COMPUTACENTER (UK) LIMITED

Computacenter Resale of Cloudflare Access

Cloudflare Access replaces legacy VPNs with a Zero Trust Network Access (ZTNA) solution. It secures internal applications, SSH, and RDP by verifying identity, device posture, and context for every request. Deliver fast, clientless access for employees and contractors through a global network, ensuring high performance and robust data sovereignty.

Features

• Idenity based access control
• Device posture verification
• Browser based Clientless Access
• Contextural policies
• Regulatory alignment
• Secure putbound only tunnelling
• Service Token Authentication
• MCP / AI Controls
• Audit logging and incident response
• Infrastructure as code support

Benefits

• Integration with Identity Providers (Entra ID, Google) granular, per-application policies
• Real time checks and responses to device health
• Agentless, support for any service including SSH, VNC, RDP
• Dynamic rules that change with location, device and risk
• Designed for frameworks such as CAF and NIS2
• Post quantum encrypted tunnels, no inbound connections required
• Secure, non-interactive access for automated services, APIs
• Enforce audit trails and guardrails for AI
• Comprehensive audit trails and incident response tools
• Terraform and API-first management for automated, repeatable security deployments.

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Government@computacenter.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

826523555484753

Contact

Colin Smith
+44 (0) 7386694023
Government@computacenter.com

About your service

• Service categories:

  Systems Infrastructure Software

  Security

  • Cloud native application protection platform
  • Security analytics
  • Governance, risk and compliance

  Identity and access management

  • Access
  • Privilege

  Network security

  • Trusted network access and protection
  • Active application security
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: A full suite of edge compute with storage, AI inference and compute and SASE suite of tools
• Cloud deployment model: Public cloud
• Service constraints: There are very few constraints on the use of our services, primarily those of OS support for our endpoint agents and tunnels along with a very minimal hardware recommendation for running the tunnels - https://developers.cloudflare.com/cloudflare-one/networks/connectors/cloudflare-tunnel/downloads/
• System requirements:
  • Supported Operating System
  • Minimum hardware requirement for Cloudflare tunnels

User support

• Email or online ticketing support: Yes
• Support response times: Phone, chat, and email support with median response time of 15 minutes. For critical business issues, Enterprise customers have access to our 24/7/365 emergency phone support hotline
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: Cloudflare’s web chat interface is accessible through its integration into a dashboard designed with high-contrast visuals and inclusive navigation. The service employs semantic landmarks, enabling screen readers to accurately identify dialogue boxes, input fields, and message alerts. Accessibility is further enhanced by full keyboard support, allowing users to navigate the chat widget and initiate sessions using standard keys such as Tab and Enter without requiring a mouse
• Onsite support: Yes, at extra cost
• Support levels: Enterprise customers can choose between Enterprise support and Premium Support. Premium Enterprise support includes increased SLA response times and prioritised ticket handling. Enterprise is included as a part of the standard Enterprise contract. Premium Support pricing is bespoke. Premium customers receive a dedicated Customer Success Manager and Customer Solutions Engineer. A dedicated Technical Account Manager can also be assigned at an extra cost.
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: Cloudflare assists enterprise customers start using our service in a consultative manner using various methods, including remote and on-site and written documentation.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
  • Other
• Other documentation formats:
  • Json
  • STIX
• End-of-contract data extraction: The Cloudflare User Interface includes data aggregation logs, which include audit logs (log of every action taken within the interface and change to an account setting), as well as HTTP request logs. Data can be extracted via API in aggregate, or individual requests can be downloaded from the UI directly. Upon ending a contract, Cloudflare will advise customers on capturing all these data prior to account termination.
• End-of-contract process: N/a
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
  • ChromeOS
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Cloudflare provides a single, unified web dashboard that is fully responsive and device-agnostic. There is no functional difference between the mobile and desktop service, as both utilize the same Cloudflare API and management interface.; ; The dashboard automatically optimizes for screen size, allowing administrators to manage settings from any modern mobile or desktop browser with full feature parity. While desktop is preferred for complex data analysis and development, the mobile experience is specifically optimized for urgent "on-the-go" tasks, such as enabling Under Attack Mode or purging cache.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: Cloudflare provides a unified, web-based management console for all security, performance, and networking services. This single-pane-of-glass interface features a composable architecture, allowing administrators to configureall services from one dashboard. It includes real-time data aggregation, audit logs, and advanced analytics for granular traffic insights. Beyond the GUI, Cloudflare offers a comprehensive GraphQL and REST API, enabling full programmatic control and integration with external tools like Terraform. The interface is visually accessible, supports modern browsers, and enforces secure access via Multi-Factor Authentication and Identity Provider federation.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: N/a
• API: Yes
• What users can and can't do using the API: The Cloudflare API provides comprehensive programmatic access to the platform's entire suite of networking, security, and performance services. Users can perform virtually any task available in the dashboard, including account management, configuration, and security policy deployment.; ; To set up the service, users authenticate using scoped API Tokens or Global API Keys to establish initial zone configurations, upload SSL certificates, and define rules. Changes are made through standard HTTPS requests using GET, POST, PUT, PATCH, and DELETE methods, allowing for seamless integration with CI/CD pipelines and infrastructure-as-code tools like Terraform or Ansible. This enables automated scaling, real-time cache purging, and dynamic firewall updates.; ; While the API is highly flexible, certain limitations apply to maintain platform stability and security. Global rate limits are enforced, typically capping requests at 1,200 per five-minute period per account, though Enterprise customers can request increases. Additionally, the API does not support "white labeling" or reselling services without a commercial agreement. Some high-level administrative functions, such as initial account creation or certain billing modifications, may require manual intervention or specific multi-factor authentication steps through the web interface for enhanced security.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Cloudflare One Zero Trust offers granular customization across the platform. For example, Administrators can define bespoke Access policies based on user identity, geographic location, and Device Posture checks (e.g., EDR presence or disk encryption). Network-level customization includes tailored DNS and HTTP filtering rules, custom block pages, and specific Remote Browser Isolation (RBI) triggers.; ; Customization is achieved through the Zero Trust Dashboard's visual policy builder or programmatically via the Cloudflare API and Terraform for automated, infrastructure-as-code deployments.; ; Access is managed through Role-Based Access Control (RBAC). While Super Administrators have global authority, specialized roles such as Zero Trust Administrators manage connectivity and security policies, while Access Bookmarks Administrators handle application launcher visibility. This ensures that only authorized personnel can modify critical security configurations, providing a secure, audited environment for distributed teams

