Skip to main content

Help us improve the Digital Marketplace - send your feedback

DATA8 LIMITED

Duplicare

Duplicare provides advanced data deduplication, matching, and merging to increase the accuracy and consistency of customer records. It identifies duplicates, resolves any conflicts, and ensures a single customer view across systems. The service enhances data quality, supports compliance, and ensures efficient, reliable, data management within CRM and business applications.

Features

  • Advanced matching engine identifies duplicate records with high accuracy.
  • Real-time deduplication ensures clean data during record creation.
  • Configurable matching rules tailored to organisational data requirements.
  • Automated merge processes maintain a single, trusted customer record.
  • Bulk deduplication handles large datasets efficiently and securely.
  • Audit trails track all merge, match, and update activities.
  • Role-based access controls manage permissions and data governance.
  • Seamless integration with Dynamics 365
  • Data stewardship tools support manual review and approval workflows.
  • Performance-optimised processing ensures fast, scalable data-quality operations.

Benefits

  • Improve data accuracy by eliminating duplicate customer records automatically.
  • Enhance customer service by providing a single, reliable customer view.
  • Reduce manual data-cleaning effort through automated matching and merging.
  • Accelerate onboarding by validating and consolidating customer information quickly.
  • Strengthen compliance by maintaining consistent, high-quality customer data.
  • Increase operational efficiency with streamlined data-management workflows.
  • Support informed decision-making using accurate, deduplicated customer datasets.
  • Prevent user errors by enforcing consistent data-quality rules.
  • Enable data stewards to review and resolve matches efficiently.

Pricing

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at clientsuccess@data-8.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

8 1 9 2 4 8 5 9 4 5 1 3 8 6 2

Contact

DATA8 LIMITED Dale Pilling
Telephone: 01513554555
Email: clientsuccess@data-8.co.uk

About your service

Service categories

Applications

Customer relationship management

  • Marketing campaign management
  • Sales force productivity and management
  • Customer service
  • Contact centre
Multi cloud support
Yes

Service scope

Software add-on or extension
No
Cloud deployment model
  • Public cloud
  • Private cloud
  • Hybrid cloud
Service constraints
Duplicare is compatible with Microsoft Dynamics 365 and supported on‑premise and online versions from 2016 onwards. The service needs a stable internet connection and access to supported CRM environments. Planned maintenance is scheduled outside core business hours wherever possible, and advance notice is provided to minimise any disruption. Performance may depend on the client’s CRM configuration, the volume of data, and what system resources are available. No specialist hardware is needed, and the service operates within standard cloud‑based and CRM‑supported configurations.
System requirements
  • Microsoft Dynamics 365 licence for supported online or on-premise environments.
  • Stable internet connection for cloud-based processing and synchronisation.
  • Appropriate CRM user permissions for data-management operations.
  • Sufficient CRM storage capacity for deduplication and merge processes.
  • Supported Dynamics version from 2016 onwards.
  • Modern web browser for accessing configuration and management tools.
  • Adequate server resources for large-volume data processing tasks.
  • Secure network configuration allowing API communication with Dynamics.
  • Role-based access controls enabled within the CRM environment.
  • Optional TLS client certificates for enhanced authentication assurance.

User support

Email or online ticketing support
Yes
Support response times
All tickets have an automated response acknowledge. During working hours (Monday - Friday 9am - 5:30pm), we provide a guaranteed 2 hour response.
User can manage status and priority of support tickets
No
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
Yes
Web chat support availability
9 to 5 (UK time), Monday to Friday
Web chat support accessibility standard
EN 301 549
Web chat accessibility testing
Our web chat functionality is delivered via Zendesk, a third‑party solution integrated into our WordPress CMS. We have not conducted independent testing with assistive technology users ourselves. Instead, we rely on Zendesk’s published accessibility documentation, which confirms compliance with WCAG 2.1 AA standards and compatibility with assistive technologies such as screen readers (JAWS, NVDA, VoiceOver) and keyboard‑only navigation.

