{"index":"UK Public Sector Sovereignty Index","edition":"2026","methodVersion":"1.0","score":42,"licence":"CC BY 4.0","citation":"The Sovereign Stack (2026) UK Sovereign Stack Body of Knowledge. Available at: https://thesovereignstack.org/bok","generated":"2026-10-14","findings":[{"id":"NHS-003","entity":"NHS","subUnit":"NHS – National","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"Health and Social Care Network (HSCN) – private network for NHS/social care","vendor":"BT; Virgin Media Business; Redcentric; Exponential-e; Node4; MLL; Capita and others (19 live suppliers)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"BT Group (lead); mixed UK carriers","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Open standard","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"organisations (HSCN-connected NHS/care bodies)","dataFormat":"IP/MPLS per HSCN obligations framework","formatOwner":"Standards body","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Conversion","osAlternative":"n/a","sovereignAlternative":"Already UK-supplier market: BT (GB); Virgin Media O2 Business (GB); Redcentric (GB); Exponential-e (GB)","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"N/A","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":270740,"spendPeriod":"2023-06 to 2026-06","evidence":"Confirmed","notes":"HSCN replaced N3 (2017); NHSE sets standards, local orgs buy from 19 compliant suppliers (digital.nhs.uk HSCN supplier list). Spend shown is only the national Spine-in-AWS connectivity call-off; total HSCN spend is fragmented across trusts. Strong sovereignty – mostly UK carriers (Virgin Media O2 is UK JV of Liberty Global (US/GB) and Telefonica (ES)). Scotland uses SWAN, Wales PSBA.","dimsNote":"Multi-supplier UK carrier market under NHS standards; network kit itself largely US/Nordic/Chinese-origin","scores":{"D1":3,"D2":3,"D3":3,"D4":2,"D5":3,"D6":null,"D7":3,"D8":3,"D9":1.5,"D10":3,"D11":3,"D12":3,"overall":2.772727272727273},"refs":[{"id":"R080","author":"Contracts Finder","year":"2023","title":"Contract notice fbd2e7f6-f8ef-4b08-bad2-cc20309bd05a","url":"https://www.contractsfinder.service.gov.uk/Notice/fbd2e7f6-f8ef-4b08-bad2-cc20309bd05a"}]},{"id":"NHS-006","entity":"NHS","subUnit":"NHS – National","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"AWS – national services (Spine 36 services, NHS login, e-RS, 111 DoS, MESH)","vendor":"Amazon Web Services","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Amazon","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Primary","seats":42170269,"seatsBasis":"NHS login accounts (services dependent on AWS)","dataFormat":"EC2/AMI; DynamoDB; Cognito; Lambda","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Egress fees;Re-platforming;Skills","osAlternative":"OpenStack; Kubernetes","sovereignAlternative":"Nscale (GB); iomart (GB); OVHcloud (FR); STACKIT (DE)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Spine (36 services, 360+ servers, 1.2PB) rehosted to AWS EC2; NHS England confirmed all Spine DCs decommissioned Jan 2024 (datacenterknowledge.com). Spine handles >1.3bn messages/month. NHS login is fully serverless (Cognito, Lambda, DynamoDB) – deep lock-in. NHS Digital G-Cloud AWS spend was only ~£2.39m to 2019 (ComputerWeekly); current AWS spend not public (likely via CCS OGVA-style AWS MoU). NHS Scotland also on AWS (£15m deal, 2021).","dimsNote":"Spine and NHS login concentrated on AWS serverless; no evidence of HYOK; NHSE engineers can rebuild but serverless lock-in is deep","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":0,"overall":0.75},"refs":[{"id":"R349","author":"NHS England Digital","year":"2023","title":"Our new approach to migrating spine to the cloud","url":"https://digital.nhs.uk/blog/tech-talk/2023/our-new-approach-to-migrating-spine-to-the-cloud"}]},{"id":"NHS-007","entity":"NHS","subUnit":"NHS – National","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Microsoft Azure – NHSmail shared tenant, Copilot, NHSE analytics; ICB/trust Azure subscriptions","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://learn.microsoft.com/en-GB/purview/customer-key-overview","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"organisations","dataFormat":"Azure-native (ARM, Synapse, Fabric)","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Egress fees;Re-platforming;Skills","osAlternative":"OpenStack; Kubernetes","sovereignAlternative":"Nscale (GB); OVHcloud (FR); STACKIT (DE)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":35000,"spendPeriod":"2025-10 to 2028-09","evidence":"Confirmed","notes":"Azure is bought locally by many ICBs/trusts in small call-offs (e.g. Dorset ICB £35k) plus central licensing. Scotland: NSS renewed Azure hosting for national systems (HEPMA, CHI) via Computacenter £6,105,243 (Find a Tender 037036-2025).","dimsNote":"US hyperscaler default; Customer Key/BYOK available but not evidenced for NHS tenants","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":0,"overall":0.875},"refs":[{"id":"R181","author":"Find a Tender Service","year":"2025","title":"Contract notice 077508-2025","url":"https://www.find-tender.service.gov.uk/Notice/077508-2025"},{"id":"R326","author":"Microsoft","year":"n.d.","title":"Customer key overview","url":"https://learn.microsoft.com/en-GB/purview/customer-key-overview"}]},{"id":"NHS-008","entity":"NHS","subUnit":"NHS – National","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Palantir Foundry SaaS hosting for Federated Data Platform","vendor":"Palantir (on hyperscaler cloud)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Palantir Technologies","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.theregister.com/databases/2026/05/12/nhs-england-confirms-palantir-staff-can-access-patient-data/5238712","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Primary","seats":139,"seatsBasis":"trusts live on FDP (Jun 2026)","dataFormat":"Foundry ontology / Parquet datasets","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Re-platforming;Conversion;Skills","osAlternative":"Apache Spark/Iceberg stack","sovereignAlternative":"UK-built data platform on sovereign cloud (e.g. Kainos/Nscale) (GB)","operator":"UK cleared","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"High","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"FDP data held in UK region per NHSE, but underlying cloud provider not confirmed in sources gathered (marked hosting_location UK on NHSE assurances). See B4 row for contract value.","dimsNote":"Palantir SaaS with external admin access limited to government-cleared staff approved by NHSE; ontology/pipelines co-owned; 2027 break clause","scores":{"D1":3,"D2":1,"D3":0,"D4":3,"D5":0,"D6":0,"D7":1,"D8":1.5,"D9":1.5,"D10":0,"D11":1.5,"D12":0,"overall":1.0416666666666667},"refs":[{"id":"R346","author":"NHS England","year":"2026","title":"Fdp uptake and benefits","url":"https://www.england.nhs.uk/digitaltechnology/nhs-federated-data-platform/impact/fdp-uptake-and-benefits/"},{"id":"R473","author":"The Register","year":"n.d.","title":"NHS england confirms palantir staff can access patient data","url":"https://www.theregister.com/databases/2026/05/12/nhs-england-confirms-palantir-staff-can-access-patient-data/5238712"}]},{"id":"NHS-011","entity":"NHS","subUnit":"NHS – National","layerId":"PL1","layer":"Operating systems","group":"Platform","product":"Microsoft Windows 10/11 Enterprise desktops (licensed via national Microsoft agreement)","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Endpoint","hostingLocation":"Mixed","prevalence":"Dominant","seats":2100000,"seatsBasis":"devices","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Re-platforming;Skills","osAlternative":"Linux desktop (Ubuntu/Debian)","sovereignAlternative":"Ubuntu (Canonical, GB); openDesk (DE)","operator":"Customer (in-house UK team)","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Windows 10 end of support Oct 2025 forced Windows 11 migration (e.g. Rotherham 98% upgraded; Arden & GEM CSU >60,000 devices). Clinical apps (EPR thick clients, smartcard middleware) are Windows-bound, making OS switch very hard. Device count from MDE estate.","dimsNote":"Windows managed by trust IT but licensing/servicing (e.g. Win10 EOL) dictated by Microsoft; clinical apps Windows-bound","scores":{"D1":1,"D2":1,"D3":null,"D4":3,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.75},"refs":[{"id":"R437","author":"TechRadar","year":"2025","title":"NHS devices diagnosed with compatibility issues and windows 11 is being prescribed as treatment","url":"https://www.techradar.com/pro/security/nhs-devices-diagnosed-with-compatibility-issues-and-windows-11-is-being-prescribed-as-treatment"}]},{"id":"NHS-013","entity":"NHS","subUnit":"NHS – National","layerId":"PL1","layer":"Operating systems","group":"Platform","product":"NHS App on iOS and Android","vendor":"Apple; Google","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Apple; Alphabet","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Endpoint","hostingLocation":"Mixed","prevalence":"Dominant","seats":39000000,"seatsBasis":"registered NHS App users (Dec 2025)","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"Web app (NHS App also on web)","sovereignAlternative":"n/a – mobile OS duopoly; web channel as mitigation","operator":"Vendor-global","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Citizen channel depends on Apple/Google app stores (US). NHS App also offers browser access, a partial mitigation.","dimsNote":"App-store duopoly gates citizen channel; NHS owns app code and web fallback mitigates","scores":{"D1":1,"D2":1,"D3":null,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.7},"refs":[{"id":"R111","author":"Digital Health","year":"2025","title":"Record 39 million people registered for the NHS app","url":"https://www.digitalhealth.net/2025/12/record-39-million-people-registered-for-the-nhs-app/"}]},{"id":"NHS-017","entity":"NHS","subUnit":"NHS – National","layerId":"PL3","layer":"Database","group":"Platform","product":"Oracle Database / E-Business Suite under ESR and NHSBSA systems","vendor":"Oracle","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Oracle","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":1900000,"seatsBasis":"staff records in ESR","dataFormat":"Oracle DB proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Conversion","osAlternative":"PostgreSQL","sovereignAlternative":"n/a","operator":"Customer (in-house UK team)","keyCustody":"Customer (on-prem)","codeModelControl":"Version-pinnable","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":252131,"spendPeriod":"24 months from 2020-12","evidence":"Confirmed","notes":"NHSBSA buys Oracle licences under CCS Oracle MoU discounts; ESR is built on Oracle software (see B1). Spend is NHSBSA renewal only (£252,130.56).","dimsNote":"NHSBSA runs on-prem Oracle under CCS MoU; licence repricing risk; data held locally","scores":{"D1":3,"D2":1,"D3":3,"D4":3,"D5":1.5,"D6":1.5,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":1.4090909090909092},"refs":[{"id":"R133","author":"Find a Tender Service","year":"2022","title":"Contract notice 006590-2022","url":"https://www.find-tender.service.gov.uk/Notice/006590-2022"}]},{"id":"NHS-019","entity":"NHS","subUnit":"NHS – National","layerId":"PL3","layer":"Database","group":"Platform","product":"Amazon DynamoDB / Aurora (NHS login and cloud-native Spine services)","vendor":"Amazon Web Services","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Amazon","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Secondary","seats":42170269,"seatsBasis":"NHS login accounts","dataFormat":"DynamoDB proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Re-platforming;Conversion","osAlternative":"Cassandra/ScyllaDB; PostgreSQL","sovereignAlternative":"n/a","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"NHS login built serverless on Cognito, API Gateway, Lambda, Rekognition, DynamoDB.","dimsNote":"Proprietary DynamoDB/Cognito services with no portable equivalent; AWS-managed keys","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":0.6818181818181818},"refs":[{"id":"R007","author":"Amazon Web Services","year":"2021","title":"NHS digital launches NHS login AWS","url":"https://aws.amazon.com/blogs/publicsector/nhs-digital-launches-nhs-login-aws"}]},{"id":"NHS-026","entity":"NHS","subUnit":"NHS – National","layerId":"W2","layer":"Identity & directory","group":"Workplace","product":"NHSmail shared Microsoft Entra ID tenant (directory for ~1.5–1.7m users)","vendor":"Microsoft (operated by Accenture for NHSE)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.contractsfinder.service.gov.uk/Notice/4202edae-433e-45ca-a1ba-4adf37498b75","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Dominant","seats":1700000,"seatsBasis":"NHSmail accounts","dataFormat":"Entra ID / SAML / OIDC","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Re-platforming;Skills","osAlternative":"Keycloak; FreeIPA","sovereignAlternative":"Keycloak hosted by UK MSP (GB); Univention (DE)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Shared tenant is the national identity spine for collaboration; endpoints must onboard to NHSmail Shared Tenant for centrally funded MDE licences.","dimsNote":"Shared Entra tenant administered by Accenture UK for NHSE but Microsoft controls platform and keys; single national identity concentration","scores":{"D1":3,"D2":1,"D3":0,"D4":2,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":0.7727272727272727},"refs":[{"id":"R386","author":"PublicTechnology","year":"2021","title":"[Title to be confirmed]","url":"https://www.publictechnology.net/?p=6471"},{"id":"R090","author":"Contracts Finder","year":"n.d.","title":"Contract notice 4202edae-433e-45ca-a1ba-4adf37498b75","url":"https://www.contractsfinder.service.gov.uk/Notice/4202edae-433e-45ca-a1ba-4adf37498b75"}]},{"id":"NHS-027","entity":"NHS","subUnit":"NHS – National","layerId":"W2","layer":"Identity & directory","group":"Workplace","product":"Care Identity Service 2 (CIS2) / NHS smartcards – clinical staff authentication","vendor":"NHS England (in-house); smartcard hardware/middleware suppliers","vendorCountry":"GB","vendorTier":"T1 UK","owner":"NHS England","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"health & care staff with smartcards","dataFormat":"OIDC; X.509 (NHS PKI)","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"Low","exitCostDrivers":"Skills","osAlternative":"n/a","sovereignAlternative":"Already NHS-owned (GB)","operator":"Customer (in-house UK team)","keyCustody":"Customer (on-prem)","codeModelControl":"Self-hosted / open","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"NHS-owned role-based access for Spine/EPR; increasingly supports authenticators beyond smartcards (Windows Hello, FIDO).","dimsNote":"NHS-owned identity service and PKI; smartcard hardware imported; hosted on AWS","scores":{"D1":3,"D2":3,"D3":3,"D4":3,"D5":3,"D6":3,"D7":3,"D8":3,"D9":1.5,"D10":2.25,"D11":3,"D12":3,"overall":2.8125},"refs":[{"id":"R350","author":"NHS England Digital","year":"2026","title":"Care identity service","url":"https://digital.nhs.uk/services/care-identity-service"}]},{"id":"NHS-028","entity":"NHS","subUnit":"NHS – National","layerId":"W2","layer":"Identity & directory","group":"Workplace","product":"NHS login – citizen identity (with iProov face biometric verification)","vendor":"NHS England (built on AWS); iProov","vendorCountry":"GB","vendorTier":"T1 UK","owner":"NHS England; iProov","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Dominant","seats":42170269,"seatsBasis":"NHS login accounts (all-time, to Jul 2026)","dataFormat":"OIDC","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"Keycloak","sovereignAlternative":"iProov (GB); Yoti (GB)","operator":"Customer (in-house UK team)","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"High","spend":4113000,"spendPeriod":"to 2027-02","evidence":"Confirmed","notes":"42,170,269 accounts and 15.4m distinct monthly users (NHS App statistics Jul 2026). NHS-owned service but built on AWS Cognito; iProov (UK) provides liveness/face verification – a sovereign success.","dimsNote":"NHS-owned service and UK biometric supplier but built on AWS Cognito with AWS-managed keys","scores":{"D1":3,"D2":3,"D3":0,"D4":3,"D5":1.5,"D6":0,"D7":3,"D8":3,"D9":null,"D10":1.5,"D11":1.5,"D12":3,"overall":2.0454545454545454},"refs":[{"id":"R491","author":"UK Spending","year":"2025","title":"[Title to be confirmed]","url":"https://ukspending.com/contracts/40135"}]},{"id":"NHS-029","entity":"NHS","subUnit":"NHS – National","layerId":"W3","layer":"Email","group":"Workplace","product":"NHSmail (Exchange Online in national M365 shared tenant)","vendor":"Microsoft; Accenture (service operator)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft (platform); Accenture plc (operator)","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.contractsfinder.service.gov.uk/Notice/4202edae-433e-45ca-a1ba-4adf37498b75","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Dominant","seats":1700000,"seatsBasis":"NHSmail users","dataFormat":"Exchange (MAPI/PST); SMTP; mbox via export","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Conversion;Re-platforming","osAlternative":"Open-Xchange / Dovecot","sovereignAlternative":"Open-Xchange (DE); Mailbox.org (DE); UK-hosted Dovecot MSP (GB)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":160800000,"spendPeriod":"2015-06 to 2023-03","evidence":"Reported","notes":"Moved from Exchange 2013 to Exchange Online in 2020. Accenture (IE) operates; Microsoft platform. Successor operating arrangement post-2023 not confirmed in sources gathered. Scotland: Accenture NHS Mail Relay £1.05m (Find a Tender 018745-2023); Scotland/Wales have own M365 tenants.","dimsNote":"Accenture UK still operating NHSmail (2025 onboarding award); Exchange Online platform and keys Microsoft","scores":{"D1":3,"D2":1,"D3":0,"D4":2,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0.75,"D11":1.5,"D12":0,"overall":0.8409090909090909},"refs":[{"id":"R386","author":"PublicTechnology","year":"2021","title":"[Title to be confirmed]","url":"https://www.publictechnology.net/?p=6471"},{"id":"R090","author":"Contracts Finder","year":"n.d.","title":"Contract notice 4202edae-433e-45ca-a1ba-4adf37498b75","url":"https://www.contractsfinder.service.gov.uk/Notice/4202edae-433e-45ca-a1ba-4adf37498b75"}]},{"id":"NHS-030","entity":"NHS","subUnit":"NHS – National","layerId":"W4","layer":"Messaging & video","group":"Workplace","product":"Microsoft Teams (national M365 agreement)","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Dominant","seats":1500000,"seatsBasis":"staff","dataFormat":"Proprietary (Teams chat/meetings)","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion;Skills","osAlternative":"Matrix/Element; Jitsi","sovereignAlternative":"Element (GB); Wire (DE/CH)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Teams included in national deal (see W5 spend). Element (UK, Matrix) is used by other European health/government bodies – credible sovereign option. Video consultations use other suppliers (Accurx – GB, Attend Anywhere/Near Me – AU).","dimsNote":"US hyperscaler SaaS default; Element is a credible UK substitute","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.9545454545454546},"refs":[{"id":"R109","author":"Digital Health","year":"2023","title":"NHS signs new microsoft deal worth three quarters of a billion pounds","url":"https://digitalhealth.net/2023/06/nhs-signs-new-microsoft-deal-worth-three-quarters-of-a-billion-pounds"}]},{"id":"NHS-031","entity":"NHS","subUnit":"NHS – National","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"Microsoft 365 national licensing agreement (Office apps, Teams, Exchange, security, Windows) – reseller Bytes Software Services","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Dominant","seats":1500000,"seatsBasis":"NHS staff covered","dataFormat":"OOXML","formatOwner":"Standards body","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Conversion;Skills","osAlternative":"LibreOffice / Collabora","sovereignAlternative":"Collabora Online (GB); openDesk (DE); Nextcloud (DE)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":774000000,"spendPeriod":"5 years from mid-2023 (~£155m/yr)","evidence":"Reported","notes":"Single largest NHS software deal; replaces 2020 agreement; ICBs reportedly asked to contribute up to £500k each. Trust pipeline notices (e.g. Sheffield 'N365' £1.9m Nov 2026–Oct 2029, Find a Tender 025834-2025) suggest local top-up/renewal buying. Wales: separate £450m 4-year Microsoft framework (PublicTechnology, Feb 2024); Scotland: national M365 tenant with £8.4m Microsoft Unified Support (Find a Tender 008184-2026).","dimsNote":"£774m single-vendor deal; repricing at renewal and service concentration; reseller margin only UK value","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":0.6818181818181818},"refs":[{"id":"R109","author":"Digital Health","year":"2023","title":"NHS signs new microsoft deal worth three quarters of a billion pounds","url":"https://digitalhealth.net/2023/06/nhs-signs-new-microsoft-deal-worth-three-quarters-of-a-billion-pounds"}]},{"id":"NHS-033","entity":"NHS","subUnit":"NHS – National","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Electronic Staff Record (ESR) – HR & payroll, Oracle-based, run by IBM to Aug 2026","vendor":"IBM (operator); Oracle (software)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"IBM (operator); Oracle (software)","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":1900000,"seatsBasis":"staff in England & Wales","dataFormat":"Oracle EBS data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Conversion;Re-platforming;Licence","osAlternative":"n/a","sovereignAlternative":"n/a – replacement already awarded","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Version-pinnable","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"IBM-run Oracle ESR covers ~1.9m staff across England and Wales; IBM contract ran to Aug 2026.","dimsNote":"IBM UK operated ESR until Aug 2026 on Oracle EBS; contract ended and staff transferred to Infosys","scores":{"D1":3,"D2":1,"D3":3,"D4":2,"D5":1.5,"D6":1.5,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.4545454545454546},"refs":[{"id":"R393","author":"PublicTechnology","year":"2025","title":"NHS sheds light on plans for 1 4bn hr system","url":"https://www.publictechnology.net/2025/11/13/health-and-social-care/nhs-sheds-light-on-plans-for-1-4bn-hr-system/"}]},{"id":"NHS-034","entity":"NHS","subUnit":"NHS – National","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Future Workforce Solution – ESR replacement and run (Infosys)","vendor":"Infosys","vendorCountry":"IN","vendorTier":"T4 Other allied/partner","owner":"Infosys","ownerCountry":"IN","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":1900000,"seatsBasis":"staff in England & Wales","dataFormat":"TBC (new platform)","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Re-platforming;Conversion","osAlternative":"n/a","sovereignAlternative":"n/a","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":1400000000,"spendPeriod":"15 years from 2026-09 (incl. VAT)","evidence":"Reported","notes":"Infosys took over ESR service from 1 Sep 2026 with staff transfer; new platform by end of decade; ESR support ends 2035. Underlying product stack not confirmed in sources gathered. Original 2022 notice estimated £1.7bn.","dimsNote":"Indian SI running UK service with TUPE staff; offshore delivery likely for build; new platform stack unconfirmed; Ownership: Contract moved from IBM to Infosys (Sep 2026); a change of supplier, not of ownership","scores":{"D1":3,"D2":1,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":1.5,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.1818181818181819},"refs":[{"id":"R393","author":"PublicTechnology","year":"2025","title":"NHS sheds light on plans for 1 4bn hr system","url":"https://www.publictechnology.net/2025/11/13/health-and-social-care/nhs-sheds-light-on-plans-for-1-4bn-hr-system/"}]},{"id":"NHS-037","entity":"NHS","subUnit":"NHS – Trust","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Oracle Health (Cerner Millennium) EPR","vendor":"Oracle","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Oracle","ownerCountry":"US","ownershipChange":"Yes – Oracle acquired Cerner (Jun 2022)","ownershipSource":"https://www.oracle.com/news/announcement/oracle-completes-acquisition-of-cerner-2022-06-07/","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"Mixed","prevalence":"Primary","seats":41,"seatsBasis":"trusts","dataFormat":"Millennium/Oracle DB; FHIR R4 APIs (partial)","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Conversion;Re-platforming;Skills","osAlternative":"OpenEMR / openEHR (EHRbase)","sovereignAlternative":"System C (GB); Nervecentre (GB); TPP (GB)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":85000000,"spendPeriod":"Sheffield Teaching Hospitals contract (example)","evidence":"Reported","notes":"Largest installed base by trust count (NHS Tech Register: 41 trusts incl. Barts, Imperial, Oxford, Sheffield, Airedale). Legacy of NPfIT (London/South). Oracle pushing OCI hosting. Go-live delays (Sheffield, Essex). Sheffield value from digitalhealth.net/2024/11/sheffield-teaching-hospitals-delays-85m-oracle-epr-go-live.","dimsNote":"Oracle acquisition changed roadmap and pushed OCI hosting; deep clinical lock-in","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.36363636363636365},"refs":[{"id":"R352","author":"Nhs-tech","year":"2026","title":"[Title to be confirmed]","url":"https://nhs-tech.6b.health/lists"},{"id":"R367","author":"Oracle","year":"n.d.","title":"Oracle completes acquisition of cerner 2022 06 07","url":"https://www.oracle.com/news/announcement/oracle-completes-acquisition-of-cerner-2022-06-07/"}]},{"id":"NHS-038","entity":"NHS","subUnit":"NHS – Trust","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Epic EPR","vendor":"Epic Systems","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Epic Systems","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"Mixed","prevalence":"Primary","seats":18,"seatsBasis":"trusts","dataFormat":"Chronicles/Clarity; FHIR R4 APIs","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Conversion;Re-platforming;Skills","osAlternative":"openEHR (EHRbase)","sovereignAlternative":"Nervecentre (GB); System C (GB); Better (SI)","operator":"Vendor-global","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":222000000,"spendPeriod":"Somerset & Dorset 4-trust federated contract (2026)","evidence":"Reported","notes":"14 existing Epic trusts + 4 Somerset/Dorset = 18 (matches NHS Tech Register). Fastest-growing in large acute/shared-EPR deals (Cambridge, GOSH, Manchester, Devon, Guy's/King's, Lewisham & Greenwich). Highest switching cost; NHS App integration with Epic from 2025.","dimsNote":"Privately held US vendor; highest switching cost; trusts host but Epic controls code/upgrades","scores":{"D1":1,"D2":1,"D3":3,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.6363636363636364},"refs":[{"id":"R526","author":"Verdict","year":"2026","title":"Epic secures federated EPR contract somerset dorset","url":"https://www.verdict.co.uk/epic-secures-federated-epr-contract-somerset-dorset/"}]},{"id":"NHS-039","entity":"NHS","subUnit":"NHS – Trust","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"System C CareFlow EPR","vendor":"System C (CVC-owned)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"CVC Capital Partners","ownerCountry":"LU","ownershipChange":"Yes – CVC took majority stake (Feb 2021)","ownershipSource":"https://cvc.com/media/news/2021/2021-02-11-cvc-backs-leading-healthcare-it-solutions-provider-system-c","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Secondary","seats":15,"seatsBasis":"trusts","dataFormat":"Vendor schema; FHIR APIs","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence;Conversion","osAlternative":"openEHR","sovereignAlternative":"n/a – UK vendor (PE-owned by CVC, LU)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"UK-headquartered; Royal Wolverhampton live Oct 2025. Ownership by CVC Capital Partners is a sovereignty caveat.","dimsNote":"UK-run EPR vendor under Luxembourg-domiciled PE ownership; exit/sale risk","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":2,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.4545454545454546},"refs":[{"id":"R352","author":"Nhs-tech","year":"2026","title":"[Title to be confirmed]","url":"https://nhs-tech.6b.health/lists"},{"id":"R092","author":"Cvc","year":"n.d.","title":"2021 02 11 cvc backs leading healthcare IT solutions provider system c","url":"https://cvc.com/media/news/2021/2021-02-11-cvc-backs-leading-healthcare-it-solutions-provider-system-c"}]},{"id":"NHS-040","entity":"NHS","subUnit":"NHS – Trust","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Dedalus Lorenzo / ORBIS U EPR","vendor":"Dedalus","vendorCountry":"IT","vendorTier":"T2 EU/EEA","owner":"Ardian","ownerCountry":"FR","ownershipChange":"Yes – Dedalus acquired DXC healthcare software incl. Lorenzo (2020); Ardian exploring sale","ownershipSource":"https://www.unquote.com/southern-europe/official-record/3001062/ardian-buys-60-stake-in-dedalus","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Secondary","seats":10,"seatsBasis":"trusts","dataFormat":"Vendor schema","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence;Conversion","osAlternative":"openEHR","sovereignAlternative":"System C (GB); Nervecentre (GB)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Lorenzo is the NPfIT-era (CSC/DXC) North/Midlands EPR; trusts migrating away. Hull and Northern Lincs selected ORBIS U (HTN, Feb 2026).","dimsNote":"French PE-owned vendor of legacy NPfIT EPR; trusts migrating away; sale process adds uncertainty","scores":{"D1":3,"D2":2,"D3":0,"D4":2,"D5":0,"D6":0,"D7":2,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":1.0909090909090908},"refs":[{"id":"R352","author":"Nhs-tech","year":"2026","title":"[Title to be confirmed]","url":"https://nhs-tech.6b.health/lists"},{"id":"R521","author":"Unquote","year":"n.d.","title":"Ardian buys 60 stake in dedalus","url":"https://www.unquote.com/southern-europe/official-record/3001062/ardian-buys-60-stake-in-dedalus"}]},{"id":"NHS-041","entity":"NHS","subUnit":"NHS – Trust","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Altera Sunrise EPR","vendor":"Altera Digital Health","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Constellation Software (via N. Harris Computer)","ownerCountry":"CA","ownershipChange":"Yes – Harris acquired Allscripts hospital business forming Altera (2022)","ownershipSource":"https://www.alterahealth.com/newsroom/harris-completes-purchase-of-allscripts-hospitals-and-large-physician-practices-business-segment/","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Secondary","seats":12,"seatsBasis":"trusts","dataFormat":"Vendor schema","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence;Conversion","osAlternative":"openEHR","sovereignAlternative":"Nervecentre (GB); System C (GB)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Ex-Allscripts. Queen Victoria Hospital via Insight Direct (2025).","dimsNote":"Canadian serial-acquirer ownership; typical maintenance-mode pricing risk","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.9545454545454546},"refs":[{"id":"R352","author":"Nhs-tech","year":"2026","title":"[Title to be confirmed]","url":"https://nhs-tech.6b.health/lists"},{"id":"R005","author":"Alterahealth","year":"n.d.","title":"Harris completes purchase of allscripts hospitals and large physician practices business segment","url":"https://www.alterahealth.com/newsroom/harris-completes-purchase-of-allscripts-hospitals-and-large-physician-practices-business-segment/"}]},{"id":"NHS-042","entity":"NHS","subUnit":"NHS – Trust","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"MEDITECH Expanse EPR","vendor":"MEDITECH","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"MEDITECH (Medical Information Technology Inc.)","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"Mixed","prevalence":"Niche","seats":11,"seatsBasis":"trusts","dataFormat":"Vendor schema","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence;Conversion","osAlternative":"openEHR","sovereignAlternative":"Nervecentre (GB); System C (GB)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Used by e.g. Alder Hey, East & Mid Cheshire; often cloud-hosted (Google Cloud for Expanse).","dimsNote":"US vendor; Expanse often on Google Cloud adding a second US layer","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.6363636363636364},"refs":[{"id":"R352","author":"Nhs-tech","year":"2026","title":"[Title to be confirmed]","url":"https://nhs-tech.6b.health/lists"}]},{"id":"NHS-043","entity":"NHS","subUnit":"NHS – Trust","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Nervecentre EPR","vendor":"Nervecentre Software","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Nervecentre Software (founder/management-owned)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Secondary","seats":15,"seatsBasis":"trusts","dataFormat":"Vendor schema; FHIR APIs","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence;Conversion","osAlternative":"openEHR","sovereignAlternative":"n/a – UK vendor","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Fastest-growing UK-owned EPR (Liverpool UH, Mid Yorkshire, Northampton, Nottingham UH live Nov 2025, Derby & Burton, Chesterfield). Sovereign success story.","dimsNote":"UK-owned and UK-engineered EPR; ownership not independently verified","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":3,"D6":0,"D7":3,"D8":0,"D9":null,"D10":1.5,"D11":3,"D12":3,"overall":1.9545454545454546},"refs":[{"id":"R352","author":"Nhs-tech","year":"2026","title":"[Title to be confirmed]","url":"https://nhs-tech.6b.health/lists"}]},{"id":"NHS-044","entity":"NHS","subUnit":"NHS – Trust","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Community & mental health EPRs (TPP SystmOne community; Access Rio)","vendor":"TPP; The Access Group","vendorCountry":"GB","vendorTier":"T1 UK","owner":"TPP (Frank Hester); The Access Group (Hg/TA Associates)","ownerCountry":"GB","ownershipChange":"Yes – Access Group recapitalised with Hg and TA Associates (2022)","ownershipSource":"https://hgcapital.com/insights/the-access-group-announces-substantial-investment","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Primary","seats":68,"seatsBasis":"trusts (SystmOne 38 + Rio 30)","dataFormat":"Vendor schema","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion","osAlternative":"openEHR","sovereignAlternative":"n/a – UK vendors","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Community/mental health segment is dominated by UK suppliers; Access Group is PE-backed (Hg/TA). Also EMIS Community (13), Mayden iaptus (13, GB) for talking therapies.","dimsNote":"UK suppliers with UK engineering; Access PE-owned by London-based Hg","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":3,"D6":0,"D7":3,"D8":0,"D9":null,"D10":1.5,"D11":3,"D12":3,"overall":1.9545454545454546},"refs":[{"id":"R352","author":"Nhs-tech","year":"2026","title":"[Title to be confirmed]","url":"https://nhs-tech.6b.health/lists"},{"id":"R285","author":"Hgcapital","year":"n.d.","title":"The access group announces substantial investment","url":"https://hgcapital.com/insights/the-access-group-announces-substantial-investment"}]},{"id":"NHS-045","entity":"NHS","subUnit":"NHS – Trust","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Others / no full EPR (Epic-adjacent best-of-breed, in-house e.g. PPM+, Better (openEHR))","vendor":"Various","vendorCountry":"Mixed","vendorTier":"Unknown","owner":"Mixed (in-house NHS; Better; others)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Niche","seats":19,"seatsBasis":"trusts without full EPR (approx.)","dataFormat":"Mixed","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion","osAlternative":"openEHR (Better, EHRbase)","sovereignAlternative":"Better (SI); in-house NHS builds (GB)","operator":"Customer (in-house UK team)","keyCustody":"Customer (on-prem)","codeModelControl":"Self-hosted / open","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"~187 of 206 English secondary-care trusts had an EPR by late 2025, leaving ~19 without. Leeds PPM+ is in-house. Scotland uses TrakCare (InterSystems, US) widely; Wales WCP/WPAS national systems; Northern Ireland encompass = Epic regional EPR (all 5 trusts).","dimsNote":"In-house builds and openEHR give strongest control","scores":{"D1":3,"D2":null,"D3":3,"D4":3,"D5":3,"D6":3,"D7":3,"D8":3,"D9":null,"D10":1.5,"D11":3,"D12":3,"overall":2.85},"refs":[{"id":"R278","author":"Healthcare","year":"2026","title":"Nervecentre competitive analysis and framework performance","url":"https://www.healthcare.digital/single-post/nervecentre-competitive-analysis-and-framework-performance"}]},{"id":"NHS-046","entity":"NHS","subUnit":"NHS – Primary care","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"EMIS Web (Optum UK → TPG, rebranded Enlivio Health)","vendor":"Enlivio Health / EMIS (TPG-owned)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"TPG","ownerCountry":"US","ownershipChange":"Yes – Optum (UnitedHealth) bought EMIS 2023; sold to TPG Mar 2026","ownershipSource":"https://www.digitalhealth.net/2026/05/gp-it-supplier-optum-acquired-by-us-equity-firm-tpg/","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Dominant","seats":3380,"seatsBasis":"GP practices (approx. 55% of 6,143)","dataFormat":"Vendor schema; GP2GP; GP Connect FHIR","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Conversion;Skills","osAlternative":"openEHR","sovereignAlternative":"TPP SystmOne (GB)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"~55% share (2016 census via gppracticeresources.co.uk) applied to 6,143 practices (BMA, Aug 2026) – practice count Inferred. Optum (UnitedHealth) bought EMIS 2023 for ~£1.2bn; sold to TPG (US PE) March 2026 (UNH net proceeds $400m). UK-built, now US-owned. July 2024 CrowdStrike outage took down EMIS practices nationally. NI: 196 EMIS practices plus migrations (Find a Tender 007660-2024, £897k). Wales mainly EMIS.","dimsNote":"UK-built and UK-run but US PE-owned twice since 2023; dominant share and CrowdStrike outage show concentration","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0.75,"D11":1.5,"D12":1.5,"overall":1.1590909090909092},"refs":[{"id":"R015","author":"Becker's Payer Issues","year":"2026","title":"Unitedhealth completes sale of UK business to tpg","url":"https://www.beckerspayer.com/m-and-a/unitedhealth-completes-sale-of-uk-business-to-tpg/"},{"id":"R112","author":"Digital Health","year":"2026","title":"GP IT supplier optum acquired by US equity firm tpg","url":"https://www.digitalhealth.net/2026/05/gp-it-supplier-optum-acquired-by-us-equity-firm-tpg/"}]},{"id":"NHS-047","entity":"NHS","subUnit":"NHS – Primary care","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"TPP SystmOne (GP)","vendor":"The Phoenix Partnership (TPP)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"The Phoenix Partnership (privately held; founder Frank Hester)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Primary","seats":2090,"seatsBasis":"GP practices (approx. 34% of 6,143)","dataFormat":"Vendor schema; GP2GP; GP Connect FHIR","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Conversion;Skills","osAlternative":"openEHR","sovereignAlternative":"n/a – UK privately owned","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"UK-owned (Leeds, privately held) – most sovereign major clinical supplier. Count Inferred from ~34% share × 6,143. EMIS+TPP >90% of English practices; bought via GP IT Futures / Tech Innovation Framework, funded centrally via ICBs.","dimsNote":"Privately held Leeds company with UK hosting and engineering","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":3,"D6":0,"D7":3,"D8":0,"D9":null,"D10":0.75,"D11":3,"D12":3,"overall":1.8863636363636365},"refs":[{"id":"R276","author":"Gppracticeresources","year":"2026","title":"GP technology market","url":"https://gppracticeresources.co.uk/data/gp-technology-market"}]},{"id":"NHS-048","entity":"NHS","subUnit":"NHS – Primary care","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Vision (OneAdvanced) and Medicus (Doctolib) GP systems","vendor":"OneAdvanced; Doctolib","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Vista Equity Partners & BC Partners (OneAdvanced); Doctolib","ownerCountry":"US","ownershipChange":"Yes – OneAdvanced acquired Vision (2025); Doctolib (FR) acquired Medicus (2026)","ownershipSource":"https://blackenterprise.com/robert-f-smith-equity-firm-sells-stake-in-software-company/","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Niche","seats":550,"seatsBasis":"GP practices (approx. 9%)","dataFormat":"Vendor schema","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion","osAlternative":"openEHR","sovereignAlternative":"n/a","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Vision bought by OneAdvanced (GB, Hg-owned) Aug 2025; dominant historically in Scotland (Scotland GP IT framework: Vision and EMIS). Medicus acquired by Doctolib (FR) May 2026. Count Inferred.","dimsNote":"Small-share GP systems now under US/UK PE and French ownership","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.3636363636363635},"refs":[{"id":"R276","author":"Gppracticeresources","year":"2026","title":"GP technology market","url":"https://gppracticeresources.co.uk/data/gp-technology-market"},{"id":"R018","author":"Blackenterprise","year":"n.d.","title":"Robert f smith equity firm sells stake in software company","url":"https://blackenterprise.com/robert-f-smith-equity-firm-sells-stake-in-software-company/"}]},{"id":"NHS-049","entity":"NHS","subUnit":"NHS – National","layerId":"B4","layer":"Data & analytics","group":"Business apps","product":"NHS Federated Data Platform (Palantir Foundry)","vendor":"Palantir Technologies (with Accenture, PwC, NECS, Carnall Farrar)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Palantir Technologies","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.theregister.com/databases/2026/05/12/nhs-england-confirms-palantir-staff-can-access-patient-data/5238712","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Dominant","seats":139,"seatsBasis":"trusts live (plus 35 ICBs live; 170 trusts signed MOU)","dataFormat":"Foundry ontology; exports Parquet/CSV","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Re-platforming;Conversion;Skills","osAlternative":"Apache Spark/Iceberg; OpenMetadata","sovereignAlternative":"UK-built platform on Nscale/UK cloud (GB); Faculty-style UK analytics firms (GB)","operator":"UK cleared","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":330000000,"spendPeriod":"7 years from 2024 (published £182.2m committed; up to £330m)","evidence":"Confirmed","notes":"Awarded Nov 2023. Whole-life programme cost revised to ~£1.1bn with benefits cut to £808m (Computing, 2026); break clause in 2027 under ministerial review. Uptake figures from NHSE FDP uptake page (12 Jun 2026).","dimsNote":"NHSE says external admin access requires government security clearance and director approval; Palantir controls platform","scores":{"D1":3,"D2":1,"D3":0,"D4":3,"D5":0,"D6":0,"D7":1,"D8":1.5,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":1},"refs":[{"id":"R488","author":"UK Spending","year":"2024","title":"NHS Federated Data Platform contract award","url":"https://ukspending.com/contracts/5702"},{"id":"R473","author":"The Register","year":"n.d.","title":"NHS england confirms palantir staff can access patient data","url":"https://www.theregister.com/databases/2026/05/12/nhs-england-confirms-palantir-staff-can-access-patient-data/5238712"}]},{"id":"NHS-050","entity":"NHS","subUnit":"NHS – National","layerId":"B4","layer":"Data & analytics","group":"Business apps","product":"NHS Privacy Enhancing Technology (NHS-PET) for FDP","vendor":"IQVIA","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"IQVIA Holdings","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"FDP instances","dataFormat":"Pseudonymised datasets","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"OpenDP / ARX (OSS)","sovereignAlternative":"Privitar (GB, now Informatica-owned US); UK university spinouts","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":28005319,"spendPeriod":"from 2023-11 (+ up to 48 months extensions)","evidence":"Confirmed","notes":"Separate PET lot to keep pseudonymisation independent of Palantir.","dimsNote":"US data company runs PET with UK operations; separation from Palantir is design control","scores":{"D1":3,"D2":1,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":1.0454545454545454},"refs":[{"id":"R144","author":"Find a Tender Service","year":"2023","title":"Contract notice 037821-2023","url":"https://www.find-tender.service.gov.uk/Notice/037821-2023"}]},{"id":"NHS-053","entity":"NHS","subUnit":"NHS – National","layerId":"A1","layer":"Foundation models","group":"AI","product":"OpenAI GPT models (via Microsoft 365 Copilot / Azure OpenAI)","vendor":"OpenAI; Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"OpenAI; Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Primary","seats":505000,"seatsBasis":"staff with M365 Copilot (rollout from Jun 2026)","dataFormat":"Prompts/outputs in M365 (OOXML)","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence;Skills","osAlternative":"Llama / Mistral open-weight models","sovereignAlternative":"Mistral (FR); Aleph Alpha (DE); Stability AI (GB, image)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"High","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Foundation model layer is US (OpenAI/Anthropic via Microsoft). No UK frontier model; sovereign options are allied open-weight models hosted in UK.","dimsNote":"Closed US frontier models served on NVIDIA GPUs; no UK frontier model","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":0,"D10":1.5,"D11":0,"D12":0,"overall":0.625},"refs":[{"id":"R325","author":"Microsoft","year":"2026","title":"NHS england accelerates AI adoption with microsoft 365 copilot to improve service delivery reduce costs and create more time for care","url":"https://news.microsoft.com/source/2026/06/08/nhs-england-accelerates-ai-adoption-with-microsoft-365-copilot-to-improve-service-delivery-reduce-costs-and-create-more-time-for-care/"}]},{"id":"NHS-054","entity":"NHS","subUnit":"NHS – National","layerId":"A2","layer":"AI platform & hosting","group":"AI","product":"Microsoft 365 Copilot + Copilot Studio national deployment","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Primary","seats":505000,"seatsBasis":"staff","dataFormat":"Proprietary (Graph/Copilot)","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence;Skills","osAlternative":"Open WebUI + open-weight LLM","sovereignAlternative":"Nscale (GB) GPU hosting; Mistral (FR)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"High","ukCapability":"None","ukValueCapture":"Low","spend":120000000,"spendPeriod":"multi-year (term not disclosed)","evidence":"Reported","notes":"Followed Oct 2025 pilot: 30,000+ staff in 90 organisations, ~43 min/day saved (gov.uk press release 21 Oct 2025). 200,000 users in first 6 months. Value not in official release; £120m figure is press-reported – treat with caution.","dimsNote":"Copilot is opaque and repriceable; GPU supply chain exposed to export controls","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":0,"D10":1.5,"D11":0,"D12":0,"overall":0.625},"refs":[{"id":"R118","author":"Ecosystem","year":"2026","title":"Microsoft lands 152m NHS deal to deploy AI copilot across 505 000 healthcare staff","url":"https://ecosystem.refreshmiami.com/news/feed/microsoft-lands-152m-nhs-deal-to-deploy-ai-copilot-across-505-000-healthcare-staff"}]},{"id":"NHS-055","entity":"NHS","subUnit":"NHS – Trust","layerId":"A2","layer":"AI platform & hosting","group":"AI","product":"Ambient voice technology (AI scribes) – NHSE self-certified supplier registry","vendor":"Multiple (e.g. Tortus, Heidi, Accurx, Microsoft Dragon Copilot/Nuance, others)","vendorCountry":"Mixed","vendorTier":"Unknown","owner":"Mixed (Tortus; Accurx; Heidi; Microsoft/Nuance)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Secondary","seats":null,"seatsBasis":"trusts/practices adopting","dataFormat":"Transcripts/notes into EPR","formatOwner":"Vendor","openSpec":"Partial","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Licence","osAlternative":"Whisper-based OSS pipelines","sovereignAlternative":"Tortus (GB); Accurx (GB); Lexacom (GB)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"2026-02 to 2028-12 (registry)","evidence":"Confirmed","notes":"Registry requires MHRA Class 1 and DTAC; local bodies procure. Mix of UK startups and US (Microsoft/Nuance Dragon Copilot, Heidi AU). Underlying models usually US hyperscaler LLMs.","dimsNote":"Mix of UK startups and US/AU vendors; underlying LLMs mostly US","scores":{"D1":1,"D2":null,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":3,"D8":0,"D9":null,"D10":3,"D11":1.5,"D12":1.5,"overall":1.25},"refs":[{"id":"R190","author":"Find a Tender Service","year":"2026","title":"Contract notice 009501-2026","url":"https://www.find-tender.service.gov.uk/Notice/009501-2026"}]},{"id":"NHS-057","entity":"NHS","subUnit":"NHS – National","layerId":"SE1","layer":"Endpoint protection","group":"Security","product":"Microsoft Defender for Endpoint (centrally funded national licence)","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Dominant","seats":2100000,"seatsBasis":"devices onboarded (Oct 2023)","dataFormat":"Vendor telemetry","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence;Skills","osAlternative":"Wazuh; osquery","sovereignAlternative":"Sophos (GB); WithSecure (FI)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"to 2028-03-31 (central funding)","evidence":"Confirmed","notes":"Centrally funded until 31 March 2028; mandatory onboarding to NHSmail Shared Tenant; alerts to local teams and NHSE CSOC. Licence cost embedded in £774m Microsoft deal.","dimsNote":"Telemetry and agent updates controlled by Microsoft; NHSE CSOC consumes alerts","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.9545454545454546},"refs":[{"id":"R348","author":"NHS England Digital","year":"2023","title":"Microsoft defender for endpoint","url":"https://digital.nhs.uk/cyber-and-data-security/managing-security/microsoft-defender-for-endpoint"}]},{"id":"NHS-058","entity":"NHS","subUnit":"NHS – Primary care","layerId":"SE1","layer":"Endpoint protection","group":"Security","product":"CrowdStrike Falcon (EDR used in EMIS-hosted / some GP and trust estates)","vendor":"CrowdStrike","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"CrowdStrike Holdings","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Secondary","seats":null,"seatsBasis":"practices affected (most EMIS practices)","dataFormat":"Vendor telemetry","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence","osAlternative":"Wazuh","sovereignAlternative":"Sophos (GB); WithSecure (FI)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"19 July 2024 faulty CrowdStrike update disrupted EMIS and 'most GP practices' – illustrates concentration risk of a single US EDR on a dominant GP system.","dimsNote":"Kernel-level agent pushed globally; July 2024 outage took down EMIS practices","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.6363636363636364},"refs":[{"id":"R110","author":"Digital Health","year":"2024","title":"Global IT outage disrupting NHS caused by antivirus software","url":"https://www.digitalhealth.net/2024/07/global-it-outage-disrupting-nhs-caused-by-antivirus-software"}]},{"id":"NHS-059","entity":"NHS","subUnit":"NHS – National","layerId":"SE2","layer":"SIEM / SOC","group":"Security","product":"NHS England Cyber Security Operations Centre (CSOC) – national monitoring (originally IBM partnership)","vendor":"NHS England; IBM (2018 partner); Microsoft Sentinel/Defender XDR telemetry","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"NHS England (with Microsoft tooling)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"organisations monitored","dataFormat":"Vendor SIEM schemas","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming;Skills","osAlternative":"Wazuh; Elastic (open core)","sovereignAlternative":"Darktrace (GB-founded, now Thoma Bravo US); BAE Digital Intelligence (GB); NCC Group (GB)","operator":"UK cleared","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":30000000,"spendPeriod":"3 years from 2018","evidence":"Reported","notes":"Current CSOC tooling/partners not confirmed in sources gathered; CSOC consumes MDE alerts and monitors shared tenant. Trusts/ICBs run local SIEMs (often Microsoft Sentinel via M365 E5 security).","dimsNote":"NHSE-run CSOC with cleared staff but Microsoft SIEM/XDR telemetry; current partners unconfirmed","scores":{"D1":3,"D2":1,"D3":0,"D4":3,"D5":1.5,"D6":0,"D7":3,"D8":1.5,"D9":null,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.5909090909090908},"refs":[{"id":"R108","author":"Digital Health","year":"2018","title":"Ibm snaps up 30m cyber security contract from NHS digital","url":"https://digitalhealth.net/2018/07/ibm-snaps-up-30m-cyber-security-contract-from-nhs-digital"}]},{"id":"NHS-061","entity":"NHS","subUnit":"NHS – National","layerId":"SE3","layer":"Key management","group":"Security","product":"NHS PKI (NHS Root Authority G2 etc.) for smartcards, signing and Spine TLS","vendor":"NHS England (operator); HSM vendor not disclosed","vendorCountry":"GB","vendorTier":"T1 UK","owner":"NHS England","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"smartcard holders / Spine endpoints","dataFormat":"X.509","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"Low","exitCostDrivers":"Re-platforming","osAlternative":"EJBCA (OSS); OpenSSL","sovereignAlternative":"nCipher/Entrust HSMs (originally GB, now US-owned); Thales Luna (FR)","operator":"Customer (in-house UK team)","keyCustody":"Customer (on-prem)","codeModelControl":"Self-hosted / open","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"NHS-owned root CAs (tScheme certified) valid to 2032–2042. HSM vendor not disclosed.","dimsNote":"NHS-owned root CAs; HSM vendor undisclosed (likely Entrust/Thales foreign-owned)","scores":{"D1":3,"D2":3,"D3":3,"D4":3,"D5":3,"D6":3,"D7":3,"D8":3,"D9":1.5,"D10":2.25,"D11":3,"D12":3,"overall":2.8125},"refs":[{"id":"R351","author":"NHS England Digital","year":"2026","title":"NHS PKI certificate information","url":"https://digital.nhs.uk/cyber-and-data-security/guidance-and-resources/nhs-pki-certificate-information"}]},{"id":"GOV-004","entity":"Central Government","subUnit":"Cross-government","layerId":"P2","layer":"Server & AI accelerator chips","group":"Physical","product":"NVIDIA GPUs for AI compute (Stargate UK / Nscale-Microsoft UK supercomputer)","vendor":"NVIDIA","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"NVIDIA","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"UK cloud","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Planned capacity: 23,040 GB300 GPUs (Nscale/Microsoft); Stargate UK up to 31,000 GPUs","dataFormat":"CUDA","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Re-platforming;Skills","osAlternative":"AMD ROCm (open source stack)","sovereignAlternative":"Graphcore (GB, SoftBank-owned); Fractile (GB)","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"High","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"UK 'sovereign' AI compute (Stargate UK with Nscale, MoJ OpenAI data residency) still depends entirely on US NVIDIA accelerators; Computing reported in 2026 a major supercomputer was unlikely to finish on schedule.","dimsNote":"US export controls apply to NVIDIA accelerators; TSMC fab; CUDA lock-in; UK operator (Nscale) only runs the hardware","scores":{"D1":3,"D2":1,"D3":null,"D4":2,"D5":0,"D6":0,"D7":1,"D8":0,"D9":0,"D10":0,"D11":0,"D12":0,"overall":0.6363636363636364},"refs":[{"id":"R058","author":"Computer Weekly","year":"2025","title":"Ministry of justices openai deal paves way to sovereign AI","url":"https://computerweekly.com/news/366633421/Ministry-of-Justices-OpenAI-deal-paves-way-to-sovereign-AI"}]},{"id":"GOV-005","entity":"Central Government","subUnit":"Cross-government","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"Public Services Network (PSN) legacy government network","vendor":"Multiple (BT, Vodafone and others as PSN suppliers)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"BT Group / Vodafone Group","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.gov.uk/guidance/future-networks-for-government-fn4g","licence":"Open standard","governance":"Community","hosting":"On-prem","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"Legacy network still used by some services","dataFormat":"PSN compliance standard","formatOwner":"Standards body","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"Internet + zero trust","sovereignAlternative":"Internet with UK telcos (GB)","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Gov.uk describes PSN as 'a legacy network which is increasingly hard to secure'; FN4G exit programme withdrawn Jan 2024 with exits incomplete (e.g. Home Office VISOR 'not progressing').","dimsNote":"UK telcos run PSN under UK standard; network kit largely non-UK; Ownership: Bharti Global became BT's largest shareholder (24.5%) after buying Altice stake 2024 — a minority stake, not a change of control","scores":{"D1":3,"D2":3,"D3":3,"D4":2,"D5":3,"D6":0,"D7":3,"D8":1.5,"D9":1.5,"D10":1.5,"D11":3,"D12":3,"overall":2.2916666666666665},"refs":[{"id":"R232","author":"GOV.UK","year":"2024","title":"Future networks for government fn4g","url":"https://www.gov.uk/guidance/future-networks-for-government-fn4g"}]},{"id":"GOV-006","entity":"Central Government","subUnit":"Cross-government","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"Protective DNS (PDNS) for public sector, NCSC Active Cyber Defence","vendor":"Cloudflare (with Accenture)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Cloudflare Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://ukauthority.com/articles/ncsc-signs-new-partner-for-pdns-cyber-security/","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Dominant","seats":null,"seatsBasis":"1,400+ UK public sector organisations protected","dataFormat":"DNS (RFC standards)","formatOwner":"Standards body","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Licence","osAlternative":"Unbound/PowerDNS