Scaling

• Independence of resources: Cloudflare's Anycast architecture and software-based security implementation ensure high reliability and scalability across our 330+ data centers, facilitating up to a 450Tbps global footprint.; All of our services run on all of our servers, in every data center, paired with a 100% Anycast architecture. Anycast network routing is able to route incoming connection requests across multiple data centers.

Analytics

• Service usage metrics: Yes
• Metrics types: Custom metrics can be agreed with the account team but detailed information on license usage, request volumes, performance are always available
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Cloudflare

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
  • Other
• Other data at rest protection approach: N/A
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: Cloudflare enables data export primarily through Logpush, which streams Gateway (DNS, HTTP, Network) and Access logs to cloud storage or SIEM providers in JSON (ndjson) or CSV formats. For immediate needs, administrators can manually download analytics and security event data as CSV directly from the dashboard. Additionally, users can export account-level PII via profile settings or through the Cloudflare API to maintain full data portability. These open formats ensure high interoperability for compliance auditing, long-term retention, and integration with third-party security operations tools.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Json
  • STIX
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Cloudflare's Enterprise plan offers a 100% uptime guarantee.
• Approach to resilience: Cloudflare's network is based on Anycast routing, any one of thousands of servers in 330+ locations around the world is able to provide all of our service functionality on a given IP address. The network is the most interconnected network in the world - present in more Internet Exchanges globally than any other. The network is designed to cope with many nodes on the network map becoming unavailable and still providing service. Data centres are regularly taken offline for among other reasons maintenance without any service degradation. Should a certain location become unavailable due to high load from an attack, we will proactively re-route our prioritised Enterprise service level customers to ensure the minimal impact is seen for your application users in that region. Within each data centre, no single server/node is responsible for any service. These are also distributed across all metals such that server failures, hardware or networking issues won't impact the service/performance of our customers.
• Outage reporting: Proactive account management, Public dashboard, and email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Cloudflare provisions access based on the principles of least privilege and need to know. Additional access must be requested via our internal ticketing system and it requires both a legitimate business reason and manager approval. Logging and Monitoring Policy requires logging of activities in critical systems. We perform quarterly access reviews for privileged access. Cloudflare additional have the ability to restrict access to any CRM, backend systems and platform to specfic users only.; ; Cloudflare's 24/7 Detection and Response team monitors logs/alerts for malici
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: You control when users can access audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cloudflare maintains robust, annually reviewed security policies aligned with industry standards. Verified by ISO 27001, SOC 2, and PCI DSS, these frameworks cover incident response, encryption, and risk management. This comprehensive structure ensures global data protection and compliance, with full certifications available to customers under NDA.
• Information security policies and processes: Cloudflare has a documented information security policy and a set of policies that are reviewed at least annually and aligned with industry standards. These policies are reviewed during PCI-DSS, ISO27001, ISO27701, ISO27018, and SOC2 external audits, and certifications are available under NDA.; ; The information security policies include: Acceptable Use Policy, Access Control and Authentication Policy, Asset Management Policy, Business Continuity and Disaster Recovery Policy, Customer Audit, Scan and Penetration Test Policy, Encryption & Key Management Policy, Endpoint and Network Security Policy, High Risk Area Travel Policy, Information Security Policy, Logging and Monitoring Policy, Mobile Device and Teleworking Policy, Security Risk Management Policy, Security and Privacy Incident Response Policy, Software Development Lifecycle and Change Management Policy, Third Party Risk Management Policy, Third Party Software Access to Cloudflare Data Policy, Vulnerability Management Policy.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Cloudflare's Change Management policy is compliant with PCI-DSS, ISO27001, and SOC2. Changes must go through the change management process, including peer review. Changes may require additional approval by an SRE. Cloudflare implements change management processes and procedures for all systems supporting production environment, including third-party systems. All changes are tracked via centralized change ticketing system, and changes to production systems include type, description, impact-assessment, approvals, implementation procedure, and rollback procedure. Deployments are reviewed and approved by the designated Engineering Manager. Policy ensures that all changes are auditable, deployed via automation, implemented by authorized-personnel, and monitored post-implementation.