While we have not run formal user testing, our team has carried out internal checks to validate basic usability, including keyboard navigation and screen reader spot‑checks. These checks confirmed that users can initiate, navigate, and exit chat sessions independently.

We recognise the importance of inclusive design and are committed to strengthening assurance in future development cycles. This includes monitoring Zendesk’s accessibility updates, engaging assistive technology users in structured testing, and welcoming feedback to identify improvements. Accessibility is embedded in our procurement and QA approach, ensuring that our services remain inclusive and compliant.
Onsite support
Yes, at extra cost
Support levels
All our clients are supported by a dedicated Account Management team. Each client is assigned an individual account manager who proactively oversees their requirements, ensuring continuity and consistency of service. To provide seamless cover during holiday or sickness periods, additional team members are cross‑trained and able to step in as needed. Importantly, we do not charge any additional fees for Account Management support.
Our Account Management team acts as a trusted point of contact and communicates effectively with clients. Their responsibilities include, but are not limited to:

- Overseeing and managing all aspects of service level agreements

- Scheduling and prioritising work to ensure timely delivery

- Advising on the most efficient and cost‑effective ways to meet client requirements

- Collaborating with the Technical Team to agree input and output formats for processed work

- Handling new requests that arise during a contract

- Responding promptly to client queries

- Ensuring all financial matters are managed accurately

- Meeting with clients regularly to review progress and provide updates

- Supplying progress reports where appropriate

- Acting as the first point of contact for issue resolution

- Gathering all necessary information from clients to enable effective delivery
Support available to third parties
Yes
AI chatbot
No

Onboarding and offboarding

Getting started
When first using Duplicare, users can install the managed solution within Microsoft Dynamics 365 and follow the provided configuration steps to enable matching, merging, and data‑quality features. Thorough setup guides and user documentation are available to help users configure matching rules, define merge behaviours, and integrate Duplicare into existing CRM workflows.

For organisations using Dynamics 365, we provide step‑by‑step installation instructions, example configurations, and guidance on best‑practice data‑quality management. Our support team is available to help with initial setup, answer any technical questions, and help users validate their configuration through test scenarios.

Onboarding support is available via phone, email and webinar to ensure users can quickly become familiar with the service. Online training sessions can be arranged if needed, and onsite training is available at additional cost. Throughout the onboarding process, users have access to comprehensive documentation, configuration guidance, and ongoing support from the Data8 team to ensure Duplicare is deployed effectively and aligned with organisational data‑quality objectives.
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
At the end of the contract, users retain full ownership and control of any data that has been processed using Duplicare. The service operates entirely within the customer’s Microsoft Dynamics 365 environment, which means all matched, merged, or reviewed records are retained solely within the buyer’s CRM. Duplicare does not extract, store, or save customer data outside the client’s system, and no data is held by Data8 once processing is complete.

Because all data resides within the buyer’s own CRM environment, there is no separate extraction process needed at contract end. Users can export, back up, or manage their CRM data using the standard tools and functionality supplied by Microsoft Dynamics 365.

When the contract ends, any Duplicare‑specific components including matching rules, configuration settings, or workflows can be removed by uninstalling the managed solution. Any API keys or credentials associated with the service will be deactivated, and no further processing will occur.

This approach ensures that all customer data remains under the buyer’s control at all times, with no reliance on Data8 for data retrieval or extraction.
End-of-contract process
At the end of the contract, access to the Duplicare service will be removed and any associated credentials or licence entitlements will be deactivated. As Duplicare operates entirely within the customer’s Microsoft Dynamics 365 environment and no data is stored externally, there is no data extraction process required. Any matched, merged, or reviewed records are stored within the buyer’s CRM, and no customer data is held by Data8 once processing is complete. Uninstalling the managed solution is optional and can be completed by the buyer if they opt to remove the functionality from their environment.

