Award

Cyber Resilience Phishing Subscription Renewal

NHS WALES SHARED SERVICES PARTNERSHIP-PROCUREMENT SERVICES (HOSTED BY VELINDRE UNIVERSITY NHS TRUST)

This public procurement record has 2 releases in its history.

Award

14 Jan 2026 at 12:04

Award

25 Nov 2025 at 11:47

Summary of the contracting process

The NHS Wales Shared Services Partnership-Procurement Services, which is hosted by Velindre University NHS Trust, has completed a public procurement contracting process titled "Cyber Resilience Phishing Subscription Renewal." This contract was awarded to Meta Compliance Limited, focusing on the renewal of cyber resilience licences used by the Hywel Dda University Health Board. The procurement falls under the services category, specifically dealing with IT services and compliance software packages. This procurement was initiated as a direct award under the UK Procurement Act 2023, with a contract active from 31st December 2025 to 31st December 2030, aiming to align cyber security operations across the Health Board. The decision to directly award the contract was driven by the necessity for exclusive integration and functionality without the added cost and risk from alternative solutions. The total gross value of the contract amounts to £233,190. The services will be implemented in the United Kingdom, specifically in the UKL14 region.

The awarded contract presents numerous opportunities for business growth, especially for large-scale enterprises with capabilities in IT services, software development, and compliance software. Participating businesses would benefit from increased visibility and credibility by working alongside a prestigious public health entity like NHS Wales. Furthermore, IT firms specialising in cyber resilience solutions can leverage this opportunity to showcase their expertise in enhancing organisational awareness and preparedness against cybersecurity threats. Businesses well-suited for similar tenders are those that can offer robust and interoperable cyber security solutions aligned with National Health Service standards.

Find more tenders on our Open Data Platform.
How relevant is this notice?

D3 Tenders Premium

Win More Public Sector Contracts

AI-powered tender discovery, pipeline management, and market intelligence — everything you need to grow your public sector business.

Notice Title

Cyber Resilience Phishing Subscription Renewal

Notice Description

Hywel Dda University Health Board (HDUHB) have awarded a contract to renew their cyber resilience licences utilised across the Health Board. The platform allows digital services to educate staff on how to identify attacks and respond with confidence by providing short training content for staff for awareness and reporting. The solution provides digital services with metrics to track trends and identify areas where further awareness or knowledge sharing is required.

Procurement Information

The Health Board requires a cyber resilience phishing simulation and awareness subscription to strengthen staff readiness against phishing attacks and meet NHS Wales cyber security standards. They are looking to align this contract with their neighbouring Health Board, Swansea Bay to achieve significant technical, operational and monetary savings. This direct award is made under the provisions of Section 41 and Schedule 5 of the Procurement Act 2023, specifically given the exclusive integration and the absence of reasonable alternatives that can deliver the same level of interoperability and functionality without disproportionate cost and risk.

Publication & Lifecycle

Open Contracting ID
ocds-h6vhtk-05e82d
Publication Source
Find A Tender Service
Latest Notice
https://www.find-tender.service.gov.uk/Notice/003065-2026
Current Stage
Award
All Stages
Award

Procurement Classification

Notice Type
UK7 - Contract Details Notice
Procurement Type
Standard
Procurement Category
Services
Procurement Method
Direct
Procurement Method Details
Direct award
Tender Suitability
Not specified
Awardee Scale
Large

Common Procurement Vocabulary (CPV)

CPV Divisions

48 - Software package and information systems

72 - IT services: consulting, software development, Internet and support


CPV Codes

48170000 - Compliance software package

72000000 - IT services: consulting, software development, Internet and support

Notice Value(s)

Tender Value
Not specified
Lots Value
Not specified
Awards Value
£194,325 £100K-£500K
Contracts Value
£194,325 £100K-£500K

Notice Dates

Publication Date
14 Jan 20261 months ago
Submission Deadline
Not specified
Future Notice Date
Not specified
Award Date
25 Nov 20252 months ago
Contract Period
31 Dec 2025 - 31 Dec 2030 Over 5 years
Recurrence
Not specified

Notice Status

Tender Status
Complete
Lots Status
Complete
Awards Status
Active
Contracts Status
Active

Contracting Authority (Buyer)