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Cloudflare's Vulnerability Management Policy is aligned with PCI-DSS, ISO27001, and SOC 2. Cloudflare subscribes to intelligence feeds and leverages open source vulnerability databases such as the NVD. Cloudflare performs monthly internal and external vulnerability scans, annual penetration tests by third parties, and operates a Bug Bounty program. Patches are prioritized by severity and installed per PCI DSS guidelines, with high/critical vulnerabilities remediated within 30 days and CISA KEVs within 15 days.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: We comply with industry-standard protective monitoring processes as part of our certifications, including ISO 27001, ISO 27701, SOC 2, and PCI. Our protective monitoring includes annual internal and external audits, the use of intrusion detection techniques via Endpoint Detection and Response software, and quarterly reviews of personnel with production access. We generate and review extensive audit logs and leverage automated monitoring solutions to detect and respond to anomalous activity.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Cloudflare maintains a documented Incident Response Plan, reviewed and updated annually, with pre-defined procedures for detection, containment, eradication, recovery, and post mortem, following ISO 27001 certified ISMS and ITIL best practices. Users report incidents via the support portal, email, chat, or phone, initializing a ticket tracked by senior engineers and the Security Team. Cloudflare's Detection and Response team, which includes the Security Incident Response Team (SIRT), operates 24/7 to investigate reported incidents and ensure rapid containment and remediation. The team is responsible for triaging confirmed security incidents and responding to potentially malicious activity at any time.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Cloudflare offers a wide range of services. Some services are available within our Self-service free plans. Latest details at https://www.cloudflare.com/en-gb/plans/. Additionally a free custom service POC may be provided for up to 30 days subject to mutual agreement. Network Services are excluded from free trials.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI
• ISO/IEC 27001 accreditation date: Monday 28 April 2025
• What the ISO/IEC 27001 doesn’t cover: ISO 27001 is a globally recognized framework designed to protect the confidentiality, integrity, and availability of an organization’s information assets. Rather than focusing solely on IT security, it mandates a Risk Management approach where a business identifies its specific data threats and implements a tailored "Information Security Management System" (ISMS) to mitigate them.
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: BSI
• ISO 9001 accreditation date: Sunday 9 March 2025
• What the ISO 9001 doesn’t cover: ISO 9001 is the international standard for Quality Management Systems (QMS), focusing on the principle that consistent processes lead to consistent results. For an IT reseller, it is less about the technical "specs" of the gear and more about the reliability of the customer experience.; It mandates a "Plan-Do-Check-Act" (PDCA) cycle, requiring the business to document how it handles everything from sales inquiries and order fulfillment to customer complaints and supplier vetting. By shifting the focus from "fixing mistakes" to preventing them through continuous improvement, ISO 9001 ensures that a client receives the same high level of service every time they order. It serves as a structural guarantee that the business is managed through data-driven decisions and a strong commitment to customer satisfaction, rather than luck or ad-hoc effort.
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 0d56f53b-8780-41c4-92a0-c7c9e937d0b1
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 7aa420c0-18dd-4cf4-99da-183fce210190
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
    • How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
    • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
    • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
    • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
    • Plans for positive actions with community groups.
    • Measures for making facilities used in the delivery of the contract available for community groups, education or training
    • Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
    • Plans to respond flexibly and adapt approaches to community engagement and initiatives
    • Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds
    • Collaborating with anchor institutions and community groups to make facilities available for education, training or community events

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
    • Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Collection of the views and expertise of disabled people and their representative organisations on successfully supporting disabled employees or applicants
    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Introducing transparency to pay and reward processes
    • Offering a range of quality opportunities with routes of progression if appropriate, e.g. T Level industry placements, students supported into higher level apprenticeships.
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
    • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of issues relating to entering the contract workforce
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery
    • Content of the outreach activity is designed to suit the target cohort
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Government@computacenter.com. Tell them what format you need. It will help if you say what assistive technology you use.