MDIT U.K. LTD

Iris ImageNet

Iris ImageNet is a secure cloud-based PACS and referral platform designed for healthcare providers. It enables seamless image storage, viewing, and sharing between clinicians and organisations. Supporting DICOM and non-DICOM formats, it streamlines referrals, second opinions, and reporting while ensuring compliance with NHS, GDPR, and medical imaging standards.

Features

• Secure cloud-based PACS for medical image storage and retrieval.
• Supports DICOM and non-DICOM imaging formats with complete compatibility.
• Integrated referral management platform for clinician-to-clinician image sharing.
• Web-based image viewer accessible from any authorised device securely.
• Role-based access control with detailed audit and activity logging.
• Automated notifications for new referrals, reports, and image availability.
• Seamless integration with EPR, RIS, and external clinical systems.
• Advanced search and filtering for patients, studies, and modalities.
• Encryption in transit and at rest meeting NHS DSPT requirements.
• Scalable architecture supporting multi-site and cross-organisation collaboration efficiently.

Benefits

• Improve collaboration by securely sharing images and reports across organisations.
• Reduce delays by streamlining referral and second-opinion review workflows.
• Access medical images instantly from any authorised device or location.
• Enhance diagnostic accuracy with fast, high-quality image viewing and tools.
• Eliminate physical media by digitising and centralising image storage processes.
• Strengthen compliance with NHS DSPT, GDPR, and imaging security standards.
• Integrate seamlessly with existing EPR, RIS, or other clinical systems.
• Simplify audit and traceability through detailed access and activity logs.
• Scale efficiently to support multi-site, regional, or enterprise imaging networks.
• Improve patient care through faster reporting and clinical decision-making collaboration.

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at hello@mdit.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

795033840427554

Contact

Gerasimos Theotokatos
01233556569
hello@mdit.uk

About your service

• Service categories:

  Applications

  Customer relationship management

  • Customer service
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Hybrid cloud
• Service constraints: Iris ImageNet requires a stable internet connection and a supported modern web browser for optimal performance. Image upload and viewing speed may depend on local network bandwidth and device hardware. Planned maintenance and system updates are scheduled outside normal working hours with prior notice. For integrations with external systems (EPR, RIS, or PACS), configuration support from the client’s IT team may be required. Offline access is not available, as all data processing and image storage occur securely in the cloud or within the designated local server environment.
• System requirements:
  • Modern web browser: Chrome, Edge, Firefox, or Safari latest version.
  • Reliable internet connection with minimum 10 Mbps download speed.
  • VPN access if hosted within NHS local environment.

User support

• Email or online ticketing support: Yes
• Support response times: Support requests are acknowledged within one business hour and resolved based on priority. Critical issues are addressed immediately. Standard response times apply Monday to Friday, 09:00–17:00 UK time. Weekend and out-of-hours support are available for hosted clients under enhanced support agreements.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 A
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: Our integrated web chat is designed to meet WCAG 2.2 AA standards. It supports screen readers, keyboard-only navigation, and adjustable text contrast. Testing has been performed internally using browser-based accessibility tools (including NVDA and VoiceOver) to ensure compatibility with assistive technologies. We also review accessibility feedback from users as part of ongoing updates and apply recommended improvements to maintain inclusive communication for all clients.
• Onsite support: Yes, at extra cost
• Support levels: MD IT provides first, second, and third-line support to all clients.; ; First-line: General user assistance, password resets, and navigation help via email or ticketing.; ; Second-line: Technical troubleshooting, configuration, and integration queries.; ; Third-line: Advanced system issues, database maintenance, or bug resolution by developers.; ; Support is included in all hosted subscriptions at no additional cost during standard business hours (Monday–Friday, 09:00–17:00 UK time).; Enhanced or 24/7 support options are available by separate agreement.; ; Each client is assigned a Technical Account Manager who oversees implementation, escalations, and service continuity, supported by a dedicated cloud support engineer for hosted environments.
• Support available to third parties: Yes
• AI chatbot: No