The contract price includes access to the Duplicare service, as well as use of the managed solution within supported Dynamics 365 environments, standard support, updates, and user documentation. Additional costs may apply for optional services such as onsite training, extended consultancy, bespoke configuration, or advanced data‑quality projects. There are no additional charges applied specifically at the end of the contract.
Documentation accessibility standard
WCAG 2.2 A

Using the service

Web browser interface
Yes
Supported browsers
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
Application to install
Yes
Compatible operating systems
  • Android
  • IOS
  • Windows
  • ChromeOS
  • Other
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
All core Duplicare functionality is available using both mobile and desktop devices. Users can review potential duplicates, validate those matches, and manage data‑quality tasks across supported platforms. Matching accuracy, processing behaviour, and response times remain consistent regardless of device. There are no functional limitations on mobile; however, administrative configuration, bulk operations, and more advanced data‑management tasks are usually easier to complete on desktop due to the larger screen and easier navigation. Apart from this usability difference, the service operates in the same way across both mobile and desktop environments.
Service interface
No
User support accessibility
WCAG 2.2 A
API
Yes
What users can and can't do using the API
Users can set up the Duplicare service by generating API keys, configuring authentication, and then connecting their CRM or applications to the published API endpoints as described in the service documentation. Users can submit records for matching via the API, then retrieve match results, and amend request parameters to control how potential duplicates are identified and returned. API keys can be rotated, and integration settings can be managed within their own environment, with the ability to automate data‑quality workflows using the available endpoints.

The API should not be used to modify underlying matching algorithms, change account‑level configuration, alter merge rules, or update system‑wide data‑quality policies. It also should not be used to manage billing, licensing, or administrative settings. Any structural or configuration changes to the Duplicare service must be completed within the CRM environment or by Data8 with no amendments performed directly through the API.
API documentation
Yes
API documentation formats
  • HTML
  • PDF
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
Users can tailor how Duplicare identifies, matches, and merges duplicate records to match their organisational data‑quality requirements. Customisable elements include matching rules, field weightings, merge behaviours, survivorship logic, review workflows, and how potential duplicates are displayed within the CRM. Users can also configure thresholds, scoring models, and automated or manual processing options to suit different teams or data‑governance processes.

Customisation is completed via the configuration options which are available within Microsoft Dynamics 365, including solution settings, rule editors, and data‑management tools. Users integrating through an API can further customise request parameters, match criteria, and response structures to support automated deduplication workflows within their own applications.

Administrators can define default behaviours, manage access permissions, configure merge policies, and set role‑specific rules to ensure consistent data‑quality standards across the organisation. Technical users, developers, and system administrators can personalise advanced matching logic, API integrations, and workflow automation. Non‑technical users can amend field mappings, review settings, and duplicate‑detection preferences where supported by the CRM interface.

All customisation options are designed to be controlled and flexible, allowing organisations to adapt Duplicare to their data‑quality strategy without changing the underlying matching engine.

Scaling

Independence of resources
Duplicare is delivered using a scalable, cloud‑based infrastructure which is designed to ensure that demand from one organisation does not impact the performance experienced by others. Processing capacity, system load, and service performance are constantly monitored, with additional resources provisioned when required to maintain consistent matching and merging speeds. The service is designed to avoid operating at levels that could cause issues between users, ensuring reliable data‑quality processing regardless of overall demand. This approach maintains stable performance for all clients, even during periods of high activity.

Analytics

Service usage metrics
Yes
Metrics types
There is dashboard built in to the solution, which enables a breakdown and analysis of which CRM users are creating duplicates, resolving duplicates and across which entities.

