affect the others. Salesforce employs robust system monitoring and resource management, including dynamic resource allocation, load balancing, and proactive system updates to ensure consistent performance across the platform, regardless of demand fluctuations. Performance and availability information for the entire service are available at https://trust.salesforce.com.

Analytics

Service usage metrics
Yes
Metrics types
The service includes various metrics to monitor usage and adoption of the service, for example, last login, login duration etc. For Infrastructure detail metrics are available at https://trust.salesforce.com website provides performance and availability information for the entire service. For specific metric monitoring and for more in-depth detail customers can extend capability through the use of Event Monitoring. For example - which applications are being used, by whom, how are they being used, when, where from and are there performance issues? This data can be used to improve adoption, security and performance of the application.
Reporting types
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
Resource tagging
Yes
FOCUS resource tagging
Yes

Resellers

Supplier type
Reseller (no extras)
Organisation whose services are being resold
Salesforce

Staff security

Staff security clearance
Other security clearance
Government security clearance
Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
User control over data storage and processing locations
Yes
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 4.0)
Penetration testing frequency
At least every 6 months
Penetration testing approach
‘IT Health Check’ performed by a CHECK service provider
Protecting data at rest
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
  • Other
Other data at rest protection approach
By default, Salesforce encrypts customer data at rest as disk volumes are encrypted by using at least industry-standard AES-256 algorithm. Snapshots of encrypted volumes are automatically encrypted as well when replicated to long term storage.

In addition, Platform Encryption allows customers to add additional layers of encryption to their data and manage the lifecycle of their data encryption keys themselves.

More specifically, Platform Encryption allows customers to selectively encrypt nominated fields for encryption when stored in the database. This is often referred to as field encryption. Customers can also encrypt their entire database; this is known as tenant level encryption.
Data sanitisation process
Yes
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
Data sanitisation type
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

Data export approach
Segment Exports
Build audiences visually or via AI, then activate to Marketing Cloud, ads platforms, or download as CSV files.
Activation API
Technical teams programmatically export segment data through REST APIs for custom integrations.
Data Cloud Connect
BI tools like Tableau connect directly using SQL queries for custom reporting without moving data.
Salesforce Reports & Dashboards
Create reports on Data Cloud objects, then export to Excel or CSV.
Scheduled Activations
Configure recurring exports that automatically refresh and send updated audiences daily or weekly.
Data Actions
Trigger real-time data flows to external systems based on profile changes for event-driven marketing.
Data export formats
  • CSV
  • Other
Other data export formats
  • XLS
  • PDF
  • Out of The Box import via the open standard API
  • API export in open standards such as XML and OData
  • API also support bulk export and upload
  • Pre-integrated ETL tools such as Mulesoft etc.
Data import formats
  • CSV
  • ODF
  • Other
Other data import formats
  • Out of The Box import via the open standard API
  • API imports in open standards such as XML and OData
  • API also support bulk export and upload
  • Salesforce Connect code-free integration via OData
  • Salesforce Data Loader or third-party service Dataloader.io
  • Pre-integrated ETL tools such as Mulesoft, Informatica, etc.
  • Salesforce can also store content in any flat file format.

Data-in-transit protection

Data protection between buyer and supplier networks
TLS (version 1.2 or above)
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
The Salesforce Services are designed with the concept of continuous improvement and Trust (e.g. Availability, Performance and Security) in the infrastructure. Salesforce uses commercially reasonable efforts to make its on-demand services available to its customers 24/7, except for (minimal) planned downtime, for which Salesforce gives customers prior notice, and force majeure events. This service leverages Public Cloud region, and uses multiple availability zones. This pattern allows services to withstand up to two different zonal faults and continue to be available. Live and historical statistics on Salesforce system performance are publicly published at: https://trust.salesforce.com/en/#systemStatus, and further detail can be shared upon request and NDA.
Approach to resilience
Salesforce Hyperforce based cloud services has its compute resources run in 3 Availability Zone (AZ). Services run as containerised applications in containers which is configured for HA (high availability) by distributing nodes across AZs. To take advantage of this, service pods themselves are deployed across AZs when scheduled on nodes. Because of this when one AZ goes offline there will always be available service pods in different AZs to handle the workload. Service pods are also stateless so losing an AZ and nodes in that AZ along with the service pods running in them will cause no loss of data and new service pods will be scheduled on the available zones to handle the load.
Outage reporting
Outage escalation policies are established and maintained as Salesforce's goal is to rapidly restore service. In the event of an extended outage, periodic updates are provided in near real time to customers via the trust.salesforce.com dashboard site and in addition, service notifications are provided to nominated contacts via various channels such as email. Update frequency for notifications is dependent on the customer support service plan.

Identity and authentication

User authentication needed
Yes
User authentication
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
  • Other
Other user authentication
Salesforce has a comprehensive set of authentication mechanisms that customers can choose from. These include multi-factor authentication, Single Sign-on, Custom Login flows, and Connected Apps. A connected app is a framework that enables an external application to integrate with Salesforce using APIs and standard protocols, such as SAML, OAuth, and OpenID Connect. Connected apps use these protocols to authenticate, authorise, and provide single sign-on (SSO) for external apps.