Onboarding and offboarding

• Getting started: MD IT provides comprehensive onboarding support to help organisations begin using Iris ImageNet efficiently and securely. During implementation, the technical team assists with initial setup, user account creation, and configuration of roles, referral workflows, and permissions.; ; New users receive access to online training sessions, detailed user documentation, and a knowledge base that covers image upload, viewing, referral management, and reporting. Administrators are guided through the management console and audit tools to ensure proper governance and compliance.; ; Optional onsite training is available at an additional cost for larger or multi-site teams. Ongoing user support, refresher training, and system updates are included as part of the standard service package.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • ODF
  • PDF
• End-of-contract data extraction: At the end of the contract, MD IT ensures a secure and complete data extraction process for all Iris ImageNet clients. All imaging data, including DICOM and non-DICOM files, reports, and referral records, can be exported in standard, open formats such as DICOM, CSV, or PDF, along with associated metadata.; ; For cloud-hosted clients, MD IT performs the export and provides secure, time-limited download access via encrypted transfer. For locally hosted deployments, MD IT supports the client’s IT team in generating DICOM exports and extracting related reports and files from the local environment.; ; A documented handover confirms the integrity, security, and successful deletion of all client data following completion of the export.
• End-of-contract process: At the end of the contract, MD IT assists the client with data extraction and service closure. The time required to export data depends on the volume and format requested, typically ranging from a few hours to several days for large datasets.; ; A standard data export in common formats (CSV, XML, PDF) and basic handover support are included in the contract price.; ; Additional costs may apply for complex data exports, such as full database dumps, bespoke formats, or extensive assistance with third-party integrations. For locally hosted deployments, MD IT can also provide optional onsite support for deinstallation and verification.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Iris ImageNet is fully responsive and accessible on mobile, tablet, and desktop devices. All key features, including image viewing, referral management, and reporting, are available on mobile. The interface adapts automatically to screen size for ease of use, though detailed image manipulation tools perform best on larger desktop displays.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: Iris ImageNet provides a secure, web-based interface designed for radiologists, clinicians, and administrators. Users can upload, view, and share medical images through an intuitive dashboard with advanced search and filtering options. The built-in DICOM viewer supports annotations, measurements, and multi-modality comparisons, while referral and report workflows are accessible via integrated menus.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: Iris ImageNet interface has been tested with assistive technologies, including screen readers (NVDA, VoiceOver), keyboard-only navigation, and browser-based accessibility tools to ensure usability and compliance with WCAG 2.2 AA standards. Testing focused on text readability, focus order, contrast ratios, and alternative text for icons and charts.; ; User feedback was gathered from individuals using assistive technology to validate navigation clarity and improve labelling of key interface elements. Enhancements such as consistent tab order, visible focus indicators, and improved button descriptions were implemented.; ; Accessibility is reviewed continuously as part of ongoing updates to maintain compatibility with evolving standards and assistive technologies.
• API: Yes
• What users can and can't do using the API: Iris ImageNet provides a secure RESTful API that allows authorised users and third-party systems to integrate with core modules such as assets, facilities, incidents, and projects. Through the API, users can create, read, update, and delete records, as well as retrieve reports and export data in JSON or XML formats.; ; API setup requires the generation of unique API credentials and access tokens via the system’s admin interface. All API requests are authenticated using OAuth 2.0 and encrypted via TLS 1.2+.; ; Users cannot modify system configuration or administrative settings through the API. Access is restricted based on assigned roles and permissions to maintain data integrity and security.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • ODF
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Iris ImageNet is designed to be highly configurable to suit each organisation’s imaging and referral workflows. Administrators can customise user roles, permissions, and access levels to align with internal governance policies. Referral forms, notification templates, and workflow rules can be tailored to match specific departmental processes.; ; Branding elements, including logos and report headers, can be adapted to reflect the organisation’s identity.; ; Customisation is performed through the secure web administration interface by authorised users or, for advanced configurations, with MD IT’s technical support team.

