DATAGRAPHIC LIMITED

DATAGRAPHIC ACENI HYBRID MAIL

Aceni, a cloud-based hybrid mail hub and distribution service. Users upload ad-hoc or bulk mail, from their device, for printing or hosting online in digital envelopes. Quick to set-up and fully configurable, organisations can define options such as templates, attachments, postal service and omnichannel delivery with email and SMS/RCS alerts.

Features

• Same day mailing of communications with no minimum quantity
• Advanced automation to build personalised mailing packs
• Delivered and hosted by auditable UK ISO27001 organisations
• Highly secure GDPR Compliant system, continuously pen tested
• Real time Management Information. Traceability to document level
• Simple and secure data transfer: HTTPS, Print Driver, SFTP, API
• Digital delivery options available through Secure Email or SMS/RCS
• Quick set up and user training process
• Automate workflows for repetitive documents and approval management
• Email, telephone and live chat support with 100% approval

Benefits

• Deliver immediate ROI, cost savings between 50% and 95%
• IT Light, no software changes needed to buyers’ systems
• No minimum or maximum volumes and postage optimisation.
• Improve productivity, save 5 minutes staff time per document
• Reduce waste print letterheads, documents and inserts on demand
• Streamline and standardise multi-channel communications with one platform
• Supports your digital transformation agenda and transition to paperless
• MI reporting and audit history of all documents sent
• Enclosures library, can support large mailpacks with multiple inserts
• Customisable user profiles, restricted mailing permissions

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@datagraphic.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

431423354965082

Contact

Glyn King
01246 543000
tenders@datagraphic.co.uk

About your service

• Service categories:

  Applications

  Content workflow and management

  • Capture
  • Document

  Content services

  • Enterprise Content Management Applications
  • Content Sharing and Collaboration Applications

  Persuasive content management

  • Digital Asset Management Applications
  • Product Content Management Applications
  • Digital Adoption Platform

  Enterprise portals and digital workspaces

  • Multi-Audience Portals
  • Integrated Employee Workspaces
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Hybrid Mail provides a production service extension to any document producing software. The API service allows a link between any existing document output/printing services.; No software needed to work, a standalone service that clients upload to manually via the interface through printdriver, SFTP, API or via Health & Social Network.
• Cloud deployment model: Private cloud
• Service constraints: There are no constraints, service is not limited to specific hardware or software configurations. Aceni is web-based so any user simply needs a device with an internet connection and a compliant browser to access.
• System requirements: Internet access and a compliant web-browser

User support

• Email or online ticketing support: Yes
• Support response times: We provide a support email address that will automatically generate a ticket and response to the originator confirming receipt and ticket number. The request will be acknowledged within 5 minutes. The issue will be triaged, and the priority set, within 15 minutes and a resolution timescale fed back to the originator. The response times are the same at weekends. Any comments added to the ticket will automatically be sent back to the originator who can reply via email.; ; A full transcript is sent to the originator on resolution.; ; This service is available from 9.00 – 5.00 Monday – Friday.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: We use Zendesk Chat which has been fully tested as part of the WCAG 2.2 AA accreditation.
• Onsite support: Yes
• Support levels: You will be provided with a dedicated technical account manager who will be responsible for ongoing support and maintenance service updates. All support is provided by an experienced, UK-based team. In addition, a service support desk is manned at Datagraphic between 9.00 a.m. to 5.00 pm. Monday to Friday.; ; We provide support in a range of different methods and levels at no additional cost. We offer core training for typical everyday users and advanced training for ‘super users’.; A Live Web Chat system is available within business hours to answer any queries users. There are tooltips on the site during the upload process on key areas where users may need additional support. We have a ticketed support email address, as well as a dedicated telephone number for users to call.; We host remote support using TeamViewer software to see the user’s screen and guide them with any issues they may face.; There are off-line indexed PDF guides available for reference.; We can also support users with a Teams demo of the system where we can walk through steps taken by the users in detail. Online training sessions for multiple users are available.; Where required we provide on-site support and training.
• Support available to third parties: Yes
• AI chatbot: No