resolvers","sovereignAlternative":"Nominet (GB) - previous operator","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"NCSC moved PDNS from UK-based Nominet to US-based Cloudflare from Sept 2024 on a 3-year contract; value not disclosed. A clear sovereignty regression in a core national cyber service.","dimsNote":"NCSC PDNS moved from UK Nominet to US Cloudflare with Accenture; no published UK-only ops or data commitment; Nominet shows UK can run it","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":3,"D11":1.5,"D12":0,"overall":0.9090909090909091},"refs":[{"id":"R339","author":"National Cyber Security Centre","year":"2024","title":"Ncsc new pdns partnership","url":"https://www.ncsc.gov.uk/news/ncsc-new-pdns-partnership"},{"id":"R515","author":"UKAuthority","year":"n.d.","title":"Ncsc signs new partner for pdns cyber security","url":"https://ukauthority.com/articles/ncsc-signs-new-partner-for-pdns-cyber-security/"}]},{"id":"GOV-010","entity":"Central Government","subUnit":"Cross-government","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"AWS via One Government Value Agreement (OGVA 2.0, 3-yr MoU)","vendor":"Amazon Web Services","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Amazon","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"All central gov bodies eligible","dataFormat":"Proprietary cloud APIs","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Egress fees;Re-platforming;Skills","osAlternative":"OpenStack/Kubernetes on UK hosting","sovereignAlternative":"UKCloud successor providers; Nscale (GB); OVHcloud (FR)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":317200000,"spendPeriod":"Oct 2020-Dec 2023 (OGVA 1 contracts, 15+ bodies)","evidence":"Reported","notes":"OGVA 1 gave baseline discounts up to 18%; OGVA 2.0 renewed late 2023 for three years (so due again around late 2026), discounts not published. State of Digital Government review: all surveyed orgs use one of two leading cloud providers.","dimsNote":"US hyperscaler default; dominant cross-gov concentration and CLOUD Act exposure; OGVA renewal due late 2026","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":0,"overall":0.75},"refs":[{"id":"R053","author":"Computer Weekly","year":"2023","title":"UK government quietly renews public sector preferential pricing agreement with AWS","url":"https://www.computerweekly.com/news/366562418/UK-government-quietly-renews-public-sector-preferential-pricing-agreement-with-AWS"}]},{"id":"GOV-011","entity":"Central Government","subUnit":"Home Office","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"AWS hosting (G-Cloud call-off under OGVA 2.0)","vendor":"Amazon Web Services","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Amazon","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Home Office estate (~63% on public cloud)","dataFormat":"Proprietary cloud APIs","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Egress fees;Re-platforming;Skills","osAlternative":"Kubernetes on UK sovereign cloud","sovereignAlternative":"Nscale (GB); OVHcloud (FR)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":450000000,"spendPeriod":"3 years from Dec 2023","evidence":"Reported","notes":"Largest single AWS contract in UK government; replaced £120m predecessor. Home Office reports ~63% of estate on public cloud (State of Digital Government review).","dimsNote":"Largest single AWS contract; ~63% of Home Office estate on public cloud; no public HYOK or UK-cleared ops terms","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":0,"overall":0.75},"refs":[{"id":"R053","author":"Computer Weekly","year":"2023","title":"UK government quietly renews public sector preferential pricing agreement with AWS","url":"https://www.computerweekly.com/news/366562418/UK-government-quietly-renews-public-sector-preferential-pricing-agreement-with-AWS"}]},{"id":"GOV-012","entity":"Central Government","subUnit":"HMRC","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"AWS hosting to exit Fujitsu legacy data centres","vendor":"Amazon Web Services","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Amazon","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.thestack.technology/aws-wins-controversial-473m-hyperscaler-only-hmrc-contract/","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"HMRC estate","dataFormat":"Proprietary cloud APIs","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Egress fees;Re-platforming;Skills","osAlternative":"","sovereignAlternative":"Nscale (GB)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":473000000,"spendPeriod":"10 years initial term (2026-2036)","evidence":"Reported","notes":"Exits three Fujitsu-run data centres, with decommissioning by June 2028; described as 'UK-based sovereign cloud hosting' but the provider is US-owned. Earlier £94m 3-yr AWS deal (2021) under OGVA.","dimsNote":"Sole-bidder 10-yr deal; HMRC says it will 'retain control of our data' but no public UK-cleared operator or HYOK terms; Oct 2025 US-EAST-1 outage hit HMRC services","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":0,"overall":0.75},"refs":[{"id":"R435","author":"Technology Magazine","year":"2026","title":"AWS lands hmrcs 473m deal to exit legacy data centres","url":"https://technologymagazine.com/news/aws-lands-hmrcs-473m-deal-to-exit-legacy-data-centres"},{"id":"R477","author":"The Stack","year":"2026","title":"AWS wins controversial 473m hyperscaler only HMRC contract","url":"https://www.thestack.technology/aws-wins-controversial-473m-hyperscaler-only-hmrc-contract/"}]},{"id":"GOV-013","entity":"Central Government","subUnit":"HMRC","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"AWS cloud hosting (earlier OGVA call-off)","vendor":"Amazon Web Services","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Amazon","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"HMRC estate","dataFormat":"Proprietary cloud APIs","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Egress fees;Re-platforming","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":94000000,"spendPeriod":"3 years from Apr 2021","evidence":"Reported","notes":"Covers compute, BYOL and managed services; shows HMRC's AWS spend roughly 5x up between 2021 and 2026 deals.","dimsNote":"US hyperscaler default; superseded by 2026 deal","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":0,"overall":0.875},"refs":[{"id":"R498","author":"UKAuthority","year":"2021","title":"HMRC agrees 94 million cloud deal with AWS","url":"https://www.ukauthority.com/articles/hmrc-agrees-94-million-cloud-deal-with-aws/"}]},{"id":"GOV-014","entity":"Central Government","subUnit":"MoJ","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"AWS public cloud hosting","vendor":"Amazon Web Services","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Amazon","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"MoJ estate","dataFormat":"Proprietary cloud APIs","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Egress fees;Re-platforming","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":23800000,"spendPeriod":"May 2021-Apr 2024","evidence":"Reported","notes":"Hosting, software, support and training.","dimsNote":"US hyperscaler default","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":0,"overall":0.875},"refs":[{"id":"R095","author":"DatacenterDynamics","year":"2021","title":"UK moj signs 23 million hosting deal with AWS","url":"https://datacenterdynamics.com/en/news/uk-moj-signs-23-million-hosting-deal-with-aws"}]},{"id":"GOV-015","entity":"Central Government","subUnit":"HMRC","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Microsoft Azure (via Softcat, TPAS2)","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"HMRC estate","dataFormat":"Proprietary cloud APIs","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Egress fees;Re-platforming;Licence","osAlternative":"","sovereignAlternative":"Nscale (GB)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":81000000,"spendPeriod":"3 years + 12-month option from 2024","evidence":"Reported","notes":"Reflects HMRC's 'long term migration of legacy systems to the Azure cloud'; HMRC is multi-cloud (AWS + Azure).","dimsNote":"US hyperscaler default; UK value limited to reseller margin (Softcat)","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":0,"overall":0.875},"refs":[{"id":"R503","author":"UKAuthority","year":"2024","title":"HMRC agrees major azure contract with softcat","url":"https://ukauthority.com/articles/hmrc-agrees-major-azure-contract-with-softcat"}]},{"id":"GOV-016","entity":"Central Government","subUnit":"Cross-government","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Microsoft Azure under SPA24 MoU","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"All eligible public bodies","dataFormat":"Proprietary cloud APIs","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Egress fees;Licence;Re-platforming","osAlternative":"","sovereignAlternative":"Nscale (GB); OVHcloud (FR)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"SPA24 (from 1 Nov 2024 to 2029) covers Azure alongside M365, Copilot and Dynamics. Azure-only spend not split out.","dimsNote":"SPA24 MoU is a pricing vehicle with no published key-custody or UK-only operations terms; customer-managed keys available but not mandated","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":0,"overall":0.75},"refs":[{"id":"R272","author":"Government Commercial Agency","year":"2024","title":"Crown Commercial Service signs memorandum of understanding with Microsoft UK (SPA24)","url":"https://www.gca.gov.uk/news/crown-commercial-service-signs-memorandum-understanding-microsoft-uk-spa24"}]},{"id":"GOV-018","entity":"Central Government","subUnit":"Cross-government","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Google Cloud strategic partnership (legacy tech exit, 100k civil servant skills)","vendor":"Google","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Alphabet","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Niche","seats":100000,"seatsBasis":"Civil servants targeted for training by 2030","dataFormat":"Proprietary cloud APIs","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"Medium","exitCostDrivers":"Re-platforming;Skills","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Non-binding partnership: no value, no data residency or sovereignty terms; 'may be subject to future commercial agreements'. Risk of skills lock-in via vendor-led training.","dimsNote":"Non-binding partnership with no sovereignty terms; vendor-led skills create lock-in","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0.75,"D11":1.5,"D12":0,"overall":0.8863636363636364},"refs":[{"id":"R243","author":"GOV.UK","year":"2025","title":"New google partnership will help rid taxpayer of ball and chain legacy tech and aim to upskill 100000 civil servants in tech and AI","url":"https://www.gov.uk/government/news/new-google-partnership-will-help-rid-taxpayer-of-ball-and-chain-legacy-tech-and-aim-to-upskill-100000-civil-servants-in-tech-and-ai"}]},{"id":"GOV-019","entity":"Central Government","subUnit":"Home Office","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Oracle Cloud (SaaS/IaaS/PaaS licence uplift)","vendor":"Oracle","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Oracle","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Secondary","seats":null,"seatsBasis":"Home Office ERP/back office","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Conversion;Re-platforming","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":53400000,"spendPeriod":"5 years from Nov 2025 (~£10.9m/yr)","evidence":"Reported","notes":"Part of Synergy; contract heavily redacted. Home Office moved on-prem ERP to Oracle in 2018.","dimsNote":"Oracle-run SaaS; hosting location not disclosed; licence repricing exposure","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.3},"refs":[{"id":"R098","author":"DatacenterDynamics","year":"2025","title":"Uks home office signs 72 million cloud computing agreement with oracle","url":"https://www.datacenterdynamics.com/en/news/uks-home-office-signs-72-million-cloud-computing-agreement-with-oracle"}]},{"id":"GOV-020","entity":"Central Government","subUnit":"Cross-government","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Crown Hosting Data Centres (Crown Hosting II)","vendor":"Crown Hosting Data Centres Ltd (Cabinet Office 25% / Ark Data Centres)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Elliott Investment Management (via Ark Data Centres 50-75%); Cabinet Office 25-50%","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.datacenterdynamics.com/en/news/ark-owner-elliott-investment-looks-to-sell-uk-data-center-firm-report/","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"Legacy/high-classification workloads","dataFormat":"Colocation (no lock-in format)","formatOwner":"Open source","openSpec":"Yes","portability":"Moderate","switchingCost":"Low","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"Ark Data Centres (GB)","operator":"UK cleared","keyCustody":"Customer (on-prem)","codeModelControl":"N/A","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"Low","ukCapability":"Strong","ukValueCapture":"Medium","spend":250000000,"spendPeriod":"7 years from Mar 2023","evidence":"Confirmed","notes":"Direct award without competition citing high security requirements; CHDC turnover ~£46m FY2021. UK-owned colocation is the main sovereign hosting asset of central government.","dimsNote":"Companies House PSC shows Ark majority and Cabinet Office minority; Ark ultimately owned by US hedge fund Elliott; UK-run cleared colocation with customer-held kit; Ownership: Ark sale explored since Sep 2025; no deal agreed","scores":{"D1":3,"D2":3,"D3":3,"D4":3,"D5":3,"D6":null,"D7":1,"D8":3,"D9":3,"D10":2.25,"D11":3,"D12":1.5,"overall":2.6136363636363638},"refs":[{"id":"R132","author":"Find a Tender Service","year":"2022","title":"Contract notice 003201-2022","url":"https://www.find-tender.service.gov.uk/Notice/003201-2022"},{"id":"R096","author":"DatacenterDynamics","year":"2025","title":"Ark owner elliott investment looks to sell UK data center firm report","url":"https://www.datacenterdynamics.com/en/news/ark-owner-elliott-investment-looks-to-sell-uk-data-center-firm-report/"}]},{"id":"GOV-021","entity":"Central Government","subUnit":"GDS","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"GOV.UK PaaS (Cloud Foundry on AWS) - retired","vendor":"GDS (in-house) on AWS","vendorCountry":"GB","vendorTier":"T1 UK","owner":"UK Government (GDS)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.publictechnology.net/articles/news/gds-close-paas-public-sector-hosting-platform","licence":"Open source","governance":"Community","hosting":"UK cloud","hostingLocation":"UK","prevalence":"Niche","seats":null,"seatsBasis":"172 services / ~3,200 apps at announcement","dataFormat":"Cloud Foundry (OSS)","formatOwner":"Open source","openSpec":"Yes","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"Cloud Foundry / Kubernetes","sovereignAlternative":"","operator":"Customer (in-house UK team)","keyCustody":"Vendor","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Shared government PaaS used by 60+ bodies, retired by end 2023 rather than reinvested; tenants pushed to AWS/Azure directly. Loss of a shared, provider-neutral platform layer.","dimsNote":"Retired GDS-run open source PaaS on AWS; shows UK capability to run a shared platform","scores":{"D1":3,"D2":3,"D3":0,"D4":3,"D5":3,"D6":3,"D7":3,"D8":3,"D9":null,"D10":1.5,"D11":3,"D12":1.5,"overall":2.4545454545454546},"refs":[{"id":"R388","author":"PublicTechnology","year":"2022","title":"GDS close paas public sector hosting platform","url":"https://www.publictechnology.net/articles/news/gds-close-paas-public-sector-hosting-platform"}]},{"id":"GOV-023","entity":"Central Government","subUnit":"Cross-government","layerId":"I2","layer":"Data centre location","group":"Infrastructure","product":"Crown Hosting / Ark campuses (UK)","vendor":"Ark Data Centres","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Elliott Investment Management (Ark Data Centres)","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.datacenterdynamics.com/en/news/ark-owner-elliott-investment-looks-to-sell-uk-data-center-firm-report/","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"Legacy and classified workloads","dataFormat":"n/a","formatOwner":"Open source","openSpec":"Yes","portability":"Moderate","switchingCost":"Low","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"Ark (GB)","operator":"UK cleared","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"Low","ukCapability":"Strong","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Contract requires secure premises in at least 3 locations at least 15km apart; site names not in source (Ark runs campuses at Corsham and Farnborough, inferred).","dimsNote":"Ark is GB-registered but majority-owned by US Elliott (minority Revcap); UK sites and staff; possible sale creates ownership uncertainty; Ownership: Ark sale explored since Sep 2025; no deal agreed","scores":{"D1":3,"D2":3,"D3":null,"D4":3,"D5":3,"D6":null,"D7":1,"D8":3,"D9":3,"D10":2.25,"D11":3,"D12":1.5,"overall":2.575},"refs":[{"id":"R453","author":"The Register","year":"2022","title":"UK gov to gift new","url":"https://www.theregister.com/2022/02/10/uk_gov_to_gift_new/"},{"id":"R096","author":"DatacenterDynamics","year":"2025","title":"Ark owner elliott investment looks to sell UK data center firm report","url":"https://www.datacenterdynamics.com/en/news/ark-owner-elliott-investment-looks-to-sell-uk-data-center-firm-report/"}]},{"id":"GOV-024","entity":"Central Government","subUnit":"HMRC","layerId":"I2","layer":"Data centre location","group":"Infrastructure","product":"Fujitsu-run legacy data centres (being exited by June 2028)","vendor":"Fujitsu","vendorCountry":"JP","vendorTier":"T4 Other allied/partner","owner":"Fujitsu Ltd","ownerCountry":"JP","ownershipChange":"No","ownershipSource":"https://www.theregister.com/2026/03/25/hmrc_fujitsu_contract_aws/","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"HMRC legacy estate","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"","operator":"UK cleared","keyCustody":"Customer (on-prem)","codeModelControl":"Version-pinnable","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Three legacy DCs being vacated for AWS; this moves UK-located on-prem into US-owned hyperscaler.","dimsNote":"Fujitsu UK staff run HMRC legacy DCs; being exited to AWS by 2028","scores":{"D1":3,"D2":1,"D3":3,"D4":3,"D5":1.5,"D6":1.5,"D7":1,"D8":1.5,"D9":1.5,"D10":0,"D11":1.5,"D12":1.5,"overall":1.6666666666666667},"refs":[{"id":"R435","author":"Technology Magazine","year":"2026","title":"AWS lands hmrcs 473m deal to exit legacy data centres","url":"https://technologymagazine.com/news/aws-lands-hmrcs-473m-deal-to-exit-legacy-data-centres"},{"id":"R471","author":"The Register","year":"n.d.","title":"HMRC fujitsu contract AWS","url":"https://www.theregister.com/2026/03/25/hmrc_fujitsu_contract_aws/"}]},{"id":"GOV-029","entity":"Central Government","subUnit":"Cross-government","layerId":"PL1","layer":"Operating systems","group":"Platform","product":"VMware vSphere virtualisation (Broadcom)","vendor":"Broadcom (VMware)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Broadcom","ownerCountry":"US","ownershipChange":"Yes – Broadcom acquired VMware Nov 2023 (licence repricing followed)","ownershipSource":"https://www.gov.uk/government/publications/state-of-digital-government-review/state-of-digital-government-review","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"On-prem/Crown Hosting estates","dataFormat":"VMDK","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Conversion;Re-platforming","osAlternative":"Proxmox; KVM/OpenStack","sovereignAlternative":"","operator":"Customer (in-house UK team)","keyCustody":"Customer (on-prem)","codeModelControl":"Version-pinnable","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"State of Digital Government review: government was exposed to VMware price rises after the Broadcom acquisition because there was no cross-government agreement.","dimsNote":"Ownership change drove price rises with no cross-gov agreement; on-prem so customer-run","scores":{"D1":3,"D2":1,"D3":3,"D4":3,"D5":0,"D6":1.5,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":1.2727272727272727},"refs":[{"id":"R100","author":"Department for Science, Innovation and Technology","year":"2025","title":"State of digital government review","url":"https://www.gov.uk/government/publications/state-of-digital-government-review/state-of-digital-government-review"}]},{"id":"GOV-051","entity":"Central Government","subUnit":"GDS","layerId":"W2","layer":"Identity & directory","group":"Workplace","product":"GOV.UK One Login (citizen identity, built by GDS)","vendor":"GDS (in-house)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"UK Government (GDS)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://github.com/govuk-one-login","licence":"Open source","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Dominant","seats":14000000,"seatsBasis":"Citizens who had used One Login (Nov 2025)","dataFormat":"OIDC","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"GDS in-house (GB)","operator":"Customer (in-house UK team)","keyCustody":"Vendor","codeModelControl":"Self-hosted / open","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"122 services live (Jan 2026). UK-built and open source, but runs on AWS; lost certification for ~8 months before regaining it. Replaced Verify. Rolling out to HMRC (replacing Government Gateway).","dimsNote":"Crown-owned open source (MIT) run by GDS; signing keys in AWS KMS so custody and hosting depend on AWS","scores":{"D1":3,"D2":3,"D3":0,"D4":3,"D5":1.5,"D6":3,"D7":3,"D8":3,"D9":null,"D10":1.5,"D11":3,"D12":3,"overall":2.4545454545454546},"refs":[{"id":"R395","author":"PublicTechnology","year":"2026","title":"One login now used by 122 government services","url":"https://www.publictechnology.net/2026/01/28/science-technology-and-research/one-login-now-used-by-122-government-services/"},{"id":"R204","author":"GitHub","year":"n.d.","title":"Govuk one login","url":"https://github.com/govuk-one-login"}]},{"id":"GOV-053","entity":"Central Government","subUnit":"Cabinet Office","layerId":"W3","layer":"Email","group":"Workplace","product":"Gmail (Google Workspace) in some departments","vendor":"Google","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Alphabet","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Secondary","seats":null,"seatsBasis":"Some departments","dataFormat":"MIME/SMTP","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"State of Digital Government review: 7 resellers supplied Google products across 12 departments; exact departments using Workspace not named (GDS/Cabinet Office historically on Google, inferred).","dimsNote":"US SaaS default; client-side encryption available but not evidenced","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.7727272727272727},"refs":[{"id":"R100","author":"Department for Science, Innovation and Technology","year":"2025","title":"State of digital government review","url":"https://www.gov.uk/government/publications/state-of-digital-government-review/state-of-digital-government-review"}]},{"id":"GOV-056","entity":"Central Government","subUnit":"Cross-government","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"Microsoft 365 Apps (Word, Excel, PowerPoint) under SPA24","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Dominant","seats":557825,"seatsBasis":"Civil service headcount","dataFormat":"OOXML","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Conversion;Skills","osAlternative":"LibreOffice; Collabora","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":9000000000,"spendPeriod":"5 years Nov 2024-2029 (public sector, all Microsoft via CCS)","evidence":"Reported","notes":"Covers the whole UK public sector not just central gov; CCS/Cabinet Office says full central data on Microsoft spend is not held. ~£1.9bn spent in FY24/25.","dimsNote":"~£1.9bn/yr public-sector spend on one vendor; repricing exposure","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":0.6818181818181818},"refs":[{"id":"R463","author":"The Register","year":"2025","title":"UK public sector Microsoft spending under the SPA24 agreement","url":"https://www.theregister.com/2025/08/07/uk_microsoft_spending/"}]},{"id":"GOV-058","entity":"Central Government","subUnit":"Cabinet Office","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"Google Workspace","vendor":"Google","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Alphabet","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Secondary","seats":null,"seatsBasis":"Some departments","dataFormat":"Google proprietary (exports to OOXML/ODF)","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Same evidence as Gmail row; no seat count.","dimsNote":"US SaaS default","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.7727272727272727},"refs":[{"id":"R100","author":"Department for Science, Innovation and Technology","year":"2025","title":"State of digital government review","url":"https://www.gov.uk/government/publications/state-of-digital-government-review/state-of-digital-government-review"}]},{"id":"GOV-061","entity":"Central Government","subUnit":"HMRC","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"SAP S/4HANA Cloud ERP (Unity cluster: HMRC, DfT, MHCLG)","vendor":"SAP","vendorCountry":"DE","vendorTier":"T2 EU/EEA","owner":"SAP SE","ownerCountry":"DE","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"Unity cluster staff","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Conversion;Re-platforming","osAlternative":"Odoo; ERPNext","sovereignAlternative":"SAP (DE, allied)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":246000000,"spendPeriod":"10-year SaaS agreement","evidence":"Reported","notes":"Plus Deloitte SI up to £120m (5 yrs). Unity was rated red in 2023, since amber. SAP is EU (DE) not US.","dimsNote":"EU-owned SaaS ERP; SI Deloitte UK retains some UK value","scores":{"D1":null,"D2":2,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":2,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":0.95},"refs":[{"id":"R466","author":"The Register","year":"2026","title":"Shared services danger zone","url":"https://www.theregister.com/2026/03/09/shared_services_danger_zone/"}]},{"id":"GOV-062","entity":"Central Government","subUnit":"DWP","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Oracle Fusion ERP (Synergy cluster: DWP, MoJ, Home Office, Defra)","vendor":"Oracle (with IBM as SI)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Oracle","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"Synergy cluster staff","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Conversion;Re-platforming","osAlternative":"Odoo; ERPNext","sovereignAlternative":"SAP (DE)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":710000000,"spendPeriod":"Synergy technology + SI contract","evidence":"Reported","notes":"Also Capita £370m 10-yr BPO for HR/finance services (estimate £958.7m; challenged by Sopra Steria).","dimsNote":"Oracle SaaS with US SI IBM; hosting not disclosed","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":0.45},"refs":[{"id":"R476","author":"The Stack","year":"2025","title":"Three ERP modernisation programmes worth 1 2 billion announce their winners","url":"https://www.thestack.technology/three-erp-modernisation-programmes-worth-1-2-billion-announce-their-winners/"}]},{"id":"GOV-063","entity":"Central Government","subUnit":"DSIT","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Workday HCM/Financials (Matrix cluster: DSIT, CO, DESNZ, DCMS, DBT, AGO, DfE, DHSC, HMT)","vendor":"Workday (with Cognizant as SI)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Workday","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Primary","seats":null,"seatsBasis":"Matrix cluster staff","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Conversion","osAlternative":"","sovereignAlternative":"SAP (DE)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":144300000,"spendPeriod":"Awarded 2024","evidence":"Reported","notes":"HM Treasury and DfE commitment uncertain per NAO. The Shared Services Strategy covers 17 departments and ~300 ALBs, ~450k users; projected savings £1.8bn over 15 years.","dimsNote":"US SaaS with US SI Cognizant","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":0.6363636363636364},"refs":[{"id":"R476","author":"The Stack","year":"2025","title":"Three ERP modernisation programmes worth 1 2 billion announce their winners","url":"https://www.thestack.technology/three-erp-modernisation-programmes-worth-1-2-billion-announce-their-winners/"}]},{"id":"GOV-065","entity":"Central Government","subUnit":"HMRC","layerId":"B2","layer":"CRM","group":"Business apps","product":"Salesforce Enterprise CRM (10 yrs + 5 option)","vendor":"Salesforce","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Salesforce","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://cxtoday.com/hmrc-selects-salesforce-for-2bn-crm-program-as-overhaul-takes-shape","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"HMRC customer-facing staff and taxpayers","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Conversion;Re-platforming","osAlternative":"SuiteCRM","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":2400000000,"spendPeriod":"10 years (to 2036, extendable to 2041), max incl. VAT","evidence":"Reported","notes":"Largest single CRM award in UK government; scope includes identity verification, fraud, AI and customer portal, overlapping One Login. Article also cites £2bn.","dimsNote":"£2bn+ 10-15 yr lock-in incl. identity and fraud; hosting undisclosed; Shield BYOK not evidenced","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.3},"refs":[{"id":"R093","author":"CX Today","year":"2026","title":"HMRC selects salesforce for 2bn CRM program as overhaul takes shape","url":"https://cxtoday.com/hmrc-selects-salesforce-for-2bn-crm-program-as-overhaul-takes-shape"}]},{"id":"GOV-067","entity":"Central Government","subUnit":"GDS","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"GOV.UK Notify (email/SMS/letter platform, open source)","vendor":"GDS (in-house)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"UK Government (GDS)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://github.com/alphagov/notifications-api","licence":"Open source","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"1,200+ services (2019); 500m+ messages","dataFormat":"Open APIs","formatOwner":"Open source","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"GDS in-house (GB)","operator":"Customer (in-house UK team)","keyCustody":"Vendor","codeModelControl":"Self-hosted / open","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Saves an estimated £175m over 5 years. UK-built and open source but hosted on AWS; SMS/letter delivery uses commercial suppliers.","dimsNote":"Crown-owned open source run by GDS; AWS hosting holds keys","scores":{"D1":3,"D2":3,"D3":0,"D4":3,"D5":3,"D6":3,"D7":3,"D8":3,"D9":null,"D10":3,"D11":3,"D12":3,"overall":2.727272727272727},"refs":[{"id":"R219","author":"GOV.UK","year":"2019","title":"Governments streamlined messaging service to save taxpayer 175m","url":"https://www.gov.uk/government/news/governments-streamlined-messaging-service-to-save-taxpayer-175m"},{"id":"R202","author":"GitHub","year":"n.d.","title":"[Title to be confirmed]","url":"https://github.com/alphagov/notifications-api"}]},{"id":"GOV-072","entity":"Central Government","subUnit":"Cabinet Office","layerId":"B4","layer":"Data & analytics","group":"Business apps","product":"Palantir border flow / customs data platform","vendor":"Palantir","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Palantir Technologies","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Secondary","seats":null,"seatsBasis":"Border and customs analysts (Cabinet Office, Home Office, HMRC data)","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Conversion","osAlternative":"","sovereignAlternative":"Faculty (GB)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":20000000,"spendPeriod":"Awarded Aug 2020","evidence":"Reported","notes":"Combined near-live Home Office/HMRC data on goods crossing the border.","dimsNote":"Non-UK cloud hosting with location undisclosed; proprietary platform","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":1.5,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.45},"refs":[{"id":"R025","author":"Byline Times","year":"2020","title":"Controversial trump linked data firm given 20 million government contract to monitor uks borders","url":"https://bylinetimes.com/2020/10/30/controversial-trump-linked-data-firm-given-20-million-government-contract-to-monitor-uks-borders/"}]},{"id":"GOV-074","entity":"Central Government","subUnit":"Cross-government","layerId":"A1","layer":"Foundation models","group":"AI","product":"Microsoft 365 Copilot (OpenAI GPT models via Microsoft)","vendor":"Microsoft (OpenAI models)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Primary","seats":20000,"seatsBasis":"Civil servants in 2024 cross-gov experiment","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence","osAlternative":"Open-weight models (Mistral, Llama) self-hosted","sovereignAlternative":"Mistral (FR)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"20,000+ civil servants across 12 organisations saved an average 26 minutes/day. SPA24 first to include Copilot. HMRC has 32,000 M365 Copilot licences scaling to 50,000 in 2026 (Computer Weekly).","dimsNote":"Closed OpenAI models via Microsoft; no UK model capability at this scale","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.6363636363636364},"refs":[{"id":"R241","author":"GOV.UK","year":"2025","title":"Landmark government trial shows AI could save civil servants nearly 2 weeks a year","url":"https://www.gov.uk/government/news/landmark-government-trial-shows-ai-could-save-civil-servants-nearly-2-weeks-a-year"}]},{"id":"GOV-075","entity":"Central Government","subUnit":"HMRC","layerId":"A1","layer":"Foundation models","group":"AI","product":"Microsoft 365 Copilot rollout","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Primary","seats":32000,"seatsBasis":"HMRC licences (to 50,000 in 2026)","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence","osAlternative":"","sovereignAlternative":"Mistral (FR)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Largest departmental Copilot deployment publicly reported; cost not disclosed.","dimsNote":"US SaaS default","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.6363636363636364},"refs":[{"id":"R056","author":"Computer Weekly","year":"2025","title":"HMRC rolls out microsoft copilot AI","url":"https://www.computerweekly.com/news/366632865/HMRC-rolls-out-Microsoft-Copilot-AI"}]},{"id":"GOV-076","entity":"Central Government","subUnit":"GDS","layerId":"A1","layer":"Foundation models","group":"AI","product":"Anthropic Claude for GOV.UK agentic assistant (DSIT)","vendor":"Anthropic","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Anthropic PBC","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.anthropic.com/news/gov-UK-partnership","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Niche","seats":null,"seatsBasis":"Pilot: job seekers on GOV.UK","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"Open-weight models","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Builds on Feb 2025 MoU; Anthropic engineers working with GDS so government can maintain the system independently. Value not disclosed.","dimsNote":"Closed model but GDS to maintain the assistant independently","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":1.5,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.9},"refs":[{"id":"R008","author":"Anthropic","year":"2026","title":"Gov UK partnership","url":"https://www.anthropic.com/news/gov-UK-partnership"}]},{"id":"GOV-077","entity":"Central Government","subUnit":"MoJ","layerId":"A1","layer":"Foundation models","group":"AI","product":"OpenAI ChatGPT Enterprise (UK data residency option)","vendor":"OpenAI","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"OpenAI Group PBC","ownerCountry":"US","ownershipChange":"Yes – OpenAI recapitalised as a PBC Oct 2025 (Microsoft ~27% stake)","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Niche","seats":2500,"seatsBasis":"MoJ staff with access","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Licence","osAlternative":"Open-weight models","sovereignAlternative":"Mistral (FR)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Separate from the July 2025 DSIT-OpenAI MoU (voluntary, not legally binding); DSIT said in 2026 no trials had been undertaken under that MoU.","dimsNote":"UK data residency option but US operator and closed model","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":3,"D11":0,"D12":0,"overall":0.9545454545454546},"refs":[{"id":"R058","author":"Computer Weekly","year":"2025","title":"Ministry of justices openai deal paves way to sovereign AI","url":"https://computerweekly.com/news/366633421/Ministry-of-Justices-OpenAI-deal-paves-way-to-sovereign-AI"}]},{"id":"GOV-078","entity":"Central Government","subUnit":"Cross-government","layerId":"A1","layer":"Foundation models","group":"AI","product":"Google DeepMind / Gemini partnership","vendor":"Google","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Alphabet","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Niche","seats":null,"seatsBasis":"Early planning","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Easy","switchingCost":"Low","exitCostDrivers":"","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Agreement signed Dec 2025, reportedly still in early planning (Computing, 2026). DeepMind is London-based but Alphabet-owned (US).","dimsNote":"DeepMind is London-based so some UK research jobs; Alphabet-owned","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":3,"D11":0,"D12":1.5,"overall":0.9},"refs":[{"id":"R073","author":"Computing","year":"2026","title":"UK yet to trial openai months after landmark deal","url":"https://www.computing.co.uk/news/2026/government/uk-yet-to-trial-openai-months-after-landmark-deal"}]},{"id":"GOV-079","entity":"Central Government","subUnit":"DSIT","layerId":"A2","layer":"AI platform & hosting","group":"AI","product":"i.AI 'Humphrey' tools (Consult, Minute, Redbox, Lex, Parlex)","vendor":"Incubator for AI (DSIT, in-house)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"UK Government (DSIT)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Open source","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"Central departments (Minute used in ministerial meetings)","dataFormat":"Open source code","formatOwner":"Open source","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"i.AI in-house (GB)","operator":"Customer (in-house UK team)","keyCustody":"Vendor","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"UK-built and open source wrappers, but underlying models and hosting not stated in source (likely US LLM APIs on AWS/Azure, inferred). Redbox later retired.","dimsNote":"Crown open source wrappers; dependence on US LLM APIs and cloud","scores":{"D1":3,"D2":3,"D3":0,"D4":3,"D5":1.5,"D6":3,"D7":3,"D8":3,"D9":null,"D10":3,"D11":3,"D12":3,"overall":2.590909090909091},"refs":[{"id":"R506","author":"UKAuthority","year":"2025","title":"Dsit unveils humphrey AI package for civil service","url":"https://www.ukauthority.com/articles/dsit-unveils-humphrey-ai-package-for-civil-service"}]},{"id":"GOV-081","entity":"Central Government","subUnit":"Cross-government","layerId":"A2","layer":"AI platform & hosting","group":"AI","product":"Sovereign UK AI compute (Stargate UK with Nscale/NVIDIA; Nscale-Microsoft supercomputer)","vendor":"Nscale; OpenAI; Microsoft","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Nscale Ltd (VC-backed; Aker / 8090 Industries / Nvidia investors)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.computing.co.uk/news/2026/datacentre/nscale-files-for-us-listing-at-35bn-dollars","licence":"Proprietary","governance":"Single vendor","hosting":"UK cloud","hostingLocation":"UK","prevalence":"Niche","seats":null,"seatsBasis":"Planned capacity","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"Nscale (GB)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"High","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Stargate UK go-live targeted Q1 2026; Nscale/Microsoft supercomputer 2027. UK-operated but US chips and models.","dimsNote":"UK-domiciled operator but US chips and models; US listing may shift control; Ownership: Funding round and planned listing (2026); no change of control","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":0,"D9":0,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.4166666666666667},"refs":[{"id":"R058","author":"Computer Weekly","year":"2025","title":"Ministry of justices openai deal paves way to sovereign AI","url":"https://computerweekly.com/news/366633421/Ministry-of-Justices-OpenAI-deal-paves-way-to-sovereign-AI"},{"id":"R072","author":"Computing","year":"2026","title":"Nscale files for US listing at $35bn","url":"https://www.computing.co.uk/news/2026/datacentre/nscale-files-for-us-listing-at-35bn-dollars"}]},{"id":"GOV-085","entity":"Central Government","subUnit":"Cross-government","layerId":"SE2","layer":"SIEM / SOC","group":"Security","product":"NCSC Active Cyber Defence services (PDNS, Mail Check, Web Check)","vendor":"NCSC (GCHQ) with suppliers","vendorCountry":"GB","vendorTier":"T1 UK","owner":"UK Government (GCHQ / NCSC)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.ncsc.gov.uk/news/ncsc-new-pdns-partnership","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Dominant","seats":null,"seatsBasis":"1,400+ public sector organisations","dataFormat":"n/a","formatOwner":"Standards body","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"","osAlternative":"","sovereignAlternative":"NCSC (GB)","operator":"UK cleared","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"UK-run national cyber defence, though PDNS now runs on Cloudflare (US) infrastructure.","dimsNote":"NCSC-run services but PDNS now delivered on US Cloudflare infrastructure","scores":{"D1":1,"D2":3,"D3":0,"D4":3,"D5":1.5,"D6":0,"D7":3,"D8":1.5,"D9":null,"D10":3,"D11":3,"D12":1.5,"overall":1.8636363636363635},"refs":[{"id":"R339","author":"National Cyber Security Centre","year":"2024","title":"Ncsc new pdns partnership","url":"https://www.ncsc.gov.uk/news/ncsc-new-pdns-partnership"}]},{"id":"GOV-086","entity":"Central Government","subUnit":"Cabinet Office","layerId":"SE2","layer":"SIEM / SOC","group":"Security","product":"Managed detection & response (Expel) - QEII Centre","vendor":"Expel","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Expel Inc (VC-backed private)","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"US","prevalence":"Niche","seats":null,"seatsBasis":"Small central gov body","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Licence","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Low","spend":31000,"spendPeriod":"3 years Feb 2026-Feb 2029","evidence":"Confirmed","notes":"Shows small central bodies buying US MDR services directly; QEII Centre is an executive agency.","dimsNote":"Small US-hosted MDR; easily substituted by UK MSSPs","scores":{"D1":0,"D2":1,"D3":0,"D4":1,"D5":3,"D6":0,"D7":1,"D8":0,"D9":null,"D10":3,"D11":3,"D12":0,"overall":1.0909090909090908},"refs":[{"id":"R191","author":"Find a Tender Service","year":"2026","title":"Contract notice 010603-2026","url":"https://www.find-tender.service.gov.uk/Notice/010603-2026"}]},{"id":"BBC-004","entity":"BBC","subUnit":"BBC Public Service","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"Next-generation broadcast/IP WAN linking all UK BBC sites (21 broadcast centres, local radio, bureaux)","vendor":"BT (BT Media & Broadcast)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"BT Group plc","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"IP/SMPTE 2110 transport","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"BT is UK-sovereign; alternatives Vodafone UK (GB arm of Vodafone Group GB), Neos/Virgin Media O2 (GB)","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":100000000,"spendPeriod":"7 years from 2017 (+3 option)","evidence":"Reported","notes":"Part of Aurora tower model; replaced Vodafone network from April 2017. Seven-year term ends c.2024 with +3 extension to c.2027 - renewal status not found. UK-headquartered supplier: strong sovereignty position.","dimsNote":"UK-HQ operator with UK staff; network kit sourced from Nokia/Ericsson/Cisco; Ownership: Bharti Enterprises acquired 24.5% stake from Altice (2024) — a minority stake, not a change of control","scores":{"D1":3,"D2":3,"D3":null,"D4":2,"D5":3,"D6":0,"D7":3,"D8":0,"D9":1.5,"D10":0.75,"D11":3,"D12":3,"overall":2.022727272727273},"refs":[{"id":"R066","author":"Computing","year":"2016","title":"BBC selects bt in gbp100m broadcast networking deal to replace vodafone","url":"https://computing.co.uk/news/2444073/bbc-selects-bt-in-gbp100m-broadcast-networking-deal-to-replace-vodafone"}]},{"id":"BBC-005","entity":"BBC","subUnit":"BBC Public Service","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"London data centre, fixed telephony and additional connectivity","vendor":"Vodafone","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Vodafone Group plc","ownerCountry":"GB","ownershipChange":"Yes – Vodafone UK merged with Three UK into VodafoneThree (51/49 with CK Hutchison) 2025","ownershipSource":"https://www.vodafone.com/news/corporate-and-financial/completion-of-vodafone-and-three-merger-in-the-uk","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"BT (GB); Pulsant (GB)","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Vodafone retained London data centre, telephony and extra connectivity after losing the broadcast WAN to BT in 2016. Current status unverified.","dimsNote":"UK-HQ group operating UK data centre and telephony; current scope unverified","scores":{"D1":3,"D2":3,"D3":null,"D4":2,"D5":3,"D6":0,"D7":3,"D8":0,"D9":1.5,"D10":1.5,"D11":3,"D12":3,"overall":2.090909090909091},"refs":[{"id":"R419","author":"Silicon","year":"2016","title":"BBC bt network licence fee 184934","url":"https://silicon.co.uk/networks/networks-management/bbc-bt-network-licence-fee-184934"},{"id":"R529","author":"Vodafone","year":"n.d.","title":"Completion of vodafone and three merger in the UK","url":"https://www.vodafone.com/news/corporate-and-financial/completion-of-vodafone-and-three-merger-in-the-uk"}]},{"id":"BBC-006","entity":"BBC","subUnit":"BBC Public Service","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"DDoS 'scrubbing' protection for BBC Internet Network (bbc.co.uk, iPlayer, CDN origin)","vendor":"HCL Technologies UK","vendorCountry":"IN","vendorTier":"T4 Other allied/partner","owner":"HCL Technologies (Shiv Nadar family)","ownerCountry":"IN","ownershipChange":"No","ownershipSource":"https://www.find-tender.service.gov.uk/Notice/076485-2025","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Low","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"BT (GB) DDoS mitigation; Gcore (LU)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":2300000,"spendPeriod":"11 Jan 2027-10 Jan 2030 (+24m)","evidence":"Confirmed","notes":"Award decision Nov 2025; HCL resells/operates an underlying scrubbing network (provider not named). Incumbent since 2019; protection in place since 2016.","dimsNote":"Indian integrator reselling an unnamed (likely US) scrubbing network; vendor holds traffic/TLS handling","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":2.25,"D11":1.5,"D12":0,"overall":0.8409090909090909},"refs":[{"id":"R180","author":"Find a Tender Service","year":"2025","title":"Contract notice 076485-2025","url":"https://www.find-tender.service.gov.uk/Notice/076485-2025"}]},{"id":"BBC-007","entity":"BBC","subUnit":"BBC Public Service","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"Authoritative public DNS for BBC Online (dual resolver networks, DDoS-resilient)","vendor":"Not yet named (DNS infrastructure providers only, no resellers)","vendorCountry":"Unknown","vendorTier":"Unknown","owner":"Not yet awarded (likely US edge provider e.g. IBM NS1; Akamai; Cloudflare; AWS)","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.find-tender.service.gov.uk/Notice/042314-2025","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"DNS (RFC standards)","formatOwner":"Standards body","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Re-platforming","osAlternative":"PowerDNS / BIND (OSS)","sovereignAlternative":"Nominet (GB) managed DNS","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Low","spend":1100000,"spendPeriod":"29 Dec 2025-28 Dec 2028 (+2y)","evidence":"Confirmed","notes":"Likely candidates are US edge providers (NS1/IBM, Akamai, Cloudflare, AWS Route 53). Award not found.","dimsNote":"Owner assumed US pending award; zone data is BBC's and DNS is trivially portable; Nominet and BIND are UK/OSS fallbacks","scores":{"D1":1,"D2":null,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":3,"D9":null,"D10":3,"D11":3,"D12":0,"overall":1.35},"refs":[{"id":"R172","author":"Find a Tender Service","year":"2025","title":"Contract notice 042314-2025","url":"https://www.find-tender.service.gov.uk/Notice/042314-2025"}]},{"id":"BBC-008","entity":"BBC","subUnit":"BBC World Service","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"Hotbird satellite distribution of BBC News to European DTH audiences","vendor":"Not named (Eutelsat Hotbird capacity)","vendorCountry":"FR","vendorTier":"T2 EU/EEA","owner":"Eutelsat Communications (French state largest shareholder)","ownerCountry":"FR","ownershipChange":"Yes – OneWeb merger 2023; 2025 French-state-led capital increase with UK government stake","ownershipSource":"https://www.satellitetoday.com/business/2023/09/28/eutelsat-completes-oneweb-deal/","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"EU","prevalence":"Niche","seats":null,"seatsBasis":"","dataFormat":"DVB-S2","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"Low","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"Eutelsat (FR) / Avanti (GB)","operator":"Vendor-global","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":4500000,"spendPeriod":"1 Apr 2025-31 Mar 2030","evidence":"Confirmed","notes":"Hotbird satellites are operated by Eutelsat (FR); service supplier not identified.","dimsNote":"French operator of Hotbird; satellites built by EU primes; UK uplink alternatives exist","scores":{"D1":2,"D2":2,"D3":null,"D4":1,"D5":1.5,"D6":0,"D7":2,"D8":0,"D9":1.5,"D10":2.25,"D11":1.5,"D12":0,"overall":1.25},"refs":[{"id":"R150","author":"Find a Tender Service","year":"2024","title":"Contract notice 030866-2024","url":"https://www.find-tender.service.gov.uk/Notice/030866-2024"},{"id":"R405","author":"Satellitetoday","year":"n.d.","title":"Eutelsat completes oneweb deal","url":"https://www.satellitetoday.com/business/2023/09/28/eutelsat-completes-oneweb-deal/"}]},{"id":"BBC-011","entity":"BBC","subUnit":"BBC Public Service","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Amazon Web Services - BBC Online (WebCore: News, Sport etc.), iPlayer Video Factory, Sounds","vendor":"Amazon Web Services","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Amazon.com Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.theregister.com/2020/11/04/bbc_embraces_aws_serverless/","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Mixed","prevalence":"Dominant","seats":24100000,"seatsBasis":"BBC Online average weekly active accounts 2025/26","dataFormat":"AWS proprietary APIs (Lambda, S3, SNS/SQS)","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Egress fees;Re-platforming;Skills","osAlternative":"Kubernetes/OpenStack (OSS)","sovereignAlternative":"Nscale (GB); OVHcloud (FR); IONOS (DE); STACKIT (DE)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Customer","continuityRisk":"High","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Most of BBC website migrated from two London data centres to AWS; ~2,000 Lambdas/second render pages. iPlayer media pipeline (Video Factory) on public cloud since 2013. Annual Report cites 'consolidated cloud capability under a unified platform'. Heaviest single-vendor dependency in estate.","dimsNote":"BBC owns its WebCore code but heaviest single-vendor dependency; AWS admin plane and keys under US jurisdiction","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":3,"D9":1.5,"D10":0,"D11":1.5,"D12":0,"overall":0.8333333333333334},"refs":[{"id":"R448","author":"The Register","year":"2020","title":"BBC embraces AWS serverless","url":"https://www.theregister.com/2020/11/04/bbc_embraces_aws_serverless/"}]},{"id":"BBC-012","entity":"BBC","subUnit":"BBC Public Service","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Enterprise IT and hosting services (service desk, hosting, applications mgmt, networking, cloud mgmt, security & identity)","vendor":"Atos IT Services UK (Eviden/Atos group)","vendorCountry":"FR","vendorTier":"T2 EU/EEA","owner":"Atos SE (creditor-controlled after restructuring)","ownerCountry":"FR","ownershipChange":"Yes – financial restructuring closed Dec 2024 with creditors taking control; Bull sold to French State 2026","ownershipSource":"https://www.atosgroup.com/en/press/atos-opens-a-new-chapter-with-the-successful-closing-of-its-financial-restructuring","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":21376,"seatsBasis":"BBC Group staff served","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Re-platforming;Skills","osAlternative":"","sovereignAlternative":"CGI (CA) UK ops; Computacenter (GB); Softcat (GB); Kainos (GB)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"High","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"Medium","spend":560000000,"spendPeriod":"5 years from 2017 (+3, i.e. to c.2025)","evidence":"Reported","notes":"Atos has been BBC's main IT outsourcer since 2004 (Siemens Business Services/BBC Technology). 2017 deal (up to £560m) replaced £2bn Aurora contract. 