IT & Software Tenders UK

The IT and software procurement landscape

Public sector IT procurement sits across dozens of buying authorities, from central government departments and arm's-length bodies through to NHS trusts, local councils, universities, police forces, and housing associations. The routes to market are layered: some buyers procure directly on the open market for lower-value contracts, while larger or more complex requirements pass through Crown Commercial Service frameworks, sector-specific frameworks, or Dynamic Purchasing Systems.

CPV codes give you a reliable signal of what is being bought. Core codes to monitor include 72000000 (IT services), 72200000 (software programming and consultancy), 72300000 (data services), 72500000 (computer-related services), 72600000 (computer support and consultancy), and 48000000 (software packages and information systems). Cyber security work typically appears under 72220000 (systems and technical consultancy) or 79710000 (security services), depending on how the buyer classifies it.

How public sector IT buyers procure

Central government and most arm's-length bodies are expected to consider the Digital Marketplace before going to open tender for common technology needs. The marketplace hosts two principal frameworks managed by the Crown Commercial Service.

G-Cloud is a catalogue-style framework for cloud-based software (SaaS), platforms (PaaS), infrastructure (IaaS), and cloud support services. Suppliers apply once per iteration to be listed; buyers then call off directly without a further competition. Call-off values can range from small pilots to multi-year enterprise contracts.

Digital Outcomes and Specialists (DOS), now succeeded by the Digital Outcomes, Specialists and Programmes (DOSP) framework, is used when a buyer needs a team or individual for digital, data, or technology outcomes. Suppliers on the framework compete in mini-competitions for each requirement, which are published as contract notices on the Digital Marketplace and Find a Tender Service.

Technology Services is a Crown Commercial Service framework covering managed IT services, service desk, hosting, and infrastructure. It is used by a wide range of central and local public bodies.

The NHS has its own procurement routes through NHS Shared Business Services and the NHS Supply Chain, and many trusts additionally use Atamis-based portals for their own above-threshold procurements. Universities frequently use JISC and sector consortium frameworks for software and connectivity, as well as running open tenders for bespoke development work. Local councils procure IT through a mixture of CCS frameworks, regional consortium agreements, and their own above-threshold notices published on Find a Tender or Contracts Finder.

Cyber requirements are increasingly embedded in specifications regardless of the primary service being procured. Cyber Essentials certification is a mandatory baseline for many central government contracts involving handling of personal data or providing certain network services, and it is becoming a standard expectation across the NHS and local government. Cyber Essentials Plus is often required for contracts with more sensitive data handling. Suppliers without certification at the relevant level are frequently excluded at the qualification stage.

How to win IT and software contracts

The most consistent mistake IT suppliers make is bidding reactively, only once a contract notice appears. At that point the specification is already written, often around a preferred approach the buyer developed through pre-market engagement. Suppliers who win repeatedly are those who engage earlier, either through a published Prior Information Notice, a market engagement event, or simply by making their case studies and technical credentials visible before procurement starts.

For framework routes such as G-Cloud, the application itself is your main competitive document. Descriptions need to be precise about service scope, pricing, and security controls. Buyers search the catalogue using keyword terms, so vague capability statements reduce your discoverability. Review your listing at each framework refresh to ensure it reflects what you actually deliver.

For open competitions and mini-competitions, the selection questionnaire and technical evaluation criteria matter more than your website. Public sector buyers score against a published method statement, so your response must map directly to the stated evaluation criteria, not to your preferred way of describing your services. Evidence should be drawn from comparable public sector deployments where possible.

Subcontracting and consortium arrangements are well established in public sector IT, particularly for larger programmes requiring a mix of delivery capability, system integration, and managed service. Smaller specialists often enter the market as a named subcontractor to a prime supplier, then build a track record that enables direct bids on subsequent contracts.

Monitor award notices as well as live tenders. Award records show which frameworks and portals your target buyers use, what they pay, and when contracts are likely to come up for renewal. That forward visibility is often worth more than the notice itself.