Scaling

• Independence of resources: Iris ImageNet is hosted on scalable cloud infrastructure using Microsoft Azure and AWS, with resources dynamically allocated to maintain optimal performance. Each client’s environment is logically isolated with dedicated databases and resource pools where required. Load balancing and autoscaling ensure consistent response times regardless of other users’ activity. Continuous monitoring allows proactive resource adjustment to prevent performance degradation.

Analytics

• Service usage metrics: Yes
• Metrics types: Iris ImageNet provides detailed service usage metrics, including the number of uploaded and viewed studies, generated reports, completed referrals, and active users. Administrators can access usage summaries showing activity by department, modality, or time period. System performance metrics such as storage utilisation, transfer success rates, and uptime statistics are also available upon request through MD IT’s support team.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Users can request data exports directly through the secure Iris ImageNet interface or by contacting MD IT support. Exports include DICOM and non-DICOM files, referral data, and associated reports, provided in standard formats such as DICOM, CSV, and PDF. For large datasets, MD IT’s technical team manages the process and provides a secure, time-limited download link. All exports are encrypted in transit and verified for accuracy and completeness before delivery.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • XML
  • PDF
  • SQL
  • JSON
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • XML
  • JSON
  • SQL
  • HL7
  • FHIR
  • DICOM
  • PDF

