PATIENTSOURCE LIMITED

PatientSource

PatientSource's electronic healthcare platform is built around the modern healthcare professional. Clinicians lead our design team, ensuring that the workflows of your routine are supported. Our systems work where you work, by the bedside or in the community. We enable secure communication; with colleagues, IT systems, external organisations and patients.

Features

• Clinician designed user interface empowering minimal click access to information
• Modular solution – incrementally and safely build your platform
• Elastic-data-structure allows customers to apply solution to unique usecases easily
• Electronic Prescribing and Medicines Administration (EPMA)
• Electronic Patient Observations (eObs)
• Contemporaneous clinical noting including attachments and sketching
• Laboratory and Radiology test ordering and results viewer (Order Comms)
• Electronic patient referrals, appointments and admissions management (PAS)
• Dynamic patient pathways to tailor patients' treatment plans
• Pharmacy and surgical theatres management tools

Benefits

• Intuitive UI reduces clinician fatigue and reduces clinical risk
• Provides accountability and speed of access to data
• Minimises the timeline from 'data to decision' for clinical activities
• Optimises reporting of key clinical data metrics
• Streamlines access to benefits of third-party solutions through partner programme
• Unifies admin and clinical teams within agreed clinical processes
• Dramatically improves patient safety
• Advanced analytics enables refined future years service planning
• Defined pathways ensure adherence to statutory responsibilities
• Provides a foundation to achieve a high CQC rating

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@patientsource.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

590276702479015

Contact

Philip Ashworth
01223851273
sales@patientsource.co.uk

About your service

• Service categories:

  Applications

  Collaborative

  • Enterprise community
  • Team collaboration
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: Maintenance:; ; All changes to our product, architecture and environment are authorised, reviewed and fully audited. We use JIRA and JIRA Service Management to document and track bug fixes, releases, upgrades, maintenance and other elements that might impact our production environment. All changes are tested in house by our UAT team before being applied to ; customer test instances and tested by the customer. ; ; After passing they are applied to live customer instances in collaboration with the customer. New releases are accompanied by release notes.
• System requirements:
  • A compliant modern internet browser.
  • A PC, laptop or tablet capable of running Windows 11.
  • Appropriate virus software running on the device.
  • Email or SMS access for two factor authentication.
  • A reliable internet connection with sufficient bandwidth.