2025 tenders (hardware provisioning; Serco notice names Atos as 'technology partner') show estate being re-sourced into towers. Atos group financial restructuring 2024 is a supplier-risk factor.","dimsNote":"Atos UK staff run the estate but group financial distress is the main continuity risk; UK MSPs could replace","scores":{"D1":3,"D2":2,"D3":0,"D4":2,"D5":0,"D6":0,"D7":2,"D8":1.5,"D9":1.5,"D10":0.75,"D11":3,"D12":1.5,"overall":1.4375},"refs":[{"id":"R068","author":"Computing","year":"2017","title":"BBC selects atos for gbp560m enterprise IT and hosting services aurora contract","url":"https://www.computing.co.uk/news/3009971/bbc-selects-atos-for-gbp560m-enterprise-it-and-hosting-services-aurora-contract"},{"id":"R012","author":"Atos","year":"n.d.","title":"Atos opens a new chapter with the successful closing of its financial restructuring","url":"https://www.atosgroup.com/en/press/atos-opens-a-new-chapter-with-the-successful-closing-of-its-financial-restructuring"}]},{"id":"BBC-013","entity":"BBC","subUnit":"BBC Public Service","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"RISE with SAP on AWS (finance, HR, procurement)","vendor":"SAP; Amazon Web Services","vendorCountry":"DE","vendorTier":"T2 EU/EEA","owner":"SAP SE (hosted on Amazon AWS)","ownerCountry":"DE","ownershipChange":"No","ownershipSource":"https://assets.dm.ux.sap.com/sap-user-groups/pdfs/250918_rise_security_framework_overview.pdf","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Primary","seats":21376,"seatsBasis":"BBC Group staff (HR/expenses users)","dataFormat":"SAP proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Re-platforming;Conversion","osAlternative":"Odoo / ERPNext (OSS)","sovereignAlternative":"Unit4 (NL); Access Group (GB); IRIS (GB)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Version-pinnable","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Replaces separate data centre hosting and licence contracts. AWS region not disclosed.","dimsNote":"RISE default is SAP/hyperscaler-managed encryption; customer-managed keys optional and not evidenced for BBC","scores":{"D1":null,"D2":2,"D3":0,"D4":1,"D5":1.5,"D6":1.5,"D7":2,"D8":1.5,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":1.1},"refs":[{"id":"R006","author":"Amazon","year":"2024","title":"SAP and amazon web services help BBC simplify its IT systems in cost effective move to the cloud","url":"https://press.aboutamazon.com/aws/2024/11/sap-and-amazon-web-services-help-bbc-simplify-its-it-systems-in-cost-effective-move-to-the-cloud"},{"id":"R525","author":"Ux","year":"n.d.","title":"250918 rise security framework overview","url":"https://assets.dm.ux.sap.com/sap-user-groups/pdfs/250918_rise_security_framework_overview.pdf"}]},{"id":"BBC-014","entity":"BBC","subUnit":"BBC Public Service","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Microsoft Azure (Cognitive Services/Bot Service for 'Beeb' voice assistant; Copilot)","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Secondary","seats":null,"seatsBasis":"","dataFormat":"Vendor APIs","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming;Skills","osAlternative":"","sovereignAlternative":"Mistral (FR) on Scaleway (FR)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Beeb voice assistant beta (June 2020) built on Azure Bot Service, Custom Neural Voice, LUIS. Beeb later closed. Azure now primarily via M365/Copilot.","dimsNote":"US hyperscaler SaaS default","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.75},"refs":[{"id":"R323","author":"Microsoft","year":"2020","title":"754836 BBC media entertainment azure","url":"https://microsoft.com/en/customers/story/754836-bbc-media-entertainment-azure"}]},{"id":"BBC-016","entity":"BBC","subUnit":"BBC Public Service","layerId":"I2","layer":"Data centre location","group":"Infrastructure","product":"BBC/Atos/Vodafone on-prem data centres and broadcast technical accommodation (London, Salford, Cardiff, Glasgow etc.)","vendor":"Atos; Vodafone; BBC in-house","vendorCountry":"GB","vendorTier":"T1 UK","owner":"BBC (public corporation); Atos SE; Vodafone Group","ownerCountry":"GB","ownershipChange":"Yes – Atos creditor-led restructuring (Dec 2024)","ownershipSource":"https://www.atosgroup.com/en/press/atos-opens-a-new-chapter-with-the-successful-closing-of-its-financial-restructuring","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"Ark (GB); Pulsant (GB); Kao Data (GB)","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Version-pinnable","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Atos scope included 'technical accommodation'; Vodafone retained a London data centre. Playout and broadcast centres remain on-prem UK.","dimsNote":"UK sites and staff; BBC controls facilities; imported server/broadcast hardware","scores":{"D1":3,"D2":3,"D3":3,"D4":2,"D5":3,"D6":1.5,"D7":3,"D8":3,"D9":1.5,"D10":1.5,"D11":3,"D12":3,"overall":2.5416666666666665},"refs":[{"id":"R419","author":"Silicon","year":"2016","title":"BBC bt network licence fee 184934","url":"https://silicon.co.uk/networks/networks-management/bbc-bt-network-licence-fee-184934"},{"id":"R012","author":"Atos","year":"n.d.","title":"Atos opens a new chapter with the successful closing of its financial restructuring","url":"https://www.atosgroup.com/en/press/atos-opens-a-new-chapter-with-the-successful-closing-of-its-financial-restructuring"}]},{"id":"BBC-019","entity":"BBC","subUnit":"BBC Public Service","layerId":"PL2","layer":"File system / storage format","group":"Platform","product":"MPEG-DASH streaming format with BBC-maintained dash.js fork (web and connected TV playback)","vendor":"DASH Industry Forum / BBC fork","vendorCountry":"OSS","vendorTier":"OSS (governance-led)","owner":"Community (DASH Industry Forum; BBC fork)","ownerCountry":"OSS","ownershipChange":"No","ownershipSource":"https://www.thestack.technology/bbc-dash-js-fork/","licence":"Open source","governance":"Foundation","hosting":"Endpoint","hostingLocation":"Mixed","prevalence":"Dominant","seats":15400000,"seatsBasis":"iPlayer average weekly active accounts 2025/26","dataFormat":"MPEG-DASH / DVB-DASH","formatOwner":"Standards body","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"","osAlternative":"dash.js (BSD)","sovereignAlternative":"n/a - open standard","operator":"Customer (in-house UK team)","keyCustody":"N/A","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"BBC keeps its dash.js fork in sync with mainline; contributes upstream. BBC has opened 85+ projects. Strong open-standard position.","dimsNote":"Open standard with BBC-maintained fork and upstream contributions","scores":{"D1":1,"D2":2,"D3":null,"D4":3,"D5":3,"D6":3,"D7":2,"D8":3,"D9":null,"D10":3,"D11":3,"D12":1.5,"overall":2.45},"refs":[{"id":"R475","author":"The Stack","year":"2025","title":"BBC dash js fork","url":"https://www.thestack.technology/bbc-dash-js-fork/"}]},{"id":"BBC-020","entity":"BBC","subUnit":"BBC Public Service","layerId":"PL2","layer":"File system / storage format","group":"Platform","product":"Time Addressable Media Store (TAMS) open spec for cloud media production","vendor":"BBC R&D (spec); AWS (open-source implementation)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"BBC (spec owner)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Open source","governance":"Community","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Niche","seats":null,"seatsBasis":"","dataFormat":"TAMS API over HTTP; segmented media on S3","formatOwner":"Open source","openSpec":"Yes","portability":"Moderate","switchingCost":"Low","exitCostDrivers":"Egress fees","osAlternative":"TAMS (BBC GitHub)","sovereignAlternative":"BBC R&D (GB) - spec is UK-originated","operator":"Customer (in-house UK team)","keyCustody":"Vendor","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"BBC-authored open specification; AWS built CNAP reference implementation on S3 with Sky and Adobe. Spec is UK-sovereign, reference implementation AWS-tied.","dimsNote":"BBC-authored open spec; AWS reference implementation and S3 storage use AWS-managed keys","scores":{"D1":null,"D2":3,"D3":0,"D4":3,"D5":3,"D6":3,"D7":3,"D8":3,"D9":null,"D10":2.25,"D11":3,"D12":3,"overall":2.625},"refs":[{"id":"R425","author":"Sports Video Group","year":"2024","title":"Ibc 2024 AWS BBC adobe prioritize fast turnaround media workflows with new open source framework","url":"https://www.sportsvideo.org/2024/09/09/ibc-2024-aws-bbc-adobe-prioritize-fast-turnaround-media-workflows-with-new-open-source-framework/"}]},{"id":"BBC-021","entity":"BBC","subUnit":"BBC Public Service","layerId":"PL3","layer":"Database","group":"Platform","product":"Amazon Redshift data warehouse (audience analytics) with S3 data lake","vendor":"Amazon Web Services","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Amazon.com Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"Columnar (proprietary) / Parquet on S3","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Egress fees;Re-platforming","osAlternative":"PostgreSQL / ClickHouse / DuckDB","sovereignAlternative":"ClickHouse Cloud (US-founded, NL engineering) ; Exasol (DE)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"BBC analytics platform ingests supplier files to S3, processes via MapReduce/Airflow, serves analysts from Redshift.","dimsNote":"Proprietary columnar engine; data in Parquet on S3 eases exit","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":1.5,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.9},"refs":[{"id":"R292","author":"InfoQ","year":"2021","title":"BBC analytics platform","url":"https://www.infoq.com/presentations/bbc-analytics-platform"}]},{"id":"BBC-022","entity":"BBC","subUnit":"BBC Public Service","layerId":"PL3","layer":"Database","group":"Platform","product":"Snowflake (live editorial dashboards fed from Piano Analytics)","vendor":"Snowflake","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Snowflake Inc (listed)","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Secondary","seats":null,"seatsBasis":"","dataFormat":"Proprietary (Iceberg export possible)","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Egress fees;Re-platforming","osAlternative":"Apache Iceberg + Trino","sovereignAlternative":"Exasol (DE)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Vendor case study says Snowflake integration streams live data into BBC editorial dashboards.","dimsNote":"BYOK (Tri-Secret Secure) exists on higher tiers but not evidenced for BBC","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":1.5,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.9},"refs":[{"id":"R375","author":"Piano","year":"2025","title":"Beyond analytics how BBC uses piano to drive engagement and subscriptions across the entire funnel","url":"https://www.piano.io/resources/beyond-analytics-how-bbc-uses-piano-to-drive-engagement-and-subscriptions-across-the-entire-funnel"}]},{"id":"BBC-023","entity":"BBC","subUnit":"BBC Public Service","layerId":"PL3","layer":"Database","group":"Platform","product":"Redis (caching/queueing in web stack); historic MySQL","vendor":"Redis Ltd / OSS community; Oracle (MySQL)","vendorCountry":"OSS","vendorTier":"OSS (governance-led)","owner":"Community (Redis Ltd stewarded; Valkey fork; Oracle for MySQL)","ownerCountry":"OSS","ownershipChange":"No","ownershipSource":"","licence":"Open core","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Secondary","seats":null,"seatsBasis":"","dataFormat":"Open protocols","formatOwner":"Open source","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Skills","osAlternative":"Valkey (Linux Foundation)","sovereignAlternative":"n/a","operator":"Customer (in-house UK team)","keyCustody":"N/A","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Redis used for caching; pre-migration LAMP stack used MySQL. Current primary operational DBs (likely DynamoDB/RDS) not published.","dimsNote":"Redis licence changes 2024-25 mitigated by Linux Foundation Valkey fork","scores":{"D1":null,"D2":2,"D3":null,"D4":3,"D5":3,"D6":3,"D7":2,"D8":3,"D9":null,"D10":3,"D11":3,"D12":1.5,"overall":2.611111111111111},"refs":[{"id":"R291","author":"InfoQ","year":"2020","title":"BBC AWS lambda react cicd","url":"https://www.infoq.com/podcasts/bbc-aws-lambda-react-cicd"}]},{"id":"BBC-024","entity":"BBC","subUnit":"BBC Public Service","layerId":"PL4","layer":"Application framework","group":"Platform","product":"React + Node.js server-side rendering (WebCore; Simorgh for World Service sites)","vendor":"Meta (React); OpenJS Foundation (Node.js)","vendorCountry":"OSS","vendorTier":"OSS (governance-led)","owner":"Community (Meta for React; OpenJS Foundation)","ownerCountry":"OSS","ownershipChange":"No","ownershipSource":"","licence":"Open source","governance":"Foundation","hosting":"Non-UK cloud","hostingLocation":"Mixed","prevalence":"Dominant","seats":24100000,"seatsBasis":"BBC Online weekly active accounts","dataFormat":"JavaScript/JSX","formatOwner":"Open source","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Skills","osAlternative":"Preact / Vue","sovereignAlternative":"n/a - OSS","operator":"Customer (in-house UK team)","keyCustody":"N/A","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"BBC moved from LAMP/Java/Varnish to React SSR in Lambda. BBC's open-source Simorgh (World Service) also React/Node.","dimsNote":"Permissive OSS run by BBC engineers; Simorgh is BBC open source","scores":{"D1":1,"D2":2,"D3":null,"D4":3,"D5":3,"D6":3,"D7":2,"D8":3,"D9":null,"D10":3,"D11":3,"D12":1.5,"overall":2.45},"refs":[{"id":"R291","author":"InfoQ","year":"2020","title":"BBC AWS lambda react cicd","url":"https://www.infoq.com/podcasts/bbc-aws-lambda-react-cicd"}]},{"id":"BBC-025","entity":"BBC","subUnit":"BBC Public Service","layerId":"PL5","layer":"Application servers","group":"Platform","product":"AWS Lambda serverless compute (page rendering)","vendor":"Amazon Web Services","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Amazon.com Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.theregister.com/2020/11/04/bbc_embraces_aws_serverless/","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Mixed","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"Lambda runtime API","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Re-platforming;Skills","osAlternative":"Knative / OpenFaaS on Kubernetes","sovereignAlternative":"Scaleway Serverless (FR); OVHcloud (FR)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Customer","continuityRisk":"High","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"~2,000 Lambda invocations/second; BBC deliberately chose not to use containers, increasing proprietary lock-in to Lambda.","dimsNote":"BBC owns function code but Lambda runtime is proprietary and BBC avoided containers","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":3,"D9":1.5,"D10":0,"D11":1.5,"D12":0,"overall":0.8333333333333334},"refs":[{"id":"R448","author":"The Register","year":"2020","title":"BBC embraces AWS serverless","url":"https://www.theregister.com/2020/11/04/bbc_embraces_aws_serverless/"}]},{"id":"BBC-026","entity":"BBC","subUnit":"BBC Public Service","layerId":"PL5","layer":"Application servers","group":"Platform","product":"Unified Origin dynamic packaging for iPlayer (Video Factory)","vendor":"Unified Streaming","vendorCountry":"NL","vendorTier":"T2 EU/EEA","owner":"Software Combined","ownerCountry":"AU","ownershipChange":"Yes – Unified Streaming (NL) acquired by Software Combined (AU) Sept 2025","ownershipSource":"https://www.tvbeurope.com/business/unified-streaming-acquired-by-software-combined","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Primary","seats":15400000,"seatsBasis":"iPlayer weekly active accounts","dataFormat":"DASH/HLS/CMAF output","formatOwner":"Standards body","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence;Re-platforming","osAlternative":"GPAC / Shaka Packager (OSS)","sovereignAlternative":"Unified Streaming (NL) is EU-allied","operator":"Customer (in-house UK team)","keyCustody":"N/A","codeModelControl":"Version-pinnable","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Packaging/caching layer in iPlayer's public-cloud media pipeline. European vendor; outputs open standards.","dimsNote":"Licensed packager run in BBC pipeline; owner moved from Dutch founders to Australian acquirer","scores":{"D1":null,"D2":2,"D3":null,"D4":3,"D5":1.5,"D6":1.5,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":1.3333333333333333},"refs":[{"id":"R519","author":"Unified-streaming","year":"2016","title":"BBC video factory using unified origin dynamic packaging all formats including dvb dash","url":"https://www.unified-streaming.com/cases/bbc-video-factory-using-unified-origin-dynamic-packaging-all-formats-including-dvb-dash"},{"id":"R485","author":"Tvbeurope","year":"n.d.","title":"Unified streaming acquired by software combined","url":"https://www.tvbeurope.com/business/unified-streaming-acquired-by-software-combined"}]},{"id":"BBC-027","entity":"BBC","subUnit":"BBC Public Service","layerId":"PL6","layer":"Development language","group":"Platform","product":"JavaScript/TypeScript (Node.js) - dominant language for BBC Online and open-source repos","vendor":"OSS community","vendorCountry":"OSS","vendorTier":"OSS (governance-led)","owner":"Community (Ecma TC39; OpenJS Foundation; Microsoft for TypeScript)","ownerCountry":"OSS","ownershipChange":"No","ownershipSource":"","licence":"Open source","governance":"Community","hosting":"Endpoint","hostingLocation":"Mixed","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"n/a","formatOwner":"Standards body","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Skills","osAlternative":"n/a","sovereignAlternative":"n/a","operator":"Customer (in-house UK team)","keyCustody":"N/A","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"BBC public GitHub (github.com/bbc) dominated by JS/TS (Simorgh, Psammead), plus Python, Scala, Java, C++ (R&D). Could not enumerate repo stats in this session.","dimsNote":"Open languages with large UK skills base","scores":{"D1":1,"D2":2,"D3":null,"D4":3,"D5":3,"D6":3,"D7":2,"D8":3,"D9":null,"D10":3,"D11":3,"D12":1.5,"overall":2.45},"refs":[{"id":"R291","author":"InfoQ","year":"2020","title":"BBC AWS lambda react cicd","url":"https://www.infoq.com/podcasts/bbc-aws-lambda-react-cicd"}]},{"id":"BBC-028","entity":"BBC","subUnit":"BBC Public Service","layerId":"PL6","layer":"Development language","group":"Platform","product":"Java, Python and Scala (data platform, APIs, R&D media tooling)","vendor":"OSS community; Oracle (Java)","vendorCountry":"OSS","vendorTier":"OSS (governance-led)","owner":"Community (Oracle stewards Java; PSF; Scala Center)","ownerCountry":"OSS","ownershipChange":"No","ownershipSource":"","licence":"Open source","governance":"Community","hosting":"Non-UK cloud","hostingLocation":"Mixed","prevalence":"Secondary","seats":null,"seatsBasis":"","dataFormat":"n/a","formatOwner":"Open source","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Skills","osAlternative":"OpenJDK","sovereignAlternative":"n/a","operator":"Customer (in-house UK team)","keyCustody":"N/A","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Analytics platform jobs in Java, utilities in Python; Scala used historically in iPlayer/Sounds back-ends.","dimsNote":"OpenJDK and open runtimes avoid Oracle licence exposure","scores":{"D1":1,"D2":2,"D3":null,"D4":3,"D5":3,"D6":3,"D7":2,"D8":3,"D9":null,"D10":3,"D11":3,"D12":1.5,"overall":2.45},"refs":[{"id":"R292","author":"InfoQ","year":"2021","title":"BBC analytics platform","url":"https://www.infoq.com/presentations/bbc-analytics-platform"}]},{"id":"BBC-029","entity":"BBC","subUnit":"BBC Public Service","layerId":"PL6","layer":"Development language","group":"Platform","product":"GitHub Copilot (AI coding assistant) and GitHub hosting","vendor":"Microsoft (GitHub)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"US","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"Git","formatOwner":"Open source","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Skills","osAlternative":"GitLab CE / Forgejo","sovereignAlternative":"GitLab (US, NL ops); Codeberg (DE)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Annual Report 2025/26 lists GitHub Copilot among AI tools staff use; BBC publishes open source on github.com/bbc.","dimsNote":"BBC owns its code and Git is portable; Copilot model fully vendor-controlled","scores":{"D1":0,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":3,"D9":null,"D10":3,"D11":3,"D12":0,"overall":1.2272727272727273},"refs":[{"id":"R252","author":"GOV.UK","year":"2026","title":"BBC annual report accounts 25 26 accessible 3","url":"https://assets.publishing.service.gov.uk/media/6a55f7fca4890e65cce64ea2/BBC_Annual_Report___Accounts_25_26_accessible__3_.pdf"}]},{"id":"BBC-030","entity":"BBC","subUnit":"BBC Public Service","layerId":"PL7","layer":"Web servers","group":"Platform","product":"Nginx-based in-house Global Traffic Manager (front door for BBC Online)","vendor":"F5 (Nginx) / BBC in-house","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"F5 Inc (Nginx); BBC in-house","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Open core","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"HTTP","formatOwner":"Standards body","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Skills","osAlternative":"Nginx OSS / HAProxy / Envoy","sovereignAlternative":"n/a - OSS","operator":"Customer (in-house UK team)","keyCustody":"Customer (on-prem)","codeModelControl":"Self-hosted / open","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Handles tens of thousands of requests/sec; runs partly on-prem. Open-source Nginx core gives good portability.","dimsNote":"BBC-built traffic manager on open Nginx core partly on-prem UK","scores":{"D1":3,"D2":1,"D3":3,"D4":3,"D5":3,"D6":3,"D7":1,"D8":3,"D9":1.5,"D10":3,"D11":3,"D12":3,"overall":2.5416666666666665},"refs":[{"id":"R448","author":"The Register","year":"2020","title":"BBC embraces AWS serverless","url":"https://www.theregister.com/2020/11/04/bbc_embraces_aws_serverless/"}]},{"id":"BBC-031","entity":"BBC","subUnit":"BBC Public Service","layerId":"PL7","layer":"Web servers","group":"Platform","product":"CDNs for BBC Online and iPlayer (Akamai, Fastly; BBC in-house caching)","vendor":"Akamai; Fastly","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Akamai Technologies; Fastly Inc (both listed)","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.netify.ai/resources/ips/151.101.0.81","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Dominant","seats":24100000,"seatsBasis":"BBC Online weekly active accounts","dataFormat":"HTTP/DASH","formatOwner":"Standards body","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Re-platforming","osAlternative":"Varnish / Apache Traffic Server (OSS)","sovereignAlternative":"Gcore (LU); BT/ISP-embedded caches (GB)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"DNS/IP intelligence shows www.bbc.com and account.bbc.com on Fastly (AS54113) and iPlayer config hostnames on Akamai (~1,500 IPs). Akamai used for iPlayer since 2008 (with Level 3). BBC also runs own CDN origin/caching; multi-CDN reduces lock-in.","dimsNote":"Edge holds BBC TLS keys; multi-CDN reduces but does not remove US-provider concentration","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":3,"D11":1.5,"D12":0,"overall":0.9090909090909091},"refs":[{"id":"R342","author":"Netify","year":"2026","title":"[Title to be confirmed]","url":"https://www.netify.ai/resources/ips/151.101.0.81"}]},{"id":"BBC-033","entity":"BBC","subUnit":"BBC Public Service","layerId":"W2","layer":"Identity & directory","group":"Workplace","product":"BBC Account / BBC ID audience identity (PingAM, PingIDM)","vendor":"Ping Identity (incl. ForgeRock)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Thoma Bravo (Ping Identity incl. ForgeRock)","ownerCountry":"US","ownershipChange":"Yes – Thoma Bravo took Ping private 2022 and merged ForgeRock 2023","ownershipSource":"https://www.thomabravo.com/press-releases/thoma-bravo-completes-acquisition-of-forgerock-combines-forgerock-into-ping-identity","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"Unknown","prevalence":"Dominant","seats":45000000,"seatsBasis":"registered BBC ID accounts per vendor case study","dataFormat":"OIDC/OAuth 2.0","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming;Conversion","osAlternative":"Keycloak (CNCF/Red Hat)","sovereignAlternative":"Signicat (NO); IDnow (DE); Yoti (GB)","operator":"Customer (in-house UK team)","keyCustody":"BYOK","codeModelControl":"Version-pinnable","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Over 45m registered accounts. BBC is re-procuring a CIAM SaaS platform (tender notice Apr 2026) sized for 100m users, 550m tokens, 50k req/s - an open sovereignty decision point.","dimsNote":"BBC-run PingAM/IDM on own infrastructure but US PE owner rationalising ForgeRock product line","scores":{"D1":null,"D2":1,"D3":2,"D4":3,"D5":1.5,"D6":1.5,"D7":1,"D8":1.5,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":1.45},"refs":[{"id":"R376","author":"Pingidentity","year":"2024","title":"[Title to be confirmed]","url":"https://www.pingidentity.com/en/customer-stories/3959-bbc.html"},{"id":"R482","author":"Thomabravo","year":"n.d.","title":"Thoma bravo completes acquisition of forgerock combines forgerock into ping identity","url":"https://www.thomabravo.com/press-releases/thoma-bravo-completes-acquisition-of-forgerock-combines-forgerock-into-ping-identity"}]},{"id":"BBC-034","entity":"BBC","subUnit":"BBC Public Service","layerId":"W2","layer":"Identity & directory","group":"Workplace","product":"Customer Identity & Access Management (CIAM) re-procurement","vendor":"TBC (tender live)","vendorCountry":"Unknown","vendorTier":"Unknown","owner":"To be awarded (CIAM market led by Okta; Ping/Thoma Bravo; Microsoft)","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.find-tender.service.gov.uk/procurement/ocds-h6vhtk-05123a","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Dominant","seats":100000000,"seatsBasis":"target users in tender","dataFormat":"OIDC/OAuth","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming;Conversion","osAlternative":"Keycloak","sovereignAlternative":"Yoti (GB); Signicat (NO)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"UK4 tender by Account & Identity team in BBC Media Tech; value not published. Market engagement May 2025.","dimsNote":"Owner assumed US given SaaS CIAM market; sovereign decision point open in live tender","scores":{"D1":null,"D2":null,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.7222222222222222},"refs":[{"id":"R192","author":"Find a Tender Service","year":"2026","title":"Ocds h6vhtk 05123a","url":"https://www.find-tender.service.gov.uk/procurement/ocds-h6vhtk-05123a"}]},{"id":"BBC-040","entity":"BBC","subUnit":"BBC Public Service","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"SAP ERP (finance, HR, procurement) via RISE with SAP","vendor":"SAP","vendorCountry":"DE","vendorTier":"T2 EU/EEA","owner":"SAP SE (listed)","ownerCountry":"DE","ownershipChange":"No","ownershipSource":"https://assets.dm.ux.sap.com/sap-user-groups/pdfs/250918_rise_security_framework_overview.pdf","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Dominant","seats":21376,"seatsBasis":"BBC Group FTE","dataFormat":"SAP proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Re-platforming;Conversion;Skills","osAlternative":"Odoo / ERPNext","sovereignAlternative":"Unit4 (NL); Access Group (GB)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Version-pinnable","ipOwner":"Shared","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"EU vendor on US hyperscaler. SAP specialist services bought via BBC Systems Delivery & Integration framework Lot 2 (£16-20m, 2022-26).","dimsNote":"SAP licence and roadmap leverage plus US hyperscaler hosting; customer keys not evidenced","scores":{"D1":null,"D2":2,"D3":0,"D4":1,"D5":0,"D6":1.5,"D7":2,"D8":1.5,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":0.95},"refs":[{"id":"R006","author":"Amazon","year":"2024","title":"SAP and amazon web services help BBC simplify its IT systems in cost effective move to the cloud","url":"https://press.aboutamazon.com/aws/2024/11/sap-and-amazon-web-services-help-bbc-simplify-its-it-systems-in-cost-effective-move-to-the-cloud"},{"id":"R525","author":"Ux","year":"n.d.","title":"250918 rise security framework overview","url":"https://assets.dm.ux.sap.com/sap-user-groups/pdfs/250918_rise_security_framework_overview.pdf"}]},{"id":"BBC-041","entity":"BBC","subUnit":"BBC Public Service","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Business process outsourcing: finance, P2P, payroll (UK/intl) and SAP application management","vendor":"Tata Consultancy Services (subcontractors EY payroll, Canon document mgmt)","vendorCountry":"IN","vendorTier":"T4 Other allied/partner","owner":"Tata Sons (Tata Consultancy Services)","ownerCountry":"IN","ownershipChange":"No","ownershipSource":"https://www.find-tender.service.gov.uk/Notice/020920-2023/PDF","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"Mixed","prevalence":"Dominant","seats":21376,"seatsBasis":"BBC Group staff and freelancers paid","dataFormat":"SAP data","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Skills;Re-platforming","osAlternative":"","sovereignAlternative":"Capita (GB); NorthgateArinso/MHR (GB)","operator":"Offshore","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Low","spend":170000000,"spendPeriod":"6 years from mid-2024 (+4)","evidence":"Confirmed","notes":"Replaced IBM (2016-24) finance/payroll BPO. Includes ACON artists & contributors system support.","dimsNote":"Indian BPO with offshore delivery for payroll/finance; UK BPO alternatives exist","scores":{"D1":1,"D2":1,"D3":0,"D4":0,"D5":1.5,"D6":0,"D7":1,"D8":1.5,"D9":null,"D10":0.75,"D11":3,"D12":0,"overall":0.8863636363636364},"refs":[{"id":"R140","author":"Find a Tender Service","year":"2023","title":"Contract notice 020920-2023","url":"https://www.find-tender.service.gov.uk/Notice/020920-2023/PDF"}]},{"id":"BBC-042","entity":"BBC","subUnit":"BBC Public Service","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Systems Delivery & Integration Services framework (Lot 1 general, Lot 2 SAP)","vendor":"18 suppliers incl. Accenture, Atos, CGI, Deloitte, IBM, TCS, Wipro, SAP Source","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Mixed (Accenture IE; Atos FR; CGI CA; Deloitte UK; IBM US; TCS IN; Wipro IN; SAP Source GB)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.contractsfinder.service.gov.uk/Notice/bf792dea-589c-40b3-9346-699b82694628","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Skills","osAlternative":"","sovereignAlternative":"Kainos (GB); Redcentric (GB); SAP Source (GB SME)","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":40000000,"spendPeriod":"Apr 2022-Apr 2026","evidence":"Confirmed","notes":"£8-10m/yr expected spend; only 2 of 18 suppliers are UK SMEs; vendor_country GB reflects UK contracting entities of a multinational mix (US, IN, FR, IE, CA HQs). Expired April 2026 - successor not found.","dimsNote":"GB reflects UK contracting entities; most ultimate owners are non-UK; only 2 of 18 UK SMEs","scores":{"D1":3,"D2":3,"D3":null,"D4":2,"D5":3,"D6":null,"D7":3,"D8":3,"D9":null,"D10":1.5,"D11":3,"D12":1.5,"overall":2.5555555555555554},"refs":[{"id":"R079","author":"Contracts Finder","year":"2022","title":"Contract notice bf792dea-589c-40b3-9346-699b82694628","url":"https://www.contractsfinder.service.gov.uk/Notice/bf792dea-589c-40b3-9346-699b82694628"}]},{"id":"BBC-043","entity":"BBC","subUnit":"BBC Public Service","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Jaggaer eSourcing portal (BBC procurement)","vendor":"Jaggaer","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Vista Equity Partners (Jaggaer)","ownerCountry":"US","ownershipChange":"Yes – Vista Equity Partners acquired Jaggaer from Cinven (Aug 2024)","ownershipSource":"https://www.digitalcommerce360.com/2024/08/16/procurement-software-developer-jaggaer-new-owner/","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Low","exitCostDrivers":"Conversion","osAlternative":"","sovereignAlternative":"Atamis (GB); Proactis (GB)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"All recent BBC tenders run via Jaggaer; Annual Report also notes new Supplier Lifecycle Management tool.","dimsNote":"US PE-owned SaaS; UK alternatives (Atamis; Proactis) available","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":2.25,"D11":3,"D12":0,"overall":0.975},"refs":[{"id":"R169","author":"Find a Tender Service","year":"2025","title":"Contract notice 028141-2025","url":"https://www.find-tender.service.gov.uk/Notice/028141-2025"},{"id":"R115","author":"Digitalcommerce360","year":"n.d.","title":"Procurement software developer jaggaer new owner","url":"https://www.digitalcommerce360.com/2024/08/16/procurement-software-developer-jaggaer-new-owner/"}]},{"id":"BBC-044","entity":"BBC","subUnit":"BBC Public Service","layerId":"B2","layer":"CRM","group":"Business apps","product":"Customer Data Platform (data management, campaign management, activation)","vendor":"mParticle (now Rokt)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Rokt","ownerCountry":"US","ownershipChange":"Yes – mParticle acquired by Rokt (~$300m) Jan 2025","ownershipSource":"https://www.adexchanger.com/commerce/rokt-acquires-mparticle-for-300-million","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":24100000,"seatsBasis":"BBC Online weekly active accounts","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion;Re-platforming","osAlternative":"RudderStack (OSS core)","sovereignAlternative":"Permutive (GB)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":8000000,"spendPeriod":"7 years from Sep 2024 (1+3+3)","evidence":"Confirmed","notes":"Holds BBC Account audience profiles - sensitive for sovereignty. Spend range £4.5m-£8m. Permutive (London) is a UK option.","dimsNote":"Audience profiles held by an adtech-owned CDP; Permutive (GB) alternative","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":1.5,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.9},"refs":[{"id":"R151","author":"Find a Tender Service","year":"2024","title":"Contract notice 031517-2024","url":"https://www.find-tender.service.gov.uk/Notice/031517-2024"},{"id":"R001","author":"Adexchanger","year":"n.d.","title":"Rokt acquires mparticle for 300 million","url":"https://www.adexchanger.com/commerce/rokt-acquires-mparticle-for-300-million"}]},{"id":"BBC-045","entity":"BBC","subUnit":"BBC Public Service","layerId":"B2","layer":"CRM","group":"Business apps","product":"Audience Services (complaints, iPlayer/Sounds/BBC Account support, switchboard) incl. AI case handling","vendor":"Serco","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Serco Group plc (listed)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Skills","osAlternative":"","sovereignAlternative":"Serco is UK-headquartered","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":40600000,"spendPeriod":"Apr 2026-Mar 2031 (+36m)","evidence":"Confirmed","notes":"Notice names Atos as BBC technology partner; CRM platform underneath not named (Salesforce not evidenced).","dimsNote":"UK-HQ operator with UK contact centres; underlying CRM platform unnamed","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":3,"D6":0,"D7":3,"D8":1.5,"D9":null,"D10":1.5,"D11":3,"D12":3,"overall":2.090909090909091},"refs":[{"id":"R164","author":"Find a Tender Service","year":"2025","title":"Contract notice 019138-2025","url":"https://www.find-tender.service.gov.uk/Notice/019138-2025"}]},{"id":"BBC-046","entity":"BBC","subUnit":"TV Licensing","layerId":"B2","layer":"CRM","group":"Business apps","product":"TV Licensing administration and customer systems","vendor":"Capita","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Capita plc (listed)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://capita.com/news/capita-announces-five-year-extension-tv-licensing-contract","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Re-platforming;Skills","osAlternative":"","sovereignAlternative":"Capita is UK-headquartered","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":456000000,"spendPeriod":"Jul 2022-Jun 2027","evidence":"Confirmed","notes":"Licence fee collection costs £190m in 2025/26. Re-procurement due before June 2027.","dimsNote":"UK-HQ outsourcer; Capita financial weakness and 2027 re-procurement drive continuity risk","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":1.5,"D9":null,"D10":0,"D11":3,"D12":3,"overall":1.8181818181818181},"refs":[{"id":"R033","author":"Capita","year":"2022","title":"Capita announces five year extension tv licensing contract","url":"https://capita.com/news/capita-announces-five-year-extension-tv-licensing-contract"}]},{"id":"BBC-047","entity":"BBC","subUnit":"BBC News","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Newsroom computer system - OpenMedia","vendor":"CGI (formerly Annova)","vendorCountry":"CA","vendorTier":"T3 Five Eyes (ex-UK)","owner":"CGI Inc (listed)","ownerCountry":"CA","ownershipChange":"No","ownershipSource":"https://www.cgi.com/uk/en-gb/case-study/media/how-cgis-newsroom-system-helps-bbc-handle-its-global-news-output","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":15000,"seatsBasis":"BBC News OpenMedia users","dataFormat":"Proprietary; MOS protocol","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Conversion;Re-platforming;Skills","osAlternative":"","sovereignAlternative":"Annova heritage (AT); CGI UK delivery","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Version-pinnable","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Replaced ENPS (AP, US) from 2015 across 120+ locations. Canadian owner, Austrian product heritage.","dimsNote":"On-prem UK install supported by CGI UK; Canadian owner (allied)","scores":{"D1":3,"D2":1,"D3":3,"D4":2,"D5":1.5,"D6":1.5,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":1.5,"overall":1.4583333333333333},"refs":[{"id":"R036","author":"Cgi","year":"2020","title":"How cgis newsroom system helps BBC handle its global news output","url":"https://www.cgi.com/uk/en-gb/case-study/media/how-cgis-newsroom-system-helps-bbc-handle-its-global-news-output"}]},{"id":"BBC-048","entity":"BBC","subUnit":"BBC Wales","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Dalet Galaxy MAM and orchestration (Central Square Cardiff)","vendor":"Dalet","vendorCountry":"FR","vendorTier":"T2 EU/EEA","owner":"Long Path Partners (Dalet)","ownerCountry":"US","ownershipChange":"Yes – Long Path Partners public tender offer took Dalet private (2020-21)","ownershipSource":"https://alantra.com/ib-transaction/long-path-partners-public-tender-dalet","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"","dataFormat":"MXF; BPMN workflows","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion;Re-platforming","osAlternative":"","sovereignAlternative":"Dalet (FR) is EU-allied","operator":"Customer (in-house UK team)","keyCustody":"Customer (on-prem)","codeModelControl":"Version-pinnable","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Includes Dalet Brio IP (SMPTE 2110) servers. Dalet used across BBC radio for 15+ years.","dimsNote":"French product now controlled by US investment firm; on-prem Cardiff deployment","scores":{"D1":3,"D2":2,"D3":3,"D4":3,"D5":1.5,"D6":1.5,"D7":1,"D8":0,"D9":1.5,"D10":1.5,"D11":1.5,"D12":0,"overall":1.625},"refs":[{"id":"R424","author":"Sports Video Group","year":"2017","title":"BBC wales selects dalet galaxy to manage assets orchestrate workflows across new media facility","url":"https://www.sportsvideo.org/2017/12/06/bbc-wales-selects-dalet-galaxy-to-manage-assets-orchestrate-workflows-across-new-media-facility/"},{"id":"R004","author":"Alantra","year":"n.d.","title":"Long path partners public tender dalet","url":"https://alantra.com/ib-transaction/long-path-partners-public-tender-dalet"}]},{"id":"BBC-049","entity":"BBC","subUnit":"BBC Public Service","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Managed TV playout (BBC One/Two/Four, CBBC, CBeebies, Red Button, World News)","vendor":"Red Bee Media","vendorCountry":"SE","vendorTier":"T2 EU/EEA","owner":"Telefonaktiebolaget LM Ericsson (Red Bee Media)","ownerCountry":"SE","ownershipChange":"No","ownershipSource":"https://en.wikipedia.org/wiki/Red_Bee_Media","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"Red Bee was originally BBC Broadcast (GB)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Medium","spend":248000000,"spendPeriod":"Tender ceiling 2014 for 5-10y (Lot1 £125-215m, Lot2 £25-33m)","evidence":"Reported","notes":"7-year playout contract signed c.2016 with Ericsson's Red Bee. Red Bee ownership changed since Ericsson (verify current owner). Annual Report: 99.99% TV playout availability.","dimsNote":"Red Bee remains wholly owned by Ericsson (2018 sale abandoned); playout run by UK staff","scores":{"D1":3,"D2":2,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":2,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":1.5,"overall":1.25},"refs":[{"id":"R065","author":"Computing","year":"2014","title":"BBC issues gbp248m worth of tenders for playout services","url":"https://computing.co.uk/news/2325278/bbc-issues-gbp248m-worth-of-tenders-for-playout-services"},{"id":"R119","author":"En","year":"n.d.","title":"Red bee media","url":"https://en.wikipedia.org/wiki/Red_Bee_Media"}]},{"id":"BBC-050","entity":"BBC","subUnit":"BBC Public Service","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Media & Broadcast Systems Integrator framework (facility build, software & workflow, OB vehicles)","vendor":"11 suppliers incl. Atos, Cognizant, dB Broadcast, ES Broadcast, Megahertz, VSC","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Mixed (mostly UK SME integrators; Atos FR; Cognizant US)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"SMPTE 2110 / IP","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Skills","osAlternative":"","sovereignAlternative":"dB Broadcast, Megahertz, VSC (GB)","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":40000000,"spendPeriod":"Sep 2022-Aug 2026","evidence":"Confirmed","notes":"Mostly UK SME integrators. Successor framework (PROC/2025/60/PH) planned Sep 2026-Aug 2030.","dimsNote":"Mostly UK SME integrators; broadcast hardware imported","scores":{"D1":3,"D2":3,"D3":null,"D4":2,"D5":3,"D6":null,"D7":3,"D8":3,"D9":1.5,"D10":1.5,"D11":3,"D12":3,"overall":2.6},"refs":[{"id":"R078","author":"Contracts Finder","year":"2022","title":"Contract notice b6bfd76f-21dc-4fbc-8a83-9e05f7fdfe60","url":"https://www.contractsfinder.service.gov.uk/Notice/b6bfd76f-21dc-4fbc-8a83-9e05f7fdfe60"}]},{"id":"BBC-051","entity":"BBC","subUnit":"BBC Public Service","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"BBC R&D open-source media tooling (GStreamer, IP Studio/NMOS, dash.js, TAMS)","vendor":"BBC R&D","vendorCountry":"GB","vendorTier":"T1 UK","owner":"BBC (public corporation)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://assets.publishing.service.gov.uk/media/6a55f7fca4890e65cce64ea2/BBC_Annual_Report___Accounts_25_26_accessible__3_.pdf","licence":"Open source","governance":"Community","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Niche","seats":null,"seatsBasis":"","dataFormat":"Open (NMOS, SMPTE 2110, DASH)","formatOwner":"Standards body","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"","osAlternative":"GStreamer (LGPL)","sovereignAlternative":"BBC R&D (GB)","operator":"Customer (in-house UK team)","keyCustody":"Customer (on-prem)","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":18000000,"spendPeriod":"2025/26","evidence":"Reported","notes":"Charter requires BBC to lead R&D and share it. Research costs fell £21m to £18m; press reported R&D cuts as AI prioritised.","dimsNote":"BBC-owned open source and standards work; R&D budget falling","scores":{"D1":3,"D2":3,"D3":3,"D4":3,"D5":3,"D6":3,"D7":3,"D8":3,"D9":null,"D10":3,"D11":3,"D12":3,"overall":3},"refs":[{"id":"R252","author":"GOV.UK","year":"2026","title":"BBC annual report accounts 25 26 accessible 3","url":"https://assets.publishing.service.gov.uk/media/6a55f7fca4890e65cce64ea2/BBC_Annual_Report___Accounts_25_26_accessible__3_.pdf"}]},{"id":"BBC-052","entity":"BBC","subUnit":"BBC Public Service","layerId":"B4","layer":"Data & analytics","group":"Business apps","product":"Piano Analytics (audience measurement, activation, paywall for bbc.com)","vendor":"Piano (incl. ex-AT Internet)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Piano Software Inc (VC-backed; Updata Partners and others)","ownerCountry":"US","ownershipChange":"Yes – Piano acquired AT Internet (FR) 2021 moving analytics engine to US ownership","ownershipSource":"https://updata.com/piano-acquires-at-internet/","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"EU","prevalence":"Dominant","seats":24100000,"seatsBasis":"BBC Online weekly active accounts (Piano-measured KPI)","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion;Re-platforming","osAlternative":"Matomo (OSS)","sovereignAlternative":"AT Internet heritage (FR); Matomo (NZ/EU hosting)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Annual Report KPIs (WAA, iPlayer accounts) sourced from Piano Analytics. Piano is US-HQ; analytics engine from French AT Internet acquisition.","dimsNote":"Statutory BBC KPIs depend on a US-owned analytics platform hosted in EU","scores":{"D1":2,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.8636363636363636},"refs":[{"id":"R252","author":"GOV.UK","year":"2026","title":"BBC annual report accounts 25 26 accessible 3","url":"https://assets.publishing.service.gov.uk/media/6a55f7fca4890e65cce64ea2/BBC_Annual_Report___Accounts_25_26_accessible__3_.pdf"},{"id":"R522","author":"Updata","year":"n.d.","title":"Piano acquires at internet","url":"https://updata.com/piano-acquires-at-internet/"}]},{"id":"BBC-053","entity":"BBC","subUnit":"BBC Public Service","layerId":"B4","layer":"Data & analytics","group":"Business apps","product":"Apache Airflow pipelines on AWS (S3 data lake, MapReduce)","vendor":"Apache Software Foundation; AWS","vendorCountry":"OSS","vendorTier":"OSS (governance-led)","owner":"Community (Apache Software Foundation)","ownerCountry":"OSS","ownershipChange":"No","ownershipSource":"","licence":"Open source","governance":"Foundation","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"Parquet/CSV on S3","formatOwner":"Open source","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Egress fees","osAlternative":"Airflow / Spark","sovereignAlternative":"n/a","operator":"Customer (in-house UK team)","keyCustody":"Vendor","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Open orchestration layer, but data gravity on AWS.","dimsNote":"Open orchestration run by BBC; data and keys on AWS","scores":{"D1":null,"D2":2,"D3":0,"D4":3,"D5":3,"D6":3,"D7":2,"D8":3,"D9":null,"D10":3,"D11":3,"D12":1.5,"overall":2.35},"refs":[{"id":"R292","author":"InfoQ","year":"2021","title":"BBC analytics platform","url":"https://www.infoq.com/presentations/bbc-analytics-platform"}]},{"id":"BBC-054","entity":"BBC","subUnit":"BBC Public Service","layerId":"A1","layer":"Foundation models","group":"AI","product":"ChatGPT and Microsoft Copilot (staff general-purpose GenAI)","vendor":"OpenAI; Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"OpenAI Group PBC (Microsoft ~27%); Microsoft Corp","ownerCountry":"US","ownershipChange":"Yes – OpenAI recapitalised as public benefit corporation (Oct 2025)","ownershipSource":"https://assets.publishing.service.gov.uk/media/6a55f7fca4890e65cce64ea2/BBC_Annual_Report___Accounts_25_26_accessible__3_.pdf","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Primary","seats":10700,"seatsBasis":"~50% of BBC Group staff using AI tools weekly","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Skills","osAlternative":"Llama / Mistral open-weight","sovereignAlternative":"Mistral (FR); Aleph Alpha (DE)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Annual Report 2025/26 names Copilot, ChatGPT, Runway, ElevenLabs, GitHub Copilot. Paradox: BBC blocked OpenAI crawlers (2023) and threatened Perplexity with legal action (June 2025) over scraping while buying their tools.","dimsNote":"Closed frontier models with vendor-controlled versions and pricing","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":3,"D11":0,"D12":0,"overall":0.7727272727272727},"refs":[{"id":"R252","author":"GOV.UK","year":"2026","title":"BBC annual report accounts 25 26 accessible 3","url":"https://assets.publishing.service.gov.uk/media/6a55f7fca4890e65cce64ea2/BBC_Annual_Report___Accounts_25_26_accessible__3_.pdf"}]},{"id":"BBC-055","entity":"BBC","subUnit":"BBC Public Service","layerId":"A1","layer":"Foundation models","group":"AI","product":"ElevenLabs (synthetic voice) and Runway (generative video)","vendor":"ElevenLabs; Runway","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"ElevenLabs; Runway AI (both VC-backed)","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://assets.publishing.service.gov.uk/media/6a55f7fca4890e65cce64ea2/BBC_Annual_Report___Accounts_25_26_accessible__3_.pdf","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Niche","seats":null,"seatsBasis":"","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Skills","osAlternative":"Coqui TTS / open models","sovereignAlternative":"Synthesia (GB); Papercup (GB)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"ElevenLabs founders Polish, HQ US/London. AI-assisted translation (BBC News Polska) pilot.","dimsNote":"Closed generative models; UK alternatives Synthesia and Papercup","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":1.5,"D9":null,"D10":3,"D11":1.5,"D12":0,"overall":1.05},"refs":[{"id":"R252","author":"GOV.UK","year":"2026","title":"BBC annual report accounts 25 26 accessible 3","url":"https://assets.publishing.service.gov.uk/media/6a55f7fca4890e65cce64ea2/BBC_Annual_Report___Accounts_25_26_accessible__3_.pdf"}]},{"id":"BBC-056","entity":"BBC","subUnit":"BBC News","layerId":"A1","layer":"Foundation models","group":"AI","product":"BBC-trained/fine-tuned LLM (Style Assist; R&D model on BBC archive)","vendor":"BBC R&D on open-weight base model","vendorCountry":"GB","vendorTier":"T1 UK","owner":"BBC (public corporation)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.newscaststudio.com/2025/06/27/bbc-begins-public-trials-of-two-generative-ai-news-production-tools","licence":"Open source","governance":"Community","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Niche","seats":null,"seatsBasis":"","dataFormat":"Model weights (open)","formatOwner":"Open source","openSpec":"Partial","portability":"Easy","switchingCost":"Low","exitCostDrivers":"","osAlternative":"Open-weight base model","sovereignAlternative":"BBC in-house (GB)","operator":"Customer (in-house UK team)","keyCustody":"Vendor","codeModelControl":"Self-hosted / open","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"High","ukCapability":"Partial","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Style Assist described as 'BBC-trained LLM'; Fortune (2024) reports R&D fine-tuning an open-source LLM. BBC considered building own model on archives (2024). Base model and hosting undisclosed.","dimsNote":"BBC owns fine-tuned weights on open base model; hosting undisclosed and GPU supply export-controlled","scores":{"D1":null,"D2":3,"D3":0,"D4":3,"D5":3,"D6":3,"D7":3,"D8":3,"D9":0,"D10":3,"D11":1.5,"D12":3,"overall":2.3181818181818183},"refs":[{"id":"R344","author":"Newscaststudio","year":"2025","title":"BBC begins public trials of two generative AI news production tools","url":"https://www.newscaststudio.com/2025/06/27/bbc-begins-public-trials-of-two-generative-ai-news-production-tools"}]},{"id":"SCH-004","entity":"Schools","subUnit":"England - London","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"LGfL wide area network (London Grid for Learning)","vendor":"LGfL (charity) with Virgin Media Business","vendorCountry":"GB","vendorTier":"T1 UK","owner":"London Grid for Learning Trust (charity); carrier Virgin Media O2 (Liberty Global/Telefonica JV)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://virginmediabusiness.co.uk/customer-stories/london-grid-for-learning","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":1000000,"seatsBasis":"pupils served on LGfL network (~2500 London schools)","dataFormat":"","formatOwner":"","openSpec":"","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"LGfL (GB) - already sovereign","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Regional broadband consortium model: LGfL connects up to 3000 locations across 33 London LAs with filtering, authentication, email and storage bundled. Carrier Virgin Media Business is UK-headquartered (Liberty Global/Telefonica JV). Bundling of filtering+identity+network increases switching cost.","dimsNote":"Charity-owned consortium run in UK; carrier is UK-operated VMO2 (US/ES parents); network kit largely US/CN origin","scores":{"D1":3,"D2":3,"D3":3,"D4":2,"D5":3,"D6":0,"D7":3,"D8":1.5,"D9":1.5,"D10":1.5,"D11":3,"D12":3,"overall":2.2916666666666665},"refs":[{"id":"R528","author":"Virginmediabusiness","year":"n.d.","title":"London grid for learning","url":"https://virginmediabusiness.co.uk/customer-stories/london-grid-for-learning"}]},{"id":"SCH-005","entity":"Schools","subUnit":"England","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"Connect the Classroom (DfE-funded Wi-Fi and fibre upgrades)","vendor":"DfE (funder) with commercial ISPs and Wi-Fi integrators","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Department for Education (funder); UK carriers","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.gov.uk/government/news/no-child-left-behind-in-plans-to-narrow-the-digital-divide-in-education","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":1300000,"seatsBasis":"pupils in 3700 schools reached by connectivity programmes","dataFormat":"","formatOwner":"","openSpec":"","portability":"Easy","switchingCost":"Low","exitCostDrivers":"","osAlternative":"","sovereignAlternative":"Openreach/altnets (GB); Schools Broadband (GB)","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"Medium","spend":45000000,"spendPeriod":"2025-26","evidence":"Confirmed","notes":"Full fibre used by 67% of primaries (up from 54%); Wi-Fi 6 in 49% primaries/54% secondaries; 60% of secondaries have backup broadband (TIS 2025). Wi-Fi access points typically US vendors (Cisco Meraki, HPE Aruba, Extreme) - inferred. Connectivity itself is UK-carrier dominated.","dimsNote":"Public funding of UK carriers; Wi-Fi APs mostly US vendors (Cisco/HPE/Extreme) so hardware value leaks","scores":{"D1":3,"D2":3,"D3":null,"D4":2,"D5":3,"D6":null,"D7":3,"D8":3,"D9":1.5,"D10":3,"D11":3,"D12":1.5,"overall":2.6},"refs":[{"id":"R244","author":"GOV.UK","year":"2025","title":"No child left behind in plans to narrow the digital divide in education","url":"https://www.gov.uk/government/news/no-child-left-behind-in-plans-to-narrow-the-digital-divide-in-education"}]},{"id":"SCH-006","entity":"Schools","subUnit":"England","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"Schools Broadband / BT and other commercial school ISPs","vendor":"Schools Broadband; BT; others","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Exa Networks (Schools Broadband); BT Group","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://announcements.asx.com.au/asxpdf/20240919/pdf/0681hpybpjk1wv.pdf","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Secondary","seats":1500000,"seatsBasis":"students and staff at 3000+ Schools Broadband schools/MATs","dataFormat":"","formatOwner":"","openSpec":"","portability":"Easy","switchingCost":"Low","exitCostDrivers":"","osAlternative":"","sovereignAlternative":"Already GB carriers","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Qoria ASX announcement: Schools Broadband supports 3000+ schools and MATs (~1.5m students and staff). Shows MSP/ISP channel bundling US/AU safeguarding software into UK connectivity.","dimsNote":"UK carriers operated in UK; reseller channel bundles AU/US safeguarding software (Qoria now US-owned); Ownership: Bharti Enterprises took 24.5% of BT Group in 2024 — a minority stake, not a change of control","scores":{"D1":3,"D2":3,"D3":null,"D4":2,"D5":3,"D6":null,"D7":3,"D8":0,"D9":1.5,"D10":3,"D11":3,"D12":3,"overall":2.45},"refs":[{"id":"R011","author":"Asx","year":"2024","title":"[Title to be confirmed]","url":"https://announcements.asx.com.au/asxpdf/20240919/pdf/0681hpybpjk1wv.pdf"}]},{"id":"SCH-012","entity":"Schools","subUnit":"England","layerId":"I2","layer":"Data centre location","group":"Infrastructure","product":"On-premises school server rooms","vendor":"Schools (self)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Schools (self-owned)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://assets.publishing.service.gov.uk/media/692834a6ce50d215cae9610e/Technology_in_schools_survey_2024_to_2025_research_report.pdf","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"","formatOwner":"","openSpec":"","portability":"","switchingCost":"Low","exitCostDrivers":"","osAlternative":"","sovereignAlternative":"","operator":"Customer (in-house UK team)","keyCustody":"Customer (on-prem)","codeModelControl":"Version-pinnable","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"98% of secondaries and 73% of primaries use some on-prem infrastructure; cloud-based infrastructure 43% primaries (up from 32%) and 27% secondaries. Physically sovereign but often poorly resilient (backup gaps).","dimsNote":"Fully school-controlled premises; weak resilience and skills; hardware imported","scores":{"D1":3,"D2":3,"D3":3,"D4":3,"D5":3,"D6":1.5,"D7":3,"D8":3,"D9":1.5,"D10":3,"D11":1.5,"D12":1.5,"overall":2.5},"refs":[{"id":"R248","author":"GOV.UK","year":"2025","title":"Technology in schools survey 2024 to 2025 research report","url":"https://assets.publishing.service.gov.uk/media/692834a6ce50d215cae9610e/Technology_in_schools_survey_2024_to_2025_research_report.pdf"}]},{"id":"SCH-018","entity":"Schools","subUnit":"England","layerId":"PL3","layer":"Database","group":"Platform","product":"PostgreSQL (Oak National Academy platform)","vendor":"PostgreSQL Global Development Group","vendorCountry":"OSS","vendorTier":"OSS (governance-led)","owner":"Community (PostgreSQL Global Development Group)","ownerCountry":"OSS","ownershipChange":"No","ownershipSource":"https://engineering.thenational.academy/about","licence":"Open source","governance":"Community","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Niche","seats":null,"seatsBasis":"","dataFormat":"SQL","formatOwner":"Open source","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"","osAlternative":"PostgreSQL (OSS)","sovereignAlternative":"","operator":"Customer (in-house UK team)","keyCustody":"Vendor","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Oak (DfE arm's-length body) states stack of TypeScript, Next.js and PostgreSQL; cloud provider not named.","dimsNote":"OSS database run by Oak team; cloud host unnamed so keys likely with cloud provider","scores":{"D1":null,"D2":2,"D3":0,"D4":3,"D5":3,"D6":3,"D7":2,"D8":3,"D9":null,"D10":3,"D11":3,"D12":1.5,"overall":2.35},"refs":[{"id":"R121","author":"Engineering","year":"n.d.","title":"[Title to be confirmed]","url":"https://engineering.thenational.academy/about"}]},{"id":"SCH-020","entity":"Schools","subUnit":"England","layerId":"PL4","layer":"Application framework","group":"Platform","product":"Next.js / React (Oak National Academy and modern edtech SaaS)","vendor":"Vercel; Meta","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Vercel (Next.js); Meta (React)","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://engineering.thenational.academy/about","licence":"Open source","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Secondary","seats":null,"seatsBasis":"","dataFormat":"","formatOwner":"Open source","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Skills","osAlternative":"","sovereignAlternative":"","operator":"Customer (in-house UK team)","keyCustody":"N/A","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Oak open-sources much of its code and publishes curriculum under the Open Government Licence - sovereign-friendly public good. Framework governance is single US vendor though MIT-licensed.","dimsNote":"MIT-licensed frameworks can be forked and self-hosted; governance by US firms","scores":{"D1":null,"D2":1,"D3":null,"D4":3,"D5":3,"D6":3,"D7":1,"D8":3,"D9":null,"D10":3,"D11":3,"D12":0,"overall":2.2222222222222223},"refs":[{"id":"R121","author":"Engineering","year":"n.d.","title":"[Title to be confirmed]","url":"https://engineering.thenational.academy/about"}]},{"id":"SCH-028","entity":"Schools","subUnit":"England - London","layerId":"W2","layer":"Identity & directory","group":"Workplace","product":"LGfL Universal Sign On (USO) platform","vendor":"Atomwide Limited (for LGfL)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Macquarie Capital (via Wavenet/AdEPT owning Atomwide); contract held by LGfL charity","ownerCountry":"AU","ownershipChange":"Yes – Wavenet (Macquarie Capital-backed) acquired AdEPT Technology Group incl Atomwide in 2023","ownershipSource":"https://www.wavenet.co.uk/news-and-events/wavenet-acquires-adept-technology-group-plc-0","licence":"Proprietary","governance":"Single vendor","hosting":"UK cloud","hostingLocation":"UK","prevalence":"Niche","seats":3000,"seatsBasis":"schools covered by LGfL USO contract","dataFormat":"","formatOwner":"","openSpec":"","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"","osAlternative":"","sovereignAlternative":"Already GB","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":21800000,"spendPeriod":"Dec 2023 - Dec 2028 (60 months)","evidence":"Confirmed","notes":"Rare example of UK-owned school identity service at scale; federates to Microsoft/Google.","dimsNote":"UK-run identity service but operator Atomwide is ultimately Macquarie (AU) PE-owned; LGfL owns contract and federation config","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":3,"D6":0,"D7":1,"D8":1.5,"D9":null,"D10":1.5,"D11":3,"D12":1.5,"overall":1.7727272727272727},"refs":[{"id":"R145","author":"Find a Tender Service","year":"2024","title":"Contract notice 000957-2024","url":"https://www.find-tender.service.gov.uk/Notice/000957-2024"},{"id":"R531","author":"Wavenet","year":"n.d.","title":"Wavenet acquires adept technology group plc 0","url":"https://www.wavenet.co.uk/news-and-events/wavenet-acquires-adept-technology-group-plc-0"}]},{"id":"SCH-029","entity":"Schools","subUnit":"","layerId":"W2","layer":"Identity & directory","group":"Workplace","product":"Wonde (MIS data integration and MyLogin SSO)","vendor":"Wonde Ltd","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Wonde