OPEN ANSWERS LIMITED

Vitruvian Assault & Injury Tracker

The Vitruvian Assault & Injury Tracker is a dedicated web application for police and emergency services to record and manage assaults and injuries. It replaces manual spreadsheets with a structured workflow, ensuring accurate reporting and proactive welfare support for affected personnel throughout the incident review process.

Features

• Multi-stage incident workflow for structured reporting and managerial review processes.
• Real-time reporting and alerts for immediate visibility of injuries.
• Automated email notifications and welfare support teams.
• Secure Oracle database storage ensuring high integrity of sensitive data.
• Centralised web-based architecture providing remote access from any authorized device.
• Injury and medical tracking detailing body parts and treatment provided.
• Managerial oversight dashboard for monitoring ongoing incident and welfare progress.
• Senior Management Team review ensuring organizational accountability for officer safety.
• Flexible data import options via manual upload or secure SFTP.
• Customisable service configuration to match specific organizational structures and roles.

Benefits

• Streamline incident reporting by replacing manual spreadsheets with digital workflows
• Enhance officer welfare through automated alerts to dedicated support teams.
• Monitor injury trends using real-time data for improved safety strategies.
• Accelerate managerial reviews with structured stages and automated task reminders.
• Ensure data integrity by storing sensitive records in secure databases.
• Access critical information remotely through a secure web-based application interface.
• Improve organizational accountability with transparent senior management oversight and tracking.
• Simplify administrative tasks using automated notifications and standardized reporting templates.
• Facilitate rapid response to assaults with immediate visibility for supervisors.
• Optimise resource allocation by identifying high-risk areas using detailed analytics.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ian.bellia@openanswers.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

573715504490786

Contact

Ian Bellia
020 88646999
ian.bellia@openanswers.co.uk

About the service

• Service categories:

  Applications

  Enterprise resource management

  Human capital management

  • Core Human Resources Applications
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: Data Requirements: Requires regular flat-file CSV extracts of personnel to function.; ; Workflow: Mandatory multi-stage review process requiring designated managers and SMT members.; ; Maintenance: Monthly or quarterly scheduled release cycles with system-wide notifications.
• System requirements: Modern web browser (Chrome/Edge) for assessor and staff access.