Our batch processing enables the user to identify how many duplicates are present across a particular subset of CRM before resolving, various reports may be extracted and analysed pre-merge.
Reporting types
  • Real-time dashboards
  • Regular reports
  • Reports on request
Resource tagging
No
FOCUS resource tagging
No

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Conforms to BS7858:2019
Government security clearance
Baseline Personnel Security Standard (BPSS)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
No
Datacentre security standards
Supplier-defined controls
Penetration testing frequency
At least once a year
Penetration testing approach
‘IT Health Check’ performed by a CREST-approved service provider
Protecting data at rest
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Other
Other data at rest protection approach
Duplicare does not store customer data at rest outside the purchaser’s Microsoft Dynamics 365 environment. Any processing occurs within the client’s CRM, and no customer information is retained by Data8. The underlying platform is protected using encrypted storage, strict access controls, and hardened infrastructure to safeguard service components. Access to system resources is granted only when necessary, for a defined purpose, and is on a time‑limited basis, with permissions automatically removed every night. API keys, configuration data, and service credentials are securely stored and never exposed in plaintext, ensuring strong protection even though no client data is held.
Data sanitisation process
Yes
Equipment disposal approach
A third-party destruction service
Data sanitisation type
Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

Data export approach
In order to configure data8 duplicare you need to add a connection back to your Microsoft Dynamics 365 instance from our website, giving us access to your data. This is needed for several features; License activation, Batch duplicate detection jobs, Address standardisation, Telephone number standardisation,Fuzzy company name match rules. Data is seamlessly exported using the Dynamics SDK.
Data export formats
  • CSV
  • Other
Other data export formats
Text
Data import formats
  • CSV
  • Other
Other data import formats
Text

Data-in-transit protection

Data protection between buyer and supplier networks
TLS (version 1.2 or above)
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
Data8 are happy to consider Service Level Agreements (SLAs) for the Duplicare service. Duplicare is delivered via a resilient, cloud‑based infrastructure which is designed to maintain high availability and consistent performance during all data‑quality operations. We strive to achieve 99.999% uptime (“five 9s”), and service availability is independently monitored by a third‑party provider, with uptime statistics made publicly accessible for full transparency.

If a formal SLA is agreed as part of the contract, this can include defined availability commitments and the associated service credits or refunds should availability fall below the agreed level. Service credits are generally calculated based on the duration and severity of any outage and are applied to future invoices or renewals.

Because Duplicare operates as a real‑time data‑quality and deduplication service within Microsoft Dynamics 365, system performance is constantly monitored and resources are scaled proactively to ensure that demand from one client does not impact another. This approach supports consistently high availability, stable processing speeds, and reliable performance throughout the contract period.
Approach to resilience
Duplicare is designed with high resilience to ensure consistent performance and continuous availability for all data‑quality operations. The service is delivered via Data8’s resilient, cloud‑based infrastructure, which operates across geographically separated data centres with independent power, networking, and upstream providers. This architecture supports seamless failover in the event of a data‑centre‑level issue, ensuring that service availability is maintained.

Within each data centre, Duplicare runs across a load‑balanced cluster of servers to protect against individual server failure and to distribute demand evenly. Capacity, system load, and performance are constantly monitored, with additional resources provisioned when required to maintain stability during periods of high activity.

All infrastructure components are hardened, monitored, and maintained in line with security best practice and the government’s cloud security principle on asset protection and resilience. This includes strict access controls, continuous monitoring, and regular security updates to ensure the platform remains robust and secure.

Further architectural details are available on request where appropriate.
Outage reporting
Data8 provides transparent outage reporting for the Duplicare service. A public status dashboard is available, which displays real‑time service availability, historical uptime, and details of any current or recently resolved incidents. The dashboard is monitored independently to ensure accuracy and is available to all customers without authentication.

Where appropriate, Data8 can additionally issue email alerts to notify customers of significant service interruptions or planned maintenance. These notifications include information on the nature of the issue, expected resolution times, and confirmation once service has been restored.

An API‑based status feed can be made available on request for organisations that wish to integrate outage information directly into their own monitoring or alerting systems. This allows buyers to incorporate Duplicare service status into their existing operational dashboards and incident‑management processes.