founders with AU VC minority (Tempus Partners)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.startupdaily.net/2019/12/british-education-data-privacy-play-wonde-lands-2-6-million-from-australian-vcs/","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":30000,"seatsBasis":"schools connected globally (60+ countries)","dataFormat":"Wonde API JSON","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"Already GB","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"UK-founded integration layer between MIS (SIMS, Arbor, Bromcom) and apps; Cyber Essentials Plus. Hosting location not stated. Wonde has been backed by Australian VCs - check current ownership.","dimsNote":"UK-founded Nottingham firm; AU VC minority since 2019 round; aggregation choke point between MIS and apps; host not stated","scores":{"D1":null,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":0,"D9":null,"D10":1.5,"D11":3,"D12":3,"overall":1.7},"refs":[{"id":"R533","author":"Wonde","year":"n.d.","title":"School our reach","url":"https://wonde.com/school-our-reach"},{"id":"R427","author":"Startupdaily","year":"n.d.","title":"British education data privacy play wonde lands 2 6 million from australian vcs","url":"https://www.startupdaily.net/2019/12/british-education-data-privacy-play-wonde-lands-2-6-million-from-australian-vcs/"}]},{"id":"SCH-037","entity":"Schools","subUnit":"","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"SIMS FMS (finance) and ParentPay Group back-office","vendor":"ParentPay Group (Montagu Private Equity)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Montagu Private Equity","ownerCountry":"GB","ownershipChange":"Yes – Montagu invested in ParentPay and bought ESS (SIMS/FMS) from Capita Dec 2020; combined 2021","ownershipSource":"https://www.theregister.com/2020/12/14/capita_sells_ess_to_montagu/","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion; Re-platforming","osAlternative":"","sovereignAlternative":"PS Financials (GB); IRIS (GB); Access Education (GB)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Version-pinnable","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"ParentPay Group products include SIMS, FMS, Schoolcomms, Cypad. Trust finance (MATs) also commonly PS Financials, Access, Sage (GB) - inferred. UK-based but PE-owned (Montagu, GB).","dimsNote":"UK-run but PE-financialised (exit sale likely); on-prem FMS version-pinnable; UK finance alternatives (PS Financials/IRIS/Access)","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":1.5,"D7":3,"D8":0,"D9":null,"D10":1.5,"D11":3,"D12":1.5,"overall":1.8181818181818181},"refs":[{"id":"R534","author":"Yespress","year":"n.d.","title":"[Title to be confirmed]","url":"https://yespress.io/parentpay-group"},{"id":"R449","author":"The Register","year":"2020","title":"Capita sells ess to montagu","url":"https://www.theregister.com/2020/12/14/capita_sells_ess_to_montagu/"}]},{"id":"SCH-038","entity":"Schools","subUnit":"England","layerId":"B2","layer":"CRM","group":"Business apps","product":"ParentPay payments and Schoolcomms parent communications","vendor":"ParentPay Group (Montagu Private Equity)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Montagu Private Equity","ownerCountry":"GB","ownershipChange":"Yes – Montagu invested in ParentPay and bought ESS from Capita Dec 2020; combined 2021","ownershipSource":"https://www.theregister.com/2020/12/14/capita_sells_ess_to_montagu/","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Dominant","seats":9000000,"seatsBasis":"users (company-reported; 20000+ schools)","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"Already GB; Arbor comms (GB); Bromcom (GB)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Parent engagement/payment layer functions as schools' CRM. Company-reported 20000+ schools and 9m users; secondary aggregator source - verify on parentpay.com. Montagu also owns SIMS (combined 2021) creating cross-sell lock-in.","dimsNote":"UK-run SaaS; GB PE owner extracts value via fund; payments layer cross-sold with SIMS","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":0,"D9":null,"D10":1.5,"D11":3,"D12":1.5,"overall":1.6818181818181819},"refs":[{"id":"R534","author":"Yespress","year":"n.d.","title":"[Title to be confirmed]","url":"https://yespress.io/parentpay-group"},{"id":"R449","author":"The Register","year":"2020","title":"Capita sells ess to montagu","url":"https://www.theregister.com/2020/12/14/capita_sells_ess_to_montagu/"}]},{"id":"SCH-039","entity":"Schools","subUnit":"England","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Arbor MIS (cloud)","vendor":"Arbor Education Partners Ltd","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Permira (majority of The Key Group)","ownerCountry":"GB","ownershipChange":"Yes – Permira majority investment in The Key Group (Arbor parent) closed 20 Nov 2025","ownershipSource":"https://yespress.io/arbor-education.md","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Dominant","seats":9677,"seatsBasis":"England schools (44% share; WhichMIS Oct census)","dataFormat":"Proprietary; DfE CTF/census returns","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion; Re-platforming; Skills","osAlternative":"","sovereignAlternative":"Already GB","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Arbor overtook SIMS: 9677 England (44%) and 9858 UK (37%). ScholarPack schools being migrated to Arbor (The Key Group). UK-founded, VC/PE backed; underlying cloud host not confirmed (AWS inferred - SCH-010).","dimsNote":"UK-run SaaS with largest England share; now PE-owned via London-based Permira; cloud host likely AWS","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":0,"D9":null,"D10":1.5,"D11":3,"D12":1.5,"overall":1.6818181818181819},"refs":[{"id":"R442","author":"Tes","year":"2026","title":"Ess sims loses market dominance school information systems MIS","url":"https://www.tes.com/magazine/news/general/ess-sims-loses-market-dominance-school-information-systems-mis"},{"id":"R535","author":"Yespress","year":"n.d.","title":"[Title to be confirmed]","url":"https://yespress.io/arbor-education.md"}]},{"id":"SCH-040","entity":"Schools","subUnit":"England","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"SIMS (SIMS 7 / SIMS Next Gen) MIS","vendor":"Education Software Solutions / ParentPay Group (Montagu Private Equity)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Montagu Private Equity","ownerCountry":"GB","ownershipChange":"Yes – Capita sold ESS (SIMS) to Montagu Dec 2020; merged into ParentPay Group 2021","ownershipSource":"https://www.theregister.com/2020/12/14/capita_sells_ess_to_montagu/","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Primary","seats":6897,"seatsBasis":"England schools (32% share; UK 7636 = 28%)","dataFormat":"Proprietary SQL Server schema; DfE CTF","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Conversion; Re-platforming; Licence","osAlternative":"","sovereignAlternative":"Arbor (GB); Bromcom (GB)","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Version-pinnable","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":400000000,"spendPeriod":"Deal value Dec 2020","evidence":"Reported","notes":"SIMS fell from 18051 English schools (84%) in 2012 to ~12281 (56%) in autumn 2022 to 6897 (32%) by 2025-26. Three-year contracts triggered exodus. Montagu is a UK PE house; ownership is GB but private-equity financialised. Spend figure is acquisition value, not school spend.","dimsNote":"SIMS 7 on-prem school-held keys and pinnable versions; Next Gen is vendor SaaS; PE-owned with forced-contract repricing history","scores":{"D1":3,"D2":3,"D3":3,"D4":2,"D5":1.5,"D6":1.5,"D7":3,"D8":0,"D9":null,"D10":0,"D11":3,"D12":1.5,"overall":1.9545454545454546},"refs":[{"id":"R449","author":"The Register","year":"2020","title":"Capita sells ess to montagu","url":"https://www.theregister.com/2020/12/14/capita_sells_ess_to_montagu/"}]},{"id":"SCH-041","entity":"Schools","subUnit":"England","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Bromcom cloud MIS","vendor":"Bromcom Computers plc","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Bromcom founders (private plc)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://find-and-update.company-information.service.gov.uk/company/02040690","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Secondary","seats":3493,"seatsBasis":"England schools (16% share); 5600+ across England/NI/Wales","dataFormat":"Proprietary SQL; DfE CTF","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion; Re-platforming","osAlternative":"","sovereignAlternative":"Already GB (but hosted on Azure)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":38200000,"spendPeriod":"FY2025 (year to 31 Dec 2025)","evidence":"Reported","notes":"UK-owned vendor on US hyperscaler (Azure UK multi-tenant; private cloud option). Revenue is proxy for schools' spend on Bromcom. Strong with large MATs (390+).","dimsNote":"Founder-controlled UK firm (no PE) but runs on Microsoft Azure so keys and platform sit with US hyperscaler","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":0,"D9":null,"D10":1.5,"D11":3,"D12":3,"overall":1.8181818181818181},"refs":[{"id":"R479","author":"Theassignmentreport","year":"2026","title":"View,bromcom reports 21 increase in revenue 23540","url":"https://www.theassignmentreport.com/briefing/view,bromcom-reports-21-increase-in-revenue_23540.htm"},{"id":"R260","author":"GOV.UK","year":"n.d.","title":"[Title to be confirmed]","url":"https://find-and-update.company-information.service.gov.uk/company/02040690"}]},{"id":"SCH-042","entity":"Schools","subUnit":"England","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"MIS market total (all vendors)","vendor":"Multiple","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Multiple (Permira; Montagu; Bromcom founders; Scottish LAs)","ownerCountry":"GB","ownershipChange":"Yes – SIMS to Montagu 2020; Arbor parent to Permira 2025","ownershipSource":"https://schoolsweek.co.uk/sims-seeks-to-stem-exodus-of-schools/","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":22000,"seatsBasis":"approx state schools using an MIS (Arbor+SIMS+Bromcom+others in England)","dataFormat":"DfE Common Transfer File (CTF) XML","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion; Skills","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":200000000,"spendPeriod":"Annual (2023 estimate)","evidence":"Reported","notes":"DfE-mandated CTF/census formats give partial data portability - an important open-spec lever. Scotland uses SEEMiS (2445 schools, 9% UK share) - public-sector-owned. seats_users 22000 is inferred (sum of named vendors ~20067 England plus others).","dimsNote":"Market UK-owned but PE-concentrated; DfE CTF/census specs give partial portability","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":1.5,"D9":null,"D10":1.5,"D11":3,"D12":1.5,"overall":1.8181818181818181},"refs":[{"id":"R407","author":"Schoolsweek","year":"2023","title":"Sims seeks to stem exodus of schools","url":"https://schoolsweek.co.uk/sims-seeks-to-stem-exodus-of-schools/"}]},{"id":"SCH-043","entity":"Schools","subUnit":"Scotland","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"SEEMiS (Scottish schools MIS)","vendor":"SEEMiS Group LLP (owned by Scottish local authorities)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Scottish local authorities (SEEMiS Group LLP)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.tes.com/magazine/news/general/ess-sims-loses-market-dominance-school-information-systems-mis","licence":"Proprietary","governance":"Single vendor","hosting":"UK cloud","hostingLocation":"UK","prevalence":"Dominant","seats":2445,"seatsBasis":"UK schools on SEEMiS","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion","osAlternative":"","sovereignAlternative":"Already GB public-sector owned","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Sovereign exemplar: public ownership of the MIS. Hosting detail not verified.","dimsNote":"Public-sector-owned MIS run in UK; councils as owners control roadmap","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":3,"D6":0,"D7":3,"D8":1.5,"D9":null,"D10":1.5,"D11":3,"D12":3,"overall":2.090909090909091},"refs":[{"id":"R442","author":"Tes","year":"2026","title":"Ess sims loses market dominance school information systems MIS","url":"https://www.tes.com/magazine/news/general/ess-sims-loses-market-dominance-school-information-systems-mis"}]},{"id":"SCH-045","entity":"Schools","subUnit":"","layerId":"A1","layer":"Foundation models","group":"AI","product":"Google Gemini for Education / DeepMind curriculum-grounded teacher assistant","vendor":"Google","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Alphabet","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.tes.com/magazine/news/general/google-develops-dfe-approved-ai-chatbot-teachers-schools","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Mixed","prevalence":"Secondary","seats":null,"seatsBasis":"","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Skills; Re-platforming","osAlternative":"Open-weight models (Mistral (FR); Llama)","sovereignAlternative":"Mistral (FR); Aleph Alpha (DE)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"High","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"DSIT MoU with Google DeepMind: Gemini teacher tool grounded in England national curriculum; not publicly funded. Gemini bundled in Workspace for Education - free AI as lock-in.","dimsNote":"Closed US model on NVIDIA/TPU estate; free bundling enables repricing; US export-control exposure for AI compute","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":0,"D10":1.5,"D11":1.5,"D12":0,"overall":0.5833333333333334},"refs":[{"id":"R441","author":"Tes","year":"2025","title":"Google develops dfe approved AI chatbot teachers schools","url":"https://www.tes.com/magazine/news/general/google-develops-dfe-approved-ai-chatbot-teachers-schools"}]},{"id":"SCH-046","entity":"Schools","subUnit":"England","layerId":"A1","layer":"Foundation models","group":"AI","product":"OpenAI GPT-4o (powering Oak's Aila lesson assistant) + Cohere Rerank","vendor":"OpenAI; Cohere","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"OpenAI Group PBC; Cohere","ownerCountry":"US","ownershipChange":"Yes – OpenAI recapitalised as a public benefit corporation Oct 2025 (Microsoft ~27% stake)","ownershipSource":"https://www.gov.uk/algorithmic-transparency-records/oak-national-academy-aila-oaks-ai-lesson-assistant","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"Open-weight models","sovereignAlternative":"Mistral (FR); Cohere (CA)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Version-pinnable","ipOwner":"Shared","continuityRisk":"High","supplyChainRisk":"High","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"ATRS record: Aila uses gpt-4o-2024-08-06, OpenAI embeddings, Cohere rerank-english-v3.0; data location not stated. Around one-third of teachers in England use Oak products. State-funded AI for teachers depends on US model.","dimsNote":"Pinned snapshot gpt-4o-2024-08-06 but deprecations vendor-driven; Oak owns prompts; US GPU estate","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":0,"D6":1.5,"D7":1,"D8":1.5,"D9":0,"D10":1.5,"D11":1.5,"D12":0,"overall":0.8181818181818182},"refs":[{"id":"R358","author":"Oak National Academy","year":"2025","title":"Aila: Oak’s AI lesson assistant (algorithmic transparency record)","url":"https://www.gov.uk/algorithmic-transparency-records/oak-national-academy-aila-oaks-ai-lesson-assistant"}]},{"id":"SCH-047","entity":"Schools","subUnit":"","layerId":"A1","layer":"Foundation models","group":"AI","product":"Teacher use of general GenAI (ChatGPT; Microsoft Copilot; Gemini)","vendor":"OpenAI; Microsoft; Google","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"OpenAI Group PBC; Microsoft; Alphabet","ownerCountry":"US","ownershipChange":"Yes – OpenAI recapitalised as a public benefit corporation Oct 2025 (Microsoft ~27% stake)","ownershipSource":"https://assets.publishing.service.gov.uk/media/692834a6ce50d215cae9610e/Technology_in_schools_survey_2024_to_2025_research_report.pdf","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Mixed","prevalence":"Primary","seats":206000,"seatsBasis":"teachers using GenAI at least sometimes (44% of ~468000 FTE teachers)","dataFormat":"","formatOwner":"","openSpec":"No","portability":"Easy","switchingCost":"Low","exitCostDrivers":"","osAlternative":"","sovereignAlternative":"Mistral (FR)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"High","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"44% of teachers use GenAI (lesson planning 35%); only ~20% primaries/34% secondaries have an AI policy. Tool split not published; seats_users derived 0.44 x 468258 FTE teachers (Inferred arithmetic on confirmed inputs).","dimsNote":"Consumer GenAI use unmanaged by schools; US models and compute; easy to switch","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":0,"D10":3,"D11":1.5,"D12":0,"overall":0.8333333333333334},"refs":[{"id":"R248","author":"GOV.UK","year":"2025","title":"Technology in schools survey 2024 to 2025 research report","url":"https://assets.publishing.service.gov.uk/media/692834a6ce50d215cae9610e/Technology_in_schools_survey_2024_to_2025_research_report.pdf"}]},{"id":"SCH-048","entity":"Schools","subUnit":"England","layerId":"A2","layer":"AI platform & hosting","group":"AI","product":"Oak National Academy platform (Aila) - DfE ALB","vendor":"Oak National Academy","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Department for Education (Oak arm's-length body)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://github.com/oaknational","licence":"Open source","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"Open Government Licence content","formatOwner":"Standards body","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"","osAlternative":"Oak code (OSS)","sovereignAlternative":"Already GB public body","operator":"UK","keyCustody":"Vendor","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":1840000,"spendPeriod":"FY2023-24","evidence":"Confirmed","notes":"UK-owned AI application layer with OGL curriculum and open-sourced code; underlying model and cloud are US (see SCH-046). Cloud host not named in public docs.","dimsNote":"Public body; Aila and web app MIT-licensed on GitHub; OGL content; continuity depends on US model and unnamed cloud","scores":{"D1":null,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":3,"D7":3,"D8":3,"D9":null,"D10":3,"D11":3,"D12":3,"overall":2.45},"refs":[{"id":"R229","author":"GOV.UK","year":"2024","title":"[Title to be confirmed]","url":"https://assets.publishing.service.gov.uk/media/67583dd4543a747e6e517880/Oak_ARA2324.pdf"},{"id":"R203","author":"GitHub","year":"n.d.","title":"[Title to be confirmed]","url":"https://github.com/oaknational"}]},{"id":"SCH-050","entity":"Schools","subUnit":"","layerId":"SE1","layer":"Endpoint protection","group":"Security","product":"Smoothwall filtering and monitoring","vendor":"Smoothwall Ltd (Qoria)","vendorCountry":"AU","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Aura (via Qoria acquisition)","ownerCountry":"US","ownershipChange":"Yes – US-based Aura completed acquisition of Qoria (Smoothwall parent) 17 Jul 2026; relisted on ASX","ownershipSource":"https://www.aura.com/press/release/aura-completes-qoria-acquisition","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"Mixed","prevalence":"Dominant","seats":null,"seatsBasis":"1 in 3 UK schools (vendor claim)","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"LGfL/SWGfL filtering (GB); Netsweeper (CA)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"UK-founded (Leeds) but owned by ASX-listed Qoria (AU). DfE filtering and monitoring standard and KCSIE drive purchase; 91% primaries / 95% secondaries monitor device use (TIS 2025). Qoria distributes via Schools Broadband to 3000+ schools.","dimsNote":"Leeds-run product but ultimate owner moved AU to US in 2026; UK filtering alternatives (LGfL/SWGfL) exist","scores":{"D1":1,"D2":1,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":3,"D12":1.5,"overall":1.1363636363636365},"refs":[{"id":"R420","author":"Smoothwall","year":"n.d.","title":"[Title to be confirmed]","url":"https://smoothwall.com/"},{"id":"R013","author":"Aura","year":"2026","title":"Aura completes Qoria acquisition","url":"https://www.aura.com/press/release/aura-completes-qoria-acquisition"}]},{"id":"SCH-052","entity":"Schools","subUnit":"England","layerId":"SE2","layer":"SIEM / SOC","group":"Security","product":"MSP- and consortium-provided monitoring (no national school SOC); RPA cyber cover","vendor":"Managed service providers; DfE Risk Protection Arrangement","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Managed service providers; DfE (Risk Protection Arrangement)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://buyingforschools.blog.gov.uk/2022/03/07/cyber-cover-risk-protection-arrangement-rpa/","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"","formatOwner":"","openSpec":"","portability":"","switchingCost":"Low","exitCostDrivers":"","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"63% of primaries use an MSP (TIS 2025). RPA cyber cover requires offline backups, NCSC training, Police CyberAlarm registration and a response plan; no SIEM requirement. Gap: no sector-wide SOC (unlike Jisc for HE). Cyber security is one of six standards to meet by 2030.","dimsNote":"UK MSPs and DfE RPA; no sector SOC so capability is fragmented","scores":{"D1":3,"D2":3,"D3":3,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":3,"D9":null,"D10":3,"D11":1.5,"D12":3,"overall":2.3636363636363638},"refs":[{"id":"R224","author":"GOV.UK","year":"2022","title":"Cyber cover risk protection arrangement rpa","url":"https://buyingforschools.blog.gov.uk/2022/03/07/cyber-cover-risk-protection-arrangement-rpa/"}]},{"id":"HE-003","entity":"Higher Education","subUnit":"Research computing","layerId":"P2","layer":"Server & AI accelerator chips","group":"Physical","product":"Isambard-AI (AIRR) - 5,400+ NVIDIA GH200 Grace Hopper superchips, HPE Cray EX","vendor":"HPE; NVIDIA","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Hewlett Packard Enterprise; Nvidia","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://bristol.ac.uk/news/2023/november/supercomputer-announcement.html","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"national researchers and SMEs via AIRR allocation","dataFormat":"CUDA","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Re-platforming;Skills","osAlternative":"ROCm/oneAPI (open stacks)","sovereignAlternative":"None UK at scale; Graphcore (GB, SoftBank-owned) niche","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"High","ukCapability":"Partial","ukValueCapture":"Low","spend":225000000,"spendPeriod":"Capital, 2023-2025","evidence":"Confirmed","notes":"Hosted at NCC, Bristol & Bath Science Park; launched July 2025 (insidehpc). UK's largest public AI system is wholly US silicon and CUDA-locked.","dimsNote":"UK-run by Bristol but CUDA-locked Nvidia GH200 silicon subject to US export-control regime","scores":{"D1":3,"D2":1,"D3":3,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":1.5,"D9":0,"D10":0,"D11":1.5,"D12":0,"overall":1.2083333333333333},"refs":[{"id":"R021","author":"Bristol","year":"2023","title":"[Title to be confirmed]","url":"https://bristol.ac.uk/news/2023/november/supercomputer-announcement.html"}]},{"id":"HE-004","entity":"Higher Education","subUnit":"Research computing","layerId":"P2","layer":"Server & AI accelerator chips","group":"Physical","product":"Dawn (AIRR) - Dell servers; Intel Data Center GPU Max (phase 1), AMD Instinct MI355X expansion","vendor":"Dell; Intel; AMD; StackHPC (software)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Dell; Intel; AMD","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.gov.uk/government/news/cambridge-supercomputer-set-to-get-6-times-more-powerful-as-government-backs-british-ai-innovation","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"national AI researchers via AIRR","dataFormat":"oneAPI/ROCm","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Re-platforming;Skills","osAlternative":"ROCm (OSS), oneAPI (open spec)","sovereignAlternative":"StackHPC (GB) software stack","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Version-pinnable","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"High","ukCapability":"Partial","ukValueCapture":"Low","spend":36000000,"spendPeriod":"Expansion announced Jan 2026, capacity by spring 2026","evidence":"Confirmed","notes":"Cambridge. £36m to increase capacity sixfold; part of >£1bn AIRR expansion (20x by 2030). Only UK-owned element is the StackHPC software layer.","dimsNote":"Cambridge-run with open ROCm/oneAPI and StackHPC (GB) software; accelerators US and export-controlled","scores":{"D1":3,"D2":1,"D3":3,"D4":2,"D5":1.5,"D6":1.5,"D7":1,"D8":1.5,"D9":0,"D10":0.75,"D11":1.5,"D12":0,"overall":1.3958333333333333},"refs":[{"id":"R253","author":"GOV.UK","year":"2026","title":"Cambridge supercomputer set to get 6 times more powerful as government backs british AI innovation","url":"https://www.gov.uk/government/news/cambridge-supercomputer-set-to-get-6-times-more-powerful-as-government-backs-british-ai-innovation"}]},{"id":"HE-005","entity":"Higher Education","subUnit":"Research computing","layerId":"P2","layer":"Server & AI accelerator chips","group":"Physical","product":"ARCHER2 national supercomputer - HPE Cray EX with AMD EPYC CPUs","vendor":"HPE; AMD","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Hewlett Packard Enterprise; AMD","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"UK academic HPC users (UKRI/EPCC)","dataFormat":"x86-64","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Version-pinnable","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Hosted by EPCC, University of Edinburgh (ACF). CPU-only. Successor national service being procured (see next row).","dimsNote":"EPCC operates; CPU-only system so lower export-control exposure; ageing and vendor support dependent","scores":{"D1":3,"D2":1,"D3":3,"D4":2,"D5":1.5,"D6":1.5,"D7":1,"D8":1.5,"D9":1.5,"D10":0.75,"D11":1.5,"D12":0,"overall":1.5208333333333333},"refs":[{"id":"R444","author":"The Next Platform","year":"2019","title":"Amd cpus will power uks next generation archer2 supercomputer","url":"https://www.nextplatform.com/2019/10/18/amd-cpus-will-power-uks-next-generation-archer2-supercomputer/"}]},{"id":"HE-006","entity":"Higher Education","subUnit":"Research computing","layerId":"P2","layer":"Server & AI accelerator chips","group":"Physical","product":"Next National Supercomputing Service (Edinburgh, UKRI-5244) - vendor TBC","vendor":"TBC (HPE and Eviden reported frontrunners)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"TBC (HPE or Eviden reported)","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.theregister.com/2025/10/13/edinburgh_supercomputer_procurement/","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"UK national research community","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Re-platforming;Skills","osAlternative":"","sovereignAlternative":"Eviden/Atos (FR) is the only plausible non-US prime","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Version-pinnable","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"High","ukCapability":"Partial","ukValueCapture":"Low","spend":750000000,"spendPeriod":"Programme to 2031 (ext. 2033); system budget c.£300-330m","evidence":"Reported","notes":"Up to £750m programme; contract Sep 2026-Aug 2031; online 2027; GPU-accelerated; 50x ARCHER2. Award not confirmed in sources found.","dimsNote":"Award not confirmed as of Oct 2026; GPU-accelerated design implies US accelerator export-control exposure; US prime assumed","scores":{"D1":3,"D2":1,"D3":3,"D4":2,"D5":1.5,"D6":1.5,"D7":1,"D8":1.5,"D9":0,"D10":0,"D11":1.5,"D12":0,"overall":1.3333333333333333},"refs":[{"id":"R458","author":"The Register","year":"2025","title":"Edinburgh supercomputer procurement","url":"https://www.theregister.com/2025/10/13/edinburgh_supercomputer_procurement/"}]},{"id":"HE-007","entity":"Higher Education","subUnit":"","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"Janet national research and education network","vendor":"Jisc","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Jisc (UK charity)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.jisc.ac.uk/janet","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":18000000,"seatsBasis":"UK college and university users (Ciena/Jisc figure, 2018)","dataFormat":"IP/Ethernet (IETF/IEEE)","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"Jisc itself is the sovereign option (UK membership charity)","operator":"UK","keyCustody":"N/A","codeModelControl":"Version-pinnable","ipOwner":"Shared","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":36707,"spendPeriod":"1 year (Aug 2025-Jul 2026), single institution example","evidence":"Confirmed","notes":"Sector-wide sovereign asset. Other examples: UEA 20Gbit/s Janet link + eVA £78,000 (2025-2030); UKRI RAL-CERN LHCOPN £119,659 to Jisc. Sector-wide Janet cost not published per institution.","dimsNote":"Jisc-owned and UK-operated national network; optical kit is foreign (Ciena)","scores":{"D1":3,"D2":3,"D3":null,"D4":2,"D5":3,"D6":1.5,"D7":3,"D8":1.5,"D9":1.5,"D10":0.75,"D11":3,"D12":3,"overall":2.2954545454545454},"refs":[{"id":"R178","author":"Find a Tender Service","year":"2025","title":"Contract notice 062656-2025","url":"https://www.find-tender.service.gov.uk/Notice/062656-2025/PDF"},{"id":"R304","author":"Jisc","year":"2026","title":"Janet network","url":"https://www.jisc.ac.uk/janet"}]},{"id":"HE-008","entity":"Higher Education","subUnit":"","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"Janet optical transport (Ciena 6500 / WaveLogic, 400G)","vendor":"Ciena","vendorCountry":"CA","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Ciena Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":18000000,"seatsBasis":"Janet users","dataFormat":"Proprietary optical line system","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"Allied: Nokia (FI), Infinera now Nokia (FI)","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"UK-operated network runs on Canadian optical kit; dark fibre provider not stated in sources.","dimsNote":"Ciena is NYSE-listed and US-headquartered (row lists CA); Jisc operates but firmware is vendor-controlled","scores":{"D1":3,"D2":1,"D3":null,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":0,"overall":1.0454545454545454},"refs":[{"id":"R316","author":"Lightwaveonline","year":"2018","title":"Jisc to deploy ciena 6500 packet optical platform for 400g wavelength connectivity","url":"https://www.lightwaveonline.com/network-design/packet-transport/article/16676239/jisc-to-deploy-ciena-6500-packet-optical-platform-for-400g-wavelength-connectivity"}]},{"id":"HE-009","entity":"Higher Education","subUnit":"","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"eduroam (UK roaming Wi-Fi) and eduroam Visitor Access","vendor":"Jisc (UK operator) / GEANT global","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Jisc (UK charity) / GEANT","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Open standard","governance":"Community","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":3270355,"seatsBasis":"students + staff 2024/25","dataFormat":"RADIUS/802.1X","formatOwner":"Standards body","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"","osAlternative":"FreeRADIUS (OSS)","sovereignAlternative":"Jisc (GB)","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":78000,"spendPeriod":"Sep 2025-Jul 2030 (bundled with 20Gbit/s Janet link)","evidence":"Confirmed","notes":"Federated, standards-based; a sovereignty positive.","dimsNote":"Open RADIUS/802.1X standards; institutions hold own certificates; Jisc operates UK federation","scores":{"D1":3,"D2":3,"D3":3,"D4":2,"D5":3,"D6":3,"D7":3,"D8":3,"D9":null,"D10":3,"D11":3,"D12":3,"overall":2.909090909090909},"refs":[{"id":"R176","author":"Find a Tender Service","year":"2025","title":"Contract notice 057040-2025","url":"https://www.find-tender.service.gov.uk/Notice/057040-2025/PDF"}]},{"id":"HE-012","entity":"Higher Education","subUnit":"","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Microsoft Azure (Jisc cloud partnership, Azure academic egress waiver)","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.jisc.ac.uk/cloud-partnerships","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"institutions using Azure","dataFormat":"","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Egress fees;Re-platforming;Skills","osAlternative":"OpenStack","sovereignAlternative":"Nscale (GB); UKCloud-type sovereign providers; OVHcloud (FR)","operator":"Vendor-global","keyCustody":"BYOK","codeModelControl":"Vendor-controlled","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Jisc lists AWS and Microsoft as cloud partners with Janet peering. Microsoft offers academic egress fee waiver (azure.microsoft.com/blog/azure-egress-fee-waiver-for-the-academic-community). UK regions available but US parent (CLOUD Act).","dimsNote":"IaaS with customer-managed keys available; US parent subject to CLOUD Act; OpenStack/Nscale alternatives exist","scores":{"D1":3,"D2":1,"D3":2,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":3,"D9":null,"D10":0.75,"D11":1.5,"D12":0,"overall":1.3409090909090908},"refs":[{"id":"R305","author":"Jisc","year":"n.d.","title":"[Title to be confirmed]","url":"https://www.jisc.ac.uk/cloud-partnerships"}]},{"id":"HE-013","entity":"Higher Education","subUnit":"","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Amazon Web Services (Jisc Managed AWS / partnership; hosts Tribal SITS Cloud)","vendor":"Amazon Web Services","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Amazon","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.jisc.ac.uk/cloud/partnerships/aws","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"institutions using AWS","dataFormat":"","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Egress fees;Re-platforming;Skills","osAlternative":"OpenStack","sovereignAlternative":"Nscale (GB); OVHcloud (FR)","operator":"Vendor-global","keyCustody":"BYOK","codeModelControl":"Vendor-controlled","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Jisc resells/manages AWS; AWS offers research egress discount. SITS Cloud runs on AWS (UK/EEA) so student records increasingly sit in AWS.","dimsNote":"AWS KMS supports customer-managed keys; SITS Cloud concentrates student records on AWS","scores":{"D1":3,"D2":1,"D3":2,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":3,"D9":null,"D10":0.75,"D11":1.5,"D12":0,"overall":1.3409090909090908},"refs":[{"id":"R306","author":"Jisc","year":"n.d.","title":"[Title to be confirmed]","url":"https://www.jisc.ac.uk/cloud/partnerships/aws"}]},{"id":"HE-014","entity":"Higher Education","subUnit":"","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"OCRE cloud framework (GEANT) - Google Cloud, Oracle Cloud and others","vendor":"Google; Oracle; various","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Alphabet; Oracle; various","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Mixed","prevalence":"Secondary","seats":null,"seatsBasis":"research users","dataFormat":"","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Egress fees;Re-platforming","osAlternative":"","sovereignAlternative":"OCRE includes EU providers (e.g. OVHcloud FR)","operator":"Vendor-global","keyCustody":"BYOK","codeModelControl":"Vendor-controlled","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Jisc offers OCRE 2024 cloud framework for research; spend through it not published.","dimsNote":"OCRE framework clouds mostly US; some EU providers available","scores":{"D1":1,"D2":1,"D3":2,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":3,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":1.2272727272727273},"refs":[{"id":"R049","author":"Cloud","year":"n.d.","title":"[Title to be confirmed]","url":"https://cloud.jiscinvolve.org/wp/?p=846"}]},{"id":"HE-017","entity":"Higher Education","subUnit":"","layerId":"PL1","layer":"Operating systems","group":"Platform","product":"Microsoft Windows 10/11 desktop and Windows Server (Microsoft EES licensing)","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.find-tender.service.gov.uk/Notice/036330-2024","licence":"Proprietary","governance":"Single vendor","hosting":"Endpoint","hostingLocation":"Mixed","prevalence":"Dominant","seats":3270355,"seatsBasis":"students + staff licensed under EES (per-FTE)","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Re-platforming;Skills","osAlternative":"Linux desktop (Ubuntu, Fedora)","sovereignAlternative":"Canonical Ubuntu (GB); SUSE (DE)","operator":"Customer (in-house UK team)","keyCustody":"Customer (on-prem)","codeModelControl":"Version-pinnable","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":7910407,"spendPeriod":"4 years from Aug 2024, single university","evidence":"Confirmed","notes":"Sheffield Hallam EES covers desktops, Office 365, infrastructure and Dynamics CRM: £7,910,407.50 ex VAT. Open University pipeline notice for all Microsoft licences Feb 2026-Jan 2029.","dimsNote":"Run in-house but sector-wide EES renewal gives Microsoft repricing leverage; Linux desktop is a partial fallback","scores":{"D1":1,"D2":1,"D3":3,"D4":3,"D5":0,"D6":1.5,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":1.0909090909090908},"refs":[{"id":"R154","author":"Find a Tender Service","year":"2024","title":"Contract notice 036330-2024","url":"https://www.find-tender.service.gov.uk/Notice/036330-2024"}]},{"id":"HE-026","entity":"Higher Education","subUnit":"","layerId":"PL4","layer":"Application framework","group":"Platform","product":"Oracle Java SE (Jisc sector agreement)","vendor":"Oracle","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Oracle","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.theregister.com/2025/06/13/jisc_java_oracle/","licence":"Proprietary","governance":"Single vendor","hosting":"Endpoint","hostingLocation":"Mixed","prevalence":"Dominant","seats":null,"seatsBasis":"UK universities and colleges covered by Jisc deal","dataFormat":"JVM bytecode","formatOwner":"Vendor","openSpec":"Partial","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Licence","osAlternative":"OpenJDK (Eclipse Temurin, Amazon Corretto)","sovereignAlternative":"","operator":"Customer (in-house UK team)","keyCustody":"N/A","codeModelControl":"Version-pinnable","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Low","spend":9860000,"spendPeriod":"Framework (term not stated), signed 2025","evidence":"Reported","notes":"Up to £9.86m framework following Oracle audit pressure; waives historic fees since 2023. Classic avoidable lock-in: OpenJDK is a free drop-in.","dimsNote":"Oracle 2023 per-employee Java licensing and audits forced a £9.86m Jisc deal; OpenJDK is a drop-in","scores":{"D1":1,"D2":1,"D3":null,"D4":3,"D5":0,"D6":1.5,"D7":1,"D8":0,"D9":null,"D10":3,"D11":3,"D12":0,"overall":1.35},"refs":[{"id":"R459","author":"The Register","year":"2025","title":"Jisc java oracle","url":"https://www.theregister.com/2025/06/13/jisc_java_oracle/"}]},{"id":"HE-034","entity":"Higher Education","subUnit":"","layerId":"W2","layer":"Identity & directory","group":"Workplace","product":"UK Access Management Federation (SAML) with Shibboleth IdP","vendor":"Jisc (operator); Shibboleth Consortium","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Jisc (UK charity)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://ukfederation.org.uk/library/uploads/Documents/overview.pdf","licence":"Open standard","governance":"Community","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":3270355,"seatsBasis":"students + staff (federated access to e-resources)","dataFormat":"SAML 2.0","formatOwner":"Standards body","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"","osAlternative":"SimpleSAMLphp; Keycloak","sovereignAlternative":"Jisc (GB)","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Run by Janet/Jisc; Shibboleth is recommended software. Sovereign trust fabric for library/e-resource access.","dimsNote":"Jisc-run SAML federation; institutions run open-source Shibboleth IdPs and hold own signing keys","scores":{"D1":3,"D2":3,"D3":3,"D4":2,"D5":3,"D6":3,"D7":3,"D8":3,"D9":null,"D10":3,"D11":3,"D12":3,"overall":2.909090909090909},"refs":[{"id":"R486","author":"UK Access Management Federation","year":"2006","title":"[Title to be confirmed]","url":"https://ukfederation.org.uk/library/uploads/Documents/overview.pdf"}]},{"id":"HE-036","entity":"Higher Education","subUnit":"","layerId":"W3","layer":"Email","group":"Workplace","product":"Google Workspace for Education (Gmail)","vendor":"Google","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Alphabet","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Secondary","seats":null,"seatsBasis":"minority of institutions","dataFormat":"SMTP/IMAP","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Jisc signed a Google Apps for Education agreement (c.2010-11); smaller footprint than Microsoft.","dimsNote":"US hyperscaler SaaS; client-side encryption only on top tiers","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.7727272727272727},"refs":[{"id":"R483","author":"Times Higher Education","year":"n.d.","title":"Google signs agreement with jisc","url":"https://www.timeshighereducation.com/news/google-signs-agreement-with-jisc/2008053.article"}]},{"id":"HE-038","entity":"Higher Education","subUnit":"","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"Microsoft 365 A3/A5 under Jisc Microsoft EES framework","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.jisc.ac.uk/about-the-microsoft-agreement-negotiation","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Dominant","seats":3270355,"seatsBasis":"students + staff 2024/25","dataFormat":"OOXML","formatOwner":"Standards body","openSpec":"Partial","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Licence;Conversion;Skills","osAlternative":"LibreOffice; Collabora Online","sovereignAlternative":"Collabora (GB); Nextcloud (DE)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":7910407,"spendPeriod":"4 years from Aug 2024, single university","evidence":"Confirmed","notes":"Jisc has held the EES framework since 2007; current agreement negotiated Jun 2023-Jan 2024, runs to end 2026 (renewal due now). Collabora Productivity is UK (Cambridge).","dimsNote":"Single sector-wide EES agreement expiring end 2026 concentrates repricing risk","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0.75,"D11":1.5,"D12":0,"overall":0.5681818181818182},"refs":[{"id":"R302","author":"Jisc","year":"2024","title":"About the Microsoft agreement negotiation","url":"https://www.jisc.ac.uk/about-the-microsoft-agreement-negotiation"}]},{"id":"HE-040","entity":"Higher Education","subUnit":"","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Unit4 ERP (formerly Agresso) finance","vendor":"Unit4","vendorCountry":"NL","vendorTier":"T2 EU/EEA","owner":"TA Associates","ownerCountry":"US","ownershipChange":"Yes – TA Associates (with Partners Group) acquired Unit4 from Advent International 2021","ownershipSource":"https://tech.eu/2021/03/22/utrecht-based-people-centric-erp-firm-unit4-snapped-up-for-2-billion","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Primary","seats":null,"seatsBasis":"institutions on Unit4","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Conversion;Re-platforming","osAlternative":"","sovereignAlternative":"Unit4 is allied (NL); none UK-owned at HE scale","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":552546,"spendPeriod":"Contract concluded Dec 2024 (term not stated)","evidence":"Confirmed","notes":"LSBU moving U4ERP from on-prem to vendor SaaS. Other customers include Salford, UEA, University of London (Unit4 customer stories).","dimsNote":"Dutch-headquartered but US PE-owned; customers moving from on-prem to vendor SaaS","scores":{"D1":1,"D2":2,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.5909090909090909},"refs":[{"id":"R156","author":"Find a Tender Service","year":"2024","title":"Contract notice 039820-2024","url":"https://www.find-tender.service.gov.uk/Notice/039820-2024"},{"id":"R433","author":"Tech","year":"n.d.","title":"Utrecht based people centric ERP firm unit4 snapped up for 2 billion","url":"https://tech.eu/2021/03/22/utrecht-based-people-centric-erp-firm-unit4-snapped-up-for-2-billion"}]},{"id":"HE-041","entity":"Higher Education","subUnit":"","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Workday HCM and Financial Management","vendor":"Workday","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Workday","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Secondary","seats":null,"seatsBasis":"York, Hull and other adopters","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Conversion;Re-platforming;Licence","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"York (replacing 30+ HR/finance apps) and Hull (live summer 2025), both with KPMG. Growing share of large-university ERP replacement.","dimsNote":"Publicly listed US SaaS with vendor-run multi-tenant platform","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.5},"refs":[{"id":"R120","author":"En-gb","year":"2025","title":"2025 12 10 workday adds new higher ed customers in the UK and ireland","url":"https://en-gb.newsroom.workday.com/2025-12-10-Workday-Adds-New-Higher-Ed-Customers-in-the-UK-and-Ireland"}]},{"id":"HE-043","entity":"Higher Education","subUnit":"","layerId":"B2","layer":"CRM","group":"Business apps","product":"Microsoft Dynamics 365 CRM (recruitment/admissions)","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Primary","seats":null,"seatsBasis":"institutions using Dynamics","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion","osAlternative":"SuiteCRM; CiviCRM","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":300000,"spendPeriod":"48 months (+12), estimated","evidence":"Confirmed","notes":"Dynamics often bundled into EES (e.g. Sheffield Hallam).","dimsNote":"US SaaS CRM often bundled under EES","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.7727272727272727},"refs":[{"id":"R167","author":"Find a Tender Service","year":"2025","title":"Contract notice 025791-2025","url":"https://www.find-tender.service.gov.uk/Notice/025791-2025"}]},{"id":"HE-044","entity":"Higher Education","subUnit":"","layerId":"B2","layer":"CRM","group":"Business apps","product":"Salesforce Education Cloud","vendor":"Salesforce","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Salesforce","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Secondary","seats":null,"seatsBasis":"institutions on Salesforce","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion;Licence","osAlternative":"SuiteCRM","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":212000,"spendPeriod":"5-year licence + phase 1 implementation (estimate)","evidence":"Reported","notes":"","dimsNote":"US SaaS; Shield BYOK is a paid add-on not assumed","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.7727272727272727},"refs":[{"id":"R428","author":"Stotles","year":"2026","title":"7eddcb83 d4ca 473f a9ec 65499ed5abdb","url":"https://www.stotles.com/explore/notices/7eddcb83-d4ca-473f-a9ec-65499ed5abdb/salesforce-crm"}]},{"id":"HE-045","entity":"Higher Education","subUnit":"Student records","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Tribal SITS:Vision student records (incl. SITS Cloud on AWS)","vendor":"Tribal Group (being acquired by Main Capital Partners, NL)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Tribal Group plc (sale of operating businesses to Main Capital Partners NL pending)","ownerCountry":"GB","ownershipChange":"Yes – Sep 2026 agreed sale of all Tribal operating companies to Thames Bidco (Main Capital Partners NL) at £231.2m; subject to NSI Act; completion expected Q4 2026 to Q2 2027","ownershipSource":"https://www.investegate.co.uk/announcement/rns/tribal-group--trb/proposed-acquisition-by-main-capital-partners/9768930","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"most UK universities (count not public)","dataFormat":"Proprietary schema; HESA Data Futures output","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Conversion;Re-platforming;Skills","osAlternative":"","sovereignAlternative":"Tribal is (for now) GB; post-deal NL-PE owned","operator":"UK","keyCustody":"Vendor","codeModelControl":"Version-pinnable","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":231200000,"spendPeriod":"Acquisition price, agreed Sep 2026","evidence":"Confirmed","notes":"KEY SOVEREIGNTY SHIFT: Tribal agreed sale of operating businesses to Thames Bidco (Main Capital, Dutch PE) - £189.3m raised to £231.2m (28 Sep 2026), completion Q4 2026. SITS Cloud priced £249,000/instance/yr on G-Cloud, hosted on AWS UK/EEA. spend_gbp is deal value not HE spend.","dimsNote":"Dominant UK SRS moving to Dutch PE ownership with SITS Cloud on AWS; NSIA review is the sovereignty lever","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":0,"D6":1.5,"D7":3,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.4090909090909092},"refs":[{"id":"R484","author":"Tribal Group plc","year":"2026","title":"Proposed acquisition by Main Capital Partners (RNS announcement)","url":"https://www.investegate.co.uk/announcement/rns/tribal-group--trb/proposed-acquisition-by-main-capital-partners/9768930"}]},{"id":"HE-047","entity":"Higher Education","subUnit":"VLE","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Moodle (self-hosted or partner-hosted)","vendor":"Moodle HQ (AU) / community","vendorCountry":"OSS","vendorTier":"OSS (governance-led)","owner":"Community (Moodle HQ AU)","ownerCountry":"OSS","ownershipChange":"No","ownershipSource":"","licence":"Open source","governance":"Community","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"largest share of 179 UK HEIs (2022)","dataFormat":"Moodle backup/IMS Common Cartridge","formatOwner":"Open source","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Conversion","osAlternative":"","sovereignAlternative":"UK Moodle partners (e.g. hosting firms) give sovereign option","operator":"Customer (in-house UK team)","keyCustody":"Customer (on-prem)","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Most-used UK HE VLE per 2022 market review; open source is a sovereignty positive.","dimsNote":"GPL VLE self-hosted or with UK partners","scores":{"D1":3,"D2":2,"D3":3,"D4":3,"D5":3,"D6":3,"D7":2,"D8":3,"D9":null,"D10":3,"D11":3,"D12":1.5,"overall":2.6818181818181817},"refs":[{"id":"R116","author":"Downes","year":"2022","title":"[Title to be confirmed]","url":"https://www.downes.ca/post/74848/rd"}]},{"id":"HE-048","entity":"Higher Education","subUnit":"VLE","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Blackboard Learn / Ultra (Anthology, rebranded Blackboard 2026)","vendor":"Blackboard (formerly Anthology)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Oaktree Capital Management; Nexus Capital Management","ownerCountry":"US","ownershipChange":"Yes – Anthology Chapter 11 Sep 2025; emerged Mar 2026 as Blackboard controlled by former creditors Oaktree and Nexus","ownershipSource":"https://onedtech.philhillaa.com/p/the-new-blackboard-emerges-from-bankruptcy","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Primary","seats":null,"seatsBasis":"2nd-largest share; >40% of Russell Group (2022)","dataFormat":"IMS CC/LTI","formatOwner":"Standards body","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion;Re-platforming","osAlternative":"Moodle","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":1886121,"spendPeriod":"5-year re-contract (Oct 2024)","evidence":"Confirmed","notes":"Bucks New University renewal £1,164,100.33 (Jul 2025-Apr 2031). Anthology went through Chapter 11 (Sep 2025), emerged as Blackboard Mar 2026 - vendor-viability risk.","dimsNote":"Vendor viability risk after bankruptcy; US creditor-owned SaaS","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.5},"refs":[{"id":"R153","author":"Find a Tender Service","year":"2024","title":"Contract notice 034864-2024","url":"https://www.find-tender.service.gov.uk/Notice/034864-2024"},{"id":"R359","author":"Onedtech","year":"n.d.","title":"The new blackboard emerges from bankruptcy","url":"https://onedtech.philhillaa.com/p/the-new-blackboard-emerges-from-bankruptcy"}]},{"id":"HE-049","entity":"Higher Education","subUnit":"VLE","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Canvas (Instructure) and D2L Brightspace","vendor":"Instructure; D2L","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"KKR (Instructure); D2L (CA listed)","ownerCountry":"US","ownershipChange":"Yes – KKR and Dragoneer took Instructure private Nov 2024 ($4.8bn)","ownershipSource":"https://pehub.com/kkr-and-dragoneer-complete-4-8bn-take-private-acquisition-of-edtech-firm-instructure","licence":"Open core","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Secondary","seats":null,"seatsBasis":"growing minority of UK HEIs","dataFormat":"IMS CC/LTI","formatOwner":"Standards body","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion","osAlternative":"Moodle","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Canvas is US (open-core); D2L is Canadian (CA) and won 2 UK clients in 2022.","dimsNote":"Canvas is AGPL open core so self-hosting is possible but UK customers use US-run SaaS","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.7727272727272727},"refs":[{"id":"R116","author":"Downes","year":"2022","title":"[Title to be confirmed]","url":"https://www.downes.ca/post/74848/rd"},{"id":"R373","author":"Pehub","year":"n.d.","title":"Kkr and dragoneer complete 4 8bn take private acquisition of edtech firm instructure","url":"https://pehub.com/kkr-and-dragoneer-complete-4-8bn-take-private-acquisition-of-edtech-firm-instructure"}]},{"id":"HE-050","entity":"Higher Education","subUnit":"Academic integrity","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Turnitin (similarity detection / AI writing detection)","vendor":"Turnitin (Advance Publications)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Advance Publications","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Dominant","seats":2863180,"seatsBasis":"students submitting assessed work (near-universal)","dataFormat":"Proprietary repository","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence","osAlternative":"","sovereignAlternative":"Ouriginal/Urkund (SE, now Turnitin-owned) - few alternatives remain","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":168446,"spendPeriod":"Contract concluded Jul 2022 (term not stated)","evidence":"Confirmed","notes":"Near-monopoly; student work corpus held in vendor repository. Turnitin UK entity in Newcastle.","dimsNote":"Near-monopoly owned since 2019; student corpus held in vendor repository","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.5},"refs":[{"id":"R136","author":"Find a Tender Service","year":"2022","title":"Contract notice 020591-2022","url":"https://www.find-tender.service.gov.uk/Notice/020591-2022"}]},{"id":"HE-051","entity":"Higher Education","subUnit":"Library","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Ex Libris Alma / Primo / Leganto library services platform","vendor":"Ex Libris (Clarivate)","vendorCountry":"IL","vendorTier":"T4 Other allied/partner","owner":"Clarivate plc","ownerCountry":"JE","ownershipChange":"Yes – Clarivate acquired ProQuest including Ex Libris Dec 2021","ownershipSource":"https://librarytechnology.org/pr/26873/clarivate-successfully-completes-acquisition-of-proquest","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"EU","prevalence":"Dominant","seats":null,"seatsBasis":"most research-intensive university libraries","dataFormat":"MARC/BIBFRAME","formatOwner":"Standards body","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Conversion","osAlternative":"FOLIO; Koha","sovereignAlternative":"Koha via UK support firms (PTFS Europe, GB)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":204347,"spendPeriod":"Contract concluded Jun 2024","evidence":"Confirmed","notes":"Ex Libris is Israeli, owned by Clarivate (NYSE-listed, Jersey-incorporated). British Library also selected Clarivate. Hosting region typically EU data centre (inferred).","dimsNote":"Israeli-run SaaS owned by Jersey-incorporated NYSE-listed Clarivate; Koha/FOLIO with UK support possible","scores":{"D1":2,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":3,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":1.0454545454545454},"refs":[{"id":"R148","author":"Find a Tender Service","year":"2024","title":"Contract notice 022130-2024","url":"https://www.find-tender.service.gov.uk/Notice/022130-2024"},{"id":"R314","author":"Librarytechnology","year":"n.d.","title":"Clarivate successfully completes acquisition of proquest","url":"https://librarytechnology.org/pr/26873/clarivate-successfully-completes-acquisition-of-proquest"}]},{"id":"HE-053","entity":"Higher Education","subUnit":"","layerId":"A1","layer":"Foundation models","group":"AI","product":"ChatGPT Edu (OpenAI GPT-5)","vendor":"OpenAI","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"OpenAI Group PBC","ownerCountry":"US","ownershipChange":"Yes – OpenAI recapitalised as a public benefit corporation Oct 2025 (Microsoft c.27%)","ownershipSource":"https://www.ox.ac.uk/news/2025-09-19-oxford-becomes-first-uk-university-offer-chatgpt-edu-all-staff-and-students","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Secondary","seats":null,"seatsBasis":"University of Oxford all staff and students (first UK HEI)","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Easy","switchingCost":"Medium","exitCostDrivers":"Licence;Conversion","osAlternative":"Llama/Mistral open-weight models","sovereignAlternative":"Mistral (FR); none UK frontier","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Followed year-long pilot with ~750 users. Value not disclosed.","dimsNote":"Closed US frontier model; no UK equivalent","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":2.25,"D11":0,"D12":0,"overall":0.7045454545454546},"refs":[{"id":"R369","author":"Ox","year":"2025","title":"2025 09 19 oxford becomes first UK university offer chatgpt edu all staff and students","url":"https://www.ox.ac.uk/news/2025-09-19-oxford-becomes-first-uk-university-offer-chatgpt-edu-all-staff-and-students"}]},{"id":"HE-054","entity":"Higher