Cyber Resilience Phishing Subscription Renewal

HYWEL DDA UNIVERSITY HEALTH BOARD

This public procurement record has 3 releases in its history.

AwardUpdate

22 May 2026 at 11:55

Award

14 Jan 2026 at 12:04

Award

25 Nov 2025 at 11:47

Summary of the contracting process

Hywel Dda University Health Board has finalised the procurement process for renewing its cyber resilience phishing subscription, aimed at enhancing staff awareness and response to phishing attacks. The procurement, managed by NHS Wales Shared Services Partnership, falls under the services industry category and is located in Carmarthen, UK. The procurement method used was a direct award, justified by specific technical reasons and alignment objectives with Swansea Bay, effective from 31st December 2025 until the end of 2030. Meta Compliance Limited has been awarded the contract valued at £194,325, signed on 23rd December 2025, with expectations of operational savings.

This procurement offers significant growth opportunities for businesses specialising in IT services, particularly those providing compliance software solutions. Companies capable of delivering advanced cyber security training and awareness platforms will find this contract highly appealing. The high-value contract demonstrates the need for sophisticated technical capabilities and strategic alignment in achieving cost efficiencies and resilience against cyber threats, particularly appealing for large-scale IT firms seeking to expand their footprint within the NHS framework.

How relevant is this notice?

Notice Title

Cyber Resilience Phishing Subscription Renewal

Notice Description

Hywel Dda University Health Board (HDUHB) have awarded a contract to renew their cyber resilience licences utilised across the Health Board. The platform allows digital services to educate staff on how to identify attacks and respond with confidence by providing short training content for staff for awareness and reporting. The solution provides digital services with metrics to track trends and identify areas where further awareness or knowledge sharing is required.

Procurement Information

The Health Board requires a cyber resilience phishing simulation and awareness subscription to strengthen staff readiness against phishing attacks and meet NHS Wales cyber security standards. They are looking to align this contract with their neighbouring Health Board, Swansea Bay to achieve significant technical, operational and monetary savings. This direct award is made under the provisions of Section 41 and Schedule 5 of the Procurement Act 2023, specifically given the exclusive integration and the absence of reasonable alternatives that can deliver the same level of interoperability and functionality without disproportionate cost and risk.

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-05e82d
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/047824-2026
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
UK7 - Contract Details Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Direct
Procurement Method Details
Direct award
Tender Suitability
Not specified
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

48 - Software package and information systems

72 - IT services: consulting, software development, Internet and support


CPV Codes

48170000 - Compliance software package

72000000 - IT services: consulting, software development, Internet and support

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
£194,325 £100K-£500K
Contracts Value
£194,325 £100K-£500K

Notice Dates

Publication Date
22 May 20261 months ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
25 Nov 20257 months ago
Contract Period
31 Dec 2025 - 31 Dec 2030 Over 5 years
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Complete
Awards Status
Active
Contracts Status
Active

Contracting Authority (Buyer)

Main Buyer
HYWEL DDA UNIVERSITY HEALTH BOARD
Additional Buyers

NHS WALES SHARED SERVICES PARTNERSHIP (HOSTED BY VELINDRE UNIVERSITY NHS TRUST)

NHS WALES SHARED SERVICES PARTNERSHIP-PROCUREMENT SERVICES (HOSTED BY VELINDRE UNIVERSITY NHS TRUST)

Contact Name
Available with D3 Tenders Premium →
Contact Email
Available with D3 Tenders Premium →
Contact Phone
Available with D3 Tenders Premium →

Buyer Location

Locality
CARDIFF
Postcode
CF15 7QZ
Post Town
Cardiff
Country
Wales

Major Region (ITL 1)
TLL Wales
Basic Region (ITL 2)
TLL4 Mid and South West Wales
Small Region (ITL 3)
TLL42 South West Wales
Delivery Location
Not specified

Local Authority
Carmarthenshire
Electoral Ward
Carmarthen Town North and South
Westminster Constituency
Caerfyrddin