User support

• Email or online ticketing support: Yes, at extra cost
• Support response times: Critical Priority; ; Response time: within 1 hour; ; Resolution target: within 4 hours; ; High Priority; ; Response time: within 3 hours; ; Resolution target: within 8 hours; ; Medium Priority; ; Response time: within 10 hours; ; Resolution/resolution planning: up to 5 days or by a specific agreed date; ; Low Priority; ; Response time: within 2 days; ; Resolution: considered for future releases / scheduled enhancements.; ; At weekends, Critical issues are still prioritized:; ; Response within 3 hours, resolution within 8 hours.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Support levels: ; Urgent (P1); ● PatientSource service unavailable (except for network issues or internal hospital issues); High (P2); ● Failure of a single Module where no alternative source exists ; ● HL7 failure: Non-acknowledgement of >3 valid, correctly addressed, correctly routed, HL7 messages after 3 retries each with 5 minutes waiting per retry; Medium (P3); ● Slow response: Page loads taking > 8 seconds for period of at least 20 minutes (except where there are known local hospital network problems) ; ● Failure of single Module where alternative exists; ● API integration issues that do not present an immediate and unavoidable risk to patient safety; Low (P4); ● Proforma field not configured correctly to specification ; ● User permissions not configured to suit need ; ● Super-user unable to achieve action ; ● Enhancement ; ● Proforma needs a new field / change of field compared to specification to improve it ; ● Additional proforma requested (which is out of scope) ; ; Support cost is bespoke and based on numbers of users and the health sector the provider is in. ; ; Every client is assigned an account manager, who has access to a wide range of skilled staff for any support required.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: At PatientSource, we provide a comprehensive, hands-on onboarding experience designed to get you live quickly, safely, and with full confidence. Here’s what you can expect when you work with us:; ; Initial Project Planning; ; We begin every implementation with an initial meeting between your team and ours, including your dedicated Project Manager and Technical Configuration Analyst. ; ; Together, we capture your requirements, define the project scope, and map out your objectives. From this, we produce a detailed SOW outlining tasks, responsibilities, timelines, and training needs to ensure a smooth deployment.; ; Configuration & Customisation; ; Our platform is fully configurable, and our in-house specialists will work with you to tailor the system around your workflows. We help you customise clinical forms, dashboards, trackers, permissions, and modules to fit your service model. ; ; Implementation & Deployment; ; We’re proud to offer one of the fastest EPR deployments on the market. ; ; Our modular design means you can adopt PatientSource incrementally, no need for a risky “big bang” approach.; ; Training & User Adoption; ; We keep training streamlined and efficient. Our onboarding plan includes all necessary training sessions, ensuring your team is confident from day one. Our intuitive interface reduces training overhead, helping users adapt quickly with minimal disruption.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Data Extraction at Contract End; ; When your contract with PatientSource expires or is terminated, we provide support to ensure a comprehensive and compliant transfer of your data. Specifically:; ; Data Export in a Mutually Agreed Format; ; We offer your organisation’s data in a format agreed in advance as part of your offboarding plan.; ; By default, this is provided as CSV (Excel-style) exports, which make it easy for you to import into other systems or preserve as records.; ; If you require different formats (such as direct database extracts or PDF records), we can accommodate these by request.; ; Format options can include:; ; CSV (standard and commonly used); ; Database-level extracts (on request); ; PDF or other export formats where appropriate.; ; This flexibility supports legal archiving needs and integration with your next EPR or records archive.; ; Collaborative Offboarding & Support; ; Offboarding is treated as a collaborative process. We partner with your team to plan the extraction, export, and verification of your data before contract completion. This ensures nothing is overlooked and facilitates a clean transfer of responsibility.
• End-of-contract process: When your contract with PatientSource comes to an end, we follow a clear, transparent, and secure process to ensure you retain full control of your data and experience a smooth transition.; ; At the end of your contract, we provide you with all of your organisation’s data in a mutually agreed format.; ; You remain the data controller.; ; Through the Offboarding Process:; ; We work with your team to:; ; Identify datasets to be exported.; ; Agree export formats\timelines.; ; Ensure the transfer is secure and verified.; ; Our goal is to make the transition as smooth and stress-free as possible.; ; You Take Ownership of Long-Term Record Retention.; ; You resume full responsibility for storing, archiving, or migrating those records.; ; This is done in accordance with the NHS Records Management Code of Practice and your internal policies.; ; We ensure you have everything you need before we step back.; ; We Securely Delete Your Data From Our Systems.; ; We follow GDPR, NHS, and contractual requirements for data destruction.; ; No unnecessary copies of your patient data are retained.; ; Your data remains protected at every step.; ; We Decommission Your Access.; ; Once the offboarding and data deletion processes are complete:; ; Integrations and APIs are disabled.; ; The service is formally decommissioned for your organisation.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: PatientSource is an intelligent platform that senses the screen ratio and adapts the display accordingly. ; ; IPad sized devices are ideal, PatientSource will work on Smartphones, but it requires screen scrolling.
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: PatientSource API – What It Is and How It Works; ; PatientSource provides a RESTful API designed to allow external systems to integrate with its Electronic Patient Record. The API is used for exchanging clinical and administrative data between PatientSource and other healthcare applications such as PAS, integration engines, departmental systems, and analytical platforms.; ; Key Features of the PatientSource API; 1. REST-Based-Architecture; ; The API uses REST principles with standard HTTP methods (GET-POST-PUT- PATCH-DELETE).; ; Data is typically exchanged in JSON format.; ; 2. FHIR-Aligned Data Structures; ; PatientSource uses a data model influenced by HL7 FHIR, especially for:; ; Patient demographics; ; Observations; ; Encounters; ; Orders and results; ; Medication information; ; Note: It is not a full native-FHIR EPR, but provides FHIR-compatible resources for interoperability.; ; The API supports dynamic documentation generation that’s tailored to your configuration, meaning developers can see documentation that reflects how your specific PatientSource instance is configured.; ; Customisation & Developer Experience; ; PatientSource generates dynamic API documentation based on your configuration, making it easier for developers to understand API inputs/outputs relevant to a particular site.; ; The EPR’s modular nature means you can expand API access as you add new modules (like DrugsChart or Pharmacy modules).; ; Limitations to be discussed depending on what's trying to be achieved.
• API documentation: Yes
• API documentation formats: HTML
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: PatientSource is designed to be modular and configurable rather than rigid. While it doesn’t allow “coding inside the platform” like a bespoke development environment, it provides customisation at these levels:; ; Enabling/disabling modules e.g. turning on DrugsChart, Pharmacy, or specific clinical modules only for the needs of a given trust/clinic. ; ; Setting up clinical workflows e.g. Configuring how patient episodes, observations, and case notes are structured in your instance.; ; Data capture forms e.g. Customising fields, forms, templates, and mandatory data for patient episodes or encounter types.; ; Role- and user-based configurations e.g.Different screens or workflows for nurses vs consultants vs admin users.; ; API-driven configuration e.g. The API documentation is often dynamically generated based on the exact configuration of your instance, meaning endpoints reflect your enabled modules.; ; How can users customise: ; ; Super users have access to the admin panel. ; ; The