Education","subUnit":"","layerId":"A1","layer":"Foundation models","group":"AI","product":"Microsoft 365 Copilot / Copilot Chat (OpenAI models via Microsoft)","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Primary","seats":null,"seatsBasis":"staff (Copilot Chat bundled; paid Copilot in pilots)","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Easy","switchingCost":"Medium","exitCostDrivers":"Licence","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Example: University of Liverpool 100-licence 12-week Copilot proof of concept (Oct-Dec 2025). Copilot Chat in M365 is default AI for most institutions (inferred).","dimsNote":"Closed models via Microsoft tenancy","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":2.25,"D11":0,"D12":0,"overall":0.7045454545454546},"refs":[{"id":"R317","author":"Liverpool","year":"2025","title":"Sign up to microsoft copilot trial","url":"https://news.liverpool.ac.uk/2025/09/16/sign-up-to-microsoft-copilot-trial/amp"}]},{"id":"HE-055","entity":"Higher Education","subUnit":"","layerId":"A1","layer":"Foundation models","group":"AI","product":"Google Gemini Pro / NotebookLM free student offer","vendor":"Google","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Alphabet","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Secondary","seats":null,"seatsBasis":"UK students opting in (12 months free)","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Easy","switchingCost":"Low","exitCostDrivers":"","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Direct-to-student offer (sign up by 3 Nov 2025) bypasses institutional procurement and governance.","dimsNote":"Direct-to-student consumer offer bypassing institutional governance","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":3,"D11":0,"D12":0,"overall":0.7727272727272727},"refs":[{"id":"R029","author":"Cam","year":"2025","title":"Empowering UK students free upgrade googles AI tools","url":"https://www.c2d3.cam.ac.uk/opportunities/empowering-uk-students-free-upgrade-googles-ai-tools"}]},{"id":"HE-056","entity":"Higher Education","subUnit":"Research computing","layerId":"A2","layer":"AI platform & hosting","group":"AI","product":"AI Research Resource (Isambard-AI, Dawn) - UK-hosted national AI compute","vendor":"DSIT/UKRI; Universities of Bristol and Cambridge","vendorCountry":"GB","vendorTier":"T1 UK","owner":"UK Government (DSIT/UKRI)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.gov.uk/government/news/cambridge-supercomputer-set-to-get-6-times-more-powerful-as-government-backs-british-ai-innovation","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"UK researchers and SMEs","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"Is the sovereign option (UK-run, US silicon)","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Version-pinnable","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"High","ukCapability":"Partial","ukValueCapture":"Medium","spend":1000000000,"spendPeriod":"AIRR expansion to 2030","evidence":"Confirmed","notes":"Over £1bn to expand AIRR at least 20x by 2030. Operationally sovereign, but hardware/software stack is US.","dimsNote":"UK-owned and operated by Bristol and Cambridge; refresh depends on export-controlled US accelerators","scores":{"D1":3,"D2":3,"D3":3,"D4":2,"D5":1.5,"D6":1.5,"D7":3,"D8":1.5,"D9":0,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.9166666666666667},"refs":[{"id":"R253","author":"GOV.UK","year":"2026","title":"Cambridge supercomputer set to get 6 times more powerful as government backs british AI innovation","url":"https://www.gov.uk/government/news/cambridge-supercomputer-set-to-get-6-times-more-powerful-as-government-backs-british-ai-innovation"}]},{"id":"HE-058","entity":"Higher Education","subUnit":"","layerId":"SE1","layer":"Endpoint protection","group":"Security","product":"CrowdStrike Falcon (Jisc sector agreement)","vendor":"CrowdStrike","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"CrowdStrike","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.jisc.ac.uk/news/all/cyber-security-tool-crowdstrike-now-available-through-jisc-with-exclusive-sector-pricing/","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Primary","seats":null,"seatsBasis":"institutions taking Jisc agreement","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Easy","switchingCost":"Medium","exitCostDrivers":"Licence","osAlternative":"Wazuh","sovereignAlternative":"Sophos (GB)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Prices locked 3 years, via two resellers (incl. Softcat). Sophos (GB, now Thoma Bravo-owned US PE) was historically common in HE.","dimsNote":"Kernel-level US SaaS agent (July 2024 outage shows concentration risk)","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":2.25,"D11":1.5,"D12":0,"overall":0.8409090909090909},"refs":[{"id":"R307","author":"Jisc","year":"n.d.","title":"Cyber security tool crowdstrike now available through jisc with exclusive sector pricing","url":"https://www.jisc.ac.uk/news/all/cyber-security-tool-crowdstrike-now-available-through-jisc-with-exclusive-sector-pricing/"}]},{"id":"HE-060","entity":"Higher Education","subUnit":"","layerId":"SE2","layer":"SIEM / SOC","group":"Security","product":"Jisc Security Operations Centre (shared sector SOC)","vendor":"Jisc (tooling: Splunk, Microsoft Defender, CrowdStrike, Cortex XSOAR)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Jisc (UK charity)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"subscribing FE/HE members","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"Wazuh; Security Onion","sovereignAlternative":"Jisc (GB) operator","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"UK-operated shared SOC (launched 2025) but tool stack is US (Splunk now Cisco-owned; Cortex is Palo Alto).","dimsNote":"UK-operated SOC but Splunk (Cisco) and Palo Alto tooling are US","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":1.5,"D9":null,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.6818181818181819},"refs":[{"id":"R303","author":"Jisc","year":"2025","title":"Security operations centre","url":"https://www.jisc.ac.uk/security-operations-centre"}]},{"id":"LG-005","entity":"Local Government","subUnit":"Oldham Council","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Microsoft Azure IaaS hosting council servers, with Azure Sentinel","vendor":"Microsoft (via Insight Direct)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Primary","seats":259,"seatsBasis":"Virtual machines on Azure (179 servers, 135 TB)","dataFormat":"Azure VM/disk formats","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Egress;Re-platforming;Skills","osAlternative":"OpenStack","sovereignAlternative":"UK sovereign cloud providers (none at scale since UKCloud)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":1716060,"spendPeriod":"3 years from Dec 2025","evidence":"Confirmed","notes":"Renewal up 67% on the previous 3-year £1,027,950 contract; direct award via CCS RM6098 Lot 2; aims to close Civic Centre data centre.","dimsNote":"US-owned hyperscaler subject to US CLOUD Act; no evidence of customer-held keys","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.8181818181818182},"refs":[{"id":"R234","author":"GOV.UK","year":"2025","title":"[Title to be confirmed]","url":"https://committees.oldham.gov.uk/documents/s155594/AZURE%20ICT%20CONTRACT%20REF%20118%20CabinetCommitteeCouncil%20Report%20-%20Azure%20Costs%20OCT%202025.pdf"}]},{"id":"LG-006","entity":"Local Government","subUnit":"London Borough of Hackney","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Amazon Web Services (AWS) cloud hosting commitment","vendor":"Amazon Web Services","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Amazon.com Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Council-wide platforms","dataFormat":"AWS service APIs","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Egress;Re-platforming;Skills","osAlternative":"OpenStack; Kubernetes","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":2953500,"spendPeriod":"3 years from Jul 2024","evidence":"Confirmed","notes":"Bought via G-Cloud RM1557.13 using the CCS One Government Value Agreement (OGVA) with AWS.","dimsNote":"US hyperscaler; OGVA pricing from CCS MoU","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.8181818181818182},"refs":[{"id":"R330","author":"Moderngov","year":"2024","title":"[Title to be confirmed]","url":"https://hackney.moderngov.co.uk/ieDecisionDetails.aspx?ID=7827"}]},{"id":"LG-007","entity":"Local Government","subUnit":"London Borough of Harrow","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Microsoft Azure hosting bought alongside the Microsoft Enterprise Agreement","vendor":"Microsoft (via Ultima)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Council workloads","dataFormat":"Azure formats","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Egress;Re-platforming","osAlternative":"OpenStack","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":1800000,"spendPeriod":"3 years Jun 2025 to Jun 2028","evidence":"Confirmed","notes":"Azure consumption bundled into the Microsoft reseller award (CCS RM6068 Lot 3, NFC187 aggregation).","dimsNote":"US hyperscaler","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.8181818181818182},"refs":[{"id":"R332","author":"Moderngov","year":"2025","title":"[Title to be confirmed]","url":"https://harrow.moderngov.co.uk/documents/s192837/Cabinet Report April 2025- Microsoft enterprise agreement clean.pdf"}]},{"id":"LG-008","entity":"Local Government","subUnit":"Cross-sector","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"UKCloud – UK-owned sovereign cloud used by public sector (collapsed 2022)","vendor":"UKCloud (liquidated)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"UKCloud Ltd (in liquidation)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.computing.co.uk/news/4058852/ukcloud-goes-liquidation","licence":"Proprietary","governance":"Single vendor","hosting":"UK cloud","hostingLocation":"UK","prevalence":"Niche","seats":null,"seatsBasis":"Public-sector customers forced to migrate","dataFormat":"OpenStack/VMware","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Forced migration","osAlternative":"OpenStack","sovereignAlternative":"","operator":"UK cleared","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"UKCloud entered compulsory liquidation in Oct 2022; Cabinet Office reported £17.5m costs and customers faced sevenfold price rises. Council-specific exposure not verified this session.","dimsNote":"Loss of the main UK-owned public-sector cloud leaves councils with US hyperscalers as default","scores":{"D1":3,"D2":3,"D3":0,"D4":3,"D5":0,"D6":0,"D7":3,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":3,"overall":1.5},"refs":[{"id":"R043","author":"Civilserviceworld","year":"2024","title":"Cabinet office counts cost of ukcloud collapse 175m so far","url":"https://www.civilserviceworld.com/news/article/cabinet-office-counts-cost-of-ukcloud-collapse-175m-so-far"},{"id":"R074","author":"Computing","year":"n.d.","title":"Ukcloud goes liquidation","url":"https://www.computing.co.uk/news/4058852/ukcloud-goes-liquidation"}]},{"id":"LG-009","entity":"Local Government","subUnit":"Hampshire Shared Services Partnership","layerId":"I2","layer":"Data centre location","group":"Infrastructure","product":"Partnership-owned data centre hosting SAP ERP for councils, police and fire","vendor":"Hampshire County Council (own data centre)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Hampshire County Council","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":85000,"seatsBasis":"Employees served by the partnership","dataFormat":"SAP HANA","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Hardware;Skills","osAlternative":"","sovereignAlternative":"","operator":"Customer (in-house UK team)","keyCustody":"Customer (on-prem)","codeModelControl":"Version-pinnable","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"SAP hosted on site in Hampshire County Council's data centre with 3-2-1 backup; serves about 3 million residents.","dimsNote":"Public-sector-owned UK data centre","scores":{"D1":3,"D2":3,"D3":3,"D4":3,"D5":3,"D6":1.5,"D7":3,"D8":0,"D9":1.5,"D10":1.5,"D11":3,"D12":3,"overall":2.375},"refs":[{"id":"R250","author":"GOV.UK","year":"2026","title":"[Title to be confirmed]","url":"https://documents.hants.gov.uk/aboutthecouncil/SharedServicesAnnualReport-2025-26.pdf"}]},{"id":"LG-010","entity":"Local Government","subUnit":"Cross-sector","layerId":"I2","layer":"Data centre location","group":"Infrastructure","product":"Legacy on-premise council server rooms exploited in ransomware attacks","vendor":"Council-run (in-house)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Individual councils","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2024/07/london-borough-of-hackney-reprimanded-following-cyber-attack","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"Councils with legacy on-prem estates","dataFormat":"Mixed","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Hardware;Skills","osAlternative":"","sovereignAlternative":"","operator":"Customer (in-house UK team)","keyCustody":"Customer (on-prem)","codeModelControl":"N/A","ipOwner":"Customer","continuityRisk":"High","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"ICO: Pysa ransomware hit Hackney (Oct 2020) through old on-prem servers and a dormant account; 440,000 files encrypted, services not fully restored until 2022. Similar outages at Copeland (2017), Redcar & Cleveland (2020, £10.4m), Gloucester (2021), Leicester (2024).","dimsNote":"UK-controlled but under-resourced estates; ICO cites patching failures","scores":{"D1":3,"D2":3,"D3":3,"D4":3,"D5":0,"D6":null,"D7":3,"D8":3,"D9":1.5,"D10":1.5,"D11":3,"D12":3,"overall":2.4545454545454546},"refs":[{"id":"R054","author":"Computer Weekly","year":"2024","title":"Hackney council reprimanded over 2020 ransomware attack","url":"https://www.computerweekly.com/news/366596113/Hackney-Council-reprimanded-over-2020-ransomware-attack"},{"id":"R289","author":"Ico","year":"n.d.","title":"London borough of hackney reprimanded following cyber attack","url":"https://ico.org.uk/about-the-ico/media-centre/news-and-blogs/2024/07/london-borough-of-hackney-reprimanded-following-cyber-attack"}]},{"id":"LG-011","entity":"Local Government","subUnit":"Kent County Council","layerId":"I2","layer":"Data centre location","group":"Infrastructure","product":"Third-party data centre hosting after exit from Medway data centre","vendor":"Unnamed external data centre vendor","vendorCountry":"Unknown","vendorTier":"Unknown","owner":"Unknown","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"County council estate","dataFormat":"Mixed","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Migration","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"N/A","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"Medium","spend":1000000,"spendPeriod":"Contract duration (over £1m)","evidence":"Confirmed","notes":"Kent used Azure to cut on-prem hardware and moved residual workloads to an external data centre; spend stated only as 'in excess of £1 million'.","dimsNote":"Colocation provider not named","scores":{"D1":3,"D2":null,"D3":3,"D4":2,"D5":3,"D6":null,"D7":null,"D8":3,"D9":1.5,"D10":1.5,"D11":3,"D12":1.5,"overall":2.388888888888889},"refs":[{"id":"R216","author":"GOV.UK","year":"2018","title":"[Title to be confirmed]","url":"https://democracy.kent.gov.uk/documents/s86129/Item 6 - Data Centre Exit Report.pdf?txtonly=1"}]},{"id":"LG-013","entity":"Local Government","subUnit":"London Borough of Hackney","layerId":"PL1","layer":"Operating systems","group":"Platform","product":"ChromeOS / Google-first desktop estate","vendor":"Google","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Alphabet Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Open core","governance":"Single vendor","hosting":"Endpoint","hostingLocation":"Mixed","prevalence":"Niche","seats":5600,"seatsBasis":"Google Workspace licences (min)","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"ChromiumOS; Linux","sovereignAlternative":"","operator":"Customer (in-house UK team)","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Hackney report says Workspace works consistently across ChromeOS, Windows, macOS and Linux and has reduced use of Microsoft Office; a rare non-Microsoft council estate.","dimsNote":"Google controls OS updates","scores":{"D1":1,"D2":1,"D3":null,"D4":3,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.9},"refs":[{"id":"R329","author":"Moderngov","year":"2021","title":"[Title to be confirmed]","url":"https://hackney.moderngov.co.uk/documents/s74862/08 Contract Award - Google Workspace licences.pdf"}]},{"id":"LG-015","entity":"Local Government","subUnit":"Hampshire Shared Services Partnership","layerId":"PL3","layer":"Database","group":"Platform","product":"SAP HANA database under SAP S/4HANA (migrated from ECC Oct 2025)","vendor":"SAP","vendorCountry":"DE","vendorTier":"T2 EU/EEA","owner":"SAP SE","ownerCountry":"DE","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":85000,"seatsBasis":"Employees served","dataFormat":"SAP HANA","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Skills;Customisation","osAlternative":"PostgreSQL","sovereignAlternative":"","operator":"Customer (in-house UK team)","keyCustody":"Customer (on-prem)","codeModelControl":"Version-pinnable","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"S/4HANA requires SAP's own HANA database, removing database choice.","dimsNote":"European vendor; database lock-in to HANA","scores":{"D1":3,"D2":2,"D3":3,"D4":3,"D5":1.5,"D6":1.5,"D7":2,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":1.4545454545454546},"refs":[{"id":"R250","author":"GOV.UK","year":"2026","title":"[Title to be confirmed]","url":"https://documents.hants.gov.uk/aboutthecouncil/SharedServicesAnnualReport-2025-26.pdf"}]},{"id":"LG-023","entity":"Local Government","subUnit":"Cross-sector","layerId":"W2","layer":"Identity & directory","group":"Workplace","product":"GOV.UK One Login for residents accessing council services (GDS Local)","vendor":"Government Digital Service (DSIT)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"UK Government (DSIT)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://mhclgdigital.blog.gov.uk/2025/04/23/exploring-approaches-for-using-gov-uk-one-login-in-local-government-join-our-discovery/","licence":"Open source","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Niche","seats":null,"seatsBasis":"Pilot/discovery stage for councils","dataFormat":"OIDC","formatOwner":"Standards body","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Integration","osAlternative":"","sovereignAlternative":"GOV.UK One Login (GB, government-owned)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Self-hosted / open","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"GDS Local (launched 22 Nov 2025 in DSIT) aims for residents to use One Login and the GOV.UK app for local as well as national services; also pledged to end 'ball and chain' single-supplier council contracts.","dimsNote":"Government-owned identity service; runs on AWS","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":3,"D6":3,"D7":3,"D8":3,"D9":null,"D10":3,"D11":3,"D12":3,"overall":2.6363636363636362},"refs":[{"id":"R245","author":"GOV.UK","year":"2025","title":"People across UK to benefit from easier access to local services as councils get digital boost","url":"https://www.gov.uk/government/news/people-across-uk-to-benefit-from-easier-access-to-local-services-as-councils-get-digital-boost"},{"id":"R265","author":"GOV.UK","year":"n.d.","title":"Exploring approaches for using gov UK one login in local government join our discovery","url":"https://mhclgdigital.blog.gov.uk/2025/04/23/exploring-approaches-for-using-gov-uk-one-login-in-local-government-join-our-discovery/"}]},{"id":"LG-024","entity":"Local Government","subUnit":"Wales – all 22 councils","layerId":"W3","layer":"Email","group":"Workplace","product":"Microsoft 365 / Exchange Online email","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Dominant","seats":2460,"seatsBasis":"Vale of Glamorgan users (one council)","dataFormat":"Exchange/MAPI; SMTP","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence;Migration","osAlternative":"Open-Xchange; Nextcloud","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":927147,"spendPeriod":"2024 renewal (Vale of Glamorgan, annual)","evidence":"Confirmed","notes":"Report states all 22 Welsh local authorities use Microsoft solutions; Vale renewing for 3 years via the CCS SPA24 MoU through an aggregation.","dimsNote":"US SaaS; CLOUD Act exposure; no customer-held keys evidenced","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.8181818181818182},"refs":[{"id":"R240","author":"GOV.UK","year":"2025","title":"Ea and o365 licensing renewal","url":"https://www.valeofglamorgan.gov.uk/Documents/_Committee%20Reports/Cabinet/2025/25-04-10/EA-and-O365-Licensing-Renewal.pdf"}]},{"id":"LG-025","entity":"Local Government","subUnit":"London Borough of Hackney","layerId":"W3","layer":"Email","group":"Workplace","product":"Google Workspace Gmail","vendor":"Google","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Alphabet Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.local.gov.uk/case-studies/copeland-borough-council-managing-cyber-attack","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Niche","seats":6500,"seatsBasis":"Maximum licences (min 5,600)","dataFormat":"SMTP/IMAP","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Migration","osAlternative":"Open-Xchange","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Cloud email kept Hackney running after the October 2020 ransomware attack; Copeland (2017) similarly retained cloud email and off-site revenues & benefits during its attack.","dimsNote":"US SaaS","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.6363636363636364},"refs":[{"id":"R329","author":"Moderngov","year":"2021","title":"[Title to be confirmed]","url":"https://hackney.moderngov.co.uk/documents/s74862/08 Contract Award - Google Workspace licences.pdf"},{"id":"R264","author":"GOV.UK","year":"n.d.","title":"Copeland borough council managing cyber attack","url":"https://www.local.gov.uk/case-studies/copeland-borough-council-managing-cyber-attack"}]},{"id":"LG-026","entity":"Local Government","subUnit":"Brighton & Hove City Council","layerId":"W4","layer":"Messaging & video","group":"Workplace","product":"Microsoft Teams including Teams telephony as primary phone platform","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"Council staff","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence;Telephony re-integration","osAlternative":"Matrix/Element; Jitsi","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Teams became the council's primary telephony platform from February 2025. Microsoft licences (end-user, education, infrastructure ELAs incl. Copilot) renewed for up to £4m over 3 years from Jul 2025 (current cost £1.25m a year).","dimsNote":"Telephony folded into US SaaS","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.8181818181818182},"refs":[{"id":"R235","author":"GOV.UK","year":"2025","title":"[Title to be confirmed]","url":"https://democracy.brighton-hove.gov.uk/documents/s204797/Microsoft%20licence%20renewal.html?CT=2"}]},{"id":"LG-027","entity":"Local Government","subUnit":"Cheshire East Council","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"Microsoft Enterprise Agreement (Microsoft 365 and server licences)","vendor":"Microsoft (via Licence Service Provider)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"Council-wide","dataFormat":"OOXML","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Skills;Integration","osAlternative":"LibreOffice/Nextcloud","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":35000000,"spendPeriod":"6 years (two 3-year periods) from 2020","evidence":"Confirmed","notes":"Up to £35m ex VAT over six years via a Microsoft licence reseller; expected 1-2% saving only.","dimsNote":"Price set by Microsoft and CCS MoUs","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.6818181818181818},"refs":[{"id":"R220","author":"GOV.UK","year":"2020","title":"[Title to be confirmed]","url":"https://moderngov.cheshireeast.gov.uk/ecminutes/documents/s79454/Microsoft Licence Agreement - report.pdf"}]},{"id":"LG-028","entity":"Local Government","subUnit":"London Borough of Harrow","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"Microsoft Enterprise Agreement renewal","vendor":"Microsoft (via Ultima)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"Council-wide","dataFormat":"OOXML","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Skills","osAlternative":"LibreOffice/Nextcloud","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":4897950,"spendPeriod":"3 years Jun 2025 to Jun 2028 (EA £3,097,950 + Azure £1.8m)","evidence":"Confirmed","notes":"Report calls it a 'very considerable price increase' over DTA21 pricing (about 18% higher forecast); direct award under CCS RM6068 Lot 3.","dimsNote":"Currency and Microsoft list-price exposure","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.6818181818181818},"refs":[{"id":"R332","author":"Moderngov","year":"2025","title":"[Title to be confirmed]","url":"https://harrow.moderngov.co.uk/documents/s192837/Cabinet Report April 2025- Microsoft enterprise agreement clean.pdf"}]},{"id":"LG-029","entity":"Local Government","subUnit":"Scotland – 11 councils","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"Aggregated Microsoft 365 licence procurement (Scotland Excel / Digital Office)","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://home.scotland-excel.org.uk/newsroom/case-studies/joint-procurement-exercise-for-it-licences-delivers-savings/","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"11 of 32 Scottish councils in the aggregation","dataFormat":"OOXML","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"11 Scottish councils saved £1m (avg 4.5%) via CCS RM6068 Lot 3 and DTA21; Digital Office exploring centralising Microsoft services across all 32 councils.","dimsNote":"Aggregation reduces price but deepens single-vendor dependence","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.6818181818181818},"refs":[{"id":"R271","author":"Government Commercial Agency","year":"2023","title":"Microsoft licence aggregation saves customers 1 million","url":"https://www.gca.gov.uk/news/microsoft-licence-aggregation-saves-customers-1-million"},{"id":"R410","author":"Scotland-excel","year":"n.d.","title":"Joint procurement exercise for IT licences delivers savings","url":"https://home.scotland-excel.org.uk/newsroom/case-studies/joint-procurement-exercise-for-it-licences-delivers-savings/"}]},{"id":"LG-030","entity":"Local Government","subUnit":"London Borough of Hackney","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"Google Workspace licences (Docs, Drive, Meet, Gmail)","vendor":"Google (via reseller)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Alphabet Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Niche","seats":6500,"seatsBasis":"Maximum licences (min 5,600)","dataFormat":"Google Docs formats; OOXML export","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Migration;Format fidelity","osAlternative":"LibreOffice/Nextcloud","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":2870400,"spendPeriod":"4 years (2+1+1) from Dec 2021","evidence":"Confirmed","notes":"Bought via G-Cloud; previous reseller Ancoris. Report credits Workspace with continuity after the 2020 cyber attack.","dimsNote":"US SaaS; proves a non-Microsoft council estate is viable","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.6363636363636364},"refs":[{"id":"R329","author":"Moderngov","year":"2021","title":"[Title to be confirmed]","url":"https://hackney.moderngov.co.uk/documents/s74862/08 Contract Award - Google Workspace licences.pdf"}]},{"id":"LG-032","entity":"Local Government","subUnit":"Birmingham City Council","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Oracle Fusion Cloud ERP (finance, HR, payroll) replacing SAP – reimplementation","vendor":"Oracle","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Oracle Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.theregister.com/2024/04/05/local_council_tech_struggles/","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Europe's largest local authority","dataFormat":"Oracle Fusion data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Customisation;Data migration;Skills","osAlternative":"","sovereignAlternative":"UK ERP suppliers (e.g. Civica Financials)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":144400000,"spendPeriod":"2018 to 2027/28 (forecast total cost)","evidence":"Reported","notes":"Went live April 2022 but failed; contributed to effective bankruptcy (s114) in 2023. Reimplementation go-live slipped again; council bought third-party bank reconciliation product.","dimsNote":"US SaaS ERP with mandatory quarterly updates","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.5454545454545454},"refs":[{"id":"R465","author":"The Register","year":"2026","title":"Birmingham Oracle costs latest","url":"https://www.theregister.com/2026/01/29/birmingham_oracle_latest/"},{"id":"R472","author":"The Register","year":"n.d.","title":"Local council tech struggles","url":"https://www.theregister.com/2024/04/05/local_council_tech_struggles/"}]},{"id":"LG-033","entity":"Local Government","subUnit":"Birmingham City Council","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Oracle Delivery Partner for the Oracle reimplementation","vendor":"To be appointed (pipeline notice)","vendorCountry":"Unknown","vendorTier":"Unknown","owner":"Unknown","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"https://www.theregister.com/2024/07/08/oracle_professional_services_birmingham/","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Skills","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":15000000,"spendPeriod":"5 years Apr 2026 to Apr 2031 (estimate ex VAT)","evidence":"Confirmed","notes":"Follows a £9.987m Oracle professional services contract (Jun 2024 to Sep 2026) reported by The Register.","dimsNote":"Systems integrator not yet named","scores":{"D1":3,"D2":null,"D3":null,"D4":2,"D5":0,"D6":null,"D7":null,"D8":0,"D9":null,"D10":0.75,"D11":1.5,"D12":1.5,"overall":1.25},"refs":[{"id":"R168","author":"Find a Tender Service","year":"2025","title":"Contract notice 027222-2025","url":"https://www.find-tender.service.gov.uk/Notice/027222-2025"},{"id":"R456","author":"The Register","year":"2024","title":"Oracle professional services birmingham","url":"https://www.theregister.com/2024/07/08/oracle_professional_services_birmingham/"}]},{"id":"LG-034","entity":"Local Government","subUnit":"Birmingham City Council","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Oracle professional services to stabilise Fusion","vendor":"Oracle","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Oracle Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Skills","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":9987000,"spendPeriod":"Jun 2024 to Sep 2026","evidence":"Reported","notes":"Direct spend with Oracle itself to fix the failed implementation.","dimsNote":"US vendor consultancy","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0.75,"D11":0,"D12":0,"overall":0.6136363636363636},"refs":[{"id":"R456","author":"The Register","year":"2024","title":"Oracle professional services birmingham","url":"https://www.theregister.com/2024/07/08/oracle_professional_services_birmingham/"}]},{"id":"LG-035","entity":"Local Government","subUnit":"West Sussex County Council","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Oracle Fusion HR and payroll (and finance) replacing SAP","vendor":"Oracle","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Oracle Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Primary","seats":917,"seatsBasis":"Finance and procurement users live Jan 2026","dataFormat":"Oracle Fusion data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Customisation;Data migration","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":41000000,"spendPeriod":"2019 to 2026 (estimated total: £14.07m spent + £27.048m approved)","evidence":"Reported","notes":"Original 2019 budget £2.6m; DXC (paid about £6.6m) terminated 2023; HR/payroll go-live pushed to Oct 2026; funded partly from sale of council buildings.","dimsNote":"US SaaS ERP","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.5454545454545454},"refs":[{"id":"R468","author":"The Register","year":"2026","title":"West sussex oracle","url":"https://www.theregister.com/2026/03/16/west_sussex_oracle/"}]},{"id":"LG-036","entity":"Local Government","subUnit":"Dorset Council","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Oracle ERP (Fusion) replacing customised SAP ECC6","vendor":"Oracle","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Oracle Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Finance, HR, source-to-pay, payroll","dataFormat":"Oracle Fusion data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Skills","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":14230000,"spendPeriod":"3 years (go-live expected late 2027); Oracle contract £7m","evidence":"Reported","notes":"Driven by end of SAP ECC6 mainstream support in 2027; business case by Socitm Advisory (now Civiteq).","dimsNote":"SAP-to-Oracle shift forced by SAP support deadline","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.5454545454545454},"refs":[{"id":"R457","author":"The Register","year":"2025","title":"Dorset council oracle","url":"https://www.theregister.com/2025/12/01/dorset_council_oracle/"}]},{"id":"LG-037","entity":"Local Government","subUnit":"Surrey County Council","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Unit4 ERP (MySurrey) replacing SAP","vendor":"Unit4","vendorCountry":"NL","vendorTier":"T2 EU/EEA","owner":"TA Associates (with Partners Group)","ownerCountry":"US","ownershipChange":"Yes – TA Associates bought Unit4 from Advent International, announced Mar 2021","ownershipSource":"https://www.goodwinlaw.com/en/news-and-events/news/2021/03/03_24-advent-international-to-sell-unit4","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"Council and schools staff","dataFormat":"Unit4 data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Customisation","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":27900000,"spendPeriod":"Total cost to 2024 (original budget £16.6m)","evidence":"Reported","notes":"68% over budget and 18 months late (live June 2023); payroll failures left some school staff underpaid or unpaid.","dimsNote":"Dutch-HQ vendor owned by US private equity","scores":{"D1":null,"D2":2,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.55},"refs":[{"id":"R454","author":"The Register","year":"2024","title":"18 months late and 68pc","url":"https://www.theregister.com/2024/07/16/18_months_late_and_68pc/"},{"id":"R205","author":"Goodwinlaw","year":"n.d.","title":"03 24 advent international to sell unit4","url":"https://www.goodwinlaw.com/en/news-and-events/news/2021/03/03_24-advent-international-to-sell-unit4"}]},{"id":"LG-038","entity":"Local Government","subUnit":"Hampshire Shared Services Partnership","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"SAP S/4HANA ERP for councils, police and fire (migrated from ECC, Oct 2025)","vendor":"SAP","vendorCountry":"DE","vendorTier":"T2 EU/EEA","owner":"SAP SE","ownerCountry":"DE","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":85000,"seatsBasis":"Employees served by the partnership","dataFormat":"SAP data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Skills;Customisation","osAlternative":"","sovereignAlternative":"","operator":"Customer (in-house UK team)","keyCustody":"Customer (on-prem)","codeModelControl":"Version-pinnable","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Shared ERP processes £6.8bn payments and £1.9bn salaries a year; RBKC left the partnership 1 Apr 2025; preparing for Local Government Reorganisation in 2028.","dimsNote":"Self-hosted in UK public data centre; European vendor","scores":{"D1":3,"D2":2,"D3":3,"D4":3,"D5":1.5,"D6":1.5,"D7":2,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":1.4545454545454546},"refs":[{"id":"R250","author":"GOV.UK","year":"2026","title":"[Title to be confirmed]","url":"https://documents.hants.gov.uk/aboutthecouncil/SharedServicesAnnualReport-2025-26.pdf"}]},{"id":"LG-039","entity":"Local Government","subUnit":"Cross-sector","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"TechnologyOne OneCouncil SaaS ERP","vendor":"TechnologyOne","vendorCountry":"AU","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Technology One Ltd (ASX-listed)","ownerCountry":"AU","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Secondary","seats":61,"seatsBasis":"UK local councils on TechnologyOne (FY to Sept 2025)","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Fast-growing challenger to Oracle/SAP/Unit4 (Islington, Greenwich, Doncaster, Blackpool, Worcestershire, North Herts); hosting location not stated.","dimsNote":"Australian SaaS vendor","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.45},"refs":[{"id":"R436","author":"Technology1","year":"2025","title":"Technologyone drives record growth as UK public sector adopts saas ERP","url":"https://www.technology1.com/resources/media-releases/technologyone-drives-record-growth-as-uk-public-sector-adopts-saas-erp"}]},{"id":"LG-040","entity":"Local Government","subUnit":"Surrey Heath Borough Council","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Civica Financials finance system (5-year direct award)","vendor":"Civica","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Blackstone","ownerCountry":"US","ownershipChange":"Yes – Blackstone completed acquisition of Civica, 2024","ownershipSource":"https://www.blackstone.com/news/press/blackstone-completes-acquisition-civica/","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"District council","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Data migration","osAlternative":"","sovereignAlternative":"Civica (GB-operated)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Typical district-council pattern of retaining incumbent finance system via a VAS framework direct award; value exempt.","dimsNote":"UK-operated supplier now US private-equity owned","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.3636363636363635},"refs":[{"id":"R333","author":"Moderngov","year":"2025","title":"[Title to be confirmed]","url":"https://surreyheath.moderngov.co.uk/documents/s39081/9. Finance System.pdf"},{"id":"R019","author":"Blackstone","year":"n.d.","title":"Blackstone completes acquisition civica","url":"https://www.blackstone.com/news/press/blackstone-completes-acquisition-civica/"}]},{"id":"LG-041","entity":"Local Government","subUnit":"Cross-sector","layerId":"B2","layer":"CRM","group":"Business apps","product":"Granicus (formerly Firmstep) customer portal/CRM","vendor":"Granicus","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Vista Equity Partners; Harvest Partners; K1","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.privsource.com/acquisitions/deal/1oMSAm","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":300,"seatsBasis":"Firmstep customers at acquisition (almost all UK councils)","dataFormat":"Vendor forms/case data","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Re-build forms;Integrations","osAlternative":"","sovereignAlternative":"Netcall (GB); Jadu (GB)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"US Granicus bought UK council CRM/forms supplier Firmstep in 2019.","dimsNote":"UK council CRM supplier absorbed by US PE-owned group; Ownership: New minority investor (Harvest Partners) joined Vista and K1 (Dec 2020); no change of control","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.45},"refs":[{"id":"R275","author":"Govtech","year":"2019","title":"Granicus moves into digital services with UK acquisition","url":"https://www.govtech.com/biz/Granicus-Moves-Into-Digital-Services-With-UK-Acquisition.html"},{"id":"R382","author":"Privsource","year":"n.d.","title":"[Title to be confirmed]","url":"https://www.privsource.com/acquisitions/deal/1oMSAm"}]},{"id":"LG-042","entity":"Local Government","subUnit":"Wokingham Borough Council","layerId":"B2","layer":"CRM","group":"Business apps","product":"Microsoft Dynamics CRM","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"Council CRM","dataFormat":"Dataverse","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"Medium","exitCostDrivers":"Re-build;Integrations","osAlternative":"SuiteCRM","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":83889,"spendPeriod":"Licence value to Mar 2024","evidence":"Confirmed","notes":"CRM re-tendered Nov 2022.","dimsNote":"US SaaS","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0.75,"D11":0,"D12":0,"overall":0.75},"refs":[{"id":"R230","author":"GOV.UK","year":"2024","title":"CRM and cms platform information","url":"https://www.wokingham.gov.uk/foi/crm-and-cms-platform-information"}]},{"id":"LG-043","entity":"Local Government","subUnit":"Greater Manchester Combined Authority","layerId":"B2","layer":"CRM","group":"Business apps","product":"Salesforce CRM (delivery partner Skyflo Digital)","vendor":"Salesforce (partner Skyflo Digital)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Salesforce Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Niche","seats":null,"seatsBasis":"Combined authority","dataFormat":"Salesforce objects","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"Medium","exitCostDrivers":"Re-build;Licence","osAlternative":"SuiteCRM","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":45000,"spendPeriod":"11 months to Aug 2027","evidence":"Confirmed","notes":"Small services contract; Salesforce licences likely separate.","dimsNote":"US SaaS","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0.75,"D11":0,"D12":0,"overall":0.525},"refs":[{"id":"R430","author":"Stotles","year":"2026","title":"Provision of salesforce customer relationship management system","url":"https://www.stotles.com/explore/notices/c84d38ec-77bc-4128-9338-34adf9ced253/provision-of-salesforce-customer-relationship-management-system"}]},{"id":"LG-044","entity":"Local Government","subUnit":"Cross-sector","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Revenues & benefits, social housing and education software formerly Capita One (Academy etc.)","vendor":"MRI Software","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"MRI Software (GI Partners, TA Associates, Harvest Partners)","ownerCountry":"US","ownershipChange":"Yes – Capita sold Capita One to MRI Software (US), completed Sep 2024","ownershipSource":"https://irei.com/news/harvest-partners-joins-gi-partners-ta-associates-backing-proptech-company/","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Local authorities, education authorities and housing associations (count not published)","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Statutory change;Integrations","osAlternative":"","sovereignAlternative":"NEC Software Solutions UK; Civica (UK-operated, foreign-owned)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Capita, long the largest council software supplier, sold Capita One to US-based MRI Software for £200m (net proceeds about £180m); completion 5 Sep 2024. Revenues & benefits market has three principal suppliers.","dimsNote":"Core council tax and benefits software now US private-equity owned","scores":{"D1":3,"D2":1,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":0.9090909090909091},"refs":[{"id":"R035","author":"Capita plc","year":"2024","title":"Completion of Capita One sale","url":"https://www.capita.com/news/completion-capita-one-sale"},{"id":"R301","author":"Irei","year":"n.d.","title":"Harvest partners joins gi partners ta associates backing proptech company","url":"https://irei.com/news/harvest-partners-joins-gi-partners-ta-associates-backing-proptech-company/"}]},{"id":"LG-045","entity":"Local Government","subUnit":"Cambridge City Council","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"NEC Revenues and Benefits software","vendor":"NEC Software Solutions UK","vendorCountry":"GB","vendorTier":"T1 UK","owner":"NEC Corporation","ownerCountry":"JP","ownershipChange":"No","ownershipSource":"https://www.scotlandis.com/blog/northgate-public-services-becomes-nec-software-solutions/","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"District council","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Statutory change","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":986245,"spendPeriod":"Contract concluded Oct 2025 (term not stated)","evidence":"Confirmed","notes":"NEC (formerly Northgate, bought by Japan's NEC in 2018) is one of the three principal R&B suppliers.","dimsNote":"Japanese-owned since 2018 (pre-2020)","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.2272727272727273},"refs":[{"id":"R179","author":"Find a Tender Service","year":"2025","title":"Contract notice 065282-2025","url":"https://www.find-tender.service.gov.uk/Notice/065282-2025/PDF"},{"id":"R411","author":"Scotlandis","year":"n.d.","title":"Northgate public services becomes nec software solutions","url":"https://www.scotlandis.com/blog/northgate-public-services-becomes-nec-software-solutions/"}]},{"id":"LG-046","entity":"Local Government","subUnit":"Royal Borough of Kensington and Chelsea","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Civica revenues and benefits system (re-procurement under GCA VAS RM6259)","vendor":"Civica","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Blackstone","ownerCountry":"US","ownershipChange":"Yes – Blackstone completed acquisition of Civica, 2024","ownershipSource":"https://www.blackstone.com/news/press/blackstone-completes-acquisition-civica/","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"London borough","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Statutory change","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":1300000,"spendPeriod":"3 years Sep 2024 to Sep 2027","evidence":"Confirmed","notes":"Report says the R&B market is served by three principal suppliers; new contract up to 10 years. R&B systems were down Nov 2025 to Jun 2026 after the cyber attack on the RBKC/Westminster/H&F shared services.","dimsNote":"UK-operated, US PE-owned","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.0909090909090908},"refs":[{"id":"R251","author":"GOV.UK","year":"2026","title":"[Title to be confirmed]","url":"https://www.rbkc.gov.uk/Committees/documents/s36467/KD1012979R.pdf"},{"id":"R019","author":"Blackstone","year":"n.d.","title":"Blackstone completes acquisition civica","url":"https://www.blackstone.com/news/press/blackstone-completes-acquisition-civica/"}]},{"id":"LG-047","entity":"Local Government","subUnit":"Oxford City Council","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Civica revenues and benefits system replacing Capita Academy","vendor":"Civica","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Blackstone","ownerCountry":"US","ownershipChange":"Yes – Blackstone completed acquisition of Civica, 2024","ownershipSource":"https://www.blackstone.com/news/press/blackstone-completes-acquisition-civica/","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"District council","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":1790000,"spendPeriod":"10 years from 2021 (£735k capital + £1,055k running)","evidence":"Confirmed","notes":"Capita did not bid; only three suppliers engaged, showing a thin market.","dimsNote":"UK-operated, US PE-owned","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.2272727272727273},"refs":[{"id":"R221","author":"GOV.UK","year":"2020","title":"[Title to be confirmed]","url":"https://mycouncil.oxford.gov.uk/documents/s56078/Cabinet%20Report%20Revs%20and%20Bens%20USE%20THIS%20ONE.pdf"},{"id":"R019","author":"Blackstone","year":"n.d.","title":"Blackstone completes acquisition civica","url":"https://www.blackstone.com/news/press/blackstone-completes-acquisition-civica/"}]},{"id":"LG-048","entity":"Local Government","subUnit":"RBKC / Westminster / Hammersmith & Fulham","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Shared IT and revenues & benefits services across three London boroughs (cyber incident Nov 2025)","vendor":"Shared council services","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Councils (shared service)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Three London boroughs","dataFormat":"Mixed","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"High","exitCostDrivers":"n/a","osAlternative":"","sovereignAlternative":"","operator":"Customer (in-house UK team)","keyCustody":"Customer (on-prem)","codeModelControl":"N/A","ipOwner":"Customer","continuityRisk":"High","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Attack detected 24 Nov 2025; data copied and removed; R&B systems unavailable until early June 2026 and council tax system still not fully running in July 2026.","dimsNote":"Shared services concentrate cyber blast radius","scores":{"D1":3,"D2":3,"D3":3,"D4":3,"D5":0,"D6":null,"D7":3,"D8":3,"D9":1.5,"D10":0.75,"D11":3,"D12":3,"overall":2.3863636363636362},"refs":[{"id":"R254","author":"GOV.UK","year":"2026","title":"Cyber security incident faq","url":"https://www.rbkc.gov.uk/cyber-security-incident-faq"}]},{"id":"LG-049","entity":"Local Government","subUnit":"Wigan Council","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Liquidlogic children's social care case management","vendor":"System C","vendorCountry":"GB","vendorTier":"T1 UK","owner":"CVC Capital Partners","ownerCountry":"LU","ownershipChange":"Yes – CVC Capital Partners acquired System C from Symphony Technology Group, Feb 2021","ownershipSource":"https://digitalhealth.net/2021/02/private-equity-firm-cvc-capital-partners-invests-in-system-c","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"Metropolitan council","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Statutory returns;Workflows","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Contract 1 Apr 2025 to 31 Mar 2030; adults' system is Access Mosaic. Liquidlogic was used by 25% of authorities in 2011 and has since become the leading children's system (current share not verified).","dimsNote":"UK social care supplier owned by Luxembourg-based private equity","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":2,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.3181818181818181},"refs":[{"id":"R236","author":"GOV.UK","year":"2025","title":"[Title to be confirmed]","url":"https://www.wigan.gov.uk/Docs/PDF/Council/Disclosure-Logs/2025/18627.pdf"},{"id":"R113","author":"Digital Health","year":"n.d.","title":"Private equity firm cvc capital partners invests in system c","url":"https://digitalhealth.net/2021/02/private-equity-firm-cvc-capital-partners-invests-in-system-c"}]},{"id":"LG-050","entity":"Local Government","subUnit":"Wigan Council","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Mosaic adult social care case management","vendor":"The Access Group","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Hg; TA Associates; GIC (minority)","ownerCountry":"Mixed","ownershipChange":"Yes – Access Group acquired Servelec (Mosaic), Sep 2021; GIC took minority stake 2022","ownershipSource":"https://htn.co.uk/2021/09/01/acquisition-of-servelec-announced/","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Metropolitan council","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Statutory returns","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Contract Nov 2023 to Nov 2025, 'under review'. Mosaic came to Access when it bought Servelec in 2021; Harrow and other councils feed Magic Notes AI summaries into Mosaic.","dimsNote":"UK-HQ group owned by UK/US private equity","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":null,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.25},"refs":[{"id":"R236","author":"GOV.UK","year":"2025","title":"[Title to be confirmed]","url":"https://www.wigan.gov.uk/Docs/PDF/Council/Disclosure-Logs/2025/18627.pdf"},{"id":"R288","author":"Htn","year":"n.d.","title":"Acquisition of servelec announced","url":"https://htn.co.uk/2021/09/01/acquisition-of-servelec-announced/"}]},{"id":"LG-051","entity":"Local Government","subUnit":"Cross-sector","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"ECLIPSE social care case management (OLM Systems)","vendor":"Civica (OLM Systems)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Blackstone","ownerCountry":"US","ownershipChange":"Yes – Civica (Blackstone) acquired OLM Systems, Sep 2025","ownershipSource":"https://www.blackstone.com/news/press/blackstone-completes-acquisition-civica/","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Secondary","seats":null,"seatsBasis":"Adults' and children's services (council count not published)","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Statutory returns","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"OLM was independent for 34 years; its sale means the three main social care case systems (Liquidlogic, Mosaic, Eclipse) are all private-equity owned.","dimsNote":"Last independent UK social care case vendor absorbed by US PE-owned Civica","scores":{"D1":null,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":0.9},"refs":[{"id":"R041","author":"Civica","year":"2025","title":"Civica acquires OLM Systems to strengthen govtech capabilities","url":"https://www.civica.com/en-au/news-library/civica-acquires-olm-systems-to-strengthen-govtech-capabilities/"},{"id":"R019","author":"Blackstone","year":"n.d.","title":"Blackstone completes acquisition civica","url":"https://www.blackstone.com/news/press/blackstone-completes-acquisition-civica/"}]},{"id":"LG-052","entity":"Local Government","subUnit":"London Borough of Lambeth","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"NEC Housing management system (also used by revenues & benefits)","vendor":"NEC Software Solutions UK","vendorCountry":"GB","vendorTier":"T1 UK","owner":"NEC Corporation","ownerCountry":"JP","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Housing and R&B services","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Integrations","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":1203942,"spendPeriod":"5 years Jul 2025 to Jun 2030","evidence":"Confirmed","notes":"Plus £68,373 bridging contract Apr-Jun 2025.","dimsNote":"Japanese-owned","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.2272727272727273},"refs":[{"id":"R361","author":"Opencouncil","year":"2025","title":"[Title to be confirmed]","url":"https://opencouncil.network/councils/lambeth/decisions/162632"}]},{"id":"LG-053","entity":"Local Government","subUnit":"Arun District Council","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Civica housing management system (licensing, hosting, support)","vendor":"Civica","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Blackstone","ownerCountry":"US","ownershipChange":"Yes – Blackstone completed acquisition of Civica, 2024","ownershipSource":"https://www.blackstone.com/news/press/blackstone-completes-acquisition-civica/","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"District council housing","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Up to 10 years (4+2+2+2); value not published.","dimsNote":"UK-operated, US PE-owned","scores":{"D1":null,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.05},"refs":[{"id":"R363","author":"Opengovernment","year":"2025","title":"[Title to be confirmed]","url":"https://opengovernment.network/councils/arun/decisions/138613"},{"id":"R019","author":"Blackstone","year":"n.d.","title":"Blackstone completes acquisition civica","url":"https://www.blackstone.com/news/press/blackstone-completes-acquisition-civica/"}]},{"id":"LG-054","entity":"Local Government","subUnit":"Cross-sector","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Idox planning, building control, licensing and elections software (Uniform etc.)","vendor":"Idox","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Long Path Partners","ownerCountry":"US","ownershipChange":"Yes – Long Path Partners (US) took Idox plc private, completed May 2026","ownershipSource":"https://www.investegate.co.uk/announcement/rns/idox--idox/fy25-results/9433493","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"'More than 90% of UK local authorities' rely on Idox software","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Integrations","osAlternative":"Open Digital Planning BOPS/PlanX","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Idox FY25 revenue £89.8m, of which land, property and public protection £57.3m. Taken private by US investor Long Path Partners at 71.5p/share (equity value about £339.5m), completed 5 May 2026.","dimsNote":"Near-monopoly planning supplier now US-owned","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":1.0909090909090908},"refs":[{"id":"R020","author":"Bolsamania","year":"2026","title":"Long path partners completes take private acquisition of idox plc 22414193","url":"https://www.bolsamania.com/nota-de-prensa/mercados/long-path-partners-completes-take-private-acquisition-of-idox-plc--22414193.html"},{"id":"R297","author":"Investegate","year":"n.d.","title":"[Title to be confirmed]","url":"https://www.investegate.co.uk/announcement/rns/idox--idox/fy25-results/9433493"}]},{"id":"LG-055","entity":"Local Government","subUnit":"Cross-sector","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Open Digital Planning BOPS and PlanX (open-source planning products)","vendor":"MHCLG-funded council collaboration (Open Digital Planning)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Councils / MHCLG (open source)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://ndx.digital.cabinet-office.gov.uk/catalogue/aws/bops-planning","licence":"Open source","governance":"Community","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Niche","seats":null,"seatsBasis":"Open Digital Planning community of 100+ planning authorities","dataFormat":"Open planning data schemas","formatOwner":"Open source","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Low","osAlternative":"BOPS; PlanX","sovereignAlternative":"BOPS/PlanX (council-owned, GB)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Government-backed open-source alternative to Idox/Agile; listed on the Cabinet Office