Main Buyer
NHS WALES SHARED SERVICES PARTNERSHIP-PROCUREMENT SERVICES (HOSTED BY VELINDRE UNIVERSITY NHS TRUST)
Contact Name
Josh Wood
Contact Email
josh.wood@wales.nhs.uk
Contact Phone
Not specified

Buyer Location

Locality
CARDIFF
Postcode
CF14 3UZ
Post Town
Cardiff
Country
Wales

Major Region (ITL 1)
TLL Wales
Basic Region (ITL 2)
TLL5 South East Wales
Small Region (ITL 3)
TLL52 Cardiff and Vale of Glamorgan
Delivery Location
Not specified

Local Authority
Cardiff
Electoral Ward
Gabalfa
Westminster Constituency
Cardiff North

Supplier Information

Number of Suppliers
1
Supplier Name

META COMPLIANCE

Open Contracting Data Standard (OCDS)

View full OCDS Record for this contracting process

Download

The Open Contracting Data Standard (OCDS) is a framework designed to increase transparency and access to public procurement data in the public sector. It is widely used by governments and organisations worldwide to report on procurement processes and contracts.

{
    "tag": [
        "compiled"
    ],
    "id": "ocds-h6vhtk-05e82d-2026-01-14T12:04:20Z",
    "date": "2026-01-14T12:04:20Z",
    "ocid": "ocds-h6vhtk-05e82d",
    "initiationType": "tender",
    "parties": [
        {
            "id": "GB-PPON-PXWV-6492-CGMN",
            "name": "NHS Wales Shared Services Partnership-Procurement Services (hosted by Velindre University NHS Trust)",
            "identifier": {
                "scheme": "GB-PPON",
                "id": "PXWV-6492-CGMN"
            },
            "address": {
                "streetAddress": "4-5 Charnwood Court,",
                "locality": "Cardiff",
                "postalCode": "CF14 3UZ",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKL22"
            },
            "contactPoint": {
                "name": "Josh Wood",
                "email": "josh.wood@wales.nhs.uk"
            },
            "roles": [
                "buyer"
            ],
            "details": {
                "url": "http://nwssp.nhs.wales/ourservices/procurement-services/",
                "classifications": [
                    {
                        "id": "publicAuthorityCentralGovernment",
                        "scheme": "UK_CA_TYPE",
                        "description": "Public authority - central government"
                    },
                    {
                        "id": "GB-WLS",
                        "scheme": "UK_CA_DEVOLVED_REGULATIONS",
                        "description": "Welsh devolved regulations apply"
                    },
                    {
                        "id": "publicAuthoritySubCentralGovernment",
                        "scheme": "UK_CA_TYPE",
                        "description": "Public authority - sub-central government"
                    }
                ]
            }
        },
        {
            "id": "GB-PPON-PHGZ-5665-QPWP",
            "name": "Meta Compliance Limited",
            "identifier": {
                "scheme": "GB-PPON",
                "id": "PHGZ-5665-QPWP"
            },
            "address": {
                "streetAddress": "Third Floor Old City Factory, 100 Patrick Street",
                "locality": "Londonderry",
                "postalCode": "BT48 7EL",
                "country": "GB",
                "countryName": "United Kingdom",
                "region": "UKN0A"
            },
            "contactPoint": {
                "email": "sirvine@metacompliance.com"
            },
            "roles": [
                "supplier"
            ],
            "details": {
                "url": "https://www.metacompliance.com",
                "scale": "large",
                "vcse": false,
                "publicServiceMissionOrganization": false,
                "shelteredWorkshop": false
            }
        }
    ],
    "buyer": {
        "id": "GB-PPON-PXWV-6492-CGMN",
        "name": "NHS Wales Shared Services Partnership-Procurement Services (hosted by Velindre University NHS Trust)"
    },
    "tender": {
        "id": "P0195",
        "legalBasis": {
            "id": "2023/54",
            "scheme": "UKPGA",
            "uri": "https://www.legislation.gov.uk/ukpga/2023/54/contents"
        },
        "title": "Cyber Resilience Phishing Subscription Renewal",
        "description": "Hywel Dda University Health Board (HDUHB) have awarded a contract to renew their cyber resilience licences utilised across the Health Board. The platform allows digital services to educate staff on how to identify attacks and respond with confidence by providing short training content for staff for awareness and reporting. The solution provides digital services with metrics to track trends and identify areas where further awareness or knowledge sharing is required.",
        "status": "complete",
        "procurementMethod": "direct",
        "procurementMethodDetails": "Direct award",