Identity and authentication

User authentication needed
Yes
User authentication
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Username or password
  • Other
Other user authentication
Access to Duplicare is authenticated via Microsoft Dynamics 365’s native security model. Users sign in using their organisation’s chosen identity provider, such as Azure Active Directory with Single Sign‑On (SSO) and optional Multi‑Factor Authentication (MFA). All authentication, session management, and access control are handled by Dynamics 365, ensuring that only authorised users can access Duplicare functionality. The service inherits the platform’s role‑based security, which allows organisations to control permissions, restrict access to specific features, and enforce governance policies. All authentication methods align with government cloud security principles for identity and access management.
Access restrictions in management interfaces and support channels
Access to Duplicare’s management interfaces is controlled using Microsoft Dynamics 365’s role‑based security model, which ensures users can only access functions appropriate to their permissions. Administrative and configuration capabilities are restricted to authorised personnel, with all access authenticated and logged for audit purposes. Support channels follow strict access‑control procedures, with only designated Data8 staff permitted to view account information or make configuration changes. Sensitive actions require elevated privileges, and all support interactions follow robust verification processes to ensure customer data and system settings remain fully protected.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Username or password
  • Other
Description of management access authentication
Management access to the Duplicare service is restricted to authorised personnel and protected using multiple authentication methods. Administrators can authenticate using username and password, with Multi‑Factor Authentication (MFA) needed for elevated access. The service also supports public key authentication, including TLS client certificates, for customers needing stronger assurance. Additionally, organisations can configure SAML‑compatible Single Sign‑On (SSO) to enforce their own identity policies. All management actions are tracked and permissions follow a strict least‑privilege model.

Audit information for users

Access to user activity audit information
Users contact the support team to get audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
At least 12 months

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
Data8 recognises that confidentiality, integrity, and availability are fundamental to effective Information Security Management and integral to the delivery of the Duplicare service. Data8 adopts appropriate Information Security Controls in line with the BS ISO/IEC 27001:2022 standard, and our Information Security Policy is designed to operate to the highest standards through continual improvement, formal registration, and annual external review.

Responsibility for maintaining these standards is organisation‑wide, supported by the Managing Director, who ensures that information security remains a core competency for all staff. All employees complete Information Security training during induction, followed by annual formal training and ongoing on‑the‑job reinforcement.

Compliance with policies is monitored through regular internal and external audits, with findings reported directly to the Managing Director. Access controls, change management processes, and operational procedures are enforced consistently across the Duplicare platform to ensure policies are followed and risks are effectively managed.
Software Security Code of Practice
Yes

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
All components of the Duplicare service are tracked throughout their lifecycle using structured configuration management and version‑control processes. Every change request is formally logged, reviewed, and linked to the final implementation, including associated code updates and deployment records. Each change undergoes a security impact assessment to identify and mitigate potential risks before release. Only authorised personnel can implement updates, and all deployments follow controlled release procedures with full audit trails maintained for traceability and accountability. This ensures that Duplicare remains secure, stable, and compliant throughout its operational lifecycle.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
Potential threats to the Duplicare service are assessed using constant monitoring, internal security testing, code reviews, and analysis of intelligence from recognised technology and information‑security sources. Every identified vulnerability is logged as a security incident and assigned a severity rating to ensure appropriate prioritisation. Critical patches can be deployed within 30 minutes, while other updates follow a scheduled release process after assessment and approval. Any changes are implemented via controlled deployment procedures to minimise risk and maintain service stability.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Potential compromises are identified via constant monitoring, including Intrusion Detection Systems, firewall alerts, and automated anomaly detection across the Duplicare platform. When a potential compromise is detected, incidents are assessed immediately and appropriate actions are taken, these could include isolating affected components, blocking suspicious IP addresses, or temporarily disabling specific service functions. Data8 typically responds to security incidents within 30 minutes, with all actions logged, reviewed, and incorporated into ongoing service‑improvement processes to ensure effective resolution and strengthened future protection.
Incident management type
Supplier-defined controls
Incident management approach
Incidents affecting the Duplicare service follow predefined processes for typical events, such as service degradation, connectivity issues, and processing errors. Every incident is logged, assigned a severity level, and allocated to the appropriate team for investigation. Users can report incidents via the support portal, email, or telephone. When an incident is resolved, the fix is independently reviewed and signed off to ensure accuracy and completeness. Affected customers are notified where appropriate, and incident reports can be provided on request to support audit, compliance, or internal review requirements.
Post-quantum cryptography secure
Yes