NDX catalogue on AWS.","dimsNote":"Open code owned by public sector; hosting on AWS","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":3,"D6":3,"D7":3,"D8":3,"D9":null,"D10":3,"D11":3,"D12":3,"overall":2.6363636363636362},"refs":[{"id":"R239","author":"GOV.UK","year":"2025","title":"Digital planning software","url":"https://www.localdigital.gov.uk/digital-planning/digital-planning-software"},{"id":"R259","author":"GOV.UK","year":"n.d.","title":"[Title to be confirmed]","url":"https://ndx.digital.cabinet-office.gov.uk/catalogue/aws/bops-planning"}]},{"id":"LG-056","entity":"Local Government","subUnit":"England and Wales","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Civica Xpress electoral management software","vendor":"Civica","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Blackstone","ownerCountry":"US","ownershipChange":"Yes – Blackstone completed acquisition of Civica, 2024","ownershipSource":"https://www.blackstone.com/news/press/blackstone-completes-acquisition-civica/","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"70% of local authorities in England and Wales (vendor claim)","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Election timetable risk","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Electoral registers for most councils sit with one supplier, now US private-equity owned; Idox is the main alternative.","dimsNote":"Democratic infrastructure software under foreign PE ownership","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.2272727272727273},"refs":[{"id":"R042","author":"Civica","year":"2026","title":"[Title to be confirmed]","url":"https://www.civica.com/en-gb/product-pages/xpress/"},{"id":"R019","author":"Blackstone","year":"n.d.","title":"Blackstone completes acquisition civica","url":"https://www.blackstone.com/news/press/blackstone-completes-acquisition-civica/"}]},{"id":"LG-057","entity":"Local Government","subUnit":"Cross-sector","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Pay360 payment processing (council income/payments) sold by Capita","vendor":"Access PaySuite (The Access Group)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Hg; TA Associates; GIC (minority)","ownerCountry":"Mixed","ownershipChange":"Yes – Capita sold Pay360 to Access PaySuite, 2022","ownershipSource":"https://www.businesswire.com/news/home/20220607006093/en/The-Access-Group-Announces-Substantial-Investment-to-Drive-Continued-Expansion-at-%C2%A39.2-Billion-Valuation","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Secondary","seats":2500,"seatsBasis":"Pay360 customers across public and private sectors","dataFormat":"Vendor","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"PSP re-integration","osAlternative":"GOV.UK Pay (157 councils)","sovereignAlternative":"GOV.UK Pay (GB)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Sold for £150m; part of Capita's exit from council software; council-specific customer count not published.","dimsNote":"UK-HQ group owned by UK/US PE","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":null,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.4},"refs":[{"id":"R032","author":"Capita","year":"2022","title":"Capita agrees sell payments processing business pay360","url":"https://www.capita.com/news/capita-agrees-sell-payments-processing-business-pay360"},{"id":"R023","author":"Businesswire","year":"n.d.","title":"The access group announces substantial investment to drive continued expansion at £9.2 billion valuation","url":"https://www.businesswire.com/news/home/20220607006093/en/The-Access-Group-Announces-Substantial-Investment-to-Drive-Continued-Expansion-at-%C2%A39.2-Billion-Valuation"}]},{"id":"LG-058","entity":"Local Government","subUnit":"City of Edinburgh Council","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"CGI managed IT services contract (extended to 2029)","vendor":"CGI","vendorCountry":"CA","vendorTier":"T3 Five Eyes (ex-UK)","owner":"CGI Inc","ownerCountry":"CA","ownershipChange":"No","ownershipSource":"https://www.cgi.com/uk/en-gb/news/government/cgi-and-city-edinburgh-council-extend-managed-it-services-contract-2029","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"Whole council IT","dataFormat":"Mixed","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Outsourced skills;Contract term","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":100000000,"spendPeriod":"6-year extension to 2029","evidence":"Reported","notes":"Scottish Borders also extended its CGI deal (£30m, to 2040); illustrates long single-supplier outsourcing in Scottish councils.","dimsNote":"Canadian-owned outsourcer with UK delivery staff","scores":{"D1":3,"D2":1,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":1.5,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.1818181818181819},"refs":[{"id":"R197","author":"Futurescot","year":"2020","title":"Cgi secures contract extensions with two scottish councils worth a combined 130m","url":"https://futurescot.com/cgi-secures-contract-extensions-with-two-scottish-councils-worth-a-combined-130m/"},{"id":"R037","author":"Cgi","year":"n.d.","title":"Cgi and city edinburgh council extend managed IT services contract 2029","url":"https://www.cgi.com/uk/en-gb/news/government/cgi-and-city-edinburgh-council-extend-managed-it-services-contract-2029"}]},{"id":"LG-059","entity":"Local Government","subUnit":"Westminster City Council","layerId":"B4","layer":"Data & analytics","group":"Business apps","product":"Snowflake data hub with Azure Data Factory and Power BI (implementation partner tender)","vendor":"Snowflake; Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Snowflake Inc / Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Secondary","seats":null,"seatsBasis":"Council data hub","dataFormat":"Snowflake tables; Parquet export","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Egress;Pipelines","osAlternative":"PostgreSQL; DuckDB","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":3870000,"spendPeriod":"Full potential programme (Phase One up to £850,000)","evidence":"Confirmed","notes":"Procured via the Spark DPS; replaces SSIS-based pipelines.","dimsNote":"US data platform; council owns data","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":3,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.9},"refs":[{"id":"R160","author":"Find a Tender Service","year":"2025","title":"Contract notice 013608-2025","url":"https://www.find-tender.service.gov.uk/Notice/013608-2025"}]},{"id":"LG-060","entity":"Local Government","subUnit":"Coventry City Council","layerId":"B4","layer":"Data & analytics","group":"Business apps","product":"Palantir 'strategic AI platform' (children's services case-note summarisation and admin)","vendor":"Palantir","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Palantir Technologies","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.digitalhealth.net/2026/07/sheffield-first-council-to-oppose-nhs-fdp-palantir-contract/","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Niche","seats":null,"seatsBasis":"Single council","dataFormat":"Palantir Foundry ontology","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Ontology/pipelines;Political","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":750000,"spendPeriod":"1 year from Feb 2026 (renewal; original pilot £500,000)","evidence":"Reported","notes":"Renewed despite criticism; several councils (e.g. Sheffield) have opposed Palantir's NHS Federated Data Platform role.","dimsNote":"US defence-linked data platform handling children's social care data","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.45},"refs":[{"id":"R071","author":"Computing","year":"2026","title":"Coventry council renews palantir AI deal","url":"https://www.computing.co.uk/news/2026/government/coventry-council-renews-palantir-ai-deal"},{"id":"R114","author":"Digital Health","year":"n.d.","title":"Sheffield first council to oppose NHS fdp palantir contract","url":"https://www.digitalhealth.net/2026/07/sheffield-first-council-to-oppose-nhs-fdp-palantir-contract/"}]},{"id":"LG-061","entity":"Local Government","subUnit":"Cross-sector","layerId":"A1","layer":"Foundation models","group":"AI","product":"Large language model behind Magic Notes (provider not disclosed by councils)","vendor":"Undisclosed LLM provider (via Beam)","vendorCountry":"Unknown","vendorTier":"Unknown","owner":"Unknown","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"https://www.luton.gov.uk/council-elections/finance-data-performance/data-protection-privacy-information-requests/privacy-notices/magic-notes-privacy-notice","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Councils using Magic Notes","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Opaque supply chain","osAlternative":"Open-weight models","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Council privacy notices (Harrow, Luton) say a 'Large Language Model' produces summaries and that processing is in the UK, but do not name the model provider – a transparency gap for sensitive social care data.","dimsNote":"Model provenance not disclosed","scores":{"D1":3,"D2":null,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":null,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.1111111111111112},"refs":[{"id":"R242","author":"GOV.UK","year":"2025","title":"Magic notes privacy notice","url":"https://harrow.gov.uk/downloads/file/32649/Magic_Notes___Privacy_Notice.pdf"},{"id":"R266","author":"GOV.UK","year":"n.d.","title":"Magic notes privacy notice","url":"https://www.luton.gov.uk/council-elections/finance-data-performance/data-protection-privacy-information-requests/privacy-notices/magic-notes-privacy-notice"}]},{"id":"LG-062","entity":"Local Government","subUnit":"Barnsley Metropolitan Borough Council","layerId":"A2","layer":"AI platform & hosting","group":"AI","product":"Microsoft 365 Copilot","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Primary","seats":2000,"seatsBasis":"Copilot licences (expanded from 300)","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence;Workflow","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"About 70% of users regularly engage; ROI still being measured.","dimsNote":"US SaaS AI","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.8181818181818182},"refs":[{"id":"R237","author":"GOV.UK","year":"2025","title":"[Title to be confirmed]","url":"https://www.local.gov.uk/node/8277195"}]},{"id":"LG-063","entity":"Local Government","subUnit":"Buckinghamshire Council","layerId":"A2","layer":"AI platform & hosting","group":"AI","product":"Microsoft 365 Copilot","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Secondary","seats":300,"seatsBasis":"Employees with Copilot access","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Early adopter (2023); co-chairs a 400-member public-sector Copilot user group.","dimsNote":"US SaaS AI","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.8181818181818182},"refs":[{"id":"R123","author":"Erp","year":"2024","title":"Microsoft and englands buckinghamshire to transform public services with AI","url":"https://erp.today/microsoft-and-englands-buckinghamshire-to-transform-public-services-with-ai/"}]},{"id":"LG-064","entity":"Local Government","subUnit":"Cross-sector","layerId":"A2","layer":"AI platform & hosting","group":"AI","product":"Magic Notes AI note-taking for social workers","vendor":"Beam","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Beam (UK start-up)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://app.mercell.com/tender/-910883877/award","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Primary","seats":31,"seatsBasis":"Councils using or piloting (Sept 2024: 7 live, about 24 adopting)","dataFormat":"Transcripts/summaries exported to case systems","formatOwner":"Vendor","openSpec":"No","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Workflow","osAlternative":"","sovereignAlternative":"Beam (GB)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"UK start-up; later deployments include St Helens (450 staff) and Somerset. Ealing tender estimated £150,000.","dimsNote":"UK-owned app layer on undisclosed foundation model","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":0,"D9":null,"D10":3,"D11":1.5,"D12":1.5,"overall":1.6818181818181819},"refs":[{"id":"R383","author":"Pslhub","year":"2024","title":"Social workers in england begin using AI system to assist their work r7448","url":"https://www.pslhub.org/news/social-workers-in-england-begin-using-ai-system-to-assist-their-work-r7448/"},{"id":"R009","author":"App","year":"n.d.","title":"[Title to be confirmed]","url":"https://app.mercell.com/tender/-910883877/award"}]},{"id":"LG-065","entity":"Local Government","subUnit":"Cross-sector","layerId":"A2","layer":"AI platform & hosting","group":"AI","product":"Paid/procured AI tools across councils (LGA State of the Sector AI 2025)","vendor":"Various","vendorCountry":"Mixed","vendorTier":"Unknown","owner":"Various","ownerCountry":"Mixed","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Primary","seats":null,"seatsBasis":"68% of responding councils pay for or procure AI tools; 95% using or exploring AI","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Varies","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Survey of 100+ English councils (Dec 2024-Feb 2025); generative AI most common (83%); 41% have a specific AI policy; top risk cyber security (83%).","dimsNote":"Mostly US platforms","scores":{"D1":1,"D2":null,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":null,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.7222222222222222},"refs":[{"id":"R238","author":"GOV.UK","year":"2025","title":"[Title to be confirmed]","url":"https://www.local.gov.uk/node/8279073"}]},{"id":"LG-066","entity":"Local Government","subUnit":"Sandwell Metropolitan Borough Council","layerId":"SE1","layer":"Endpoint protection","group":"Security","product":"Microsoft 365 E5 security (identity, advanced threat protection, information governance) plus Copilot","vendor":"Microsoft (via Phoenix Software)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Dominant","seats":300,"seatsBasis":"Copilot users (E5 seat count not stated)","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Licence bundling","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":5462785,"spendPeriod":"3 years 2024/25 to 2026/27 (E5 £4,737,893)","evidence":"Confirmed","notes":"Direct award via KCS framework; security bundled into productivity licensing.","dimsNote":"Security telemetry held by US vendor","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0.75,"D11":0,"D12":0,"overall":0.75},"refs":[{"id":"R331","author":"Moderngov","year":"2024","title":"[Title to be confirmed]","url":"https://sandwell.moderngov.co.uk/documents/s19607/Award of contract to Phoenix Software LTD for the provision of Microsoft E5 licenses.pdf"}]},{"id":"LG-067","entity":"Local Government","subUnit":"Cheshire East Council","layerId":"SE2","layer":"SIEM / SOC","group":"Security","product":"Managed SOC (manage, detect, respond)","vendor":"NCC Group","vendorCountry":"GB","vendorTier":"T1 UK","owner":"NCC Group plc","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"Single council","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Contract","osAlternative":"","sovereignAlternative":"NCC Group (GB)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":294882,"spendPeriod":"Contract concluded Jul 2025 (term not stated)","evidence":"Confirmed","notes":"Called off G-Cloud 14 on price; six bids, none from SMEs.","dimsNote":"UK-listed security firm","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":3,"D6":0,"D7":3,"D8":0,"D9":null,"D10":3,"D11":3,"D12":3,"overall":2.090909090909091},"refs":[{"id":"R175","author":"Find a Tender Service","year":"2025","title":"Contract notice 054393-2025","url":"https://www.find-tender.service.gov.uk/Notice/054393-2025"}]},{"id":"LG-068","entity":"Local Government","subUnit":"Oldham Council","layerId":"SE2","layer":"SIEM / SOC","group":"Security","product":"Microsoft Sentinel SIEM (in Azure renewal)","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Single council","dataFormat":"KQL/Log Analytics","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Detection rule rebuild","osAlternative":"Wazuh; OpenSearch","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Sentinel included within the £1,716,060 Azure renewal.","dimsNote":"Security logs in US vendor platform","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.8181818181818182},"refs":[{"id":"R234","author":"GOV.UK","year":"2025","title":"[Title to be confirmed]","url":"https://committees.oldham.gov.uk/documents/s155594/AZURE%20ICT%20CONTRACT%20REF%20118%20CabinetCommitteeCouncil%20Report%20-%20Azure%20Costs%20OCT%202025.pdf"}]},{"id":"LG-069","entity":"Local Government","subUnit":"Cross-sector","layerId":"SE2","layer":"SIEM / SOC","group":"Security","product":"MHCLG Cyber Support programme and Cyber Assessment Framework for local government","vendor":"MHCLG (Local Digital)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"UK Government (MHCLG)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Open standard","governance":"Single vendor","hosting":"Unknown","hostingLocation":"UK","prevalence":"Primary","seats":192,"seatsBasis":"Councils funded (£19.9m)","dataFormat":"NCSC CAF","formatOwner":"Standards body","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"n/a","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":19900000,"spendPeriod":"2020 to Feb 2025","evidence":"Confirmed","notes":"200+ councils completed Get CAF Ready; 'Defend as One' pilots explore shared cyber capability.","dimsNote":"Central funding, UK standard","scores":{"D1":3,"D2":3,"D3":null,"D4":2,"D5":3,"D6":null,"D7":3,"D8":3,"D9":null,"D10":3,"D11":3,"D12":3,"overall":2.888888888888889},"refs":[{"id":"R247","author":"GOV.UK","year":"2025","title":"Supporting local government to reduce cyber risk through targeted interventions","url":"https://mhclgdigital.blog.gov.uk/2025/06/10/supporting-local-government-to-reduce-cyber-risk-through-targeted-interventions"}]},{"id":"POL-002","entity":"Policing","subUnit":"Gwent Police","layerId":"P1","layer":"Device chips","group":"Physical","product":"Samsung Galaxy XCover6 Pro rugged smartphones for officers","vendor":"Samsung (via CCS Media reseller)","vendorCountry":"KR","vendorTier":"T4 Other allied/partner","owner":"Samsung Electronics","ownerCountry":"KR","ownershipChange":"No","ownershipSource":"https://www.publictechnology.net/2025/01/15/business-and-industry/ibm-secures-1-6bn-emergency-services-network-deal/","licence":"Proprietary","governance":"Single vendor","hosting":"Endpoint","hostingLocation":"Mixed","prevalence":"Primary","seats":100,"seatsBasis":"Handsets in this purchase","dataFormat":"Android / Samsung Knox","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming;MDM","osAlternative":"AOSP-based builds","sovereignAlternative":"None at scale","operator":"Customer (in-house UK team)","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"High","ukCapability":"None","ukValueCapture":"Low","spend":41730,"spendPeriod":"One-off purchase Mar 2025 (incl VAT)","evidence":"Confirmed","notes":"Rugged Samsung handsets are a common force mobile-data device; chips are Samsung Exynos or Qualcomm (US). Samsung is also IBM's main ESN device partner.","dimsNote":"Korean OEM; Android OS controlled by Google (US); chips Samsung/Qualcomm","scores":{"D1":1,"D2":1,"D3":0,"D4":3,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":0,"D10":1.5,"D11":0,"D12":0,"overall":0.75},"refs":[{"id":"R159","author":"Find a Tender Service","year":"2025","title":"Contract notice 011581-2025","url":"https://www.find-tender.service.gov.uk/Notice/011581-2025"},{"id":"R392","author":"PublicTechnology","year":"2025","title":"Ibm secures 1 6bn emergency services network deal","url":"https://www.publictechnology.net/2025/01/15/business-and-industry/ibm-secures-1-6bn-emergency-services-network-deal/"}]},{"id":"POL-003","entity":"Policing","subUnit":"Police Scotland","layerId":"P1","layer":"Device chips","group":"Physical","product":"Motorola Solutions VB400 body-worn video cameras (10,500 units)","vendor":"Motorola Solutions","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Motorola Solutions Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.ifsecglobal.com/video-surveillance/motorola-solutions-acquires-edesix-parent-company-vaas-international-holdings/amp/","licence":"Proprietary","governance":"Single vendor","hosting":"Endpoint","hostingLocation":"UK","prevalence":"Primary","seats":10500,"seatsBasis":"Cameras deployed","dataFormat":"Proprietary encrypted video container","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Hardware refresh;Evidence migration","osAlternative":"None","sovereignAlternative":"None (Edesix, the GB designer, is Motorola-owned)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"High","ukCapability":"Partial","ukValueCapture":"Low","spend":13300000,"spendPeriod":"3 years from Jun 2024","evidence":"Reported","notes":"VB400 descends from Edinburgh firm Edesix's VideoBadge, bought by Motorola Solutions in 2019; Scotland's national BWV rollout therefore depends on a US vendor despite Scottish origin.","dimsNote":"BWV design work originated in Scotland (Edesix) but IP now US-owned; Edesix, Edinburgh, acquired by Motorola Solutions 2019 - before 2020 window","scores":{"D1":3,"D2":1,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":0,"D10":1.5,"D11":1.5,"D12":0,"overall":0.9583333333333334},"refs":[{"id":"R412","author":"Scottishlegal","year":"2024","title":"Police scotland agrees ps133m deal for body worn cameras","url":"https://www.scottishlegal.com/articles/police-scotland-agrees-ps133m-deal-for-body-worn-cameras"},{"id":"R290","author":"Ifsecglobal","year":"n.d.","title":"Motorola solutions acquires edesix parent company vaas international holdings","url":"https://www.ifsecglobal.com/video-surveillance/motorola-solutions-acquires-edesix-parent-company-vaas-international-holdings/amp/"}]},{"id":"POL-004","entity":"Policing","subUnit":"Home Office (PNC)","layerId":"P2","layer":"Server & AI accelerator chips","group":"Physical","product":"Fujitsu BS2000/OSD SE700-30 mainframe running the Police National Computer","vendor":"Fujitsu Services","vendorCountry":"JP","vendorTier":"T4 Other allied/partner","owner":"Fujitsu Ltd","ownerCountry":"JP","ownershipChange":"No","ownershipSource":"https://ukauthority.com/articles/home-office-explores-contingency-for-police-national-computer","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"Every force uses PNC (13m people, 62.6m vehicles)","dataFormat":"BS2000 proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Legacy skills;Data migration;Single tender","osAlternative":"","sovereignAlternative":"LEDS (Home Office-owned replacement)","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"High","ukCapability":"None","ukValueCapture":"Low","spend":48000000,"spendPeriod":"Apr 2022 - Mar 2026 (4 years)","evidence":"Reported","notes":"Single-tender award after no other bids; Siemens-heritage mainframe; Fujitsu plans to stop making mainframes by 2030. PNC in service since 1974 and is designated CNI.","dimsNote":"Japanese mainframe end-of-life path; contingency PIN issued by Home Office in 2023","scores":{"D1":3,"D2":1,"D3":3,"D4":2,"D5":0,"D6":0,"D7":1,"D8":0,"D9":0,"D10":0,"D11":0,"D12":0,"overall":0.8333333333333334},"refs":[{"id":"R452","author":"The Register","year":"2022","title":"Police national computer fujitsu","url":"https://www.theregister.com/2022/08/23/police_national_computer_fujitsu/"},{"id":"R511","author":"UKAuthority","year":"n.d.","title":"Home office explores contingency for police national computer","url":"https://ukauthority.com/articles/home-office-explores-contingency-for-police-national-computer"}]},{"id":"POL-005","entity":"Policing","subUnit":"Cross-sector (Home Office)","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"Airwave TETRA emergency services radio network","vendor":"Motorola Solutions (Airwave Solutions)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Motorola Solutions Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.theregister.com/2025/02/03/motorola_reaches_end_of_road/","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"All UK police, fire and ambulance services","dataFormat":"TETRA (ETSI)","formatOwner":"Standards body","openSpec":"Yes","portability":"Hard","switchingCost":"High","exitCostDrivers":"Network rebuild;Device replacement;ESN delay","osAlternative":"","sovereignAlternative":"ESN on BT/EE (GB) network","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":1560000000,"spendPeriod":"4-year extension to end 2026 (signed Dec 2021)","evidence":"Reported","notes":"CMA found Motorola charged ~£200m/yr above competitive levels and imposed a charge control; Court of Appeal refused Motorola permission to appeal (2025). Airwave now expected to run until ESN go-live c.2029; NAO puts Airwave+ESN cost at ~£11bn over ten years.","dimsNote":"CMA: Motorola earned 'supernormal' profits from dual Airwave/ESN role; charge control upheld; Motorola bought Airwave Solutions Feb 2016 - before 2020 window","scores":{"D1":3,"D2":1,"D3":3,"D4":2,"D5":0,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":0,"overall":1.0833333333333333},"refs":[{"id":"R523","author":"Urgentcomm","year":"2022","title":"UK home office agrees to four year airwave extension worth 2 09 billion to motorola solutions","url":"https://urgentcomm.com/land-mobile-radio/uk-home-office-agrees-to-four-year-airwave-extension-worth-2-09-billion-to-motorola-solutions"},{"id":"R460","author":"The Register","year":"2025","title":"Motorola reaches end of the road in Airwave price cap fight","url":"https://www.theregister.com/2025/02/03/motorola_reaches_end_of_road/"}]},{"id":"POL-006","entity":"Policing","subUnit":"Cross-sector (Home Office)","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"ESN mobile services (4G/5G SA core and radio access for Emergency Services Network)","vendor":"BT / EE","vendorCountry":"GB","vendorTier":"T1 UK","owner":"BT Group plc","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":300000,"seatsBasis":"Planned ESN users","dataFormat":"3GPP LTE/5G","formatOwner":"Standards body","openSpec":"Yes","portability":"Hard","switchingCost":"High","exitCostDrivers":"Coverage build;Device fleet","osAlternative":"","sovereignAlternative":"","operator":"UK cleared","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":1850000000,"spendPeriod":"7 years 3 months from end-2024 (+1yr option)","evidence":"Reported","notes":"Direct award to incumbent EE after alternative suppliers judged unable to meet requirements in time; migration from Airwave expected by 2029.","dimsNote":"UK telco; RAN/core kit from non-UK vendors (Ericsson/Nokia); Ownership: Bharti Global became BT's largest shareholder (24.5%) after buying Altice stake 2024 — a minority stake, not a change of control","scores":{"D1":3,"D2":3,"D3":3,"D4":3,"D5":1.5,"D6":0,"D7":3,"D8":1.5,"D9":1.5,"D10":0,"D11":3,"D12":3,"overall":2.125},"refs":[{"id":"R504","author":"UKAuthority","year":"2024","title":"Home office commits to another massive spend on emergency services network","url":"https://www.ukauthority.com/articles/home-office-commits-to-another-massive-spend-on-emergency-services-network"}]},{"id":"POL-007","entity":"Policing","subUnit":"Cross-sector (Home Office)","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"ESN user services (core software, push-to-talk, device management, systems integration)","vendor":"IBM (with Samsung, Ericsson, Frequentis, Exponential-E, Palo Alto Networks)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"IBM Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.theregister.com/2026/04/16/motorola_airwave/","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":300000,"seatsBasis":"250k emergency service users plus 50k government","dataFormat":"3GPP MCX","formatOwner":"Standards body","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Integration lock-in","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":1630000000,"spendPeriod":"Dec 2024 to end 2031 (incl VAT)","evidence":"Reported","notes":"Replaced Motorola, which withdrew from its ~£400m ESN user services contract after CMA scrutiny; value up £576m on 2023 estimate; ~63% of spend subcontracted. A separate ESN devices framework of up to £925m is being procured (Register, Jul 2025).","dimsNote":"US prime with Korean/Swedish/Austrian/US subcontractors; Exponential-E the only GB subcontractor named","scores":{"D1":3,"D2":1,"D3":0,"D4":2,"D5":0,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":0,"overall":0.8333333333333334},"refs":[{"id":"R392","author":"PublicTechnology","year":"2025","title":"Ibm secures 1 6bn emergency services network deal","url":"https://www.publictechnology.net/2025/01/15/business-and-industry/ibm-secures-1-6bn-emergency-services-network-deal/"},{"id":"R464","author":"The Register","year":"2026","title":"[Title to be confirmed]","url":"https://www.theregister.com/2026/04/16/motorola_airwave/"}]},{"id":"POL-008","entity":"Policing","subUnit":"Police Digital Service","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"TETRA handsets, software and maintenance (Airwave terminals) extension","vendor":"Motorola Solutions; Sepura","vendorCountry":"Mixed","vendorTier":"Unknown","owner":"Motorola Solutions Inc / Epiris Fund II","ownerCountry":"Mixed","ownershipChange":"Yes – Sepura sold by Hytera (CN) to UK private equity Epiris, Jul 2022","ownershipSource":"https://www.securityworldmarket.com/uk/News/Business-News/sepura-acquired-by-uk-private-equity-firm-epiris","licence":"Proprietary","governance":"Single vendor","hosting":"Endpoint","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"All Airwave users","dataFormat":"TETRA","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Device fleet","osAlternative":"","sovereignAlternative":"Sepura (GB, now UK PE-owned)","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Medium","spend":25000000,"spendPeriod":"6-month extension from early 2027","evidence":"Reported","notes":"Extended without competition; original TETRA terminals contract £50m over four years from Jan 2023; a CCS framework is meant to follow.","dimsNote":"Sepura (Cambridge) returned from Chinese to UK ownership in 2022","scores":{"D1":3,"D2":null,"D3":3,"D4":2,"D5":1.5,"D6":0,"D7":null,"D8":0,"D9":1.5,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.55},"refs":[{"id":"R464","author":"The Register","year":"2026","title":"[Title to be confirmed]","url":"https://www.theregister.com/2026/04/16/motorola_airwave/"},{"id":"R413","author":"Securityworldmarket","year":"n.d.","title":"Sepura acquired by UK private equity firm epiris","url":"https://www.securityworldmarket.com/uk/News/Business-News/sepura-acquired-by-uk-private-equity-firm-epiris"}]},{"id":"POL-009","entity":"Policing","subUnit":"Sussex Police","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"Public Services Network (PSN) connectivity","vendor":"Vodafone","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Vodafone Group plc","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Force connectivity to national systems","dataFormat":"PSN standard","formatOwner":"Standards body","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Network re-provision","osAlternative":"","sovereignAlternative":"BT (GB)","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":108816,"spendPeriod":"1 Apr 2025 - 31 Mar 2026 (ext. to 2029)","evidence":"Confirmed","notes":"Forces reach PNC/PND/NAS over PSN-for-Policing style connectivity bought force by force.","dimsNote":"UK-headquartered telco","scores":{"D1":3,"D2":3,"D3":3,"D4":2,"D5":3,"D6":0,"D7":3,"D8":1.5,"D9":1.5,"D10":1.5,"D11":3,"D12":3,"overall":2.2916666666666665},"refs":[{"id":"R158","author":"Find a Tender Service","year":"2025","title":"Contract notice 011104-2025","url":"https://www.find-tender.service.gov.uk/Notice/011104-2025"}]},{"id":"POL-011","entity":"Policing","subUnit":"Home Office","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"AWS public cloud hosting (Home Office incl. Law Enforcement Cloud Platform / Police Open Systems)","vendor":"Amazon Web Services","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Amazon.com Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.publictechnology.net/articles/news/national-police-systems-be-moved-aws","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"National police systems (PNC-adjacent Police Open Systems, PND migration)","dataFormat":"AWS proprietary services","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Egress;Re-architecture;Skills","osAlternative":"OpenStack/Kubernetes","sovereignAlternative":"UKCloud-type UK providers (limited)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"None","ukValueCapture":"Low","spend":450281369,"spendPeriod":"3 years from Dec 2023","evidence":"Reported","notes":"Home Office moved national police systems to AWS (Police Open Systems) and created a dedicated Law Enforcement Cloud Platform to which the PND is migrating; AWS was assessed for law enforcement by HODDaT and NPIRMT in 2017.","dimsNote":"US CLOUD Act applies to US-owned provider even in UK region","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":0,"D12":0,"overall":0.75},"refs":[{"id":"R501","author":"UKAuthority","year":"2023","title":"Home office agrees 450 million cloud deal with AWS","url":"https://www.ukauthority.com/articles/home-office-agrees-450-million-cloud-deal-with-aws"},{"id":"R398","author":"PublicTechnology","year":"n.d.","title":"National police systems be moved AWS","url":"https://www.publictechnology.net/articles/news/national-police-systems-be-moved-aws"}]},{"id":"POL-012","entity":"Policing","subUnit":"NPCC / National Enabling Programmes","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Microsoft Azure platform for National Enabling Programmes (with Deloitte as delivery partner)","vendor":"Microsoft (Deloitte delivery)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://computerweekly.com/news/366592229/UK-data-regulator-should-investigate-police-cloud-deployments","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"Forces adopting NEP blueprint","dataFormat":"Azure / M365","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licensing;Re-architecture","osAlternative":"Nextcloud/OpenStack","sovereignAlternative":"None at national scale","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"None","ukValueCapture":"Low","spend":100000000,"spendPeriod":"NEP investment shared between Deloitte and BT (2018)","evidence":"Reported","notes":"NEP set a national Azure/M365 design for forces (productivity, IAM, national monitoring centre). Local forces keep their own tenancies.","dimsNote":"Microsoft admitted it cannot guarantee UK policing data sovereignty on its public cloud","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":0,"D12":0,"overall":0.75},"refs":[{"id":"R493","author":"UKAuthority","year":"2018","title":"Police chiefs award national enabling programmes contracts to deloitte and bt","url":"https://www.ukauthority.com/articles/police-chiefs-award-national-enabling-programmes-contracts-to-deloitte-and-bt/"},{"id":"R063","author":"Computer Weekly","year":"n.d.","title":"UK data regulator should investigate police cloud deployments","url":"https://computerweekly.com/news/366592229/UK-data-regulator-should-investigate-police-cloud-deployments"}]},{"id":"POL-013","entity":"Policing","subUnit":"Leicestershire Police","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Azure VMware Solution migration of force datacentre servers","vendor":"ANS Group (Microsoft Azure)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Microsoft Corp (platform); ANS Group (GB integrator)","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Force server estate","dataFormat":"VMware on Azure","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"VMware licensing;Egress","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Medium","spend":478620,"spendPeriod":"24 months from May 2025","evidence":"Confirmed","notes":"UK MSP (ANS) migrates force datacentre to Azure; underlying platform US-owned (Microsoft, VMware/Broadcom).","dimsNote":"UK integrator margin only; platform US","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.375},"refs":[{"id":"R165","author":"Find a Tender Service","year":"2025","title":"Contract notice 021220-2025","url":"https://www.find-tender.service.gov.uk/Notice/021220-2025"}]},{"id":"POL-014","entity":"Policing","subUnit":"Home Office (National ANPR Service)","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"NAS hosting and associated managed PaaS services","vendor":"Redcentric Solutions","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Redcentric plc","ownerCountry":"GB","ownershipChange":"Yes – Redcentric Data Centres sold to Stellanor Datacenters (DWS-backed fund), agreed Oct 2025","ownershipSource":"https://www.channelweb.co.uk/news/2025/redcentric-re-centres-itself-with-127m-sale-of-datacentre-arm","licence":"Proprietary","governance":"Single vendor","hosting":"UK cloud","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"All forces' ANPR reads (>50m/day)","dataFormat":"Vendor PaaS","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Data migration","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Low","ukCapability":"Strong","ukValueCapture":"High","spend":22022437,"spendPeriod":"28 months Jul 2023 - Oct 2025","evidence":"Confirmed","notes":"Rare example of a UK-owned hosting provider for a national police system. Redcentric agreed in 2025 to sell its datacentre arm (Redcentric Data Centres) to Stellanor, backed by a DWS-managed fund, retaining the MSP business.","dimsNote":"UK provider; datacentre real estate moving to German-asset-manager-backed owner","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":0,"D9":3,"D10":1.5,"D11":3,"D12":3,"overall":1.9166666666666667},"refs":[{"id":"R016","author":"Beta","year":"2023","title":"[Title to be confirmed]","url":"https://beta.bidstats.uk/tenders/2023/W31/803733792"},{"id":"R038","author":"Channelweb","year":"n.d.","title":"Redcentric re centres itself with 127m sale of datacentre arm","url":"https://www.channelweb.co.uk/news/2025/redcentric-re-centres-itself-with-127m-sale-of-datacentre-arm"}]},{"id":"POL-015","entity":"Policing","subUnit":"Home Office (PNC)","layerId":"I2","layer":"Data centre location","group":"Infrastructure","product":"PNC mainframe datacentre in Hendon, north London","vendor":"Fujitsu Services","vendorCountry":"JP","vendorTier":"T4 Other allied/partner","owner":"Fujitsu Ltd","ownerCountry":"JP","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Physical migration","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"N/A","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"PNC data physically held in UK (Hendon) on Fujitsu-run mainframe.","dimsNote":"UK-located but foreign-operated","scores":{"D1":3,"D2":1,"D3":3,"D4":2,"D5":1.5,"D6":null,"D7":1,"D8":3,"D9":1.5,"D10":0,"D11":1.5,"D12":1.5,"overall":1.7272727272727273},"refs":[{"id":"R452","author":"The Register","year":"2022","title":"Police national computer fujitsu","url":"https://www.theregister.com/2022/08/23/police_national_computer_fujitsu/"}]},{"id":"POL-016","entity":"Policing","subUnit":"Cross-sector","layerId":"I2","layer":"Data centre location","group":"Infrastructure","product":"Microsoft UK datacentres (M365/Azure) with overseas processing and remote access","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://computerweekly.com/news/366589095/Police-Scotland-did-not-consult-ICO-about-high-risk-cloud-system","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Mixed","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Legal (DPA 2018 Part 3)","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Microsoft told Police Scotland/SPA it cannot guarantee sovereignty of policing data in O365 even in UK datacentres; Microsoft Learn pages list remote personnel access from ~105 countries via 148 sub-processors.","dimsNote":"International transfers inherent to Microsoft public cloud architecture (per Microsoft to SPA)","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":0,"D12":0,"overall":0.5833333333333334},"refs":[{"id":"R057","author":"Computer Weekly","year":"2025","title":"Microsoft hides key data flow information in plain sight","url":"https://www.computerweekly.com/news/366632040/Microsoft-hides-key-data-flow-information-in-plain-sight"},{"id":"R055","author":"Computer Weekly","year":"2024","title":"Police scotland did not consult ico about high risk cloud system","url":"https://computerweekly.com/news/366589095/Police-Scotland-did-not-consult-ICO-about-high-risk-cloud-system"}]},{"id":"POL-017","entity":"Policing","subUnit":"Essex & Kent Police","layerId":"PL1","layer":"Operating systems","group":"Platform","product":"Windows 10/11 desktop OS (under Microsoft 365 E3 + E5 Security EA)","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Endpoint","hostingLocation":"Mixed","prevalence":"Dominant","seats":null,"seatsBasis":"Force users","dataFormat":"Windows","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Application compatibility","osAlternative":"Linux desktop","sovereignAlternative":"None","operator":"Customer (in-house UK team)","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Essex/Kent EA explicitly covers Windows 10, Office, Exchange Online, Teams and SQL Server; NEP sets M365 E3 + security uplift as minimum.","dimsNote":"US OS monopoly in forces","scores":{"D1":1,"D2":1,"D3":null,"D4":3,"D5":3,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.9},"refs":[{"id":"R124","author":"Essex","year":"2021","title":"053 21 ms enterprise agreement decision sheet","url":"https://www.essex.pfcc.police.uk/wp-content/uploads/2021/05/053-21-MS-Enterprise-Agreement-Decision-Sheet.pdf?x67448"}]},{"id":"POL-018","entity":"Policing","subUnit":"Gwent Police","layerId":"PL1","layer":"Operating systems","group":"Platform","product":"Android mobile OS on officer handsets","vendor":"Google (Android) / Samsung","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Alphabet Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Open core","governance":"Single vendor","hosting":"Endpoint","hostingLocation":"Mixed","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"Android","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"MDM;App rebuild","osAlternative":"AOSP / GrapheneOS","sovereignAlternative":"None","operator":"Customer (in-house UK team)","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Samsung XCover handsets run Samsung's Android build; Google controls Android roadmap and Play services.","dimsNote":"AOSP open but Google services proprietary","scores":{"D1":1,"D2":1,"D3":0,"D4":3,"D5":3,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.9545454545454546},"refs":[{"id":"R159","author":"Find a Tender Service","year":"2025","title":"Contract notice 011581-2025","url":"https://www.find-tender.service.gov.uk/Notice/011581-2025"}]},{"id":"POL-020","entity":"Policing","subUnit":"Home Office (PNC)","layerId":"PL3","layer":"Database","group":"Platform","product":"Software AG database on the PNC mainframe (Adabas family)","vendor":"Software AG","vendorCountry":"DE","vendorTier":"T2 EU/EEA","owner":"Silver Lake (Software GmbH)","ownerCountry":"US","ownershipChange":"Yes – Silver Lake (US PE) acquired Software AG, May 2023","ownershipSource":"https://www.computerweekly.com/news/366617765/Software-AG-shrinks-with-sale-of-Alfabet-and-Cumulocity","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"Adabas","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Skills","osAlternative":"PostgreSQL","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"NAO noted the Software AG database on the Fujitsu mainframe was supported only to Dec 2023 (+12 months possible).","dimsNote":"German vendor taken private by US PE; Adabas & Natural relaunched as standalone unit Jan 2025","scores":{"D1":3,"D2":2,"D3":3,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.9090909090909091},"refs":[{"id":"R452","author":"The Register","year":"2022","title":"Police national computer fujitsu","url":"https://www.theregister.com/2022/08/23/police_national_computer_fujitsu/"},{"id":"R062","author":"Computer Weekly","year":"n.d.","title":"Software ag shrinks with sale of alfabet and cumulocity","url":"https://www.computerweekly.com/news/366617765/Software-AG-shrinks-with-sale-of-Alfabet-and-Cumulocity"}]},{"id":"POL-021","entity":"Policing","subUnit":"Essex & Kent Police","layerId":"PL3","layer":"Database","group":"Platform","product":"Microsoft SQL Server (server licences under force EA)","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"SQL Server","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licensing;Schema migration","osAlternative":"PostgreSQL","sovereignAlternative":"None","operator":"Customer (in-house UK team)","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":631445,"spendPeriod":"3 years 2021/22-2023/24 (server licences)","evidence":"Confirmed","notes":"Server licence element of joint Essex/Kent EA.","dimsNote":"","scores":{"D1":3,"D2":1,"D3":3,"D4":3,"D5":3,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":1.4090909090909092},"refs":[{"id":"R124","author":"Essex","year":"2021","title":"053 21 ms enterprise agreement decision sheet","url":"https://www.essex.pfcc.police.uk/wp-content/uploads/2021/05/053-21-MS-Enterprise-Agreement-Decision-Sheet.pdf?x67448"}]},{"id":"POL-022","entity":"Policing","subUnit":"Hertfordshire OPCC","layerId":"PL4","layer":"Application framework","group":"Platform","product":"Microsoft Power Platform automation and AI agents (Microsoft-funded programme via Ingentive)","vendor":"Microsoft (Ingentive delivery)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Secondary","seats":null,"seatsBasis":"OPCC pilot group","dataFormat":"Power Platform","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"Medium","exitCostDrivers":"Low-code lock-in","osAlternative":"Open-source low-code","sovereignAlternative":"None","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":0,"spendPeriod":"Microsoft-funded, no cost to OPCC","evidence":"Confirmed","notes":"Vendor-funded adoption programme for Copilot, agents and Power Platform; roadmap envisages constabulary adoption.","dimsNote":"Vendor-funded pilots deepen platform lock-in","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":3,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0.75,"D11":0,"D12":0,"overall":0.7045454545454546},"refs":[{"id":"R255","author":"GOV.UK","year":"2026","title":"Decisions and meetings","url":"https://www.herts-pcc.gov.uk/SysSiteAssets/media/downloads/transparency/decisions-and-meetings/decisions-log/2026/ai-mobilisation-.pdf"}]},{"id":"POL-024","entity":"Policing","subUnit":"Home Office (national systems)","layerId":"W2","layer":"Identity & directory","group":"Workplace","product":"National Identity and Access Management (IAM) service for PNC/PND/NAS access","vendor":"Home Office (centrally provided)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"UK Government (Home Office)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"All forces and other law enforcement users","dataFormat":"Federated identity","formatOwner":"Standards body","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Federation rework","osAlternative":"Keycloak","sovereignAlternative":"Home Office-run (GB)","operator":"UK cleared","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":2160,"spendPeriod":"Annual IAM charge to CNPA 2025/26","evidence":"Confirmed","notes":"Home Office charges non-territorial forces for NAS (£43k), PND (£18k), PNC (£8.9k) and IAM (£2.2k); underlying IAM product not disclosed.","dimsNote":"Underlying IAM vendor not published","scores":{"D1":3,"D2":3,"D3":3,"D4":3,"D5":1.5,"D6":0,"D7":3,"D8":3,"D9":null,"D10":1.5,"D11":1.5,"D12":1.5,"overall":2.1818181818181817},"refs":[{"id":"R162","author":"Find a Tender Service","year":"2025","title":"Contract notice 014603-2025","url":"https://www.find-tender.service.gov.uk/Notice/014603-2025"}]},{"id":"POL-025","entity":"Policing","subUnit":"Essex & Kent Police","layerId":"W3","layer":"Email","group":"Workplace","product":"Exchange Online email (Microsoft 365)","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.computerweekly.com/news/366632040/Microsoft-hides-key-data-flow-information-in-plain-sight","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"SMTP/IMAP","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Mailbox migration","osAlternative":"Open-Xchange","sovereignAlternative":"None","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Covered under EA; NEP productivity services standardise on M365 email.","dimsNote":"","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.6363636363636364},"refs":[{"id":"R124","author":"Essex","year":"2021","title":"053 21 ms enterprise agreement decision sheet","url":"https://www.essex.pfcc.police.uk/wp-content/uploads/2021/05/053-21-MS-Enterprise-Agreement-Decision-Sheet.pdf?x67448"},{"id":"R057","author":"Computer Weekly","year":"2025","title":"Microsoft hides key data flow information in plain sight","url":"https://www.computerweekly.com/news/366632040/Microsoft-hides-key-data-flow-information-in-plain-sight"}]},{"id":"POL-026","entity":"Policing","subUnit":"Cross-sector","layerId":"W4","layer":"Messaging & video","group":"Workplace","product":"Microsoft Teams for collaboration and remote working","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Dominant","seats":50000,"seatsBasis":"Officers and staff using Teams (2020)","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"User retraining;Integrations","osAlternative":"Matrix/Element; Jitsi","sovereignAlternative":"Element (GB, Matrix)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Teams use scaled across forces during 2020 via NEP productivity services.","dimsNote":"UK alternative exists (Element/Matrix) but not used at scale","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.7727272727272727},"refs":[{"id":"R377","author":"Policeoracle","year":"2020","title":"More than 50 000 officers and staff using teams for remote working 104916","url":"https://www.policeoracle.com/news/best_practice/2020/Jun/03/more-than-50-000-officers-and-staff-using-teams-for-remote-working-_104916.html"}]},{"id":"POL-027","entity":"Policing","subUnit":"Cleveland Police","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"Microsoft 365 E5/E3 Enterprise Agreement","vendor":"Microsoft (Phoenix Software reseller)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Dominant","seats":3123,"seatsBasis":"2,833 M365 E5 + 290 E3 user licences","dataFormat":"OOXML","formatOwner":"Standards body","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licensing;Retraining;Integrations","osAlternative":"LibreOffice/Collabora","sovereignAlternative":"None","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":3555871,"spendPeriod":"3 years from 1 Oct 2025","evidence":"Confirmed","notes":"Up 29% on previous 3-year EA (£2.76m); Microsoft replaced ramped E5 discounts with flat 32%. Bought via WYCA framework through Phoenix. Nottinghamshire's Microsoft ESA (via Bytes) is £5.93m over 3 years from Sep 2024.","dimsNote":"Price rises imposed at renewal show vendor pricing power","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.5},"refs":[{"id":"R047","author":"Cleveland","year":"2025","title":"Drf 2025 2026 015 microsoft license pcc approved 02.09.2025","url":"https://www.cleveland.pcc.police.uk/wp-content/uploads/2025/09/DRF-2025-2026-015-Microsoft-License-PCC-Approved-02.09.2025.pdf"}]},{"id":"POL-028","entity":"Policing","subUnit":"Essex & Kent Police","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"Microsoft 365 E3 + E5 Security Enterprise Agreement (joint)","vendor":"Microsoft (Phoenix Software reseller)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"OOXML","formatOwner":"Standards body","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licensing;Retraining","osAlternative":"LibreOffice/Collabora","sovereignAlternative":"None","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":6123763,"spendPeriod":"3 years 2021/22-2023/24","evidence":"Confirmed","notes":"Co-funded 50:50 with Kent; procured via 7F regional tender; NEP blueprint mandates M365 E3 + security uplift as minimum.","dimsNote":"","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.5},"refs":[{"id":"R124","author":"Essex","year":"2021","title":"053 21 ms enterprise agreement decision sheet","url":"https://www.essex.pfcc.police.uk/wp-content/uploads/2021/05/053-21-MS-Enterprise-Agreement-Decision-Sheet.pdf?x67448"}]},{"id":"POL-029","entity":"Policing","subUnit":"Metropolitan Police","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"National Enabling Programme Office 365 adoption","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"OOXML","formatOwner":"Standards body","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licensing","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":4256000,"spendPeriod":"Per year from 2019/20 (net additional revenue)","evidence":"Confirmed","notes":"NPCC-sponsored NEP delivers national monitoring centre, IAM and productivity services; Met cost £4.256m/yr plus £0.5m capital.","dimsNote":"","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.5},"refs":[{"id":"R217","author":"GOV.UK","year":"2018","title":"National enabling programme office 365","url":"https://www.london.gov.uk/programmes-strategies/mayors-office-policing-and-crime/governance-and-decision-making/mopac-decisions-0/national-enabling-programme-office-365"}]},{"id":"POL-030","entity":"Policing","subUnit":"Police Scotland / SPA","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"Microsoft 365 rollout (cloud) for Police Scotland and SPA","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.computerweekly.com/news/366632040/Microsoft-hides-key-data-flow-information-in-plain-sight","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Dominant","seats":16430,"seatsBasis":"Police Scotland officers FTE (plus staff)","dataFormat":"OOXML","formatOwner":"Standards body","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Legal (DPA Part 3);Licensing","osAlternative":"Collabora/Nextcloud","sovereignAlternative":"None","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"SPA reported M365 rollout almost complete with pilot from July 2025 after ICO advice and DPIA update, despite Microsoft refusing (under FOI) to disclose international data flows and admitting it cannot guarantee sovereignty.","dimsNote":"Remote access to M365 data possible from ~105 countries per Microsoft Learn (CW analysis)","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.36363636363636365},"refs":[{"id":"R423","author":"Spa","year":"2025","title":"Corporate strategy delivery q1","url":"https://www.spa.police.uk/publication-library/spa-corporate-performance-report-q1-2025-26/corporate-strategy-delivery-q1"},{"id":"R057","author":"Computer Weekly","year":"2025","title":"Microsoft hides key data flow information in plain sight","url":"https://www.computerweekly.com/news/366632040/Microsoft-hides-key-data-flow-information-in-plain-sight"}]},{"id":"POL-031","entity":"Policing","subUnit":"Metropolitan Police","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Met Business Services: Oracle Fusion ERP SaaS migration, resource management and BPO","vendor":"DXC Technology (EntServ UK) with Oracle","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"DXC Technology / Oracle Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.theregister.com/2026/04/08/dxc_met_police_contract/","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Dominant","seats":46000,"seatsBasis":"Met officers and staff (approx)","dataFormat":"Oracle data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"55 interfaces;BPO transition;Data migration","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":370000000,"spendPeriod":"Up to 10 years from 2025-26 (ceiling £1bn if others use it)","evidence":"Confirmed","notes":"Award to DXC reported Apr 2026; replaces SSCL (Sopra Steria JV) contract whose value grew from £234.5m to £428.5m. DXC to run Oracle E-Business Suite then migrate to Oracle Fusion SaaS.","dimsNote":"US prime and US ERP replace UK-registered SSCL","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":0.6},"refs":[{"id":"R157","author":"Find a Tender Service","year":"2025","title":"Contract notice 001429-2025","url":"https://www.find-tender.service.gov.uk/Notice/001429-2025"},{"id":"R470","author":"The Register","year":"n.d.","title":"Dxc met police contract","url":"https://www.theregister.com/2026/04/08/dxc_met_police_contract/"}]},{"id":"POL-032","entity":"Policing","subUnit":"Northumbria Police","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Unit4 ERP (finance, HR, payroll) - police package, on-prem hosting","vendor":"Unit4","vendorCountry":"NL","vendorTier":"T2 EU/EEA","owner":"TA Associates (with Partners Group)","ownerCountry":"US","ownershipChange":"Yes – TA Associates bought majority of Unit4 from Advent International, Mar 2021 (~US$2bn)","ownershipSource":"https://www.privateequitywire.co.uk/ta-associates-acquires-unit4-deal-valued-usd2bn/","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"","dataFormat":"Unit4 data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Payroll parallel runs","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":952000,"spendPeriod":"Licences/support from Aug 2024 (excl VAT)","evidence":"Confirmed","notes":"Unit4 has a police-specific ERP package also used by Cheshire (Azure-hosted, £3m/2yrs, replacing Oracle Fusion) and South Wales.","dimsNote":"Dutch vendor owned by US private equity","scores":{"D1":3,"D2":2,"D3":3,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":1.0454545454545454},"refs":[{"id":"R152","author":"Find a Tender Service","year":"2024","title":"Contract notice 031814-2024","url":"https://www.find-tender.service.gov.uk/Notice/031814-2024"},{"id":"R381","author":"Privateequitywire","year":"n.d.","title":"Ta associates acquires unit4 deal valued usd2bn","url":"https://www.privateequitywire.co.uk/ta-associates-acquires-unit4-deal-valued-usd2bn/"}]},{"id":"POL-033","entity":"Policing","subUnit":"South Yorkshire Police (with