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Iris ImageNet is hosted on highly available, scalable cloud infrastructure designed to deliver 99.9% uptime, excluding planned maintenance. Service availability is continuously monitored, and clients are notified in advance of any scheduled maintenance windows.; ; In the unlikely event that availability falls below the guaranteed level, affected clients are eligible for service credits proportional to the downtime experienced, which can be applied to future invoices or renewal periods.; ; MD IT’s Service Level Agreement (SLA) covers uptime, incident response, and resolution times, ensuring prompt restoration of services in case of disruption. Regular performance monitoring, redundancy, and load balancing are used to maintain consistent service reliability.
• Approach to resilience: Iris ImageNet is hosted within redundant, geographically distributed cloud environments on Microsoft Azure and AWS, ensuring continuous availability and data protection. The infrastructure uses load balancing, failover mechanisms, and automated scaling to maintain performance during peak demand. All data, including DICOM images and reports, is replicated across multiple availability zones to prevent data loss in the event of hardware or regional failure.; ; Daily encrypted backups are performed, with recovery points securely stored and tested regularly as part of MD IT’s business continuity plan. Network redundancy, secure access controls, and proactive monitoring further ensure uninterrupted service delivery.; ; Detailed technical and architectural resilience information is available upon request under a confidentiality agreement.
• Outage reporting: Iris ImageNet provides transparent outage reporting through multiple channels. Clients receive email alerts for any planned maintenance, performance degradation, or unexpected service interruption. A private service status dashboard is available to authorised users, displaying real-time system health, uptime, and incident updates.; ; All outages and service incidents are logged within MD IT’s incident management system and reviewed in accordance with the defined SLA. Post-incident reports, including root cause analysis and corrective actions, are shared with affected clients upon resolution.; ; For enterprise clients, outage data can also be accessed via a secure API for integration with their internal monitoring tools.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is strictly controlled using role-based access control (RBAC) and Multi-Factor Authentication (MFA). Only authorised MD IT personnel with specific operational roles can access administrative environments. All actions are logged and monitored for audit and compliance purposes. Support channels use secure authentication to verify client identity before assistance is provided. Access is automatically revoked when staff roles change or employment ends, ensuring least-privilege access and full traceability in line with DSPT and Cyber Essentials standards.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: MD IT’s security governance complies with the UK Government’s Cyber Essentials scheme and the NHS Data Security and Protection Toolkit (DSPT) requirements. These frameworks ensure robust access control, secure configuration, data protection, and incident response processes aligned with UK public sector and healthcare standards.
• Information security policies and processes: MD IT follows a comprehensive set of information security policies aligned with Cyber Essentials, NHS DSPT, and UK GDPR requirements. These include policies for data protection, access control, incident response, change management, and business continuity.; ; The Managing Director acts as the Information Security Lead, supported by the technical and compliance teams. All staff receive regular security and data protection training, with adherence monitored through internal reviews and audits.; ; Security incidents are logged, investigated, and reported in accordance with DSPT and GDPR processes. Policies are reviewed annually or following significant operational or regulatory changes to ensure continued compliance and effectiveness.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: MD IT uses a structured configuration and change management process to track all service components throughout their lifecycle. Each change is logged, version-controlled, and linked to a corresponding approval record. Proposed changes are assessed for security, stability, and compliance impact before implementation. Testing and peer review are mandatory for all updates, with rollback options in place. Production changes are deployed during scheduled maintenance windows, and post-deployment reviews verify performance and security integrity.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: MD IT continuously monitors potential threats through trusted sources, including NCSC advisories, vendor security bulletins, and CVE databases. Identified vulnerabilities are assessed for severity, impact, and exploitability. Critical patches are deployed immediately, while high and medium priority updates are implemented within defined maintenance windows. Regular automated scans and manual reviews ensure all systems remain protected. Findings are documented, verified post-deployment, and reviewed as part of the organisation’s DSPT and Cyber Essentials compliance processes.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: MD IT uses continuous log monitoring, intrusion detection, and alerting systems to identify unusual activity or potential compromises. Automated alerts are reviewed by the technical team, and incidents are triaged immediately based on severity. Critical incidents trigger an instant response with containment and investigation, while low-risk events are reviewed within 24 hours. Detailed audit logs are maintained for all systems, and post-incident reviews ensure corrective actions are implemented. The approach aligns with DSPT, Cyber Essentials, and UK Government cloud security principles.
• Incident management type: Supplier-defined controls
• Incident management approach: MD IT uses a structured incident management process supported by Atlas Assets for tracking and resolution. Pre-defined workflows exist for common events such as access issues, data breaches, and service outages. Users can report incidents via email or the online ticketing system. Each incident is logged, categorised by severity, and monitored through to resolution. Detailed incident reports, including root cause and corrective actions, are provided to affected clients. Post-incident reviews ensure lessons learned are implemented to prevent recurrence and improve system resilience.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: A fully featured trial version of Iris ImageNet is available free of charge for evaluation purposes. It includes all core and advanced functionalities, identical to the full version, for a 30-day trial period. After the trial, continued use requires a paid subscription or hosting agreement.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 3%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 6%
• Between £2,500,001 and £5,000,000: 7%
• Over £5,000,001: 8%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: D559e09e-08cf-4cf6-97df-d255991fed21
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: Yes
• Any other security certifications:
  • DTAC
  • DSPT

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
    • How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
    • Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
    • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
    • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
    • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
    • Plans for positive actions with community groups.
    • Measures for making facilities used in the delivery of the contract available for community groups, education or training
    • Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
    • Plans to respond flexibly and adapt approaches to community engagement and initiatives
    • Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds
    • Collaborating with anchor institutions and community groups to make facilities available for education, training or community events

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
    • Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Collection of the views and expertise of disabled people and their representative organisations on successfully supporting disabled employees or applicants
    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Introducing transparency to pay and reward processes
    • Offering a range of quality opportunities with routes of progression if appropriate, e.g. T Level industry placements, students supported into higher level apprenticeships.
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
    • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of issues relating to entering the contract workforce
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery
    • Content of the outreach activity is designed to suit the target cohort
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at hello@mdit.uk. Tell them what format you need. It will help if you say what assistive technology you use.