Salesforce requires each user to have a unique username that they enter at each login. Administrators can configure several settings to ensure that users' passwords are strong and secure.
Access restrictions in management interfaces and support channels
Management access for service support and delivery is done through multiple layers of controls including, but not limited to, multiple 2 factor authentication, just-in-time access, access related to an approved trouble ticket and segregation of duties. These controls are in scope for SSAE-18 auditing and evidenced through the SOC 2/ISAE3402 report.

Access to the management interface for the customer to configure their salesforce environment, is configured by the customer themselves. Robust application design and testing ensures that users without administrative access rights cannot access more sensitive areas of the application.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
At least 12 months
How long system logs are stored for
At least 12 months

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
  • CSA CSM version 4.0
  • ISO/IEC 27001
  • Other
Other security governance standards
ISO 27017
ISO 27018
ISO 42001
ISO 9001
SOC 1,2, 3
PCI DSS
NCSC Cloud Security Principles
UK NHS DSPT
EU Cloud Code of Conduct
Information security policies and processes
Salesforce's Information Security Management System (ISMS) and information security policies are based on the ISO 27002 framework of best practices and are ISO 27001 certified.

As required by this certification, the ISMS is endorsed by Senior Management. The Chief Trust Officer/CISO has responsibility for the information security policies and ISMS. The Salesforce Security Steering Committee approves/authorizes all changes to the policies, the Statement of Applicability (SoA), the information security manual, and any separate policy statements.

During the ISO 27001 audit process (as well as other audits such as SOX and SSAE 16 SOC 1), senior management for various departments are involved in verifying that policies and procedures are in place and adhered to. Policies are reviewed/approved at least annually.

Companywide security awareness training highlights the importance of the security policies to employees and reinforces the company’s number 1 value of Trust.
Software Security Code of Practice
Yes

Operational security

Configuration and change management standard
Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
Configuration and change management approach
Changes to infrastructure components are made through code using industry standard Infrastructure as Code (IaC) software and assessed for their security impact before being deployed. Individuals who wish to deploy an IaC change into production are required to follow defined procedures and standards, and to complete mandatory change management training before participating in the change management process. A change must be approved and routed through the change owner before the change can be implemented. A ticketing system is used as part of the change management procedure which records the components and the changes made.
Vulnerability management type
Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
Vulnerability management approach
Salesforce includes threat modelling into its software development lifecycle to help ensure the risks associated with potential threats are mitigated as early as possible. Multiple threat intelligence sources are used to help understand the current and evolving threat landscape.

Vulnerability scans are performed on all Salesforce information systems and hosted applications. Patches are deployed in timeframes based on CVSS scores and risk level.

All vulnerabilities discovered during penetration tests are entered into the salesforce central ticketing system and are assigned an internal vulnerability ranking according on the OWASP risk rating framework based on likelihood and impact.
Protective monitoring type
Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
Protective monitoring approach
Salesforce Threat Intelligence and Detection team monitors the Salesforce services 24x7 for threats and unauthorized intrusions in collaboration with the Security Incident Response teams. Extensive logging and monitoring are conducted across all Salesforce Services and environments (at application, network and database layers). All suspicious activities are flagged and reported to Salesforce CSIRT for investigation, management, communication, and resolution of security events and incidents in line with the NIST Incident Response model.
Incident management type
Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
Incident management approach
Salesforce has an Incident Management Process that guides the Salesforce Computer Security Incident Response team in investigation, management and resolution activities which includes developing standard pre-defined procedures for dealing with common events.

Salesforce will promptly notify the customer in the event of any security breach of the Service resulting in an actual or reasonably suspected unauthorized disclosure of Customer Data. Notification may include phone contact by Salesforce support, email to customer's administrator and Security Contact and public posting on trust.salesforce.com.

Customers can email security@salesforce.com or use the https://security.salesforce.com/contact page to report incidents.
Post-quantum cryptography secure
No

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

Connection to public sector networks
No

Pricing

Discount for educational organisations
No
Free trial available
Yes
Description of free trial
Data 360 offers a trial for existing Salesforce customers. Access a free account through the Data Cloud portal with a 120-day evaluation period. Salesforce Foundations includes 1TB storage, 250k Data Services Credits, and support for 100 users.
Link to free trial
Please contact us for the current trial link

Discount percentage by annual call-off contract value (excluding VAT)

Less than £250,000
0%
Between £250,000 and £500,000
0%
Between £500,001 and £1,000,000
0%
Between £1,000,001 and £2,500,000
0%
Between £2,500,001 and £5,000,000
0%
Over £5,000,001
0%

Non-mandatory Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
Atlas
ISO/IEC 27001 accreditation date
Sunday 13 April 2025
What the ISO/IEC 27001 doesn’t cover
N/A
ISO 28000:2022 certification
No
ISO 9001 certification
Yes
Who accredited the ISO 9001 certification
Atlas
ISO 9001 accreditation date
Tuesday 1 April 2025
What the ISO 9001 doesn’t cover
N/A
Quality management systems (QMS)
Yes
CSA STAR certification
No
PCI certification
No
Cyber essentials
Yes
Please provide your Cyber Essentials Certificate Number
Be7ce590-de10-486e-8431-2e10891a8979
Cyber essentials plus
Yes
Please provide your Cyber Essentials Plus Certificate Number
Cd8b1a78-44c7-4bb0-84d6-59a7506f3bba
Other security certifications
No

Social value

Section B - Commitment for Future: Delivery
  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at pstenderteam@insight.com. Tell them what format you need. It will help if you say what assistive technology you use.