Scaling

• Independence of resources: Each PatientSource client has their own dedicated tenant with ring-fenced cloud resources. ; ; Our technical architecture has gone through the 'Well Architected' process, which ensures all advantages of cloud are utilised, including elasticity and auto-enrolment of additional compute if % utilisations are reached. ; ; During the configuration phase, we'll work with the client to design a resilient environment.

Analytics

• Service usage metrics: Yes
• Metrics types: PatientSource provides a comprehensive suite of real-time and retrospective service metrics, including RTT times, length of stay, DNAs, bed and resource utilisation, A&E 4-hour performance, clinical audit indicators, and pathway milestones. ; ; Our reporting module offers configurable dashboards, custom reports, and SQL-driven data extraction, enabling organisations to monitor operational performance, meet regulatory reporting requirements, and optimise patient flow with accurate, up-to-the-minute insights.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest: Physical access control, complying with CSA CCM v4.0
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: PatientSource provides flexible and transparent data export options to ensure clients maintain full control of their information. Data can be extracted directly through built-in CSV/PDF export tools, custom or scheduled reports, and our RESTful APIs for real-time integrations. For system migrations or contract termination, we supply comprehensive bulk data exports in mutually agreed formats, with full support from our technical team to ensure data completeness, security, and compatibility with receiving systems.; ; In complement, there is a 'print' icon on every patient record, enabling a complete print to PDF of the patients record, with date bookend options.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • Database-level extracts
  • Other bespoke formats required
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • PDF
  • Video files
  • Word processing extensions