Supplier Information

Number of Suppliers
1
Supplier Name

META COMPLIANCE

Further Information

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

JSON Markdown

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-05e82d-2026-05-22T12:55:56+01:00",
    "date": "2026-05-22T12:55:56+01:00",
    "ocid": "ocds-h6vhtk-05e82d",
    "initiationType": "tender",
    "parties": [
        {
            "id": "GB-PPON-PXWV-6492-CGMN",
            "name": "NHS Wales Shared Services Partnership (hosted by Velindre University NHS Trust)",
            "identifier": {
                "scheme": "GB-PPON",
                "id": "PXWV-6492-CGMN"
            },
            "address": {
                "streetAddress": "4-5 Charnwood Court Heol Billingsley Parc Nantgarw",
                "locality": "Cardiff",
                "postalCode": "CF15 7QZ",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKL15"
            },
            "contactPoint": {
                "name": "Josh Wood",
                "email": "josh.wood@wales.nhs.uk"
            },
            "roles": [
                "procuringEntity"
            ],
            "details": {
                "url": "http://nwssp.nhs.wales",
                "classifications": [
                    {
                        "id": "publicAuthorityCentralGovernment",
                        "scheme": "UK_CA_TYPE",
                        "description": "Public authority - central government"
                    },
                    {
                        "id": "GB-WLS",
                        "scheme": "UK_CA_DEVOLVED_REGULATIONS",
                        "description": "Welsh devolved regulations apply"
                    },
                    {
                        "id": "publicAuthoritySubCentralGovernment",
                        "scheme": "UK_CA_TYPE",
                        "description": "Public authority - sub-central government"
                    }
                ]
            },
            "roleDetails": "Management of the procurement process from planning through to award and supporting with contract management."
        },
        {
            "id": "GB-PPON-PHGZ-5665-QPWP",
            "name": "Meta Compliance Limited",
            "identifier": {
                "scheme": "GB-PPON",
                "id": "PHGZ-5665-QPWP"
            },
            "address": {
                "streetAddress": "Third Floor Old City Factory, 100 Patrick Street",
                "locality": "Londonderry",
                "postalCode": "BT48 7EL",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKN0A"
            },
            "contactPoint": {
                "email": "sirvine@metacompliance.com"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "url": "https://www.metacompliance.com",
                "scale": "large",
                "vcse": false,
                "publicServiceMissionOrganization": false,
                "shelteredWorkshop": false
            }
        },
        {
            "id": "GB-PPON-PNPY-2728-GCWW",
            "name": "Hywel Dda University Health Board",
            "identifier": {
                "scheme": "GB-PPON",
                "id": "PNPY-2728-GCWW"
            },
            "address": {
                "streetAddress": "Corporate Offices, Second Floor, Block C, Government Buildings, Picton Terrace",
                "locality": "Carmarthen",
                "postalCode": "SA31 3BT",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKL14"
            },
            "contactPoint": {
                "name": "Josh Wood",
                "email": "josh.wood@wales.nhs.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "http://nwssp.nhs.wales/ourservices/procurement-services/",
                "classifications": [
                    {
                        "id": "publicAuthoritySubCentralGovernment",
                        "scheme": "UK_CA_TYPE",
                        "description": "Public authority - sub-central government"
                    },
                    {
                        "id": "GB-WLS",
                        "scheme": "UK_CA_DEVOLVED_REGULATIONS",
                        "description": "Welsh devolved regulations apply"
                    }
                ]
            }
        }
    ],
    "buyer": {
        "id": "GB-PPON-PNPY-2728-GCWW",
        "name": "Hywel Dda University Health Board"
    },
    "tender": {
        "id": "P0195",
        "legalBasis": {
            "id": "2023/54",
            "scheme": "UKPGA",
            "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
        },
        "title": "Cyber Resilience Phishing Subscription Renewal",
        "description": "Hywel Dda University Health Board (HDUHB) have awarded a contract to renew their cyber resilience licences utilised across the Health Board. The platform allows digital services to educate staff on how to identify attacks and respond with confidence by providing short training content for staff for awareness and reporting. The solution provides digital services with metrics to track trends and identify areas where further awareness or knowledge sharing is required.",
        "status": "complete",
        "procurementMethod": "direct",
        "procurementMethodDetails": "Direct award",