Onboarding and offboarding

• Getting started: We have extensive experience in successfully implementing Aceni into a wide range of different sizes, complexity and backgrounds of organisations over the past 10 years. To support this we provide onsite training, online training and user documentation. We begin with an online demo of the service to stakeholders where we will walk them through all the aspects of the service in detail and discuss with them where they foresee any internal issues or areas that need specific focus. We will then work with the stakeholders to draw up a training plan that best suits their employees.; Various methods that have been successful in the past have been on-line demonstrations to groups of users, “train the trainer” whereby we would train certain employees within the customer’s organisation to then train your own employees, on-site workshops where we would spend time with each department in detail and go through the system and learn their challenges, PDF user guides and videos, online web chat and TeamViewer sessions with individual users.; We will ensure that all users are comfortable with the system before making live uploads.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Datagraphic comply fully with the GDPR’s right to data portability.; To extract data at the end of the contract, Datagraphic will always work closely with Data Controllers to supply their data back to them, when required, in an appropriate and mutually acceptable format. This will be handled in coordination with the technical account manager.; Datagraphic specialise in Data transformation and manipulation. This speciality lies at the heart of our ability to provide secure multimedia / format communication solutions.; Datagraphic pride themselves on their ability to interpret and represent data in a multitude of formats.; As such Datagraphic are able to provide assurances that respective data can always be returned, when required in a format as required by a Data Controller.
• End-of-contract process: The secure return of any Client data and the disposal of data that is not required is included in the price. Through a dedicated single point of contact, Datagraphic work closely with Clients from the initial transfer meeting. The transfer plan will cover the following areas in respect of both parties; • The allocation of personnel to assist in the transition of services • Reporting channels • Liaison between Datagraphic and new provider • Responsibilities for approval of transfer project documentation • Escalation procedures In addition, both parties will agree that the transfer plan shall cover each party’s responsibilities for the provision of services; • Up to and on the termination date • During any parallel provision of services • During the hand back period after the termination date Responsibilities and obligations during transfer of; • Operational documents, including customer records, artwork and addresses • Purchasable relevant surplus stock. Datagraphic advise clients of the status throughout the process until the transfer.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Our Hybrid Mail service can be accessed and used on mobile devices. The difference between the mobile and desktop services is the print driver cannot be used on mobile devices, so the mobile version is restricted to PDF upload only.; It has been fully tested on Android and iOS devices.; ; Administrators can also access the Aceni Mail service and carry out all tasks that are available to them on the desktop service.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: Our Aceni Hybrid Mail portal has an Administrator user level which will allow the creation of users on an individual basis, or a bulk creation by uploading a csv file.; Administrators can also maintain the users, change access rights, reset passwords, and reallocate departments.; Administrators can also create departments with a cost code that will pull through in all reports. Administrators are also able to upload digital resources to the portal and fine-tune the access rights to specific departments and/or users.; Administrators have access to the reporting area where they can download csv reports and data from the Dashboard.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: Conducted on cross section of users during the initial development and is regularly tested. ; ; Shaw Trust validates Aceni’s compliance through monthly audits, quarterly manual reviews, and annual certification. Each accreditation involves over 60 hours of testing, including real-user evaluation with disabled participants across multiple assistive technologies (JAWS, NVDA, Dragon, ZoomText).; ; Features include keyboard-only navigation, screen reader compatibility, scalable text, logical page structure and appropriately sized touch targets. We test accessibility every sprint cycle to ensure new features remain compliant.
• API: Yes
• What users can and can't do using the API: Submission of data or pre-merged PDFs via the API will allow your operating system to interface directly with our Aceni Hybrid Mail system.; To set up, users can perform most posting and tracking actions via the API service for completely automated production. Documents can be uploaded to the system via the API and a document status retrieved for any uploaded document giving a real-time update on where the document is within production. Statuses can be requested by individual references or as a batch.; Users can also perform actions via the API and make changes such as diverting or deleting documents and requesting a list of documents that have been returned by the postal carrier as an invalid address for audit purposes. Additionally, users can request the postage details of any document to assist with billing queries. There are limitations on how users can set up or make changes through the API which are defined by our security protocol and policies.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: The service can be customised to meet buyer requirements. Aceni Hybrid Mail portals can be configured to incorporate various bespoke settings such as portal names, URL and the digital resource storage area.; ; During setup we can customise the portal look and feel with company logo, header and footer colours, menu bars, tables, text and backgrounds and font and text size. We can also set background images to appear both on the home page and in the upload steps seen by the users if required.; ; There are options for customisation of the upload process such as defaulting settings, applying permissions or budgets to specific users or departments and allocating digital letterheads and enclosures from the document library to specific departments.; ; Buyers can choose how a document is printed in colour/ mono, simplex/ duplex and on what stock. This includes white paper, letterhead stock and customised envelopes. Buyers can also request to send out a secure email or SMS/RCS, providing a close loop multi-channel experience for buyer’s recipients.; ; If required automatic validations can be placed against letters for specific document types or users and items can be rejected against quality parameters that are bespoke to each buyer.

Scaling

• Independence of resources: Our Aceni Hybrid Mail system is designed to load balance demand to ensure consistent performance during periods of high usage. The platform operates across a multi-server architecture.; ; The solution comprises multiple front-end servers, that can be horizontally scaled. They provide user access for file uploads, a separate automation layer is responsible for processing submissions and associated metadata, and a dedicated database server that manages system logging, tracking, and archival functions.; ; Usage is monitored in real time, and expected daily volumes are assessed during project setup to ensure capacity is appropriately provisioned and that no individual server becomes overloaded.