        "procurementMethodRationale": "The Health Board requires a cyber resilience phishing simulation and awareness subscription to strengthen staff readiness against phishing attacks and meet NHS Wales cyber security standards. They are looking to align this contract with their neighbouring Health Board, Swansea Bay to achieve significant technical, operational and monetary savings. This direct award is made under the provisions of Section 41 and Schedule 5 of the Procurement Act 2023, specifically given the exclusive integration and the absence of reasonable alternatives that can deliver the same level of interoperability and functionality without disproportionate cost and risk.",
        "procurementMethodRationaleClassifications": [
            {
                "id": "singleSuppliersTechnicalReasons"
            },
            {
                "id": "additionalRepeatExtensionPartialReplacement"
            }
        ],
        "lots": [
            {
                "id": "1",
                "status": "complete"
            }
        ],
        "documents": [
            {
                "id": "conflictOfInterest",
                "documentType": "conflictOfInterest",
                "description": "Not published"
            }
        ]
    },
    "awards": [
        {
            "id": "1",
            "title": "P0195 - Cyber Resilience Phishing Subscription",
            "status": "active",
            "value": {
                "amountGross": 233190,
                "amount": 194325,
                "currency": "GBP"
            },
            "mainProcurementCategory": "services",
            "aboveThreshold": true,
            "suppliers": [
                {
                    "id": "GB-PPON-PHGZ-5665-QPWP",
                    "name": "Meta Compliance Limited"
                }
            ],
            "items": [
                {
                    "id": "1",
                    "additionalClassifications": [
                        {
                            "scheme": "CPV",
                            "id": "48170000",
                            "description": "Compliance software package"
                        },
                        {
                            "scheme": "CPV",
                            "id": "72000000",
                            "description": "IT services: consulting, software development, Internet and support"
                        }
                    ],
                    "deliveryAddresses": [
                        {
                            "region": "UKL14",
                            "country": "GB",
                            "countryName": "United Kingdom"
                        },
                        {
                            "region": "UKL14",
                            "country": "GB",
                            "countryName": "United Kingdom"
                        }
                    ],
                    "relatedLot": "1"
                }
            ],
            "contractPeriod": {
                "startDate": "2026-02-01T00:00:00+00:00",
                "endDate": "2031-01-31T23:59:59+00:00"
            },
            "relatedLots": [
                "1"
            ],
            "documents": [
                {
                    "id": "076796-2025",
                    "documentType": "awardNotice",
                    "noticeType": "UK5",
                    "description": "Transparency notice on Find a Tender",
                    "url": "https://www.find-tender.service.gov.uk/Notice/076796-2025",
                    "datePublished": "2025-11-25T11:47:47Z",
                    "format": "text/html"
                }
            ],
            "milestones": [
                {
                    "id": "1",
                    "type": "futureSignatureDate",
                    "dueDate": "2025-12-22T23:59:59+00:00",
                    "status": "scheduled"
                }
            ]
        }
    ],
    "language": "en",
    "contracts": [
        {
            "id": "1",
            "awardID": "1",
            "title": "Cyber Resilience Phishing Subscription Renewal",
            "status": "active",
            "period": {
                "startDate": "2025-12-31T00:00:00+00:00",
                "endDate": "2030-12-31T23:59:59+00:00"
            },
            "value": {
                "amountGross": 233190,
                "amount": 194325,
                "currency": "GBP"
            },
            "aboveThreshold": true,
            "dateSigned": "2025-12-23T00:00:00+00:00",
            "documents": [
                {
                    "id": "003065-2026",
                    "documentType": "contractNotice",
                    "noticeType": "UK7",
                    "description": "Contract details notice on Find a Tender",
                    "url": "https://www.find-tender.service.gov.uk/Notice/003065-2026",
                    "datePublished": "2026-01-14T12:04:20Z",
                    "format": "text/html"
                }
            ]
        }
    ]
}