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

Connection to public sector networks
No

Pricing

Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
A free trial is available for a fixed 30‑day period.
All functionality is included except for only 10% of the results of batch processing are exposed to the buyer.
Link to free trial
https://portal.data-8.co.uk/Identity/Account/Register

Discount percentage by annual call-off contract value (excluding VAT)

Less than £250,000
0%
Between £250,000 and £500,000
2.5%
Between £500,001 and £1,000,000
5%
Between £1,000,001 and £2,500,000
5%
Between £2,500,001 and £5,000,000
5%
Over £5,000,001
5%

Non-mandatory Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
QAS International
ISO/IEC 27001 accreditation date
Monday 27 October 2025
What the ISO/IEC 27001 doesn’t cover
Our ISO/IEC 27001 certification covers the security management system for our core data processing, infrastructure, and operational controls. However, as with most certifications, there are certain areas which sit outside the defined scope. The certification does not cover third‑party systems that customers choose to integrate with independently, it also does not extend to customer‑managed environments, devices, or networks. It does not cover any on‑premise customer deployments, legacy systems which are no longer in active use, or bespoke solutions developed outside the certified service boundary. Physical security of customer sites, customer‑owned hardware, and any external services procured directly by customers are also out of scope. In addition, the certification does not apply to experimental, pre‑production, or sandbox environments used for internal testing or development. Only the defined cloud‑hosted production environment and supporting processes are included within the accredited scope.
ISO 28000:2022 certification
No
ISO 9001 certification
No
Quality management systems (QMS)
Yes
CSA STAR certification
No
PCI certification
Yes
Who accredited the PCI DSS certification
FISERV/Clover
PCI DSS accreditation date
Monday 28 April 2025
What the PCI DSS doesn’t cover
Our PCI DSS certification, the latest certification was awarded on 28/04/2025, applies specifically to the defined cardholder data environment (CDE) and the systems, processes, and controls included within that audited scope. Any areas of the service that fall outside this formally assessed scope are not covered by the certification.

The certification does not extend to customer‑managed environments, customer devices, or any third‑party systems or integrations that customers have selected to use alongside our services. It does not include any bespoke customer implementations, optional modules deployed outside the assessed CDE, or any processing, transmission, or storage of payment card data carried out independently by customers.

Activities performed by customers or partners, including their own network configurations, access controls, or operational procedures, are outside the certified scope. The certification also does not cover services unrelated to payment card data handling or any environments not explicitly included in the annual PCI DSS audit.

We maintain annual recertification, with our next renewal scheduled for April, ensuring continued alignment with PCI DSS requirements for the in‑scope systems and processes.
Cyber essentials
Yes
Please provide your Cyber Essentials Certificate Number
649af319-469d-4f16-9e4c-9a9e6d659211
Cyber essentials plus
No
Cyber Essentials Alternative
None of the criteria
Other security certifications
No

Social value

Section B - Commitment for Future: Delivery
  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
    • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
    • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
    • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
    • Plans for positive actions with community groups.
    • Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds
    • Collaborating with anchor institutions and community groups to make facilities available for education, training or community events
  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it
  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
    • Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
    • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of issues relating to entering the contract workforce
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery
    • Content of the outreach activity is designed to suit the target cohort
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at clientsuccess@data-8.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.