Analytics

• Service usage metrics: Yes
• Metrics types: We provide Administrators with access to a Dashboard on the portal that shows them MI in graph and pie chart format based on their print specifications. This can be altered by date range and specified by number of letters, number of orders.; ; Administrators can download reports that will provide detailed data within the date range specified for each upload made to their version of the Aceni Hybrid Mail portal.; The report will include the serial number of the upload, the total number of documents, the department code, the user, customer/account reference, the status of the order and the timestamp.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Other
• Other data at rest protection approach: • Information Security: ISO 27001 compliant ; • Operational Resilience: ISO 22301 compliant; • Staff Training: Information Security awareness programme; • Staff Checks: Annual CRB, Credit, Identity; • Access Control: RBAC for physical and logical access; • Data Management: Encryption at rest, custom retention periods; • Secure Disposal: Onsite destruction of physical electronic waste; • Mobile Device Management: Encryption, remote wipe, EDR, SIEM; • Endpoint Security: Anti-malware, EDR alerts response by 24x7 SOC; • SIEM: Centralised logging, anomaly detection; • Continuous Security Testing: Ongoing testing external/internal ; • Cyber Security: Strong internal security testing capability; • Independent Pen Tests: Third-party CREST reviews
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: Users can export tracking information on their uploaded documents using data filters. The tracking export contains information on addresses, number of pages, postage status, production status and production reference. To assist with audit tracking reports can be customised to include a limitless number of unique references such as Customer or Account number.; Additionally, copies of uploaded letters can be exported in PDF format.; Users can also export reports of documents that have been returned by the postal carrier as an invalid address for audit purposes as well as MI data from the analytics dashboard for any given data range.
• Data export formats:
  • CSV
  • Other
• Other data export formats: JSON
• Data import formats: Other
• Other data import formats:
  • PDF
  • DOC / DOCX
  • RTF
  • CSV
  • XML
  • XLS / XLSX
  • TXT

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Other
• Other protection between networks: • All Hybrid Mail-related information that crosses public networks is encrypted.; ; • All Internet connectivity and file transfer with Aceni Mail is encrypted via https using up-to-date https certificates.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: Inbound data is immediately and automatically moved into Datagraphic’s core network. Once data arrives on the core network, it is isolated through logical and physical access controls. This ensures data is only accessible to those who require access.; Automation workflows process the data files and the output of these workflows is then printed. Automation ensures that manual intervention is limited to exceptional circumstances.; The job is then automatically added to the Production Control System which ensures:; • Accountability at all stages of production; • Visibility and traceability of all jobs; • Real-time updates at every stage with automated status reporting

Availability and resilience

• Guaranteed availability: The service is available 24/7/365 days of the year on dedicated servers with a 99.95% uptime SLA. Users are always pre-notified of any down-time and we can agree service credits in the unlikely event of not meeting guaranteed levels of availability.
• Approach to resilience: Datagraphic have developed controls to address threats to the following business continuity scenarios:; • Server Hardware Failure; • Internet Connectivity Failure; • Network Failure; • Cooling Failure; • Electrical Supply Failure; • Production Device Failure; • Key Staff Unavailability; ; We continually invest to ensure critical systems and processes are resilient to failure. Investments to date include backup information processing facilities, associated technology and the skills required to enable resilience in the event of Business Continuity invocation.; Wherever feasible we’ve eliminated single points of failure, examples include:; ; • Eliminating single points of failure from IT Infrastructure; • Fully virtualising IT Infrastructure; • Daily system level backups of IT systems; • Multiple, diverse, Internet connections; • High Availability, High Capacity Network; • Two separate server rooms at main site; • Data rooms with resilient climate control systems; • Business-critical systems replicated to disparate hardware; • On-site maintenance staff that routinely service and maintain equipment; • On-site spares for all critical systems; • Critical systems protected from power loss by UPS; • On-site diesel generator keeps core services running during mains power failure; • Cross training key staff and recording procedural details
• Outage reporting: Email alerts are sent prior to any scheduled downtime.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Username or password
  • Other
• Other user authentication: We operate a Domain wide password policy that enforces minimum complexity rules.; Remote access is provisioned via a 2 factor VPN mechanism that relies on the following 2 factors:; • Something you have: A valid unique TLS certificate specifically created for each user; • Something you know: A valid and unique user account and associated complex domain password for your active user account; ; Remote access is limited to a small subset of trained and trusted staff, access is only possible through company provided system level encrypted laptops used specifically for remote access
• Access restrictions in management interfaces and support channels: We aim to disable all non-essential services on web facing systems.; Internet facing application servers are configured on a standard build. This is a ‘hardened’ build that has undergone penetration testing and security review.; • Default passwords for system accounts are changed; • Default system accounts are disabled where possible; • Default passwords for all hardware such as routers, firewalls and switches are changed.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
  • Other
• Description of management access authentication: Management and administrative access is via the same interface. Only a limited subset of staff have management level access to Hybrid Mail and access can only be granted by the product team following validation checks.