User support

• Email or online ticketing support: Yes, at extra cost
• Support response times: Standard response times apply during the weekday window of 09:00 to 17:00. Support is not normally provided at weekends. Any messages left on the support desk outside of standard hours will be treated as if received at the time of reopening and will be acknowledged within 1 hour. For critical SLA 1 issues detected by proactive monitoring, these may be addressed during an out-of-hours period from 06:00 to Midnight, 7 days a week.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes, at an extra cost
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: Our web chat testing for AIsha, our AI tax assistant, is designed to ensure full compliance with WCAG 2.2 AA standards. We have conducted extensive manual and automated testing specifically focused on screen reader compatibility and keyboard navigation.; ; Key testing activities include:; ; Screen Reader Optimization: We tested the chat interface using NVDA, JAWS, and VoiceOver to ensure that new messages are announced immediately via aria-live regions without interrupting the user's current focus.; ; Keyboard Accessibility: Testing verified that users can trigger the chat, navigate the conversation history, and reach the input field using only the Tab and Enter keys. We also implemented skip links to allow users to jump directly to the chat window.; ; Aria-Labeling: We performed checks to ensure all interactive elements, such as the "Close" and "Minimize" buttons, have descriptive aria-labels that provide clear context beyond visual icons.; ; Visual Adjustments: Testing included reflow checks at 400% zoom to ensure the chat remains functional and readable for users with low vision.
• Onsite support: Yes, at extra cost
• Support levels: Open Answers provides a comprehensive support structure:; ; Support Levels and Response Times; Standard Support: Coverage is provided on weekdays from 09:00 to 17:00. Initial acknowledgments for queries are typically issued within one hour.; ; Critical Monitoring (SLA 1): Proactive system monitoring is active from 06:00 to Midnight, 7 days a week. High-priority incidents are assessed to determine severity and impact, with a target to respond to all medium/high events within 4 hours.; ; Assigned Personnel; Cloud Support Engineers: The technical team includes engineers responsible for maintaining backend infrastructure on AWS.; ; Management Oversight: Senior roles, such as the CISO and Support Manager, serve as primary points of contact for information security governance and operational service delivery.; ; Costs; Bundled Pricing: Standard support is generally included in the core SaaS subscription fee for G-Cloud services.; ; Additional Costs: Bespoke support requirements, such as a dedicated 24/7 on-call rota or on-site technical presence, may incur extra costs defined in the specific G-Cloud price list.
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: To ensure a smooth transition to the Vitruvian Assault & Injury Tracker, we provide a comprehensive onboarding package:; ; User Documentation: Detailed digital manuals for both standard users (reporting incidents) and managers (reviewing cases).; ; Administrator Training: In-depth sessions for "Super Users" covering system lookups, user permissions, and service configuration.; ; Onsite & Online Training: Flexible delivery options including face-to-face workshops or interactive webinars tailored to your organization’s specific hierarchy and workflow.; ; Technical Setup Support: Dedicated assistance with initial data migration (via CSV/SFTP) and environment configuration for either AWS or UKCloud.; ; Pilot Phase Support: Guidance during a "soft launch" to gather feedback and fine-tune system lookups before full-scale deployment.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • ODF
  • PDF
• End-of-contract data extraction: Upon contract termination, users can extract data through:; ; Self-Service: Administrators can export incident logs and welfare records into CSV or Excel formats via the reporting dashboard at any time.; ; Bulk Extraction: For a complete transition, a full SQL or JSON database export is provided via secure SFTP, preserving all relational data and audit trails.; ; Purging: After the buyer confirms successful receipt, all hosted data on AWS or UKCloud is securely deleted in compliance with GDPR standards.
• End-of-contract process: At the end of the contract, the service is decommissioned following a final data extraction via secure SFTP. All hosted data is then purged in compliance with GDPR.; ; Included in the price:; ; Standard hosting (AWS or shared UKCloud).; ; Core system maintenance and security patching.; ; Access to the administrative dashboard and reporting suite.; ; Initial "Train the Trainer" onboarding sessions.; ; Additional costs:; ; Bespoke API integrations or custom reporting forms.; ; Migration from shared to dedicated hosting environments.; ; Extended onsite training workshops beyond the initial package.; ; Major functional enhancements requested outside the roadmap.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
  • ChromeOS
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The Vitruvian Assault & Injury Tracker is built using Vue.js, ensuring a responsive design that functions across desktop, tablet, and mobile browsers.; ; The primary difference lies in the user interface layout: the desktop version offers a multi-column view suitable for complex data entry and management dashboards, while the mobile version utilizes a streamlined, single-column vertical stack. This ensures that officers in the field can easily report incidents and injuries via handheld devices. While all core functionality remains available on mobile, advanced administrative configuration and extensive data exports are optimized for larger desktop displays.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: The Vitruvian Assault & Injury Tracker features a secure, web-based graphical user interface (GUI) designed for intuitive navigation. It consists of a front-end dashboard that allows users to capture incident details, such as injury types and body maps, through interactive forms. Managers access a dedicated review interface to track progress, provide welfare notes, and authorize case closures. The interface is responsive, automatically adjusting its layout for optimal use on desktop monitors, tablets, and mobile smartphones. Additionally, it includes an administrative portal for service configuration, user permission management, and generating detailed analytical reports.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: The Vitruvian Assault & Injury Tracker is built using the Vue.js framework, which supports the implementation of W3C Web Content Accessibility Guidelines (WCAG) 2.1 Level AA standards.; ; Interface testing includes:; ; Screen Reader Compatibility: Validated with JAWS and NVDA for logical focus order and ARIA labeling.; ; Keyboard Navigation: Ensuring all interactive elements, including body maps and form fields, are accessible without a mouse.; ; Contrast and Scaling: Testing for high-contrast visibility and text scaling up to 200%.; ; Automated Audits: Utilizing tools like Axe to identify and resolve accessibility regressions during development.
• API: Yes
• What users can and can't do using the API: Setup: Users can’t configure the core service via API; initial environment setup (AWS) and IP whitelisting require manual technical deployment.; ; Capabilities: Authorized users can programmatically retrieve incident data for analytics and import personnel records via secure flat-file transfers.; ; Limitations: API access is restricted to internal backend processes; buyers cannot modify the multi-stage workflow logic, database schema, or security protocols through external API calls to maintain data integrity.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: What can be customised; The Vitruvian Assault & Injury Tracker offers several customisation layers to align with specific force requirements:; ; Workflow Roles: Defining specific "Business Actors" (e.g., local managers, SMT leads, Welfare Officers) to match organizational hierarchy.; ; System Lookups: Adjusting dropdown values for injury types, medical care options, and body part categories.; ; Email Templates: Tailoring the content, branding, and triggers for automated notifications sent during the review stages.; ; Branding: Integrating local force logos and specific terminology into the user interface.; ; How users can customise; Customisation is primarily handled through a secure Administrative Dashboard. Administrators can update lookup tables, manage user permissions, and toggle feature flags directly. Fundamental structural changes, such as integration with new HR systems or hosting migrations, are managed via backend configuration or secure flat-file (CSV) updates.; ; Who can customise; System Administrators: Designated personnel within the buying organization with "Super User" permissions.; ; Vitruvian Support Team: Responsible for technical backend adjustments, hosting changes, or complex API integrations.

