MIRRORMAZE COMMUNICATIONS LTD

NimbusMobile

NimbusMobile provides secure, cloud-based virtual smartphones at scale. It eliminates the need to manage multiple physical devices and SIMs. It delivers smartphones via a browser or mobile app, supporting remote access to authentic apps for secure communications and data privacy. Ideal for teams that require device consolidation and collaboration.

Features

• Remote access to physical and virtual Android devices
• Integrated real UK and International mobile numbers for verification.
• Unattributable internet access via global Internet Points of Presence.
• Role-Based Access Control with comprehensive user activity auditing.
• NimbusMobile App for Apple and Android devices.
• NimbusMobile is hosted in UK datacentres
• Flexible deployment models: Managed SaaS or Self-Hosted.
• Manage and access multiple smartphones from a single interface
• Support for "mobile-first" platform investigations
• Mitigates risk of physical damage and theft of device

Benefits

• Solves the "multi-phone problem" by virtualising physical device inventory.
• Eliminates operational risks and logistics of carrying physical handsets.
• Enables secure access to mobile apps and social media platforms.
• Data sovereignty with customer data remaining within UK jurisdiction.
• Streamlines management and verification of False Online Personas and accounts.
• Removes logistical burden of procuring, maintaining physical SIMs.
• Existing Mobile Numbers can be ported to NimbusMobile
• Protects user identity through unattributable, non-persistent proxy infrastructure.
• Scalable solution that delivers business and operational efficiencies
• Reduces environmental impact by decreasing global electronic hardware demand.

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jacques.delaporte@mirrormaze.io. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

693609190430428

Contact

Jacques de la Porte
07739155589
jacques.delaporte@mirrormaze.io

About your service

• Service categories:

  Applications

  Collaborative

  • Team collaboration
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: NimbusMobile requires an internet-connected device with a modern HTML5 browser supporting WebRTC or a modern smartphone with access to an App Store. Offline access is not supported. Maintenance and security updates are managed centrally, typically occurring outside core UK business hours. SMS delivery and VoIP calls relies on third-party mobile carrier network availability. Standard support operates Monday to Friday, 09:00-17:00.
• System requirements:
  • Modern web browser (Chrome, Edge, Safari) for laptop/tablet access.
  • Native mobile application for Android 10+ and iOS 13+ devices.
  • Connectivity via Wi-Fi, 5G, or compatible satellite network constellations.
  • Standard hardware supporting modern video and touch-control interfaces.
  • Identity authentication via standard SSO or multi-factor authentication.