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Our sites are developed to banking standards with all document data being processed, printed and hosted at secure UK ISO27001-2022 accredited facilities. The minute-critical documents we send include sensitive personal and financial data, requiring robust and secure processes and infrastructure.; ; The information security policies and processes we follow include ISO 27001-2022 audited security policies including (but not limited to): Information Security Policy, Physical Security & Asset Management Policy, Information Security Training and Awareness Policy, GDPR & Data Protection Policy, Compliance Statement, Business Continuity and Disaster Recovery Policy, Secure Systems Engineering Principals Policy, Recruitment and Screening Policies and organisational structure.; ; All Datagraphic employees are required to annually sign non-disclosure and confidentially agreements along with the Information Security Policy. This is done alongside Information Security Training to acquaint staff with company policies, their responsibilities relative to them and any security procedures relevant to their work. Employees are trained on our detailed incident management process and told to report any potential or suspected security events or suspected security weaknesses to the CISO or their line manager.; ; Clients are also given a copy of our reporting structure as part of the standard onboarding process with descriptions of event classification, escalation protocol and contact details.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: IT Infrastructure Change Management requests are assessed by the relevant experts and Business Process owners, with risk management and reversal plans considered for significant changes. Implementation timing and testing are carefully planned to minimise service disruptions.; ; For Software Development we use change and version control mechanisms to track and safely support concurrent development. The development teams adhere to the Agile Manifesto, promoting iterative incremental development, collaboration, and rapid response to change. Agile methods break tasks into small increments, with user acceptance testing and Continuous Security Testing conducted in separate environments before scheduled live releases at the end of each iteration.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: CST (Continuous Security Testing) is performed internally against Datagraphic’s entire internet facing service before each update. Also, external CREST accredited third parties conduct periodic penetration tests to validate results. This approach to regular vulnerability scanning follows OWASP's Top 10 guidelines.; ; Results are collated, fixes prioritised by our Information Security function, prior to implementation by development teams. We then retest to ensure remediation.; ; Patches applied ASAP during set operational hours, with appropriate technical staff available to support implementation.; ; Datagraphic are informed of High vulnerabilities as a priority by our dedicated security experts. Lower impact vulnerabilities are supplied through a monthly report.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: To identify potential compromises, our SIEM consolidates and centralises security event logs, aids in threat detection, incident response, and cyber-attack identification. Our EDR (Endpoint Detection and Response) coverage helps secure us from cyber threats. Providing real-time threat detection, investigation, and response.; ; When responding, results are collated, and fixes prioritised by our Information Security function, prior to implementation by development teams. We then retest to ensure remediation.; ; Patches are applied ASAP to vulnerabilities during set operational hours, with appropriate technical staff available to support implementation.; ; User account activity is monitored, abnormal activity is flagged and reviewed by our Information Security team.
• Incident management type: Supplier-defined controls
• Incident management approach: We have pre-defined processes for common events, and our Incident Management process includes:; • Contact Data-Controller: Communicate incident details to customer without delay.; • Breach Remediation: Implement suitable protective controls.; • Residual Risk Evaluation: Review controls implemented for potential residual risk.; • Contact 3rd Party Specialist: Depending on nature of breach, it may be necessary to involve 3rd Party Specialist Information Security consultants (in consultation with affected parties).; ; Users can contact their Account Manager, to report a potential or suspected breach, our CISO will be made aware.; ; An incident report will be completed and made available to the affected parties.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Health and Social Care Network (HSCN)

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Demo site for all functions
• Link to free trial: N/A

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 1%
• Between £500,001 and £1,000,000: 2%
• Between £1,000,001 and £2,500,000: 2.5%
• Between £2,500,001 and £5,000,000: 3%
• Over £5,000,001: 5%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: ISOQAR
• ISO/IEC 27001 accreditation date: Thursday 11 May 2006
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: British Assessment Bureau
• ISO 9001 accreditation date: Friday 24 January 2020
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 853ee17e-6958-4775-a7ab-6491981b2227
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: Ea265eef-aade-4a48-8057-c3fecf256fc7
• Other security certifications: Yes
• Any other security certifications:
  • Police assured secure facility PASF
  • PAY.UK CPAS

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
    • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
    • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
    • Plans for positive actions with community groups.
    • Measures for making facilities used in the delivery of the contract available for community groups, education or training
    • Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
    • Plans to respond flexibly and adapt approaches to community engagement and initiatives
    • Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Offering a range of quality opportunities with routes of progression if appropriate, e.g. T Level industry placements, students supported into higher level apprenticeships.
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of issues relating to entering the contract workforce
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@datagraphic.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.