Scaling

• Independence of resources: We ensure consistent, high-speed performance for every user through a scalable AWS cloud infrastructure. By using Auto Scaling groups, we dynamically adjust compute resources based on real-time demand; as more users log in, additional instances are automatically provisioned to maintain speed.; ; Our multi-availability zone (Multi-AZ) setup further guarantees independence by distributing traffic across physically separate data centers in the London region. This architecture prevents a surge in one area from impacting the wider network, ensuring that your experience remains fast and reliable regardless of overall system load.

Analytics

• Service usage metrics: Yes
• Metrics types: The Vitruvian Assault & Injury Tracker provides a suite of service and incident metrics via its Management Information (MI) dashboard, including:; ; Incident Frequency: Real-time tracking of reported assaults and injuries across the organization.; ; Welfare Progress: Metrics on the speed of managerial reviews and the status of ongoing welfare support.; ; Injury Trends: Detailed breakdowns of injury types (e.g., fractures, exposures) and affected body parts.; ; SLA Compliance: Monitoring of system uptime and response times for technical support.; ; Data Exports: Users can generate flat-file reports for deeper offline analysis.
• Reporting types:
  • API access
  • Real-time dashboards
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: Users can export data from the Vitruvian Assault & Injury Tracker through the following methods:; ; Management Information (MI) Reporting: The system includes an MI reporting interface where authorized users with specific roles can extract data.; ; Flat File Output: The primary output of the system is a flat file containing detailed records of assault and injury incidents.; ; API Access: All actions available via the user interface, including data retrieval, can be achieved by calling the respective RESTful API endpoints directly.
• Data export formats:
  • CSV
  • Other
• Other data export formats: XLSX
• Data import formats:
  • CSV
  • ODF
  • Other
• Other data import formats:
  • XLSX
  • XLS
  • Numbers

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: Other (VPC Isolation & Encryption at Rest): * VPC Security Groups: We use granular Security Groups and Network ACLs to restrict traffic. For example, the PostgreSQL database is located in a private subnet and only accepts incoming traffic from the specific application server IP addresses on port 5432.; ; Encryption at Rest: All data stored within the PostgreSQL database and any digital evidence in AWS S3 is encrypted using AES-256 (AWS KMS).

Availability and resilience

• Guaranteed availability: Our service is hosted on AWS within the London region, leveraging a highly resilient multi-availability zone (Multi-AZ) architecture. This setup ensures that your tax data and submission tools remain accessible even in the event of a localized data center issue.; ; Availability Levels; Target Availability: We aim for 99.9% uptime, ensuring that the platform is available for digital record-keeping and HMRC submissions whenever you need it.; ; Infrastructure Resilience: By utilizing AWS Auto Scaling, the system automatically adds capacity during peak periods (such as January tax deadlines) to prevent performance degradation or "timeout" errors.; ; SLA and Refunds; Service Level Agreements (SLAs): While we strive for maximum uptime, our primary commitment is to maintain compatibility with HMRC’s MTD APIs. If HMRC’s systems are down, certain submission features will be temporarily paused.; ; Refund Policy: We do not offer monetary refunds or "service credits" for downtime. Our focus is on providing a robust, high-availability platform at no cost to the user.; ; Maintenance: Any planned maintenance is scheduled for off-peak hours and communicated via the dashboard and AIsha assistant well in advance.
• Approach to resilience: The service is hosted in AWS London using a Multi-Availability Zone (Multi-AZ) architecture. Application containers run on Amazon EC2 instances, which automatically redistributes traffic across physically separate datacentres if one fails. Database resilience is managed via Amazon RDS with synchronous replication to a standby instance in a different zone, ensuring automatic failover with zero data loss.
• Outage reporting: Monitoring Dashboards: Service health and telemetry are tracked via an internal Grafana dashboard, which provides a real-time view of service delivery, incidents, and performance metrics. Additionally, a Statistics Dashboard provides on-site staff with a "War Room" view of system health and bottleneck identification.; ; Automated Alerting (API/System): The system utilizes AWS CloudWatch to monitor infrastructure and application performance. When thresholds are exceeded, CloudWatch triggers automated alarms that notify internal systems like Zabbix.; ; Direct Support: Outages can be reported manually by users through a dedicated support email address or telephone line during standard support hours (09:00–17:00, Monday–Friday).