User support

• Email or online ticketing support: Yes
• Support response times: Response times are tiered by incident severity. Critical P1 outages (service unavailable) have a 1-business-hour response target with resolution within 24 hours. P2 and P3 performance issues are responded to within 2 and 4 business hours respectively. Standard P4 requests receive a response within 24 business hours.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: NimbusMobile utilises a four-tier severity model to ensure technical resources are aligned with operational urgency.; ; Level 1 (Critical): Total service unavailability or a critical security incident. We provide immediate support with a target response time of under one hour, 24/7/365 for subscribers with enhanced support packages.; ; Level 2 (High): Significant functional degradation or loss of a primary feature, such as handset provisioning, where no workaround exists. We aim for a response within four working hours.; ; Level 3 (Medium): Minor functional issues or bugs that impact user experience but allow for continued operation via workarounds. These are responded to within one working day.; ; Level 4 (Low): General technical queries, cosmetic improvements, or feature requests. These are handled as part of our standard development roadmap and administrative support.; ; This structured approach ensures that mission-critical enforcement operations and urgent corporate requirements receive immediate attention, while maintaining a transparent and accountable history of all service interactions through our secure support portal.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: NimbusMobile provides a structured onboarding program designed for rapid, large-scale deployment with minimal friction. Training and technical consultancy services are available during onboarding. Automated data destruction ensures that customer data is automatically deleted within 30 days of offboarding.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Users have access to their data throughout their use of NimbusMobile. If at the end of a contract the user requires a bulk extract of all data, an authenticated link to their bulk extract can be provided to the user
• End-of-contract process: At the end of the contract access to NimbusMobile is terminated through the disabling of accounts. User accounts, data and audit logs are securely deleted after 30 days. More detail can be provided on request
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Our onboarding documentation can be made available in any accessibility friendly format as required by the customer.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The NimbusMobile App is designed for touch-interaction and field portability, while the browser based user interface provides an expanded dashboard for administrative tasks. Both versions use the same cloud infrastructure, encryption, and security protocols. This ensures seamless transitions between browser based access and mobile app access with no degradation in security, operational capability, or data access.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: NimbusMobile can be accessed via a browser based dashboard or native mobile apps available in the Apple App Store and Google Play Store.
• Accessibility standards: None or don’t know
• Description of accessibility: We are committed to ensuring our platform is accessible to all users and are currently working towards full compliance with the Web Content Accessibility Guidelines (WCAG) 2.1 AA standard. To support users in the interim, we offer assisted support via email and telephone to help users navigate any inaccessible parts of the service.
• Accessibility testing: While we have not yet completed formal approved assistive technology testing, accessibility and inclusive design are important priorities for our organisation. Our solutions are developed in line with recognised accessibility standards and good practice, and we actively consider the needs of users who rely on assistive technologies during design and delivery. We recognise the value of structured assistive technology testing in improving usability and inclusivity, and we are committed to progressing this as part of our ongoing technical roadmap. We remain open to working with clients and accessibility specialists to ensure our services meet the needs of all users.
• API: No
• Customisation available: Yes
• Description of customisation: Possible Customisations; Flexible Deployment Models: Choose between a fully managed SaaS hosted in the UK or a customer-hosted (on-premise/private cloud) for enhanced control.; Physical Device Integration: Customers can integrate their own procured physical handsets (e.g., specific Samsung or Nokia models) into the platform using proprietary Device Hubs that bridge local physical Android devices with the NimbusMobile Platform.; Device Configuration:; Network & Location: granular control over Public/Private IP addresses and Mobile GPS coordinates to match target geographic locations.; Device Fingerprint: customisable Operating System and browser configurations to ensure consistency with specific user personas.; Operational Environment: Tailor the environment with pre-installed applications and extensions specific to the investigation's needs.; Connectivity: Configure real UK and international mobile phone numbers and specific local exit points to mask user identity.

Scaling

• Independence of resources: NimbusMobile utilises a cloud-native architecture on AWS to ensure complete resource independence. Compute and storage resources are decoupled, allowing each component to scale elastically based on real-time demand without impacting other users. Customer environments are logically segregated using containerisation and dedicated virtual private clouds (VPCs), ensuring that high-load activities in one investigation do not degrade performance for others. This isolation extends to the virtual Android devices, which are dynamically provisioned on separate instances to maintain consistent speed and responsiveness regardless of concurrent platform

Analytics

• Service usage metrics: Yes
• Metrics types: NimbusMobile uses real-time monitoring to ensure high-assurance service delivery. We track the following core key performance indicators to maintain operational transparency:; ; Availability: We guarantee 99.9 percent platform uptime, measured monthly, excluding scheduled maintenance windows.; ; Latency: We monitor end-to-end round-trip times to ensure a responsive, near-native user experience across all virtual handset interactions.; ; Support Responsiveness: We target a one-hour response time for all Severity 1 critical incidents during core business hours.; ; Provisioning Success: We track the success rate of automated handset creation and decommissioning to ensure fleet reliability and rapid deployment for operational personnel.
• Reporting types:
  • Real-time dashboards
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: NimbusMobile ensures data portability through several secure methods:; ; Support Engineerscan perform bulk exports of audit logs and connection metadata in open-standard CSV or JSON formats.
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats:
  • PDF
  • Various (for files downloaded from the internet)
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection between networks: All data in transit is protected using TLS 1.2 (or higher) encryption, ensuring secure communication between the user's client and the NimbusMobile platform. The solution employs a Zero-Trust architecture that physically isolates the user’s host computer from the NimbusMobile devices’ onward internet connections, preventing direct network exposure. Remote Access is streamed securely via encrypted WebRTC channels. Connections to remote physical devices and physical Device Hubs utilise authenticated, encrypted VPN tunnels to maintain integrity across public networks.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: NimbusMobile protects data within the supplier network using a Zero-Trust architecture hosted in AWS London. Customer environments are logically isolated using dedicated Virtual Private Clouds (VPCs), containerisation and Security Groups. This prevents lateral movement or cross-contamination between customers. Access for our staff is restricted to essential maintenance tasks only, governed by strict Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA) on a least-privilege basis. All internal system activity and administrative actions are continuously monitored and logged to an immutable audit trail in AWS, ensuring full accountability and rapid detection of security events.