Humberside)","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Origin HR / duties management (ex-Capita SSS)","vendor":"NEC Software Solutions UK","vendorCountry":"JP","vendorTier":"T4 Other allied/partner","owner":"NEC Corporation","ownerCountry":"JP","ownershipChange":"Yes – Capita SSS (incl. Origin) acquired by NEC Software Solutions UK, completed Jan 2022 (£62m)","ownershipSource":"https://gov.uk/government/news/sale-of-emergency-service-software-businesses-required-to-protect-uk-taxpayers","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Rostering rules;Data migration","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":253000,"spendPeriod":"Per year, contract Sep 2019 - Mar 2025","evidence":"Confirmed","notes":"Origin came to NEC with Capita SSS (completed Jan 2022); CMA required NEC to divest one duties business (CARM or Origin) - CARM went to Codan/Zetron in 2023.","dimsNote":"CMA found merger risked blue-light services 'paying over the odds'","scores":{"D1":3,"D2":1,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.0454545454545454},"refs":[{"id":"R421","author":"Southyorkshire","year":"2023","title":"ERP CRM hr payroll finance","url":"https://www.southyorkshire.police.uk/foi-ai/south-yorkshire-police/foi/june-2023/april/erp-crm-hr-payroll-finance/"},{"id":"R269","author":"GOV.UK","year":"n.d.","title":"Sale of emergency service software businesses required to protect UK taxpayers","url":"https://gov.uk/government/news/sale-of-emergency-service-software-businesses-required-to-protect-uk-taxpayers"}]},{"id":"POL-034","entity":"Policing","subUnit":"South Yorkshire Police (with Humberside)","layerId":"B2","layer":"CRM","group":"Business apps","product":"Sopra Steria Smart Contact (public contact CRM)","vendor":"Sopra Steria","vendorCountry":"FR","vendorTier":"T2 EU/EEA","owner":"Sopra Steria Group SA","ownerCountry":"FR","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Integrations with C&C","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":320000,"spendPeriod":"Collaborative total, May 2016 - May 2025","evidence":"Confirmed","notes":"Sopra Steria also supplies STORM command and control to many forces.","dimsNote":"French group with large UK operation","scores":{"D1":3,"D2":2,"D3":0,"D4":2,"D5":3,"D6":0,"D7":2,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.5},"refs":[{"id":"R421","author":"Southyorkshire","year":"2023","title":"ERP CRM hr payroll finance","url":"https://www.southyorkshire.police.uk/foi-ai/south-yorkshire-police/foi/june-2023/april/erp-crm-hr-payroll-finance/"}]},{"id":"POL-035","entity":"Policing","subUnit":"MOPAC / national (Digital Public Contact)","layerId":"B2","layer":"CRM","group":"Business apps","product":"Single Online Home and digital public contact unified services (national police web front door)","vendor":"Not named (re-procurement)","vendorCountry":"Unknown","vendorTier":"Unknown","owner":"Unknown","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"Forces using Single Online Home (most E&W forces)","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Platform re-tender","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":75000000,"spendPeriod":"Procurement launched Aug 2026","evidence":"Confirmed","notes":"MOPAC procuring on behalf of Met and wider UK policing to operate and enhance the existing SOH platform; incumbent not named.","dimsNote":"Supplier to be selected","scores":{"D1":null,"D2":null,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":null,"D8":1.5,"D9":null,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.0625},"refs":[{"id":"R429","author":"Stotles","year":"2026","title":"Metropolitan police service unified services procurement for the digital public contact programme","url":"https://www.stotles.com/explore/notices/4b3b489c-3a38-42a8-b855-e5df0c5f6a5f/metropolitan-police-service-unified-services-procurement-for-the-digital-public-contact-programme"}]},{"id":"POL-036","entity":"Policing","subUnit":"Home Office","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"National Law Enforcement Data Programme / Law Enforcement Data Service (LEDS) replacing PNC and PND","vendor":"Home Office (in-house with suppliers incl. PA Consulting)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"UK Government (Home Office)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://ukauthority.com/articles/nao-slams-home-office-record-on-national-law-enforcement-data-service/","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"Every UK force; PNC holds ~13m people, 62.6m vehicles","dataFormat":"Home Office schema","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Programme delay;Dual running PNC","osAlternative":"","sovereignAlternative":"Home Office-owned code (GB)","operator":"UK cleared","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Customer","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":1100000000,"spendPeriod":"Whole-life cost estimate (up 68%)","evidence":"Confirmed","notes":"Launched 2016 for 2020; NAO: costs up 68% to £1.1bn, PNC tech unsupported after Dec 2024, PND kept; 2025 tracker still amber. PNC costs £21m/yr, PND £13m/yr.","dimsNote":"Home Office owns the service; hosted on AWS-based Law Enforcement Cloud Platform","scores":{"D1":3,"D2":3,"D3":0,"D4":3,"D5":0,"D6":0,"D7":3,"D8":3,"D9":null,"D10":0,"D11":3,"D12":1.5,"overall":1.7727272727272727},"refs":[{"id":"R337","author":"National Audit Office","year":"2021","title":"The national law enforcement data programme","url":"https://www.nao.org.uk/wp-content/uploads/2021/09/The-National-Law-Enforcement-Data-Programme.pdf"},{"id":"R514","author":"UKAuthority","year":"n.d.","title":"Nao slams home office record on national law enforcement data service","url":"https://ukauthority.com/articles/nao-slams-home-office-record-on-national-law-enforcement-data-service/"}]},{"id":"POL-037","entity":"Policing","subUnit":"Home Office","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"LEDS 'Person Update' product - managed, engineering and support services","vendor":"PA Consulting","vendorCountry":"GB","vendorTier":"T1 UK","owner":"PA Consulting (Jacobs majority since 2021)","ownerCountry":"Mixed","ownershipChange":"Yes – Jacobs (US) completed purchase of a 65% stake in PA Consulting, Mar 2021","ownershipSource":"https://www.consulting.us/news/5639/jacobs-closes-majority-investment-in-pa-consulting","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Single-supplier knowledge","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Customer","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":31250000,"spendPeriod":"19 Sep 2025 - 31 Aug 2026 (excl VAT; £37.5m incl)","evidence":"Confirmed","notes":"Direct award under Procurement Act Sch.5 para 7 (technical incompatibility); Person product is on the critical path to decommission PNC.","dimsNote":"UK-based consultancy now majority US-owned; single-supplier dependency flagged by press","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":0,"D6":0,"D7":null,"D8":3,"D9":null,"D10":0,"D11":3,"D12":1.5,"overall":1.55},"refs":[{"id":"R174","author":"Find a Tender Service","year":"2025","title":"Contract notice 054197-2025","url":"https://www.find-tender.service.gov.uk/Notice/054197-2025"},{"id":"R076","author":"Consulting","year":"n.d.","title":"Jacobs closes majority investment in pa consulting","url":"https://www.consulting.us/news/5639/jacobs-closes-majority-investment-in-pa-consulting"}]},{"id":"POL-038","entity":"Policing","subUnit":"Home Office","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Police National Database (PND) intelligence-sharing system","vendor":"CGI","vendorCountry":"CA","vendorTier":"T3 Five Eyes (ex-UK)","owner":"CGI Inc","ownerCountry":"CA","ownershipChange":"No","ownershipSource":"https://libertyinvestigates.org.uk/articles/uk-police-forces-pursuing-major-expansion-of-facial-recognition-capabilities/","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"All forces; 252,798 retrospective facial searches in 2024","dataFormat":"Vendor/Home Office schema","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Integration","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":70000000,"spendPeriod":"CGI engagement to Mar 2026","evidence":"Reported","notes":"Built by Logica (bought by CGI 2012); being migrated to Home Office Law Enforcement Cloud Platform; successor integrator sought. PND facial searches nearly doubled 2023-24.","dimsNote":"Canadian IT services firm with large UK workforce","scores":{"D1":3,"D2":1,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":1.5,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.1818181818181819},"refs":[{"id":"R390","author":"PublicTechnology","year":"2023","title":"Home office gauges market appetite for taking on legacy police intel database","url":"https://www.publictechnology.net/2023/10/19/public-order-justice-and-rights/home-office-gauges-market-appetite-for-taking-on-legacy-police-intel-database/"},{"id":"R313","author":"Libertyinvestigates","year":"n.d.","title":"UK police forces pursuing major expansion of facial recognition capabilities","url":"https://libertyinvestigates.org.uk/articles/uk-police-forces-pursuing-major-expansion-of-facial-recognition-capabilities/"}]},{"id":"POL-039","entity":"Policing","subUnit":"West Coast Collaboration (Merseyside, Cheshire, North Wales, Dyfed-Powys)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Niche RMS records management (hosted by Merseyside)","vendor":"Niche Technology UK","vendorCountry":"CA","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Niche Technology Inc","ownerCountry":"CA","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Four forces","dataFormat":"Niche data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Custom workflows","osAlternative":"","sovereignAlternative":"Mark43 (US) / NEC Connect (JP) only alternatives","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":1155307,"spendPeriod":"1 year from Apr 2025 (incl VAT)","evidence":"Confirmed","notes":"Direct award: Niche owns the software and is sole source of licence/support. Niche is used by many forces incl. PSNI and BTP.","dimsNote":"Canadian (Winnipeg) owner; UK subsidiary in Stockton-on-Tees; no acquisition found; privately held","scores":{"D1":3,"D2":1,"D3":3,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":1.1818181818181819},"refs":[{"id":"R161","author":"Find a Tender Service","year":"2025","title":"Contract notice 014061-2025","url":"https://www.find-tender.service.gov.uk/Notice/014061-2025"}]},{"id":"POL-040","entity":"Policing","subUnit":"PSNI","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Niche RMS force records management","vendor":"Niche Technology","vendorCountry":"CA","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Niche Technology Inc","ownerCountry":"CA","ownershipChange":"No","ownershipSource":"https://policeprofessional.com/?p=92700","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":6245,"seatsBasis":"PSNI officers (Dec 2025)","dataFormat":"Niche data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":9000000,"spendPeriod":"Original contract signed Mar 2006","evidence":"Confirmed","notes":"PSNI FOI (Aug 2025): 'we are a NicheRMS force'. BTP also confirmed Niche as its force RMS (FOI 2025). Original 2006 contract £9m (Police Professional).","dimsNote":"","scores":{"D1":3,"D2":1,"D3":3,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":1.1818181818181819},"refs":[{"id":"R384","author":"Psni","year":"2025","title":"Foi disclosure log","url":"https://www.psni.police.uk/foi-disclosure-log/it-systems"},{"id":"R378","author":"Policeprofessional","year":"n.d.","title":"[Title to be confirmed]","url":"https://policeprofessional.com/?p=92700"}]},{"id":"POL-041","entity":"Policing","subUnit":"Metropolitan Police","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"CONNECT integrated records management system","vendor":"NEC Software Solutions UK","vendorCountry":"JP","vendorTier":"T4 Other allied/partner","owner":"NEC Corporation","ownerCountry":"JP","ownershipChange":"No","ownershipSource":"https://policeprofessional.com/?p=64833","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Met users; 15 other forces use off-the-shelf Connect","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Heavy customisation;Data migration","osAlternative":"Mark43 / Niche","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":214000000,"spendPeriod":"Contract May 2018 (£150m cap); £134.4m spent + £80m projected","evidence":"Reported","notes":"About £64m over original budget; three delays (19 + 14 months); went live Nov 2022; 25,768 live incidents logged.","dimsNote":"Japanese owner of the dominant UK police software house (ex-Northgate); NEC bought Northgate Public Services from Cinven Jan 2018 for £475m - before 2020 window","scores":{"D1":3,"D2":1,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.0454545454545454},"refs":[{"id":"R059","author":"Computer Weekly","year":"n.d.","title":"Met police data platform 64m over budget","url":"https://www.computerweekly.com/news/366549272/Met-police-data-platform-64m-over-budget"},{"id":"R379","author":"Policeprofessional","year":"n.d.","title":"[Title to be confirmed]","url":"https://policeprofessional.com/?p=64833"}]},{"id":"POL-042","entity":"Policing","subUnit":"Athena consortium (9 forces)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Athena (NEC Connect core policing platform) as managed service","vendor":"NEC Software Solutions UK","vendorCountry":"JP","vendorTier":"T4 Other allied/partner","owner":"NEC Corporation","ownerCountry":"JP","ownershipChange":"No","ownershipSource":"https://policeprofessional.com/?p=64833","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Bedfordshire, Herts, Cambs, Essex, Kent, Norfolk, Suffolk, Warwickshire, West Mercia","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Shared configuration;Data migration","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"Extended to 2029","evidence":"Reported","notes":"7F forces have now chosen Mark43 to replace Athena (contract runs to Apr 2029).","dimsNote":"","scores":{"D1":3,"D2":1,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.0454545454545454},"refs":[{"id":"R499","author":"UKAuthority","year":"2021","title":"Police forces extend athena contract with nec","url":"https://ukauthority.com/articles/police-forces-extend-athena-contract-with-nec"},{"id":"R379","author":"Policeprofessional","year":"n.d.","title":"[Title to be confirmed]","url":"https://policeprofessional.com/?p=64833"}]},{"id":"POL-043","entity":"Policing","subUnit":"7F forces + framework for all UK forces","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Mark43 RMS Gen 2 single-supplier framework (replacing Athena)","vendor":"Mark43","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Mark43 Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.techmarketview.com/ukhotviews/archive/2026/09/10/ukhotviewsextra-mark43-set-for-significant-uk-policing-expansion","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"Lot 1: 7 forces; Lot 2 open to all other UK forces","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;SaaS lock-in","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":450000000,"spendPeriod":"4-year framework; call-offs up to 10+5 years (Lot1 £100m, Lot2 £350m)","evidence":"Confirmed","notes":"Award to Mark43 UK published 8 Sep 2026 (signature expected 16 Oct 2026); framework lets any UK force call off, potentially consolidating RMS on a New York-headquartered SaaS.","dimsNote":"US SaaS; hosting location for UK data not published","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.45},"refs":[{"id":"R177","author":"Find a Tender Service","year":"2025","title":"Contract notice 061053-2025","url":"https://www.find-tender.service.gov.uk/Notice/061053-2025"},{"id":"R434","author":"Techmarketview","year":"n.d.","title":"Ukhotviewsextra mark43 set for significant UK policing expansion","url":"https://www.techmarketview.com/ukhotviews/archive/2026/09/10/ukhotviewsextra-mark43-set-for-significant-uk-policing-expansion"}]},{"id":"POL-044","entity":"Policing","subUnit":"Greater Manchester Police","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Mark43 cloud-native RMS (replacing iOPS/PoliceWorks)","vendor":"Mark43","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Mark43 Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"GMP officers and staff","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":19200000,"spendPeriod":"3 years + 1 (G-Cloud 14 call-off)","evidence":"Reported","notes":"Go-live expected spring 2027; Cumbria was Mark43's first UK customer (2022).","dimsNote":"","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.45},"refs":[{"id":"R507","author":"UKAuthority","year":"2025","title":"Greater manchester police to implement new records management system","url":"https://www.ukauthority.com/articles/greater-manchester-police-to-implement-new-records-management-system"}]},{"id":"POL-045","entity":"Policing","subUnit":"Police Scotland","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Core Operational Solutions (COS) on UNIFI police records platform","vendor":"NEC Software Solutions UK (ex-Capita)","vendorCountry":"JP","vendorTier":"T4 Other allied/partner","owner":"NEC Corporation","ownerCountry":"JP","ownershipChange":"Yes – UNIFI moved from Capita to NEC Software Solutions UK with Capita SSS, completed Jan 2022","ownershipSource":"https://gov.uk/government/news/sale-of-emergency-service-software-businesses-required-to-protect-uk-taxpayers","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":16430,"seatsBasis":"Police Scotland officers FTE","dataFormat":"Vendor data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":13200000,"spendPeriod":"10 years from 2019","evidence":"Reported","notes":"COS (crime, case, missing persons, productions) rolled out division by division 2020-23 on UNIFI.","dimsNote":"","scores":{"D1":3,"D2":1,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.0454545454545454},"refs":[{"id":"R447","author":"The Register","year":"2019","title":"Capita police scotland","url":"https://www.theregister.com/2019/04/04/capita_police_scotland/"},{"id":"R269","author":"GOV.UK","year":"n.d.","title":"Sale of emergency service software businesses required to protect UK taxpayers","url":"https://gov.uk/government/news/sale-of-emergency-service-software-businesses-required-to-protect-uk-taxpayers"}]},{"id":"POL-046","entity":"Policing","subUnit":"Derbyshire Constabulary","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Saab SAFE command, control and communication system","vendor":"Saab","vendorCountry":"SE","vendorTier":"T2 EU/EEA","owner":"Saab AB","ownerCountry":"SE","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"Force control room","dataFormat":"Vendor","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Control-room cutover","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":18900000,"spendPeriod":"Contract to June 2035","evidence":"Reported","notes":"Saab SAFE operational in ~30 control rooms across UK, Europe and US.","dimsNote":"Swedish defence group","scores":{"D1":3,"D2":2,"D3":3,"D4":2,"D5":3,"D6":0,"D7":2,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":1.5},"refs":[{"id":"R500","author":"UKAuthority","year":"2023","title":"Derbyshire police to use saab command and control system","url":"https://ukauthority.com/articles/derbyshire-police-to-use-saab-command-and-control-system"}]},{"id":"POL-047","entity":"Policing","subUnit":"Metropolitan Police","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"HxGN OnCall command and control (Dispatch, Analytics, Planning, Mobile) - 10-year programme","vendor":"Hexagon / Octave (Leidos UK lead)","vendorCountry":"SE","vendorTier":"T2 EU/EEA","owner":"Octave (spun out of Hexagon AB)","ownerCountry":"SE","ownershipChange":"Yes – Hexagon's Safety, Infrastructure & Geospatial division spun off as independent listed Octave, May 2026","ownershipSource":"https://hexagon.com/company/newsroom/press-releases/2025/octave-unveiledhexagon-reveals-name-for-potential-2026-company-spin-off","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"Met control rooms (London ~8m people)","dataFormat":"Vendor","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Control-room cutover","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Leidos UK (US-owned) leads delivery with Hexagon, Chaucer, Frequentis; described as cloud-based.","dimsNote":"Ownership moved to newly listed Octave in 2026","scores":{"D1":null,"D2":2,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":2,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.65},"refs":[{"id":"R283","author":"Hexagon","year":"2020","title":"London metropolitan police upgrade command control system","url":"https://hexagon.com/company/newsroom/press-releases/2020/london-metropolitan-police-upgrade-command-control-system"},{"id":"R284","author":"Hexagon","year":"n.d.","title":"Octave unveiledhexagon reveals name for potential 2026 company spin off","url":"https://hexagon.com/company/newsroom/press-releases/2025/octave-unveiledhexagon-reveals-name-for-potential-2026-company-spin-off"}]},{"id":"POL-048","entity":"Policing","subUnit":"Yorkshire & Humber forces","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"STORM command and control","vendor":"Sopra Steria","vendorCountry":"FR","vendorTier":"T2 EU/EEA","owner":"Sopra Steria Group SA","ownerCountry":"FR","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"West, South, North Yorkshire and Humberside (also Leicestershire, Northamptonshire)","dataFormat":"Vendor","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Control-room cutover","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"STORM is one of the most widely used UK police C&C systems; Leicestershire and Northamptonshire PCC decisions also cover STORM.","dimsNote":"","scores":{"D1":3,"D2":2,"D3":3,"D4":2,"D5":3,"D6":0,"D7":2,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.6363636363636365},"refs":[{"id":"R396","author":"PublicTechnology","year":"n.d.","title":"[Title to be confirmed]","url":"https://www.publictechnology.net/?p=1632"}]},{"id":"POL-049","entity":"Policing","subUnit":"PSNI / South Wales Police","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"ControlWorks command and control / CRM (ex-Capita)","vendor":"NEC Software Solutions UK (ex-Capita)","vendorCountry":"JP","vendorTier":"T4 Other allied/partner","owner":"NEC Corporation","ownerCountry":"JP","ownershipChange":"Yes – Capita SSS acquired by NEC Software Solutions UK, completed Jan 2022","ownershipSource":"https://www.capita.com/news/capita-agrees-sell-secure-solutions-and-services","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"PSNI and South Wales control rooms","dataFormat":"Vendor","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Control-room cutover","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"ControlWorks was part of Capita SSS (blue-light software, 150+ customers) sold to NEC for £62m.","dimsNote":"","scores":{"D1":3,"D2":1,"D3":3,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.3181818181818181},"refs":[{"id":"R494","author":"UKAuthority","year":"2018","title":"Psni chooses capita for command and control","url":"https://www.ukauthority.com/articles/psni-chooses-capita-for-command-and-control/"},{"id":"R034","author":"Capita","year":"n.d.","title":"Capita agrees sell secure solutions and services","url":"https://www.capita.com/news/capita-agrees-sell-secure-solutions-and-services"}]},{"id":"POL-050","entity":"Policing","subUnit":"Cross-sector (80 police control rooms)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Cortex ICCS (integrated communications control) and Aspire/CallTouch/Stream","vendor":"Zetron (Codan)","vendorCountry":"AU","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Codan Ltd","ownerCountry":"AU","ownershipChange":"Yes – NEC's ICCS (APD Cortex etc.) and duties businesses sold to Codan (AU) on 1 Aug 2023 under CMA undertakings","ownershipSource":"https://assets.publishing.service.gov.uk/media/64d0bcb7e5491a00134b5905/Case_closure_summary__.pdf","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"~80 police control rooms; 30-40% of UK control-room market","dataFormat":"Vendor","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Airwave/ESN integration","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Sold by NEC for ~US$15m after CMA ordered divestment of NEC's ICCS business; links all those control rooms to Airwave.","dimsNote":"UK-built control-room software now Australian-owned","scores":{"D1":3,"D2":1,"D3":3,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":1.1818181818181819},"refs":[{"id":"R524","author":"Urgentcomm","year":"2023","title":"Zetron boosts UK presence with purchase of eagle newco unit from nec","url":"https://urgentcomm.com/network-tech/zetron-boosts-uk-presence-with-purchase-of-eagle-newco-unit-from-nec"},{"id":"R263","author":"GOV.UK","year":"n.d.","title":"Case closure summary","url":"https://assets.publishing.service.gov.uk/media/64d0bcb7e5491a00134b5905/Case_closure_summary__.pdf"}]},{"id":"POL-051","entity":"Policing","subUnit":"Metropolitan Police","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Axon body-worn video and Evidence.com digital evidence management","vendor":"Axon","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Axon Enterprise Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Dominant","seats":22000,"seatsBasis":"19,000 officer cameras + 3,000 firearms flex cameras (original contract)","dataFormat":"Vendor evidence formats","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Evidence migration;Chain of custody;Device fleet","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"High","ukCapability":"None","ukValueCapture":"Low","spend":49000000,"spendPeriod":"10 years from Aug 2023 (breaks yrs 4 and 7)","evidence":"Confirmed","notes":"Direct award via a reseller on the HealthTrust Europe framework; evidence held on Axon's cloud Evidence.com. City of London Police's 2025 DEMS market engagement names Axon (evidence.com, DIRS) and Motorola (VideoManager, ICAV) as incumbents - a US duopoly.","dimsNote":"US vendor; cloud evidence under US jurisdiction","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":0,"D10":0,"D11":0,"D12":0,"overall":0.4090909090909091},"refs":[{"id":"R227","author":"GOV.UK","year":"2023","title":"Pcd 1467 body worn video bwv digital evidence contract renewal","url":"https://www.london.gov.uk/pcd-1467-body-worn-video-bwv-digital-evidence-contract-renewal"}]},{"id":"POL-052","entity":"Policing","subUnit":"Scottish Government / Police Scotland","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Digital Evidence Sharing Capability (DESC) on Axon Evidence hosted in Microsoft Azure","vendor":"Axon (Microsoft Azure)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Axon Enterprise Inc / Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://computerweekly.com/news/366589095/Police-Scotland-did-not-consult-ICO-about-high-risk-cloud-system","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Mixed","prevalence":"Dominant","seats":null,"seatsBasis":"Police Scotland, COPFS, Scottish Courts","dataFormat":"Vendor evidence formats","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Evidence migration;Legal","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":33000000,"spendPeriod":"Government investment in DESC (contract originally £10m, 2021)","evidence":"Reported","notes":"DPIA left high risks unmitigated: Axon sub-processors not bound, US CLOUD Act, Axon holds encryption keys; watchdog said Azure use 'would not be legal'; ICO not formally consulted; national rollout targeted autumn 2025.","dimsNote":"Axon cannot meet contractual sovereignty clauses; Microsoft cannot guarantee sovereignty","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.36363636363636365},"refs":[{"id":"R061","author":"Computer Weekly","year":"n.d.","title":"Scottish government to roll out digital evidence sharing","url":"https://www.computerweekly.com/news/366599560/Scottish-government-to-roll-out-digital-evidence-sharing"},{"id":"R055","author":"Computer Weekly","year":"2024","title":"Police scotland did not consult ico about high risk cloud system","url":"https://computerweekly.com/news/366589095/Police-Scotland-did-not-consult-ICO-about-high-risk-cloud-system"}]},{"id":"POL-053","entity":"Policing","subUnit":"Leicestershire Police","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Cellebrite digital forensics (Digital Collector, Responder, Inseyets)","vendor":"Cellebrite","vendorCountry":"IL","vendorTier":"T4 Other allied/partner","owner":"Cellebrite DI Ltd (Nasdaq: CLBT; Sun Corp major holder)","ownerCountry":"IL","ownershipChange":"No","ownershipSource":"https://investors.cellebrite.com/news-releases/news-release-details/cellebrite-completes-business-combination-twc-tech-holdings-ii","licence":"Proprietary","governance":"Single vendor","hosting":"Endpoint","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"Cellebrite UFDR","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-training;Accreditation (ISO 17025)","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"None","ukValueCapture":"Low","spend":273907,"spendPeriod":"1 Apr 2025 - 31 Mar 2026 (excl VAT)","evidence":"Confirmed","notes":"Typical force subscription; Police Scotland bought 41 Cellebrite cyber kiosks for £370k (2018).","dimsNote":"Israeli vendor; dominant in mobile extraction; Ownership: Listed on Nasdaq via SPAC merger (Aug 2021); no change of control","scores":{"D1":3,"D2":1,"D3":3,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":1.5,"D11":0,"D12":0,"overall":1.125},"refs":[{"id":"R163","author":"Find a Tender Service","year":"2025","title":"Contract notice 016210-2025","url":"https://www.find-tender.service.gov.uk/Notice/016210-2025"},{"id":"R299","author":"Investors","year":"n.d.","title":"Cellebrite completes business combination twc tech holdings ii","url":"https://investors.cellebrite.com/news-releases/news-release-details/cellebrite-completes-business-combination-twc-tech-holdings-ii"}]},{"id":"POL-054","entity":"Policing","subUnit":"Surrey Police / BTP","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"GrayKey mobile device access (Magnet Forensics)","vendor":"Magnet Forensics","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Thoma Bravo","ownerCountry":"US","ownershipChange":"Yes – Thoma Bravo (US PE) acquired Canadian Magnet Forensics, closed Apr 2023 (~CA$1.67bn incl rollover), to combine with Grayshift","ownershipSource":"https://www.thomabravo.com/press-releases/magnet-forensics-announces-closing-of-plan-of-arrangement-with-thoma-bravo","licence":"Proprietary","governance":"Single vendor","hosting":"Endpoint","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"Vendor","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-training","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"None","ukValueCapture":"Low","spend":108768,"spendPeriod":"Licence, Apr 2025 - Apr 2026 (+3x12m options, incl VAT)","evidence":"Confirmed","notes":"BTP also bought GrayKey Premier (£45,320, 2025-26). GrayKey came from Grayshift; Thoma Bravo combined it with Magnet after taking Magnet private.","dimsNote":"Canadian forensics firm now US PE-owned; supplier notices now show Atlanta entity","scores":{"D1":3,"D2":1,"D3":3,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":1.5,"D11":0,"D12":0,"overall":1.125},"refs":[{"id":"R185","author":"Find a Tender Service","year":"2026","title":"Contract notice 000236-2026","url":"https://www.find-tender.service.gov.uk/Notice/000236-2026"},{"id":"R481","author":"Thomabravo","year":"n.d.","title":"Magnet forensics announces closing of plan of arrangement with thoma bravo","url":"https://www.thomabravo.com/press-releases/magnet-forensics-announces-closing-of-plan-of-arrangement-with-thoma-bravo"}]},{"id":"POL-055","entity":"Policing","subUnit":"Humberside Police / UK LEA","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"MSAB XRY mobile forensics (kiosk, XAMN, XEC)","vendor":"MSAB","vendorCountry":"SE","vendorTier":"T2 EU/EEA","owner":"Micro Systemation AB (MSAB)","ownerCountry":"SE","ownershipChange":"No","ownershipSource":"https://investors.msab.com/investors/newsroom/press-releases/2025/msab-secures-major-contract-worth-sek-11-2-million-with-uk-law-enforcement-agency/","licence":"Proprietary","governance":"Single vendor","hosting":"Endpoint","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"","dataFormat":"XRY formats","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Low","exitCostDrivers":"Re-training","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"Low","ukCapability":"None","ukValueCapture":"Low","spend":3460,"spendPeriod":"1 year from Nov 2025 (excl VAT)","evidence":"Confirmed","notes":"MSAB separately announced a SEK 11.2m one-year licence renewal with an unnamed UK law enforcement agency (Oct 2025).","dimsNote":"Listed Swedish vendor; European alternative to Israeli/US tools","scores":{"D1":3,"D2":2,"D3":3,"D4":1,"D5":3,"D6":0,"D7":2,"D8":0,"D9":3,"D10":2.25,"D11":0,"D12":0,"overall":1.6041666666666667},"refs":[{"id":"R187","author":"Find a Tender Service","year":"2026","title":"Contract notice 006774-2026","url":"https://www.find-tender.service.gov.uk/Notice/006774-2026"},{"id":"R300","author":"Investors","year":"n.d.","title":"Msab secures major contract worth sek 11 2 million with UK law enforcement agency","url":"https://investors.msab.com/investors/newsroom/press-releases/2025/msab-secures-major-contract-worth-sek-11-2-million-with-uk-law-enforcement-agency/"}]},{"id":"POL-056","entity":"Policing","subUnit":"Home Office Biometrics","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Biometrics matcher platform (face, fingerprint, DNA) for police and borders","vendor":"IBM","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"IBM Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"Police (bail, vetting, victim ID) and Migration & Borders","dataFormat":"Biometric standards (ANSI/NIST-ITL)","formatOwner":"Standards body","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Re-enrolment;Integration","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":65600000,"spendPeriod":"5 years + up to 3","evidence":"Reported","notes":"Integrates IDENT1 fingerprint system and IABS.","dimsNote":"","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.45},"refs":[{"id":"R502","author":"UKAuthority","year":"2023","title":"Home office picks ibm for biometrics matcher","url":"https://ukauthority.com/articles/home-office-picks-ibm-for-biometrics-matcher"}]},{"id":"POL-057","entity":"Policing","subUnit":"Home Office Biometrics","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"IDENT1 and IABS strategic central and bureau platforms (converge and run, move to public cloud)","vendor":"Leidos","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Leidos Holdings Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"All forces' fingerprint bureaux","dataFormat":"ANSI/NIST-ITL","formatOwner":"Standards body","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Integration","osAlternative":"","sovereignAlternative":"","operator":"UK cleared","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":308000000,"spendPeriod":"10 years from 2019 (up to)","evidence":"Reported","notes":"Plan included moving systems to a secure public cloud platform.","dimsNote":"US defence contractor runs national fingerprint system","scores":{"D1":null,"D2":1,"D3":0,"D4":3,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.65},"refs":[{"id":"R496","author":"UKAuthority","year":"2019","title":"Home office signs leidos for biometrics platform","url":"https://www.ukauthority.com/articles/home-office-signs-leidos-for-biometrics-platform/"}]},{"id":"POL-058","entity":"Policing","subUnit":"Cross-sector (Met, South Wales and others)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"NEC NeoFace live and retrospective facial recognition","vendor":"NEC","vendorCountry":"JP","vendorTier":"T4 Other allied/partner","owner":"NEC Corporation","ownerCountry":"JP","ownershipChange":"No","ownershipSource":"https://www.theregister.com/2026/01/28/tech_in_policing_white_paper/","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"10 national LFR vans across 7 forces (2025); 50 planned","dataFormat":"Vendor templates","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Watchlist/template rebuild","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"NEC says NeoFace (NPL-tested) underpins the Home Office-funded national LFR vans; 2026 white paper adds 40 vans, £11.6m LFR and £26m national FR system.","dimsNote":"Algorithm IP Japanese","scores":{"D1":3,"D2":1,"D3":3,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":1.5,"D11":0,"D12":0,"overall":1.2083333333333333},"refs":[{"id":"R341","author":"Necsws","year":"n.d.","title":"[Title to be confirmed]","url":"https://www.necsws.com/yrsh"},{"id":"R467","author":"The Register","year":"2026","title":"Tech in policing white paper","url":"https://www.theregister.com/2026/01/28/tech_in_policing_white_paper/"}]},{"id":"POL-059","entity":"Policing","subUnit":"Home Office","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"National ANPR Service (NAS) - central ANPR data hub","vendor":"Home Office (BAE Systems delivery partner)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"UK Government (Home Office) / BAE Systems","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.find-tender.service.gov.uk/Notice/014603-2025","licence":"Proprietary","governance":"Single vendor","hosting":"UK cloud","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"All forces; ~11,000 cameras; >50m reads/day","dataFormat":"Home Office schema","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"Medium","exitCostDrivers":"Data migration","osAlternative":"","sovereignAlternative":"Home Office-owned (GB)","operator":"UK cleared","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Live Feb 2019 replacing 44 disparate systems; Home Office charges e.g. CNPA £43k/yr for NAS access; BAE worked with 36 force IT departments and five management-service vendors; hosted by Redcentric (see I1).","dimsNote":"UK-owned service and delivery partner","scores":{"D1":3,"D2":3,"D3":3,"D4":3,"D5":1.5,"D6":0,"D7":3,"D8":3,"D9":null,"D10":0.75,"D11":3,"D12":3,"overall":2.3863636363636362},"refs":[{"id":"R014","author":"Baesystems","year":"2019","title":"Transforming nationwide automatic number plate recognition anpr","url":"https://www.baesystems.com/en/story/transforming-nationwide-automatic-number-plate-recognition-anpr"},{"id":"R162","author":"Find a Tender Service","year":"2025","title":"Contract notice 014603-2025","url":"https://www.find-tender.service.gov.uk/Notice/014603-2025"}]},{"id":"POL-060","entity":"Policing","subUnit":"Home Office / 43 forces","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"National Firearms Licensing Management System (NFLMS) replacement","vendor":"Palantir Technologies","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Palantir Technologies Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"All 43 E&W forces","dataFormat":"Palantir Foundry ontology","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Ontology lock-in;Data migration","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":7500000,"spendPeriod":"Sep 2026 - Sep 2031, extendable to 2036 (excl VAT)","evidence":"Reported","notes":"Competitive flexible procedure; puts a core national licensing record on Palantir for up to 10 years.","dimsNote":"US defence/intelligence contractor; CLOUD Act exposure","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.45},"refs":[{"id":"R510","author":"UKAuthority","year":"2026","title":"Palantir win national firearms procurement","url":"https://www.ukauthority.com/articles/palantir-win-national-firearms-procurement"}]},{"id":"POL-061","entity":"Policing","subUnit":"EMSOU / ROCU East Midlands; Bedfordshire (Nectar)","layerId":"B4","layer":"Data & analytics","group":"Business apps","product":"Palantir Foundry advanced data platform pilot for serious and organised crime","vendor":"Palantir Technologies","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Palantir Technologies Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.cityam.com/?p=2459624","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Secondary","seats":null,"seatsBasis":"Five East Midlands forces; Nectar pilot with Bedfordshire, Herts, Cambs (data from 9 forces)","dataFormat":"Palantir ontology","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Ontology lock-in","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"EMSOU ended its two-year trial in Sep 2026 after Home Office funding stopped (City AM); eastern pilot continues. Liberty Investigates reported data on sensitive categories and an ambition to apply it nationally.","dimsNote":"","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.45},"refs":[{"id":"R404","author":"Rocu","year":"2025","title":"Police pilot advanced data platform to tackle serious and organised crime","url":"https://www.rocu.police.uk/news/2025/july/police-pilot-advanced-data-platform-to-tackle-serious-and-organised-crime/"},{"id":"R040","author":"Cityam","year":"n.d.","title":"[Title to be confirmed]","url":"https://www.cityam.com/?p=2459624"}]},{"id":"POL-062","entity":"Policing","subUnit":"Metropolitan Police","layerId":"B4","layer":"Data & analytics","group":"Business apps","product":"Palantir Unified Operational Analytics (UOA) platform - blocked by MOPAC","vendor":"Palantir Technologies","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Palantir Technologies Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Niche","seats":null,"seatsBasis":"","dataFormat":"Palantir ontology","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":25300000,"spendPeriod":"2026/27 (+£24.8m optional year) - not approved","evidence":"Reported","notes":"MOPAC refused approval 20 May 2026 (single supplier engaged, no procurement strategy, VfM); Palantir issued pre-action letter. Met budget assumed UOA would offset 500 post reductions.","dimsNote":"","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.45},"refs":[{"id":"R319","author":"Localgovernmentlawyer","year":"2026","title":"100772 palantir moves to sue mayor of london over blocked met AI contract while health secretary reviews NHS deal","url":"https://www.localgovernmentlawyer.co.uk/procurement-and-contracts/402-procurement-news/100772-palantir-moves-to-sue-mayor-of-london-over-blocked-met-ai-contract-while-health-secretary-reviews-nhs-deal"}]},{"id":"POL-063","entity":"Policing","subUnit":"Northamptonshire Police","layerId":"B4","layer":"Data & analytics","group":"Business apps","product":"Qlik business intelligence (support and maintenance)","vendor":"Qlik","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Thoma Bravo (Qlik)","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"","dataFormat":"QVD","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Dashboard rebuild","osAlternative":"Apache Superset","sovereignAlternative":"None","operator":"Vendor-global","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":217651,"spendPeriod":"28 Feb 2025 - 27 Feb 2028 (excl VAT)","evidence":"Confirmed","notes":"Qlik also used by other forces (e.g. Avon & Somerset).","dimsNote":"US PE-owned since 2016","scores":{"D1":3,"D2":1,"D3":3,"D4":1,"D5":3,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":1.2272727272727273},"refs":[{"id":"R353","author":"Northantspfcc","year":"2024","title":"Decision record 497 qlik support and maintenance with qlik tech UK","url":"https://northantspfcc.org.uk/wp-content/uploads/2024/12/Decision-Record-497-Qlik-Support-and-Maintenance-with-Qlik-Tech-UK.pdf"}]},{"id":"POL-064","entity":"Policing","subUnit":"Home Office (Police Reform)","layerId":"B4","layer":"Data & analytics","group":"Business apps","product":"Datalynx analytics test using proprietary police data system","vendor":"Datalynx","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Datalynx Ltd","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.publictechnology.net/2026/02/02/public-order-justice-and-rights/home-office-plans-centralised-police-tech-digital-and-ai-functions/","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Niche","seats":null,"seatsBasis":"","dataFormat":"Vendor","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Low","exitCostDrivers":"","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":625000,"spendPeriod":"Feb - Sep 2026 (excl VAT; £750k incl)","evidence":"Confirmed","notes":"Feeds the white paper's planned National Data Integration and Exploitation Service.","dimsNote":"UK SME","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":3,"D6":0,"D7":3,"D8":0,"D9":null,"D10":2.25,"D11":3,"D12":3,"overall":2.022727272727273},"refs":[{"id":"R188","author":"Find a Tender Service","year":"2026","title":"Contract notice 006860-2026","url":"https://www.find-tender.service.gov.uk/Notice/006860-2026"},{"id":"R397","author":"PublicTechnology","year":"n.d.","title":"Home office plans centralised police tech digital and AI functions","url":"https://www.publictechnology.net/2026/02/02/public-order-justice-and-rights/home-office-plans-centralised-police-tech-digital-and-ai-functions/"}]},{"id":"POL-065","entity":"Policing","subUnit":"National Crime Agency","layerId":"B4","layer":"Data & analytics","group":"Business apps","product":"National Data Exploitation Capability (NDEC)","vendor":"Not named","vendorCountry":"Unknown","vendorTier":"Unknown","owner":"Unknown","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Legacy systems","osAlternative":"","sovereignAlternative":"","operator":"UK cleared","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":92000000,"spendPeriod":"Final programme cost (2018-23)","evidence":"Reported","notes":"HMICFRS: NCA IT largely outdated; 10-year IT strategy phase 1 cost £250m, phase 2 est. £350-500m; data from nine ROCUs missing from NDEC catalogue.","dimsNote":"Suppliers not named","scores":{"D1":3,"D2":null,"D3":0,"D4":3,"D5":0,"D6":0,"D7":null,"D8":1.5,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.1666666666666667},"refs":[{"id":"R461","author":"The Register","year":"2025","title":"Nca legacy tech","url":"https://www.theregister.com/2025/09/09/nca_legacy_tech/"}]},{"id":"POL-066","entity":"Policing","subUnit":"21+ England & Wales forces","layerId":"A1","layer":"Foundation models","group":"AI","product":"Microsoft Copilot (OpenAI GPT models) for staff and investigations","vendor":"Microsoft (OpenAI models)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp / OpenAI","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Primary","seats":null,"seatsBasis":"At least 21 forces using Copilot (Sky News)","dataFormat":"Prompts/outputs in M365","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Workflow embedding","osAlternative":"Open-weight models self-hosted","sovereignAlternative":"None","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"West Midlands Police turned off Copilot after it fabricated a match used in the Maccabi Tel Aviv fan ban intelligence; Scotland and NI do not allow Copilot; some forces used consumer version.","dimsNote":"Model versions changed by vendor without force control","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.6363636363636364},"refs":[{"id":"R402","author":"Resultsense","year":"2026","title":"2026 02 24 police still using AI copilot despite hallucination scandal","url":"https://www.resultsense.com/news/2026-02-24-police-still-using-ai-copilot-despite-hallucination-scandal/"}]},{"id":"POL-067","entity":"Policing","subUnit":"Home Office / National Police Service","layerId":"A2","layer":"AI platform & hosting","group":"AI","product":"Police.AI - National Centre for AI in Policing","vendor":"To be determined","vendorCountry":"Unknown","vendorTier":"Unknown","owner":"UK Government (Home Office)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.publictechnology.net/2026/02/02/public-order-justice-and-rights/home-office-plans-centralised-police-tech-digital-and-ai-functions/","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"All E&W forces","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":115000000,"spendPeriod":"3 years from spring 2026 (funding)","evidence":"Reported","notes":"Will publish an AI registry; first focus CCTV analysis, case files, crime recording; builds on TOEP transcription tool (33,000 hours saved).","dimsNote":"Supplier choices not yet published","scores":{"D1":null,"D2":null,"D3":null,"D4":2,"D5":1.5,"D6":null,"D7":3,"D8":3,"D9":null,"D10":1.5,"D11":1.5,"D12":1.5,"overall":2},"refs":[{"id":"R467","author":"The Register","year":"2026","title":"Tech in policing white paper","url":"https://www.theregister.com/2026/01/28/tech_in_policing_white_paper/"},{"id":"R397","author":"PublicTechnology","year":"n.d.","title":"Home office plans centralised police tech digital and AI functions","url":"https://www.publictechnology.net/2026/02/02/public-order-justice-and-rights/home-office-plans-centralised-police-tech-digital-and-ai-functions/"}]},{"id":"POL-068","entity":"Policing","subUnit":"Essex & Kent Police","layerId":"SE1","layer":"Endpoint protection","group":"Security","product":"Microsoft Defender (M365 E5 Security) endpoint protection","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Agent replacement","osAlternative":"Wazuh","sovereignAlternative":"None","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"NEP blueprint mandates M365 E3 with E5 security uplift; Cleveland buys full E5.","dimsNote":"","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.6363636363636364},"refs":[{"id":"R124","author":"Essex","year":"2021","title":"053 21 ms enterprise agreement decision sheet","url":"https://www.essex.pfcc.police.uk/wp-content/uploads/2021/05/053-21-MS-Enterprise-Agreement-Decision-Sheet.pdf?x67448"}]},{"id":"POL-069","entity":"Policing","subUnit":"Police Digital Service (all forces)","layerId":"SE2","layer":"SIEM / SOC","group":"Security","product":"Policing National Management Centre (NMC) - national cyber monitoring/SOC","vendor":"Police Digital Service (BT SOC at launch)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Police Digital Service (company owned by policing) / BT","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.ukauthority.com/articles/police-chiefs-award-national-enabling-programmes-contracts-to-deloitte-and-bt/","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"Forces subscribing (e.g. Staffordshire)","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Log pipeline rebuild","osAlternative":"","sovereignAlternative":"","operator":"UK cleared","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":298873,"spendPeriod":"Staffordshire subscription Mar 2025 - Mar 2026","evidence":"Confirmed","notes":"NEP's BT-run cyber centre in an existing BT SOC; now delivered via PDS and charged to forces.","dimsNote":"UK-run national SOC; underlying SIEM tools not published","scores":{"D1":3,"D2":3,"D3":3,"D4":3,"D5":3,"D6":0,"D7":3,"D8":1.5,"D9":null,"D10":1.5,"D11":3,"D12":3,"overall":2.4545454545454546},"refs":[{"id":"R085","author":"Contracts Finder","year":"2025","title":"Contract notice 6b0cbb49-1c56-4b66-89a3-dc3031af27ad","url":"https://www.contractsfinder.service.gov.uk/Notice/6b0cbb49-1c56-4b66-89a3-dc3031af27ad"},{"id":"R493","author":"UKAuthority","year":"2018","title":"Police chiefs award national enabling programmes contracts to deloitte and bt","url":"https://www.ukauthority.com/articles/police-chiefs-award-national-enabling-programmes-contracts-to-deloitte-and-bt/"}]},{"id":"POL-070","entity":"Policing","subUnit":"Police Scotland (DESC)","layerId":"SE3","layer":"Key management","group":"Security","product":"Encryption keys for DESC evidence held by Axon","vendor":"Axon","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Axon Enterprise Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Mixed","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Re-encryption","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Axon holds the keys and could decrypt and hand over data if compelled by US authorities; no evidence of BYOK/HYOK.","dimsNote":"CLOUD Act exposure flagged unmitigated in DPIA","scores":{"D1":1,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.36363636363636365},"refs":[{"id":"R055","author":"Computer Weekly","year":"2024","title":"Police scotland did not consult ico about high risk cloud system","url":"https://computerweekly.com/news/366589095/Police-Scotland-did-not-consult-ICO-about-high-risk-cloud-system"}]},{"id":"DEF-002","entity":"Defence","subUnit":"Defence Digital","layerId":"P1","layer":"Device chips","group":"Physical","product":"End-user device support for 220,000+ laptops, desktops, peripherals and software applications worldwide","vendor":"Computacenter","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Computacenter plc","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Endpoint","hostingLocation":"Mixed","prevalence":"Dominant","seats":220000,"seatsBasis":"Devices covered by the contract","dataFormat":"N/A (managed service)","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Contract transition;Asset data","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":150000000,"spendPeriod":"4 years from Jan 2024","evidence":"Confirmed","notes":"Device support from head office to frontline; MoD expects ~£84m (64%) operating-cost saving; jobs at Hatfield and Nottingham. Source names no device makers or operating systems.","dimsNote":"UK-headquartered service provider delivering from Hatfield and Nottingham (per MoD); device OEMs and chips not named in the source","scores":{"D1":1,"D2":3,"D3":null,"D4":2,"D5":3,"D6":null,"D7":3,"D8":0,"D9":1.5,"D10":1.5,"D11":3,"D12":3,"overall":2.1},"refs":[{"id":"R231","author":"GOV.UK","year":"2024","title":"Digital defence transformation boosted by 150 million UK contract","url":"https://www.gov.uk/government/news/digital-defence-transformation-boosted-by-150-million-uk-contract"}]},{"id":"DEF-005","entity":"Defence","subUnit":"UK Space Command / Defence Digital","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"SKYNET 6A military communications satellite (build, cyber protection, launch, ground segment updates)","vendor":"Airbus Defence and Space UK","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Airbus SE","ownerCountry":"Mixed","ownershipChange":"No","ownershipSource":"https://www.gov.uk/guidance/skynet-6","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"Sole UK military satcom constellation","dataFormat":"Proprietary satcom waveforms/TT&C","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Vendor-specific ground segment;Long asset life","osAlternative":"","sovereignAlternative":"Airbus UK build is itself the UK-based option","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"High","ukCapability":"Strong","ukValueCapture":"High","spend":500000000,"spendPeriod":"Contract signed Jul 2020 (more than £500m)","evidence":"Reported","notes":"Final integration at Airbus UK facilities, testing at RAL Space Harwell. Launch was planned for 2025 at signing; GOV.UK now says launch by SpaceX scheduled 2027. Hosting = MoD-owned asset.","dimsNote":"UK subsidiary of a European group builds in the UK; launch depends on US SpaceX (GOV.UK)","scores":{"D1":3,"D2":3,"D3":null,"D4":2,"D5":1.5,"D6":0,"D7":null,"D8":0,"D9":0,"D10":0,"D11":3,"D12":3,"overall":1.55},"refs":[{"id":"R003","author":"Airbus","year":"2020","title":"93549ec2260052c7af64d1187978f0d6 en airbus ad press release airbus signs MOD skynet6a","url":"https://www.airbus.com/sites/g/files/jlcbta136/files/93549ec2260052c7af64d1187978f0d6_EN-Airbus-AD-Press-Release-Airbus-signs-MOD-Skynet6A.pdf"},{"id":"R258","author":"GOV.UK","year":"n.d.","title":"[Title to be confirmed]","url":"https://www.gov.uk/guidance/skynet-6"}]},{"id":"DEF-006","entity":"Defence","subUnit":"UK Space Command / Defence Digital","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"SKYNET Service Delivery Wrap (SDW): operation of military satellites and ground stations, terminal integration","vendor":"Babcock (Team Aurora)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Babcock International Group plc","ownerCountry":"GB","ownershipChange":"Yes – Team Aurora partner Intelsat acquired by SES (Luxembourg), completed 17 Jul 2025","ownershipSource":"https://www.ses.com/press-release/ses-delivers-solid-h1-2025-results-completes-intelsat-acquisition","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"Whole SKYNET service","dataFormat":"N/A (managed service)","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Contract transition;Ground-station knowledge","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":400000000,"spendPeriod":"Six years per MoD press release (service from 1 Mar 2024)","evidence":"Confirmed","notes":"Part of the £6bn SKYNET 6 programme; ~400 jobs at Corsham, Bristol, Plymouth. GOV.UK guidance names Team Aurora as Babcock with SES, GovSat and Intelsat, and says SDW runs five years from 1 Mar 2024.","dimsNote":"UK prime runs MoD-owned satellites from UK sites; commercial satcom partners SES and GovSat (LU) and Intelsat (now SES) per GOV.UK guidance","scores":{"D1":3,"D2":3,"D3":null,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":1.5,"D9":1.5,"D10":1.5,"D11":3,"D12":3,"overall":2.090909090909091},"refs":[{"id":"R225","author":"GOV.UK","year":"2023","title":"400 million contract to operate military satellite communications system supports 400 UK jobs","url":"https://www.gov.uk/government/news/400-million-contract-to-operate-military-satellite-communications-system-supports-400-uk-jobs"},{"id":"R416","author":"Ses","year":"n.d.","title":"Ses delivers solid h1 2025 results completes intelsat acquisition","url":"https://www.ses.com/press-release/ses-delivers-solid-h1-2025-results-completes-intelsat-acquisition"}]},{"id":"DEF-007","entity":"Defence","subUnit":"UK Space Command / Defence Digital","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"SKYNET 6 Wideband Satellite System (WSS) – space segment from 2032 (competition)","vendor":"Airbus Defence and Space UK; Lockheed Martin UK (bidders)","vendorCountry":"Mixed","vendorTier":"Unknown","owner":"Airbus SE / Lockheed Martin Corp (bidders)","ownerCountry":"Mixed","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"Future