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Open Answers restricts management and support access using a Least Privilege model via AWS Identity and Access Management (IAM).; ; Authentication: Access to management consoles and production environments requires Multi-Factor Authentication (MFA) and is restricted to specific corporate IP ranges.; ; Infrastructure: Support engineers use Just-In-Time (JIT) access or encrypted VPN tunnels with public-key authentication for server administration.; ; Auditability: Every action performed within management interfaces is logged via AWS CloudTrail, providing a permanent, non-repudiable audit trail.; ; Physical: Support channels are restricted to vetted personnel, with internal segregation between development and production support roles.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Open Answers follows a robust Information Security Management System (ISMS) certified to ISO/IEC 27001:2022. Our policies cover the entire operational lifecycle, including Asset Management, Access Control, Incident Management, Secure Development (SDLC), and Physical Security.; ; Reporting Structure; Governance is led by the Management Review Board, chaired by the Chief Information Security Officer (CISO).; ; Managing Director: Holds ultimate accountability and final say on strategy.; ; Technical Director: Oversees day-to-day service delivery and risk management.; ; Support & Development Managers: Responsible for operational compliance within their respective teams.; ; Information Security Officer (ISO): Administers the ISMS and reports on system performance.; ; Ensuring Compliance; To ensure policies are strictly followed, we employ:; ; Policy Packs: Staff must read and record acceptance of policies relevant to their roles via ISMS.online.; ; Internal & External Audits: A three-year audit cycle ensures full ISMS coverage, supplemented by annual policy reviews.; ; Technical Controls: We use automated tools like SafeTitan for security awareness training, SonarQube for secure coding gates, and AWS Security Hub for infrastructure monitoring.; ; Disciplinary Process: Non-compliance is managed through a formal disciplinary framework to maintain individual accountability.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Open Answers manages configuration and change through an ISO 27001 certified framework.; ; Tracking Service Components:; All assets—including cloud resources, hardware, and software—are recorded in a central Asset Register. We maintain configuration baselines using Infrastructure as Code (Terraform) and version control (Git), ensuring a complete audit trail from procurement to disposal.; ; Security Impact Assessment:; Changes follow an ITIL-based process. "Normal" changes require a formal Change Request, which triggers a security review by the Technical Director or ISO. We assess risks against the OWASP Top 10 and utilize automated CI/CD security scanning to identify vulnerabilities before deployment.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Open Answers manages vulnerabilities through a proactive, ISO 27001-certified lifecycle integrated into our CI/CD pipelines.; ; Threat Assessment: We identify vulnerabilities using automated infrastructure scanning via AWS Security Hub and Nessus. Applications undergo continuous scanning (e.g., Grype, Anchore) during development, plus regular independent penetration testing.; ; Deployment Timelines: Critical security patches are mandated for deployment within 14 days.; ; Information Sources: Intelligence is gathered daily from strategic and tactical sources, including NCSC news, CISA, SANS NewsBites, and vendor-specific security advisories.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Open Answers uses an ISO 27001-certified approach to protective monitoring.; ; Identification:; We identify compromises through real-time telemetry and centralized logging via AWS CloudWatch, Security Hub, and Panther. These tools monitor for anomalous behavior, unauthorized access attempts, and configuration drift against security baselines.; ; Response:; Upon detection, our Incident Management Policy is triggered. We isolate affected resources, revoke compromised credentials, and initiate a forensic investigation led by the Technical Director to contain the threat.; ; Timeline:; Critical security incidents receive an immediate response, with active containment procedures initiated within minutes of a confirmed high-priority alert.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Open Answers uses an ISO 27001-certified incident management framework.; ; Pre-defined Processes:; We maintain a library of Standard Operating Procedures (SOPs) for common events, including data breaches, denial-of-service attacks, and hardware failures, ensuring a consistent and rapid response.; ; Reporting:; Users report incidents via a dedicated support email address, a 24/7 technical telephone hotline, or through our on-site "War Room" support staff during assessment days.; ; Incident Reporting:; Post-incident, we provide customers with a formal Major Incident Report (MIR). This details the root cause, impact, containment actions, and long-term preventative measures implemented.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 10%
• Between £1,000,001 and £2,500,000: 15%
• Between £2,500,001 and £5,000,000: 20%
• Over £5,000,001: 25%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: UKAS
• ISO/IEC 27001 accreditation date: Tuesday 10 December 2024
• What the ISO/IEC 27001 doesn’t cover: Nothing. The scope is the whole company.; Scope of Registration:; Information security management for the provision of IT support, software integration and; software development services in accordance to SoA Version v1.0
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • Plans to engage the contract workforce in deciding the most important workplace issues to address
  • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
  • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
  • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
  • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

  Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
  • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

  Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

  • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
• Mission: Make Britain a clean energy superpower:

  To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

  Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
  • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
• Mission: Break down barriers to opportunity:

  By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

  Policy Outcome 6: Employment and training: For those who face barriers to employment

  • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
  • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Working conditions which promote an inclusive working environment and promote retention and progression

  Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

  • Understanding of the issues affecting the development of new skills by target cohort
  • Understanding of issues relating to entering the contract workforce
• Mission: Build an NHS fit for the future:

  That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

  Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

  • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ian.bellia@openanswers.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.