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection between networks: We protect all data transferred between clients' networks and the PatientSource platform using industry-standard, highly secure encryption. Communication occurs over TLS 1.2+ encrypted channels, ensuring that data remains protected end-to-end while in transit. Where required, we can also establish secure VPN tunnels (TLS or IPsec) to provide an additional layer of controlled connectivity across public or private sector networks. Within our cloud environment, maintaining the same high-grade encryption standards, supported by continuous monitoring, regular penetration testing, and strict access controls. Compliance with ISO-27001 and the NHS DSP Toolkit demonstrates commitment to safeguarding data throughout its journey to and from systems.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: PatientSource is a cloud hosted solution on AWS and Azure. ; ; PatientSource highlights the uptime statements from these cloud hosters to our clients: ; ; Amazon EC2 (Virtual Machines); ; 99.99% uptime SLA when using instances across multiple Availability Zones; ; 99.5% SLA for single-instance deployments; ; Azure Virtual Machines; ; 99.99% uptime SLA when running VMs in an Availability Zone; ; 99.95% for Availability Set deployment; ; Important Notes; SLAs apply per service, not to the entire cloud platform; ; Neither AWS nor Azure says “the whole cloud is 99.99% available.” Instead, each service specifies its own guaranteed monthly uptime.; ; Compensation, not guarantee of zero downtime; ; If uptime falls below SLA thresholds, customers receive service credits, not cash.; ; PatientSource SLA; ; Within support hours of 9 - 7 weekdays, excl public\bank holidays; ; Target time to respond ; Urgent = 10 mins; High = 30 mins; Medium = 4 hours ; Low = 24 hours; ; Target time to repair; Urgent = 1 hour; High = 4 hours; Medium = 24 hours ; Low = 7 days; ; 17:00 - 09:00; ; Target time to respond 'Best effort = BE'; Urgent = BE; High = BE; Medium BE; Low = BE; ; Target time to repair; Urgent = BE; High = BE; Medium = BE; Low = BE
• Approach to resilience: PatientSource’s Approach to Resilience; ; At PatientSource, resilience is fundamental to the delivery of our electronic patient record platform. We use a cloud-native, containerised architecture deployed across multiple Availability Zones within UK-based datacentres. This design provides built-in redundancy, allowing the service to continue operating even if an individual datacentre experiences disruption.; ; Our platform supports automatic failover and fail-back, ensuring continuity of service with minimal impact on users. By distributing workloads across isolated zones, we eliminate single points of failure and maintain high levels of availability suitable for clinical environments.; ; We operate a robust disaster recovery and business continuity framework, including automated backups, multiple recovery points, and optional on-site failover capabilities for organisations with enhanced continuity requirements.; ; System performance and health are continuously monitored, supported by real-time alerting and a dedicated operations team available 24/7. This proactive approach enables rapid response to any emerging issues.; ; All updates follow strict change-control processes, including staged testing and safe deployment procedures, ensuring stability and predictability during releases.; ; Together, these measures ensure PatientSource delivers a resilient, secure, and highly available platform designed to support uninterrupted clinical workflows.
• Outage reporting: How PatientSource Reports Outages; ; At PatientSource, transparency and rapid communication are central to our service management approach. If an outage or service degradation occurs, we follow a structured incident-communication process designed to keep customers fully informed.; ; 1. Real-Time Detection and Alerting; ; Our monitoring systems continuously track the health and performance of all components of the PatientSource platform. Any anomaly automatically triggers an internal alert to our operations team, enabling immediate investigation.; ; 2. Customer Notifications; ; If an issue affects service availability or performance, we notify designated customer contacts through our standard communication channels. This typically includes:; ; Email alerts to IT and clinical leads; ; Updates through our support service desk; ; Direct communication from our technical team for major incidents; ; Notifications outline the impact, known symptoms, and our initial assessment.; ; 3. Ongoing Incident Updates; ; Throughout the incident, we provide regular progress updates, including mitigation steps, estimated time to resolution (where available), and any required customer actions. Updates continue until full service restoration is confirmed.; ; 4. Post-Incident Reporting; ; For any significant outage, PatientSource issues a post-incident report summarising:; ; Cause of the incident; ; Timeline of events; ; Actions taken to restore service; ; Measures implemented to prevent recurrence