Availability and resilience

• Guaranteed availability: NimbusMobile provides a high-availability platform with a 99.9 percent infrastructure uptime guarantee. While the service is cloud-delivered, we mirror the user-led experience of physical handsets by offering flexible upgrade and maintenance pathways.; ; Infrastructure Availability: Our backend is hosted in geographically redundant UK data centres, ensuring the virtual environment remains online even during localized hardware failures. We distinguish between our core platform availability and the user’s local connectivity (5G/Wi-Fi), which remains the user's responsibility.; ; User-Controlled Upgrades: Just as physical phone users manage their own OS updates, NimbusMobile administrators can control when security patches or feature upgrades are applied to their virtual fleet. This prevents unexpected downtime during critical operations and allows for internal compatibility testing before deployment.; ; Planned Maintenance: We minimise service disruption by performing platform-level maintenance during pre-notified, low-traffic windows. Clients are alerted at least five working days in advance via the management console. For urgent security patches, we provide an accelerated notification process while still allowing administrators to coordinate the reboot or refresh of their virtual instances. This "elastic" approach ensures that maintenance feels like a managed update rather than an enforced outage.
• Approach to resilience: Our resilience strategy is built on the high-availability architecture of our cloud providers, ensuring that NimbusMobile remains operational even during significant infrastructure disruptions. ; ; Cloud-Native Resilience; By utilising a cloud-elastic model and using cloud automation, we decouple the service from specific physical hardware. Our infrastructure is distributed across multiple, geographically redundant UK-based Availability Zones. This ensures that if one data centre experiences an outage, traffic is automatically failed over to a secondary site with zero data loss, maintaining service continuity.; ; Datacentre Setup; Our providers' facilities are designated as UK Critical National Infrastructure (CNI) and are designed to Tier III standards. Key resilience features include:; ; Power & Cooling: N+1 redundancy for all critical power and environmental systems. ; ; Network Path Diversity: Multiple diverse fibre entries to prevent single points of failure. ; ; Physical Security: 24/7 on-site monitoring, biometric access, and strictly controlled perimeters. ; ; Resource Elasticity:; The service dynamically scales resources to meet demand, preventing performance degradation during traffic spikes. This "elastic" nature also allows us to rapidly re-provision virtual environments in healthy zones if a specific resource becomes degraded.; ; Detailed specifications regarding our specific datacenter locations and deep-technical failover protocols are available on request to maintain operational security.
• Outage reporting: Outage Reporting and Communication:; NimbusMobile provides transparent, real-time outage reporting to ensure administrators remain informed during service disruptions.; ; Identification and Notification: Our monitoring systems detect platform-level anomalies immediately. Once an incident is confirmed, we trigger automated notifications.; ; Status Dashboard: We maintain a centralised status page independent of our core infrastructure. This dashboard offers a real-time view of service health.; ; Resolution and Reporting: During an outage, we provide progress updates at regular intervals until full service is restored. Following any major incident, we issue a formal Post-Incident Report within five working days. This document details the root cause, mitigation actions, and long-term preventative measures, fulfilling the governance requirements of high-assurance departments.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Username or password
• Access restrictions in management interfaces and support channels: Our internal management interfaces are strictly isolated from the public internet and protected by a 'Zero Trust' architecture. Administrative access requires a combination of biometric and connection via a secure, encrypted VPN or "Jump Server" with IP-whitelisting. We enforce the Principle of Least Privilege (PoLP); our engineers use time-bounded, just-in-time (JIT) access that expires automatically. All administrative actions are recorded in immutable audit logs. and monitored by our SIEM. This ensures that only authorised vetted personnel (BPSS cleared) can perform configuration changes, and no single person can alter the production environment without oversight.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password
  • Other
• Description of management access authentication: Our platform utilises a robust identity framework supporting Single Sign-On (SSO) via SAML 2.0 and OpenID Connect (OIDC). This allows seamless integration with existing government and corporate identity providers (e.g., Azure AD, Okta). For deployments without SSO, we enforce Multi-Factor Authentication (MFA) via TOTP or SMS as a mandatory security baseline. Access is governed by Role-Based Access Control (RBAC), ensuring users only access modules aligned with their specific mission remit. All authentication attempts are logged with full telemetry, including but not limited to IP address and device fingerprint, thus providing a comprehensive audit trail for internal security governance.