        "procurementMethodRationale": "The Health Board requires a cyber resilience phishing simulation and awareness subscription to strengthen staff readiness against phishing attacks and meet NHS Wales cyber security standards. They are looking to align this contract with their neighbouring Health Board, Swansea Bay to achieve significant technical, operational and monetary savings. This direct award is made under the provisions of Section 41 and Schedule 5 of the Procurement Act 2023, specifically given the exclusive integration and the absence of reasonable alternatives that can deliver the same level of interoperability and functionality without disproportionate cost and risk.",
        "procurementMethodRationaleClassifications": [
            {
                "id": "singleSuppliersTechnicalReasons"
            },
            {
                "id": "additionalRepeatExtensionPartialReplacement"
            }
        ],
        "lots": [
            {
                "id": "1",
                "status": "complete"
            }
        ],
        "documents": [
            {
                "id": "conflictOfInterest",
                "documentType": "conflictOfInterest",
                "description": "Not published"
            }
        ]
    },
    "awards": [
        {
            "id": "1",
            "title": "P0195 - Cyber Resilience Phishing Subscription",
            "status": "active",
            "value": {
                "amountGross": 233190,
                "amount": 194325,
                "currency": "GBP"
            },
            "mainProcurementCategory": "services",
            "aboveThreshold": true,
            "suppliers": [
                {
                    "id": "GB-PPON-PHGZ-5665-QPWP",
                    "name": "Meta Compliance Limited"
                }
            ],
            "items": [
                {
                    "id": "1",
                    "additionalClassifications": [
                        {
                            "scheme": "CPV",
                            "id": "48170000",
                            "description": "Compliance software package"
                        },
                        {
                            "scheme": "CPV",
                            "id": "72000000",
                            "description": "IT services: consulting, software development, Internet and support"
                        }
                    ],
                    "deliveryAddresses": [
                        {
                            "region": "UKL14",
                            "country": "GB",
                            "countryName": "United Kingdom"
                        },
                        {
                            "region": "UKL14",
                            "country": "GB",
                            "countryName": "United Kingdom"
                        },
                        {
                            "region": "UKL14",
                            "country": "GB",
                            "countryName": "United Kingdom"
                        }
                    ],
                    "relatedLot": "1"
                }
            ],
            "contractPeriod": {
                "startDate": "2026-02-01T00:00:00+00:00",
                "endDate": "2031-01-31T23:59:59+00:00"
            },
            "relatedLots": [
                "1"
            ],
            "documents": [
                {
                    "id": "076796-2025",
                    "documentType": "awardNotice",
                    "noticeType": "UK5",
                    "description": "Transparency notice on Find a Tender",
                    "url": "https://www.find-tender.service.gov.uk/Notice/076796-2025",
                    "datePublished": "2025-11-25T11:47:47Z",
                    "format": "text/html"
                }
            ],
            "milestones": [
                {
                    "id": "1",
                    "type": "futureSignatureDate",
                    "dueDate": "2025-12-22T23:59:59+00:00",
                    "status": "scheduled"
                }
            ]
        }
    ],
    "language": "en",
    "contracts": [
        {
            "id": "1",
            "awardID": "1",
            "title": "Cyber Resilience Phishing Subscription Renewal",
            "status": "active",
            "period": {
                "startDate": "2025-12-31T00:00:00+00:00",
                "endDate": "2030-12-31T23:59:59+00:00"
            },
            "value": {
                "amountGross": 233190,
                "amount": 194325,
                "currency": "GBP"
            },
            "aboveThreshold": true,
            "dateSigned": "2025-12-23T00:00:00+00:00",
            "documents": [
                {
                    "id": "003065-2026",
                    "documentType": "contractNotice",
                    "noticeType": "UK7",
                    "description": "Contract details notice on Find a Tender",
                    "url": "https://www.find-tender.service.gov.uk/Notice/003065-2026",
                    "datePublished": "2026-01-14T12:04:20Z",
                    "format": "text/html"
                },
                {
                    "id": "047824-2026",
                    "documentType": "contractNotice",
                    "noticeType": "UK7",
                    "description": "Contract details notice on Find a Tender",
                    "url": "https://www.find-tender.service.gov.uk/Notice/047824-2026",
                    "datePublished": "2026-05-22T12:55:56+01:00",
                    "format": "text/html"
                }
            ]
        }
    ]
}