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Access Restrictions in Management Interfaces\Support Channels; ; Yes, PatientSource enforces strict access controls across all management interfaces\support channels to protect customer environments and data. Access to administrative and backend management systems is restricted to authorised PatientSource personnel only, based on role-based access control and the principle of least privilege. All privileged accounts require strong authentication, including multi-factor authentication.; ; Support staff can only access client environments when explicitly required to deliver support, all such access is logged, audited, and time-limited. Sensitive actions within management interfaces are further restricted to senior, security-cleared personnel, ensuring robust separation of duties and preventing unauthorised access.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Our Information Security Policies and Processes; ; At PatientSource, information security is central to how we operate. We maintain a comprehensive Information Security Management System (ISMS) certified to ISO 27001, which defines the policies, controls, and governance processes that protect our platform and the data entrusted to us. We also comply fully with the NHS Data Security & Protection Toolkit (DSPT).; ; Our Security Policies; ; We maintain formal, documented policies that cover all aspects of information security, including:; ; Information Security Policy – our overarching framework for safeguarding data.; ; Acceptable Use Policy – defining responsible use of systems by all team members.; ; Incident and Breach Management Policies – detailing how security events are reported, escalated, investigated, and resolved.; ; Onboarding, Training & Disciplinary Policies – ensuring all staff understand their security obligations.; ; Employee Vetting – all staff are screened to BS7858:2019 standards.; ; All staff formally acknowledge these policies on induction and through periodic review.; ; Our Security Processes; ; To enforce our policies, we operate robust security practices including:; ; Annual independent penetration testing and remediation based on risk severity.; ; Continuous monitoring and alerting across all production systems.; ; Comprehensive audit logging and secure authentication, including two-factor authentication.; ; Structured change-management and risk-management processes embedded within our ISMS.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Our Configuration and Change Management Approach; ; At PatientSource, all service components are tracked throughout their lifecycle using version-controlled configuration items and documented baselines. We use configuration-as-code to ensure consistency, auditability, and controlled deployment. Every change follows a formal workflow where risks, including security impact, are assessed, peer-reviewed, and tested in non-production environments before approval. ; Planned releases follow scheduled windows with rollback procedures, while emergency changes use an expedited but controlled path. All modifications are logged, monitored post-deployment, and reviewed to ensure security, stability, and compliance throughout the lifetime of the service.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Our Vulnerability Management Approach; ; At PatientSource, we continuously assess potential threats to each client’s services through automated vulnerability scanning, real-time monitoring, and threat intelligence feeds from industry sources, security partners, and vendor advisories. Identified vulnerabilities are risk-assessed for potential impact on confidentiality, integrity, availability, and clinical operations. Critical threats and zero-day vulnerabilities are patched and deployed to client services as quickly as possible, often within hours, following rapid but controlled testing. Lower-risk issues follow our structured release cycle. All remediation activity is tracked through our service management system, ensuring timely action, auditability, and continuous improvement of our security posture.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Our Protective Monitoring Approach; ; At PatientSource, we use continuous protective monitoring to identify potential compromises across our platform. Automated security alerts, log analytics, anomaly detection, and threat-intelligence feeds allow us to detect unusual activity, malicious behaviour, or signs of compromise in real time. When a potential issue is identified, our security and operations teams immediately investigate, triage, and contain the threat. We respond to incidents rapidly, typically within minutes, and follow a formal incident-management process covering escalation, evidence gathering, remediation, and communication with affected clients. All incidents are reviewed post-resolution to strengthen controls and continuously improve our security posture.
• Incident management type: Supplier-defined controls
• Incident management approach: Our Incident Management Approach; ; At PatientSource, we operate a structured incident management process aligned with ISO 27001 and ITIL principles. We maintain predefined procedures for common events, including service outages, security alerts, performance degradation, and access issues. Users can report incidents via our service desk, email, or phone, where they are logged, triaged, and prioritised. Our support and engineering teams respond rapidly, investigate root causes, and implement fixes. For significant incidents, we provide clients with formal incident reports detailing impact, timelines, actions taken, and preventative measures. All incidents undergo post-incident review to drive continual improvement and strengthen service resilience.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Health and Social Care Network (HSCN)

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Certified International Systems Limited
• ISO/IEC 27001 accreditation date: Monday 6 January 2025
• What the ISO/IEC 27001 doesn’t cover: N\A
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: CERTIFIED INTERNATIONAL SYSTEMS LTD
• ISO 9001 accreditation date: Sunday 16 February 2020
• What the ISO 9001 doesn’t cover: N\A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 09237d23-632d-4900-9792-c193e2cd639d
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@patientsource.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.