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: CSA CSM version 4.0
• Information security policies and processes: Our security framework is built on ISO 27001 principles and the NCSC Cloud Security Principles, governed by an Internal Security Board that conducts quarterly policy reviews. We maintain a comprehensive suite of "living" documents, including an Information Security Management System (ISMS), Incident Response Plan, and Data Protection Policy. All employees undergo mandatory, annual security awareness training and baseline vetting (BPSS). Our processes include regular vulnerability scanning, annual independent CREST-approved penetration testing, and a strict "Security by Design" approach to all development. This ensures a proactive, risk-based culture that protects sensitive investigative data at every layer.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Our change management follows a rigorous CI/CD pipeline aligned with ITIL 4 standards. All code changes are subject to mandatory Peer Review and automated Static Analysis (SAST) before merging. We utilise an automated 'build-test-deploy' workflow where updates must pass a comprehensive suite of unit, integration, and security tests in a mirrored Staging environment prior to production. Production deployments require formal authoriation.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Our proactive vulnerability management aligns with NCSC best-practice timescales. We aggregate threat intelligence from NCSC feeds, vendor bulletins, and internal CTI. Continuous automated scanning covers all environments, including third-party libraries (SCA). We operate an 'Update by Default' policy: 'Critical' and 'High' vulnerabilities in internet-facing services are mitigated or patched within 5 working days of release, exceeding Cyber Essentials Plus requirements. 'Important' patches are deployed within 7 days, and all others within 14 days. All patches undergo automated regression testing in Staging before production deployment, ensuring security without compromising the resilience of mission-critical investigative workflows
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Our platform employs a proactive, 24/7 protective monitoring strategy aligned with NCSC Cloud Security Principle 11. We utilise a range of security tooling offered within AWS including, but not limited to GuardDuty and CloudTrail via the AWS Security Hub centralized SIEM (Security Information and Event Management) platform to aggregate and correlate real-time telemetry from Firewalls, IDS/IPS, WAF, and OS-level logs. CloudFlare provides additional protective monitoring
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: NimbusMobile employs an ITIL 4-aligned Incident Management practice to restore normal service operation swiftly. Our lifecycle includes:; Identification & Logging: Automated monitoring (SIEM) ; Categorisation & Prioritisation: Triaged by impact/urgency to meet agreed SLAs.; Investigation: Technical teams apply playbooks to isolate and remediate issues, focusing on maintaining non-attributable egress integrity.; Communication: Regular stakeholder updates via email.; Resolution & Closure: Verified recovery before formal closure.; Continual Improvement: Post-Incident Reviews (PIR) drive root-cause analysis and service hardening, ensuring mission-critical OPSEC remains uncompromised.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: We offer a free trial for 30 days of up to 10 devices.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 20%
• Between £500,001 and £1,000,000: 25%
• Between £1,000,001 and £2,500,000: 30%
• Between £2,500,001 and £5,000,000: 35%
• Over £5,000,001: 40%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 6a779534-5700-4cb6-b7d0-87e603550834
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
    • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Understanding of issues relating to entering the contract workforce

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jacques.delaporte@mirrormaze.io. Tell them what format you need. It will help if you say what assistive technology you use.