sole wideband milsatcom","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Long asset life","osAlternative":"","sovereignAlternative":"UK-built option via Airbus UK","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"High","ukCapability":"Partial","ukValueCapture":"Medium","spend":1500000000,"spendPeriod":"Estimated contract value (award pending)","evidence":"Confirmed","notes":"Final Invitation to Negotiate released 8 Aug 2025; preferred bidder and full business case expected early 2026; MoD calls it the single largest national space procurement. Outcome not found this session.","dimsNote":"Competition between a European-owned and a US-owned UK subsidiary; no award published","scores":{"D1":3,"D2":null,"D3":null,"D4":2,"D5":1.5,"D6":0,"D7":null,"D8":0,"D9":0,"D10":0,"D11":1.5,"D12":1.5,"overall":1.0555555555555556},"refs":[{"id":"R246","author":"GOV.UK","year":"2025","title":"Securing the future skynet 6 wss hits a landmark milestone","url":"https://defencedigital.blog.gov.uk/2025/08/20/securing-the-future-skynet-6-wss-hits-a-landmark-milestone/"}]},{"id":"DEF-008","entity":"Defence","subUnit":"Defence Digital","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"Future Integrated User Services (F-IUS) mobile device and airtime services","vendor":"BT","vendorCountry":"GB","vendorTier":"T1 UK","owner":"BT Group plc","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.theweek.in/wire-updates/business/2024/11/18/dcm93-biz-bharti-global-bt.html","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"Not published","dataFormat":"N/A (telecoms service)","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Device fleet;Number porting","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":17641571,"spendPeriod":"28 Apr 2025 – 21 Apr 2028","evidence":"Confirmed","notes":"One of the bundles carved out of the Integrated User Services contract BT won in 2015 (>£330m, PSN framework). Call-off from a framework; handsets not named.","dimsNote":"UK telco; no published evidence of customer-held keys; handset OEMs not named; Ownership: Bharti Global bought Altice UK's 24.5% stake, becoming BT's largest shareholder, completed 18 Nov 2024 — a minority stake, not a change of control","scores":{"D1":null,"D2":3,"D3":0,"D4":2,"D5":3,"D6":0,"D7":3,"D8":0,"D9":1.5,"D10":1.5,"D11":3,"D12":3,"overall":1.8181818181818181},"refs":[{"id":"R083","author":"Contracts Finder","year":"2025","title":"Contract notice 0e956925-fa34-4598-adca-bb5fd80c5694","url":"https://www.contractsfinder.service.gov.uk/Notice/0e956925-fa34-4598-adca-bb5fd80c5694"},{"id":"R480","author":"Theweek","year":"n.d.","title":"Dcm93 biz bharti global bt","url":"https://www.theweek.in/wire-updates/business/2024/11/18/dcm93-biz-bharti-global-bt.html"}]},{"id":"DEF-009","entity":"Defence","subUnit":"Cross-defence (estate)","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"Managed enterprise internet and Wi-Fi service across defence sites (incl. living accommodation)","vendor":"BT","vendorCountry":"GB","vendorTier":"T1 UK","owner":"BT Group plc","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.theweek.in/wire-updates/business/2024/11/18/dcm93-biz-bharti-global-bt.html","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"Multiple defence sites","dataFormat":"N/A (telecoms service)","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Site infrastructure","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":73300000,"spendPeriod":"5 years (signed 20 Mar; reported Jul 2023)","evidence":"Reported","notes":"Gigabit-grade managed internet with single sign-on using GovWiFi; aims to cover offices, hangars, recreation and single living accommodation.","dimsNote":"UK telco; no published evidence of customer-held keys; network equipment makers not named; Ownership: Bharti Global bought Altice UK's 24.5% stake, becoming BT's largest shareholder, completed 18 Nov 2024 — a minority stake, not a change of control","scores":{"D1":null,"D2":3,"D3":0,"D4":2,"D5":3,"D6":0,"D7":3,"D8":0,"D9":1.5,"D10":1.5,"D11":3,"D12":3,"overall":1.8181818181818181},"refs":[{"id":"R391","author":"PublicTechnology","year":"2023","title":"MOD signs 73m bt deal to address connectivity poverty across defence","url":"https://www.publictechnology.net/2023/07/06/defence-and-security/mod-signs-73m-bt-deal-to-address-connectivity-poverty-across-defence/"},{"id":"R480","author":"Theweek","year":"n.d.","title":"Dcm93 biz bharti global bt","url":"https://www.theweek.in/wire-updates/business/2024/11/18/dcm93-biz-bharti-global-bt.html"}]},{"id":"DEF-010","entity":"Defence","subUnit":"British Army","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"Army Estate Wide Internet Access (AEWIA): BT managed service on Cisco Catalyst/Meraki switching and Wi-Fi across 498 sites","vendor":"Cisco (with BT)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Cisco Systems Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.gov.uk/guidance/army-digitalisation-theia","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"Mixed","prevalence":"Primary","seats":null,"seatsBasis":"498 sites (200+ in phase one, 162 in phase two)","dataFormat":"Proprietary management (Catalyst Center, Meraki)","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Hardware refresh;Management platform","osAlternative":"","sovereignAlternative":"UK telco-managed service (BT) on non-UK kit","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"High","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Undated vendor case study (accessed Oct 2026); sites in UK, Northern Ireland and Germany. Army THEIA guidance (GOV.UK, 2021) describes estate-wide Wi-Fi at 400 then all 498 sites.","dimsNote":"US network kit and cloud-linked management (Meraki/Cisco Spaces); BT (GB) delivers as a managed service; no published evidence of customer-held keys","scores":{"D1":1,"D2":1,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":0,"D10":1.5,"D11":1.5,"D12":1.5,"overall":0.9166666666666666},"refs":[{"id":"R039","author":"Cisco","year":"2026","title":"Ministry of defence UK","url":"https://www.cisco.com/site/us/en/about/case-studies-customer-stories/ministry-of-defence-uk.html"},{"id":"R262","author":"GOV.UK","year":"n.d.","title":"Army digitalisation theia","url":"https://www.gov.uk/guidance/army-digitalisation-theia"}]},{"id":"DEF-011","entity":"Defence","subUnit":"Defence Digital","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"Next Generation Communication Network (NGCN): fixed-network replacement; transformation partner and Network Systems Integrator selection","vendor":"PA Consulting","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Jacobs Solutions Inc","ownerCountry":"US","ownershipChange":"Yes – Jacobs acquired 65% of PA Consulting, completed 2 Mar 2021 (a Jan 2026 headline reports Jacobs has since taken full ownership)","ownershipSource":"https://www.consulting.us/news/5639/jacobs-closes-majority-investment-in-pa-consulting","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"Defence fixed network","dataFormat":"N/A (programme)","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Integrator lock-in","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"Low","ukCapability":"Partial","ukValueCapture":"Medium","spend":10933069,"spendPeriod":"17 Feb 2025 – 31 Dec 2026","evidence":"Confirmed","notes":"PA designs the target operating model and helps procure a Network Systems Integrator (award not found this session). Replaces Fujitsu-era Global Connectivity (2015, >£550m).","dimsNote":"UK-headquartered consultancy now majority US-owned","scores":{"D1":null,"D2":3,"D3":null,"D4":2,"D5":1.5,"D6":null,"D7":1,"D8":1.5,"D9":3,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.8333333333333333},"refs":[{"id":"R086","author":"Contracts Finder","year":"2025","title":"Contract notice 6e5444bc-bcc7-42f6-be48-af6b10a63ab0","url":"https://www.contractsfinder.service.gov.uk/Notice/6e5444bc-bcc7-42f6-be48-af6b10a63ab0"},{"id":"R076","author":"Consulting","year":"n.d.","title":"Jacobs closes majority investment in pa consulting","url":"https://www.consulting.us/news/5639/jacobs-closes-majority-investment-in-pa-consulting"}]},{"id":"DEF-012","entity":"Defence","subUnit":"Royal Navy (DE&S)","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"Maritime Communications Capability Support (MCCS): upgrade and support of internal/external comms on warships and submarines","vendor":"Thales UK","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Thales SA","ownerCountry":"FR","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"Royal Navy surface fleet and submarines","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Platform integration;Spares","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"Medium","spend":250000000,"spendPeriod":"10 years from Feb 2025","evidence":"Reported","notes":"Replaces the Fleetwide Communications contract Thales held for seven years; >100 jobs at Portsmouth, Plymouth, Crawley, Reading, Bristol; up to £30m savings claimed.","dimsNote":"French-owned group delivering through UK sites and workforce","scores":{"D1":3,"D2":3,"D3":null,"D4":2,"D5":1.5,"D6":0,"D7":2,"D8":0,"D9":1.5,"D10":0,"D11":3,"D12":1.5,"overall":1.5909090909090908},"refs":[{"id":"R125","author":"Euro-sd","year":"2025","title":"Thales UK wins mccs contract","url":"https://euro-sd.com/2025/02/major-news/42580/thales-uk-wins-mccs-contract/"}]},{"id":"DEF-013","entity":"Defence","subUnit":"British Army","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"TRINITY deployable tactical Wide Area Network linking drones, vehicles, jets, carriers and commands","vendor":"BAE Systems (with KBR, PA Consulting, L3Harris)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"BAE Systems plc","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"Mixed","prevalence":"Primary","seats":null,"seatsBasis":"Deployed forces","dataFormat":"Proprietary/military standards","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Integration;Consortium IP","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":89000000,"spendPeriod":"5 years from Aug 2023","evidence":"Reported","notes":"Multi-bearer network so forces do not rely solely on satellites or fixed infrastructure; ~60 jobs in Dorset.","dimsNote":"UK prime; consortium includes US firms KBR and L3Harris","scores":{"D1":1,"D2":3,"D3":null,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":1.5,"D9":1.5,"D10":0,"D11":3,"D12":3,"overall":1.7727272727272727},"refs":[{"id":"R296","author":"Intelligentcio","year":"2023","title":"[Title to be confirmed]","url":"https://www.intelligentcio.com/eu/?p=97251"}]},{"id":"DEF-014","entity":"Defence","subUnit":"British Army","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"MORPHEUS / Evolve to Open (EvO) tactical CIS to succeed Bowman (paused Dec 2023)","vendor":"General Dynamics UK","vendorCountry":"GB","vendorTier":"T1 UK","owner":"General Dynamics Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://gd.com/Articles/2017/04/05/general-dynamics-uk-awarded-330-million-contract-develop-battlefield-network-british-army","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"Mixed","prevalence":"Dominant","seats":null,"seatsBasis":"Field Army (Bowman remains in service)","dataFormat":"Proprietary (Bowman) moving to open modular architecture","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Legacy Bowman;Programme reset","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Medium","spend":330000000,"spendPeriod":"First-phase contract (2017)","evidence":"Reported","notes":"Minister's letter (17 Aug 2026): Morpheus paused Dec 2023 when the EvO Transition Partner contract ended, with ~£766m spent; LETacCIS rated RED Feb 2025, AMBER Jul 2025; Bowman out-of-service date not being extended.","dimsNote":"US-owned UK subsidiary held the Bowman/EvO evolution; programme reset to iterative delivery","scores":{"D1":1,"D2":3,"D3":null,"D4":2,"D5":0,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":1.5,"overall":1.0454545454545454},"refs":[{"id":"R517","author":"Ukdefencejournal","year":"2026","title":"Army comms programme hit red rating after morpheus pause","url":"https://ukdefencejournal.org.uk/army-comms-programme-hit-red-rating-after-morpheus-pause/"},{"id":"R201","author":"Gd","year":"n.d.","title":"General dynamics UK awarded 330 million contract develop battlefield network british army","url":"https://gd.com/Articles/2017/04/05/general-dynamics-uk-awarded-330-million-contract-develop-battlefield-network-british-army"}]},{"id":"DEF-015","entity":"Defence","subUnit":"British Army (TacSys Delivery Team)","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"TacSys Resource Partner: output-based support to the Land Environment Tactical CIS programme","vendor":"QinetiQ; Eviden (Atos); BMT; Roke; Accenture","vendorCountry":"Mixed","vendorTier":"Unknown","owner":"QinetiQ Group / Atos SE / BMT / Chemring / Accenture","ownerCountry":"Mixed","ownershipChange":"Yes – Atos (Eviden parent) financial restructuring closed 18 Dec 2024, creditors taking ~90% of equity","ownershipSource":"https://www.atosgroup.com/en/press/atos-opens-a-new-chapter-with-the-successful-closing-of-its-financial-restructuring","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"LE TacCIS programme","dataFormat":"N/A (services)","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Multi-supplier knowledge","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"Low","ukCapability":"Partial","ukValueCapture":"Medium","spend":150000000,"spendPeriod":"From Aug 2024 (1+1+extension options)","evidence":"Confirmed","notes":"Five-supplier award (initial estimate £39.5m, ceiling £150m) covering littoral, land and air-land tactical CIS from soldier systems to reach-back.","dimsNote":"Mix of UK (QinetiQ, BMT, Roke) and foreign-owned (Atos FR, Accenture IE/US) suppliers","scores":{"D1":null,"D2":null,"D3":null,"D4":2,"D5":1.5,"D6":null,"D7":null,"D8":1.5,"D9":3,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.7857142857142858},"refs":[{"id":"R149","author":"Find a Tender Service","year":"2024","title":"Contract notice 030218-2024","url":"https://www.find-tender.service.gov.uk/Notice/030218-2024"},{"id":"R012","author":"Atos","year":"n.d.","title":"Atos opens a new chapter with the successful closing of its financial restructuring","url":"https://www.atosgroup.com/en/press/atos-opens-a-new-chapter-with-the-successful-closing-of-its-financial-restructuring"}]},{"id":"DEF-016","entity":"Defence","subUnit":"DE&S","layerId":"P4","layer":"Storage hardware","group":"Physical","product":"NetApp storage devices procured for the Sustain environment","vendor":"NetApp","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"NetApp Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"Not published","dataFormat":"ONTAP / WAFL proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Data migration;Licences","osAlternative":"Ceph / TrueNAS","sovereignAlternative":"None at scale","operator":"Customer (in-house UK team)","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"High","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Contract notice (competitive with negotiation, price-only, 5-month supply); value and winning reseller not stated.","dimsNote":"US storage OEM; delivered in UK for on-prem use; encryption key arrangements not published (on-prem default)","scores":{"D1":3,"D2":1,"D3":3,"D4":3,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":0,"D10":1.5,"D11":0,"D12":0,"overall":1.1666666666666667},"refs":[{"id":"R141","author":"Find a Tender Service","year":"2023","title":"Contract notice 032192-2023","url":"https://www.find-tender.service.gov.uk/Notice/032192-2023"}]},{"id":"DEF-018","entity":"Defence","subUnit":"Defence Digital","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Microsoft Azure private cloud (UK-hosted Azure) – consulting, support and maintenance","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.ukauthority.com/articles/mod-makes-major-commitment-to-azure/","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Not published","dataFormat":"Azure-native services","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Egress;Re-architecture;Skills","osAlternative":"OpenStack","sovereignAlternative":"UK-owned cloud (none at scale since UKCloud collapse)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":17750000,"spendPeriod":"23 months from 1 Jun 2020","evidence":"Reported","notes":"Non-competitive award \"for technical reasons\"; UKAuthority said it made MoD Europe's largest customer for UK-hosted Azure. Computing (2016) reported MODNET on Office 365 plus an Azure Stack \"autonomous cloud\" for disconnected users.","dimsNote":"US hyperscaler in UK regions; no published evidence of customer-held keys; admin location not published","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.6818181818181818},"refs":[{"id":"R450","author":"The Register","year":"2020","title":"Microsoft bags 18 million MOD","url":"https://www.theregister.com/2020/05/22/microsoft_bags_18_million_mod/"},{"id":"R512","author":"UKAuthority","year":"n.d.","title":"MOD makes major commitment to azure","url":"https://www.ukauthority.com/articles/mod-makes-major-commitment-to-azure/"}]},{"id":"DEF-019","entity":"Defence","subUnit":"Defence Digital","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Amazon Web Services within MODCloud (hosts the Defence Data Analytics Platform)","vendor":"Amazon Web Services","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Amazon.com Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://ukauthority.com/articles/mod-strikes-deal-for-oracle-cloud-infrastructure/","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"Not published","dataFormat":"AWS-native services","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Egress;Re-architecture;Skills","osAlternative":"OpenStack","sovereignAlternative":"UK-owned cloud (none at scale)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Kainos states DDAP is \"built on Amazon Web Services\"; UKAuthority (Sep 2020) lists AWS alongside Azure and Prolinx as MODCLOUD options. Region/data location not stated. Separate 2022 AWS MoU covers digital skills.","dimsNote":"US hyperscaler; no published evidence of customer-held keys; region not published","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.45},"refs":[{"id":"R311","author":"Kainos","year":"2025","title":"Kainos extends partnership with ministry of defence to drive data and AI innovation with enhanced platform capabilities","url":"https://www.kainos.com/insights/news/kainos-extends-partnership-with-ministry-of-defence-to-drive-data-and-ai-innovation-with-enhanced-platform-capabilities"},{"id":"R513","author":"UKAuthority","year":"n.d.","title":"MOD strikes deal for oracle cloud infrastructure","url":"https://ukauthority.com/articles/mod-strikes-deal-for-oracle-cloud-infrastructure/"}]},{"id":"DEF-020","entity":"Defence","subUnit":"Defence Digital","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Oracle Cloud Infrastructure (MODCLOUD business applications; new OCI agreement Jan 2026 for legacy modernisation)","vendor":"Oracle","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Oracle Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://ukauthority.com/articles/mod-strikes-deal-for-oracle-cloud-infrastructure/","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Secondary","seats":null,"seatsBasis":"Not published","dataFormat":"Oracle DB / OCI services","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licensing;Data migration","osAlternative":"PostgreSQL on open cloud","sovereignAlternative":"None at scale","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"OCI added to MODCLOUD under an Oracle enterprise agreement in 2020 (UKAuthority); Jan 2026 agreement to modernise and consolidate legacy systems; value, term and hosting location not disclosed. Distinct from GOV-064 (Oracle ERP).","dimsNote":"US vendor; no published evidence of customer-held keys; hosting location not published","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.45},"refs":[{"id":"R366","author":"Oracle","year":"2026","title":"Oracle expands collaboration with ministry of defence 2026 01 14","url":"https://www.oracle.com/uk/news/announcement/oracle-expands-collaboration-with-ministry-of-defence-2026-01-14/"},{"id":"R513","author":"UKAuthority","year":"n.d.","title":"MOD strikes deal for oracle cloud infrastructure","url":"https://ukauthority.com/articles/mod-strikes-deal-for-oracle-cloud-infrastructure/"}]},{"id":"DEF-021","entity":"Defence","subUnit":"Defence Digital","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"UKCloud connected/assured cloud services (provider liquidated Oct 2022)","vendor":"UKCloud","vendorCountry":"GB","vendorTier":"T1 UK","owner":"UKCloud Ltd (in compulsory liquidation)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.gov.uk/government/case-studies/ukcloud-helps-mod-make-a-major-step-forward-in-cloud-services","licence":"Proprietary","governance":"Single vendor","hosting":"UK cloud","hostingLocation":"UK","prevalence":"Niche","seats":null,"seatsBasis":"Not published","dataFormat":"VMware/OpenStack-based","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Forced migration","osAlternative":"OpenStack","sovereignAlternative":"UKCloud was the UK-owned option","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"MoD worked with UKCloud from 2014 (GOV.UK case study, 2016) and was among customers with deals in the two years before compulsory liquidation; government said most departments had moved. MoD-specific migration impact not published.","dimsNote":"UK-owned provider (Farnborough, Corsham) collapsed; liquidation is not a change of ownership","scores":{"D1":3,"D2":3,"D3":0,"D4":2,"D5":0,"D6":0,"D7":3,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":3,"overall":1.5454545454545454},"refs":[{"id":"R389","author":"PublicTechnology","year":"2022","title":"Government does not expect public service disruption over ukcloud insolvency","url":"https://www.publictechnology.net/2022/10/28/business-and-industry/government-does-not-expect-public-service-disruption-over-ukcloud-insolvency/"},{"id":"R270","author":"GOV.UK","year":"n.d.","title":"Ukcloud helps MOD make a major step forward in cloud services","url":"https://www.gov.uk/government/case-studies/ukcloud-helps-mod-make-a-major-step-forward-in-cloud-services"}]},{"id":"DEF-022","entity":"Defence","subUnit":"Defence Digital (SECRET)","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Migration of a mission-critical SECRET C4IS command-and-control system to hybrid cloud","vendor":"Not named (tender)","vendorCountry":"Unknown","vendorTier":"Unknown","owner":"Unknown","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"Unknown","prevalence":"Niche","seats":null,"seatsBasis":"One C4IS system","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-platforming","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Medium","spend":60000000,"spendPeriod":"Planned contract (2024 tender)","evidence":"Reported","notes":"Supplier to migrate C4IS reusing supported hardware and develop new capabilities; award not found this session.","dimsNote":"No supplier published","scores":{"D1":null,"D2":null,"D3":null,"D4":2,"D5":1.5,"D6":null,"D7":null,"D8":0,"D9":1.5,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.3571428571428572},"refs":[{"id":"R474","author":"The Stack","year":"2024","title":"MOD c4is contract","url":"https://www.thestack.technology/mod-c4is-contract/"}]},{"id":"GOV-017","entity":"Defence","subUnit":"MoD","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Google Distributed Cloud air-gapped sovereign cloud","vendor":"Google Cloud","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Alphabet","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.googlecloudpresscorner.com/2025-09-11-Google-Cloud-Awarded-Landmark-Sovereign-Cloud-Contract-with-UK-Ministry-of-Defence","licence":"Proprietary","governance":"Single vendor","hosting":"UK cloud","hostingLocation":"UK","prevalence":"Secondary","seats":null,"seatsBasis":"Defence and intelligence sensitive workloads","dataFormat":"Proprietary (GDC) + Kubernetes","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Re-platforming;Skills","osAlternative":"Kubernetes/OpenStack","sovereignAlternative":"Nscale (GB); Ark/Crown Hosting (GB)","operator":"UK cleared","keyCustody":"HYOK","codeModelControl":"Version-pinnable","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Medium","spend":400000000,"spendPeriod":"Contract awarded Sep 2025 (term not disclosed)","evidence":"Reported","notes":"Sovereign UK data centres, air-gapped, data 'under direct UK control' per MoD, but software stack and vendor are US. Very large single award for a non-AWS hyperscaler.","dimsNote":"GDC air-gapped runs disconnected in UK with dedicated UK team; keys inferred held in-environment (air-gapped KMS/HSM; not stated publicly); software updates still Google-supplied","scores":{"D1":3,"D2":1,"D3":3,"D4":3,"D5":1.5,"D6":1.5,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":1.5,"overall":1.5416666666666667},"refs":[{"id":"R069","author":"Computing","year":"2025","title":"Google wins 400m MOD contract sovereign cloud","url":"https://www.computing.co.uk/news/2025/google-wins-400m-mod-contract-sovereign-cloud"},{"id":"R206","author":"Google Cloud","year":"2025","title":"Google Cloud awarded landmark sovereign cloud contract with UK Ministry of Defence","url":"https://www.googlecloudpresscorner.com/2025-09-11-Google-Cloud-Awarded-Landmark-Sovereign-Cloud-Contract-with-UK-Ministry-of-Defence"}]},{"id":"DEF-023","entity":"Defence","subUnit":"Defence Digital","layerId":"I2","layer":"Data centre location","group":"Infrastructure","product":"Ark Spring Park data centre, Corsham (consolidated MoD hosting after closure of Bath site)","vendor":"Ark Data Centres","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Elliott Investment Management (majority; Revcap minority)","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.datacenterdynamics.com/en/news/ark-owner-elliott-investment-looks-to-sell-uk-data-center-firm-report/","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Not published","dataFormat":"N/A (colocation)","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Physical relocation","osAlternative":"","sovereignAlternative":"UK-sited colocation (Crown Hosting JV with Cabinet Office)","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Low","ukCapability":"Strong","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Facility next to the MoD's ISS (now Defence Digital) HQ with a direct link; Spring Park also used by MoJ and others. Elliott explored a >£3bn sale in 2025.","dimsNote":"UK-sited, UK-run colocation but majority US fund-owned since 2012 (before 2020 window)","scores":{"D1":3,"D2":3,"D3":null,"D4":2,"D5":1.5,"D6":null,"D7":1,"D8":0,"D9":3,"D10":1.5,"D11":3,"D12":1.5,"overall":1.95},"refs":[{"id":"R094","author":"DatacenterDynamics","year":"2014","title":"Ark data centres helps UK ministry of defence","url":"https://www.datacenterdynamics.com/en/news/ark-data-centres-helps-uk-ministry-of-defence/"},{"id":"R096","author":"DatacenterDynamics","year":"2025","title":"Ark owner elliott investment looks to sell UK data center firm report","url":"https://www.datacenterdynamics.com/en/news/ark-owner-elliott-investment-looks-to-sell-uk-data-center-firm-report/"}]},{"id":"DEF-024","entity":"Defence","subUnit":"Cross-defence","layerId":"I2","layer":"Data centre location","group":"Infrastructure","product":"Microsoft UK data centre regions hosting MoD Office 365 / Azure workloads","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"Not published","dataFormat":"N/A","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Egress","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Computing reported the MoD helped bring about Microsoft's UK data centres and runs a private Office 365 instance in them; 2016 data, no newer location statement found.","dimsNote":"UK-located but US-owned and subject to US law; no published evidence of customer-held keys","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.6818181818181818},"refs":[{"id":"R067","author":"Computing","year":"2016","title":"Ministry of defence builds modnet communications system and autonomous cloud platform on microsoft 365 and azure","url":"https://computing.co.uk/news/2469977/ministry-of-defence-builds-modnet-communications-system-and-autonomous-cloud-platform-on-microsoft-365-and-azure"}]},{"id":"DEF-026","entity":"Defence","subUnit":"Cross-defence","layerId":"PL1","layer":"Operating systems","group":"Platform","product":"Apple iOS/iPadOS on MoD-issued iPhones and iPads (MODNET mobile; Chat-MoD available on them)","vendor":"Apple","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Apple Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Endpoint","hostingLocation":"Mixed","prevalence":"Secondary","seats":null,"seatsBasis":"Not published","dataFormat":"iOS","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Device fleet;MDM","osAlternative":"AOSP-based builds","sovereignAlternative":"None","operator":"Customer (in-house UK team)","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"High","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Army Soldier magazine: Chat-MoD runs across MoD desktops, iPads and iPhones on MODNET devices. F-IUS mobile management bundle (2022 PIN) covers app/endpoint management and mobile threat defence.","dimsNote":"US OS/device vendor; Asian manufacture","scores":{"D1":1,"D2":1,"D3":null,"D4":3,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":0,"D10":1.5,"D11":0,"D12":0,"overall":0.8181818181818182},"refs":[{"id":"R010","author":"Army","year":"2025","title":"Move over chat gpt","url":"https://soldier.army.mod.uk/issues/march-2025/soldier-life/technology/move-over-chat-gpt"}]},{"id":"DEF-029","entity":"Defence","subUnit":"Royal Navy / RAF recruiting","layerId":"PL4","layer":"Application framework","group":"Platform","product":"Pega low-code platform for RAF and Royal Navy recruitment (applicant support and reporting)","vendor":"Pegasystems","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Pegasystems Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Not published","dataFormat":"Pega rules/case model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Low-code lock-in;Data migration","osAlternative":"Open-source BPM (Camunda core)","sovereignAlternative":"None","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":9500000,"spendPeriod":"Feb 2021 – Feb 2024 (3 years)","evidence":"Reported","notes":"Delivered on Pega Cloud; data may be processed in UK AWS data centres or MoD cloud, with intent that no personal data is stored in Pega Cloud AWS. Pega now underpins the tri-service AFRS (Serco).","dimsNote":"US SaaS on AWS UK; no published evidence of customer-held keys","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.6818181818181818},"refs":[{"id":"R387","author":"PublicTechnology","year":"2021","title":"Raf and navy adopt 95m low code recruitment platform","url":"https://www.publictechnology.net/2021/03/03/defence-and-security/raf-and-navy-adopt-95m-low-code-recruitment-platform/"}]},{"id":"DEF-030","entity":"Defence","subUnit":"Defence Business Services","layerId":"PL4","layer":"Application framework","group":"Platform","product":"Automation Garage: Blue Prism robotic process automation and Microsoft Power Platform (Capgemini support)","vendor":"Blue Prism (SS&C); Microsoft; Capgemini","vendorCountry":"GB","vendorTier":"T1 UK","owner":"SS&C Technologies Holdings","ownerCountry":"US","ownershipChange":"Yes – Blue Prism Group plc (UK) acquired by SS&C Technologies (US), completed 16 Mar 2022","ownershipSource":"https://investor.ssctech.com/news-releases/news-release-details/ssc-completes-acquisition-blue-prism-group-plc","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Secondary","seats":null,"seatsBasis":"Not published","dataFormat":"Proprietary automation definitions","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Bot rebuild;Licences","osAlternative":"Robot Framework / open-source RPA","sovereignAlternative":"None (Blue Prism was the UK option)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":9200000,"spendPeriod":"2 years from May 2024 (+12 months option), incl VAT","evidence":"Reported","notes":"MoD prefers Blue Prism and Microsoft Power Platform for RPA/hyperautomation; Capgemini supports the Automation Garage run by Defence Business Services.","dimsNote":"UK-founded RPA vendor now US-owned; Capgemini (FR) as integrator; no published evidence of customer-held keys","scores":{"D1":null,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":1.05},"refs":[{"id":"R044","author":"Civilserviceworld","year":"2024","title":"MOD capgemini 9m deal AI automation","url":"https://www.civilserviceworld.com/professions/article/mod-capgemini-9m-deal-ai-automation"},{"id":"R298","author":"Investor","year":"n.d.","title":"Ssc completes acquisition blue prism group plc","url":"https://investor.ssctech.com/news-releases/news-release-details/ssc-completes-acquisition-blue-prism-group-plc"}]},{"id":"DEF-032","entity":"Defence","subUnit":"Cross-defence","layerId":"W2","layer":"Identity & directory","group":"Workplace","product":"Defence Gateway: self-registration portal giving personnel, cadets, families and contractors browser access to selected Defence web apps","vendor":"MoD Defence Digital (underlying technology not published)","vendorCountry":"Unknown","vendorTier":"Unknown","owner":"Unknown","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"Not published","dataFormat":"Not published","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Identity re-enrolment","osAlternative":"Keycloak","sovereignAlternative":"GOV.UK One Login (GB)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Apps include collaboration, career/training admin, file sharing, HR, logistics, official email and calendar, welfare. GOV.UK page does not name the identity product or supplier.","dimsNote":"MoD-run service; product and hosting not published; no published evidence of customer-held keys","scores":{"D1":null,"D2":null,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":null,"D8":3,"D9":null,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.375},"refs":[{"id":"R249","author":"GOV.UK","year":"2026","title":"[Title to be confirmed]","url":"https://www.gov.uk/guidance/defence-gateway"}]},{"id":"DEF-033","entity":"Defence","subUnit":"Defence Digital","layerId":"W2","layer":"Identity & directory","group":"Workplace","product":"SECRET-tier identity attestation and verification design (c.20,000 SECRET users; 250,000 identities)","vendor":"Hippo Digital","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Hippo Digital Ltd","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Niche","seats":250000,"seatsBasis":"Identities in scope of the design","dataFormat":"N/A (design work)","formatOwner":"Vendor","openSpec":"Partial","portability":"Easy","switchingCost":"Low","exitCostDrivers":"None (design only)","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":11000,"spendPeriod":"30 Jun – 25 Aug 2025","evidence":"Confirmed","notes":"Direct award under the defence and security regime; ~1,000 joiner/mover/leaver changes a week; to scale later to OFFICIAL.","dimsNote":"UK SME (Leeds) doing design work; product choice not yet published","scores":{"D1":null,"D2":3,"D3":null,"D4":2,"D5":3,"D6":null,"D7":3,"D8":3,"D9":null,"D10":3,"D11":3,"D12":3,"overall":2.875},"refs":[{"id":"R173","author":"Find a Tender Service","year":"2025","title":"Contract notice 048373-2025","url":"https://www.find-tender.service.gov.uk/Notice/048373-2025"}]},{"id":"DEF-035","entity":"Defence","subUnit":"Defence Digital (SECRET)","layerId":"W4","layer":"Messaging & video","group":"Workplace","product":"MOD Chat Services (fixed environment) migration from OEHE hosting to new MOD cloud at SECRET","vendor":"Cadmidium Services (integrator; chat product not named)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Cadmidium Services Ltd","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"Operational users on fixed and deployed systems","dataFormat":"Not published","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Room/user migration","osAlternative":"Matrix / XMPP","sovereignAlternative":"","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":240120,"spendPeriod":"4 Nov 2024 – 31 Jul 2025","evidence":"Confirmed","notes":"Migrate users, rooms and interoperability while keeping chat available for operations; framework call-off.","dimsNote":"UK SME integrator; MOD-run SECRET cloud; chat software owner not published","scores":{"D1":null,"D2":3,"D3":3,"D4":2,"D5":3,"D6":0,"D7":3,"D8":3,"D9":null,"D10":1.5,"D11":3,"D12":3,"overall":2.45},"refs":[{"id":"R088","author":"Contracts Finder","year":"2025","title":"Contract notice cf45af08-9976-440e-94e9-13523b802241","url":"https://www.contractsfinder.service.gov.uk/Notice/cf45af08-9976-440e-94e9-13523b802241"}]},{"id":"DEF-036","entity":"Defence","subUnit":"Defence Digital","layerId":"W4","layer":"Messaging & video","group":"Workplace","product":"F-IUS Fixed Voice OFFICIAL and Enterprise Voice (successor to BT Integrated User Services voice/video)","vendor":"Not yet awarded (incumbent BT under IUS)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"BT Group plc (incumbent)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.gov.uk/government/news/new-contracts-bring-1bn-savings-over-10-years-to-defence","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"Defence fixed voice estate","dataFormat":"SIP","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Endpoint migration","osAlternative":"Asterisk / FreeSWITCH","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"One of six bundles separated from IUS; options \"Build New\" (SaaS or MODCloud) or \"Takeover and Enhancement\"; award expected 2025, not found. IUS awarded to BT in 2015 (>£330m).","dimsNote":"UK incumbent; future platform undecided at notice","scores":{"D1":null,"D2":3,"D3":null,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":0,"D9":1.5,"D10":1.5,"D11":3,"D12":3,"overall":1.85},"refs":[{"id":"R147","author":"Find a Tender Service","year":"2024","title":"Contract notice 017386-2024","url":"https://www.find-tender.service.gov.uk/Notice/017386-2024"},{"id":"R268","author":"GOV.UK","year":"n.d.","title":"New contracts bring 1bn savings over 10 years to defence","url":"https://www.gov.uk/government/news/new-contracts-bring-1bn-savings-over-10-years-to-defence"}]},{"id":"DEF-037","entity":"Defence","subUnit":"Defence Digital","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"Microsoft Unified Support & Design Services incl. Office 365 E5 (single-source)","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Dominant","seats":200000,"seatsBasis":"Defence Digital users","dataFormat":"OOXML / Microsoft formats","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licensing;Retraining;Integration","osAlternative":"LibreOffice / Nextcloud","sovereignAlternative":"None","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":31000000,"spendPeriod":"1 Jun 2022 – 30 Apr 2025 (36 months)","evidence":"Confirmed","notes":"Negotiated without prior publication because only Microsoft can supply; separate from the Microsoft EA (GOV-057). MoD confirmed M365 Copilot in use in 2026.","dimsNote":"Single-source justification itself evidences lock-in; no published evidence of customer-held keys","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.6818181818181818},"refs":[{"id":"R135","author":"Find a Tender Service","year":"2022","title":"Contract notice 013650-2022","url":"https://www.find-tender.service.gov.uk/Notice/013650-2022"}]},{"id":"DEF-038","entity":"Defence","subUnit":"Defence Digital","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"End User Services (OFFICIAL) managed service: desktops, laptops, mobile, VDI across SaaS/PaaS/IaaS/on-prem","vendor":"To be procured (incumbent not named)","vendorCountry":"Unknown","vendorTier":"Unknown","owner":"Unknown","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"Unknown","prevalence":"Dominant","seats":200000,"seatsBasis":"Users in UK and overseas","dataFormat":"N/A (managed service)","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Transition;Service knowledge","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Medium","spend":750000000,"spendPeriod":"May 2028 – Apr 2033 (+5-year option to 2038), estimate","evidence":"Reported","notes":"Formal tender expected Aug 2026; covers transition from the incumbent, service sustainment, UX, scaling and cyber resilience.","dimsNote":"Supplier not yet chosen; one of the largest Defence Digital competitions","scores":{"D1":null,"D2":null,"D3":null,"D4":2,"D5":1.5,"D6":null,"D7":null,"D8":1.5,"D9":1.5,"D10":0,"D11":1.5,"D12":1.5,"overall":1.3571428571428572},"refs":[{"id":"R509","author":"UKAuthority","year":"2026","title":"MOD seeks managed service provider for digital workplace","url":"https://www.ukauthority.com/articles/mod-seeks-managed-service-provider-for-digital-workplace"}]},{"id":"DEF-039","entity":"Defence","subUnit":"Atomic Weapons Establishment","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"AWE Information Services: end-user computing, cloud management, on-prem infrastructure and application services (Contract 2)","vendor":"DXC Technology (Entserv UK)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"DXC Technology Co","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.gca.gov.uk/suppliers/353/entserv-uk-limited","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"AWE users (not published)","dataFormat":"N/A (managed service)","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Transition;Classified environment","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Medium","spend":75000000,"spendPeriod":"24 Mar 2025 – 23 Mar 2029","evidence":"Confirmed","notes":"Called off a CCS framework (CCIT22A16) on AWE's behalf.","dimsNote":"Entserv UK Ltd linked to DXC on GCA supplier page (DXC website, @dxc.com contacts)","scores":{"D1":null,"D2":1,"D3":null,"D4":2,"D5":1.5,"D6":null,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":1.5,"overall":1.1111111111111112},"refs":[{"id":"R084","author":"Contracts Finder","year":"2025","title":"Contract notice 1b295900-9062-4b75-a6fa-7e5ab3b44ea4","url":"https://www.contractsfinder.service.gov.uk/Notice/1b295900-9062-4b75-a6fa-7e5ab3b44ea4"},{"id":"R273","author":"Government Commercial Agency","year":"n.d.","title":"Entserv UK limited","url":"https://www.gca.gov.uk/suppliers/353/entserv-uk-limited"}]},{"id":"GOV-057","entity":"Defence","subUnit":"MoD","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"Microsoft Enterprise Agreement 2025-2028 (via boxxe)","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Dominant","seats":250000,"seatsBasis":"Approx MoD users (estimate)","dataFormat":"OOXML","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Skills","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":401000000,"spendPeriod":"2025-2028","evidence":"Reported","notes":"Follows a £291m 3-yr EA (2022-25). MoD's Microsoft spend up ~38% between EAs.","dimsNote":"Defence-wide EA; spend up ~38% between agreements","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":0.6818181818181818},"refs":[{"id":"R490","author":"UK Spending","year":"2025","title":"[Title to be confirmed]","url":"https://ukspending.com/contracts/74443"}]},{"id":"DEF-040","entity":"Defence","subUnit":"Cross-defence","layerId":"W6","layer":"File storage","group":"Workplace","product":"OneDrive / SharePoint file storage within MODNET Office 365","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"UK","prevalence":"Dominant","seats":null,"seatsBasis":"Not published","dataFormat":"OOXML in proprietary store","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Bulk export;Permissions","osAlternative":"Nextcloud","sovereignAlternative":"None","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Computing (2016) lists OneDrive, Skype for Business, Delve, OneNote, Sway and Power BI in MODNET's Office 365 build; no newer statement found.","dimsNote":"US SaaS in UK data centres; no published evidence of customer-held keys","scores":{"D1":3,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.8181818181818182},"refs":[{"id":"R067","author":"Computing","year":"2016","title":"Ministry of defence builds modnet communications system and autonomous cloud platform on microsoft 365 and azure","url":"https://computing.co.uk/news/2469977/ministry-of-defence-builds-modnet-communications-system-and-autonomous-cloud-platform-on-microsoft-365-and-azure"}]},{"id":"DEF-041","entity":"Defence","subUnit":"Defence Business Services","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Joint Personnel Administration (JPA) military payroll, expenses and HR – run under the Future Service Delivery Contract","vendor":"Shared Services Connected Ltd (Sopra Steria)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Sopra Steria Group SA","ownerCountry":"FR","ownershipChange":"No","ownershipSource":"https://www.gov.uk/government/news/45-million-to-be-reinvested-in-government-to-boost-long-term-productivity-as-the-cabinet-office-sells-stake-in-sscl","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"Unknown","prevalence":"Dominant","seats":182980,"seatsBasis":"Armed forces personnel (Jul 2026); plus pensions and veterans services","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Pay rules;Pensions history","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":294190913,"spendPeriod":"2 Jan 2020 – 31 May 2027","evidence":"Confirmed","notes":"SSCL took over armed forces/veterans DBS services incl. JPA and IS applications and infrastructure (band £410m–£800m). JPA was built by EDS for ~£250m (The Register, 2007). No JPA replacement contract found this session; FSDC ends May 2027.","dimsNote":"UK-registered operator, French-owned; Cabinet Office agreed Oct 2023 to sell its 25% stake so SSCL becomes wholly owned by Sopra Steria (completion not confirmed in sources found)","scores":{"D1":null,"D2":3,"D3":null,"D4":2,"D5":0,"D6":0,"D7":2,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.1111111111111112},"refs":[{"id":"R077","author":"Contracts Finder","year":"2020","title":"Contract notice 8ba9a0aa-bd58-4f27-af2f-0ab35ea26b46","url":"https://www.contractsfinder.service.gov.uk/Notice/8ba9a0aa-bd58-4f27-af2f-0ab35ea26b46"},{"id":"R261","author":"GOV.UK","year":"n.d.","title":"45 million to be reinvested in government to boost long term productivity as the cabinet office sells stake in sscl","url":"https://www.gov.uk/government/news/45-million-to-be-reinvested-in-government-to-boost-long-term-productivity-as-the-cabinet-office-sells-stake-in-sscl"}]},{"id":"DEF-042","entity":"Defence","subUnit":"NAD Group / DE&S (BMfS)","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"DEEAMS – Defence Equipment Engineering and Asset Management System replacing 17 applications","vendor":"IBM UK","vendorCountry":"GB","vendorTier":"T1 UK","owner":"IBM Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.gov.uk/government/news/final-piece-in-place-for-defence-support-transformation","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":65000,"seatsBasis":"Users across 130 platforms and assets","dataFormat":"Not published","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Engineering records","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":320000000,"spendPeriod":"Contract announced Oct 2025 (term not stated)","evidence":"Reported","notes":"AI-enabled maintenance, stock and engineering planning platform; underlying product not named. GOV.UK (Feb 2026) confirms the £320m BMfS asset-management contract but not the supplier.","dimsNote":"US-owned prime; product and hosting not published","scores":{"D1":null,"D2":3,"D3":null,"D4":2,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1},"refs":[{"id":"R372","author":"Pathfinderinternational","year":"2025","title":"320 million contract announced for new defence equipment management system","url":"https://pathfinderinternational.co.uk/320-million-contract-announced-for-new-defence-equipment-management-system/?amp=1"},{"id":"R256","author":"GOV.UK","year":"2026","title":"Final piece in place for defence support transformation","url":"https://www.gov.uk/government/news/final-piece-in-place-for-defence-support-transformation"}]},{"id":"DEF-043","entity":"Defence","subUnit":"NAD Group / DE&S (BMfS)","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Defence Logistics Information Services (DLIS): warehousing, freight, munitions and movements IS replacing 10 systems","vendor":"Digital Allies (PA Consulting and Accenture)","vendorCountry":"Mixed","vendorTier":"Unknown","owner":"Jacobs Solutions Inc / Accenture plc","ownerCountry":"Mixed","ownershipChange":"Yes – Jacobs acquired 65% of PA Consulting, completed 2 Mar 2021","ownershipSource":"https://www.consulting.us/news/5639/jacobs-closes-majority-investment-in-pa-consulting","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"Not published","dataFormat":"Not published","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Process change","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":113000000,"spendPeriod":"Awarded Feb 2026","evidence":"Confirmed","notes":"Third and final major Business Modernisation for Support contract (BMfS total £466m incl. £320m asset management and £33m Foundational Services \"digital socket\"). Software product not named.","dimsNote":"PA (UK-founded, US-owned) and Accenture (Irish-domiciled); up to 170 UK jobs","scores":{"D1":null,"D2":null,"D3":null,"D4":2,"D5":1.5,"D6":0,"D7":null,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":0.9285714285714286},"refs":[{"id":"R256","author":"GOV.UK","year":"2026","title":"Final piece in place for defence support transformation","url":"https://www.gov.uk/government/news/final-piece-in-place-for-defence-support-transformation"},{"id":"R076","author":"Consulting","year":"n.d.","title":"Jacobs closes majority investment in pa consulting","url":"https://www.consulting.us/news/5639/jacobs-closes-majority-investment-in-pa-consulting"}]},{"id":"DEF-044","entity":"Defence","subUnit":"DE&S","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Logistics Information Systems (LogIS / FLIS): inventory, transport, engineering and general-ledger systems for all three services","vendor":"Boeing Defence UK","vendorCountry":"GB","vendorTier":"T1 UK","owner":"The Boeing Company","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://computerweekly.com/news/366567094/PAC-calls-on-MoD-to-fix-inventory-management-IT","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"All single services","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Legacy data;Single-source history","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":460000000,"spendPeriod":"5 years from Jan 2022","evidence":"Confirmed","notes":"Supply chain incl. IBM, Fujitsu, Sopra Steria, BAE Systems. PAC (Jan 2024): FLIS £800m 2010, £515m non-competed 2020 extension; Army/Navy inventory systems ~40 years old; 11 MoD systems red-rated for legacy risk.","dimsNote":"US-owned prime; ~300 jobs at Milton Keynes and Bristol","scores":{"D1":null,"D2":3,"D3":null,"D4":2,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1},"refs":[{"id":"R223","author":"GOV.UK","year":"2022","title":"460 million logistics contract to sustain more than 600 UK jobs","url":"https://www.gov.uk/government/news/460-million-logistics-contract-to-sustain-more-than-600-uk-jobs"},{"id":"R060","author":"Computer Weekly","year":"n.d.","title":"Pac calls on MOD to fix inventory management IT","url":"https://computerweekly.com/news/366567094/PAC-calls-on-MoD-to-fix-inventory-management-IT"}]},{"id":"GOV-064","entity":"Defence","subUnit":"MoD","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Oracle (Defence finance & civilian HR; Overseas cluster on Oracle Fusion)","vendor":"Oracle (Capgemini SI for Overseas)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Oracle","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"Defence and FCDO-led Overseas cluster","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Conversion","osAlternative":"","sovereignAlternative":"SAP (DE)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":90000000,"spendPeriod":"Overseas cluster Capgemini contract","evidence":"Reported","notes":"Oracle now underpins ERP for Synergy, Overseas, Defence and HM Treasury: the dominant ERP vendor in central government.","dimsNote":"Oracle dominant across four ERP estates; SI Capgemini is FR","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":0.45},"refs":[{"id":"R466","author":"The Register","year":"2026","title":"Shared services danger zone","url":"https://www.theregister.com/2026/03/09/shared_services_danger_zone/"}]},{"id":"DEF-045","entity":"Defence","subUnit":"Armed forces recruitment","layerId":"B2","layer":"CRM","group":"Business apps","product":"Armed Forces Recruitment Service (tri-service): attraction to onboarding on a Pega platform","vendor":"Serco (with Pegasystems)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Serco Group plc","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"Royal Navy, Army, RAF, Strategic Command candidates","dataFormat":"Pega case model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Candidate data;Process re-build","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":1500000000,"spendPeriod":"7 years + up to 3 (full service early 2027)","evidence":"Reported","notes":"Replaces Capita (Army) from April 2027 after 21-month mobilisation; Team Serco: Pegasystems, Adecco, Akkodis, TMP, Optima Health, PA Consulting, MPCT. Hosting not stated.","dimsNote":"UK prime; core platform from US Pegasystems; no published evidence of customer-held keys","scores":{"D1":null,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":1.25},"refs":[{"id":"R516","author":"Ukdefencejournal","year":"2025","title":"Serco awarded forces recruitment contract in blow to capita","url":"https://ukdefencejournal.org.uk/serco-awarded-forces-recruitment-contract-in-blow-to-capita/"}]},{"id":"DEF-046","entity":"Defence","subUnit":"British Army","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Recruiting Partnering Project: Army recruitment service with bespoke ICT system","vendor":"Capita","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Capita plc","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"Army recruitment pipeline","dataFormat":"Proprietary (bespoke)","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Contract exit;Data migration","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":1151042801,"spendPeriod":"Mar 2012 – 31 Mar 2027 (total after modifications)","evidence":"Confirmed","notes":"Extended to Mar 2027 because the replacement (Serco AFRS) starts Apr 2027; original advertised value £500m. Army met 63% of its 2024 target (Defence Committee, Dec 2024).","dimsNote":"UK-owned outsourcer","scores":{"D1":null,"D2":3,"D3":null,"D4":2,"D5":0,"D6":0,"D7":3,"D8":0,"D9":null,"D10":0,"D11":3,"D12":3,"overall":1.5555555555555556},"refs":[{"id":"R166","author":"Find a Tender Service","year":"2025","title":"Contract notice 023665-2025","url":"https://www.find-tender.service.gov.uk/Notice/023665-2025"}]},{"id":"DEF-047","entity":"Defence","subUnit":"DE&S / Defence Logistics","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Logistics, Commodities and Services Transformation (LCST): procurement, inventory, storage and distribution of ~70,000 NSNs","vendor":"Leidos (with TVS Supply Chain Solutions, Kuehne+Nagel)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Leidos Holdings Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.gov.uk/government/news/mod-announces-contract-to-run-military-logistics","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"~70,000 NATO Stock Numbers","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Inventory data;Warehouse operations","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"High","ukCapability":"Partial","ukValueCapture":"Medium","spend":6700000000,"spendPeriod":"13 years from Apr 2015","evidence":"Confirmed","notes":"Formerly in-house; 2015 award included £40m new IT systems and a Donnington fulfilment centre; ~1,250 staff TUPE to Leidos. Leidos Supply runs public tenders as a contracting authority.","dimsNote":"US prime controls the defence commodity supply chain and its IT","scores":{"D1":null,"D2":1,"D3":null,"D4":2,"D5":0,"D6":0,"D7":1,"D8":0,"D9":0,"D10":0,"D11":1.5,"D12":1.5,"overall":0.7},"refs":[{"id":"R183","author":"Find a Tender Service","year":"2025","title":"Contract notice 083081-2025","url":"https://www.find-tender.service.gov.uk/Notice/083081-2025"},{"id":"R267","author":"GOV.UK","year":"n.d.","title":"MOD announces contract to run military logistics","url":"https://www.gov.uk/government/news/mod-announces-contract-to-run-military-logistics"}]},{"id":"DEF-048","entity":"Defence","subUnit":"Defence Medical Services (Programme CORTISONE)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Electronic health record for armed forces primary care, community and rehabilitation (NHS-integrated)","vendor":"TPP (The Phoenix Partnership)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"The Phoenix Partnership (Leeds) Ltd","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"Recruits, serving personnel, service leavers, families","dataFormat":"Proprietary (NHS-interoperable)","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Clinical data migration","osAlternative":"","sovereignAlternative":"TPP is UK-owned","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":7800000,"spendPeriod":"Awarded Jan 2026; live by 2027","evidence":"Confirmed","notes":"Replaces paper military records and integrates with NHS for the first time; separate £2.5m contract for the Mercury app for medics on operations.","dimsNote":"UK-owned clinical software firm (Leeds); hosting not stated; no published evidence of customer-held keys","scores":{"D1":null,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":0,"D9":null,"D10":0,"D11":3,"D12":3,"overall":1.55},"refs":[{"id":"R257","author":"GOV.UK","year":"2026","title":"New digital medical records to speed up armed forces recruitment","url":"https://www.gov.uk/government/news/new-digital-medical-records-to-speed-up-armed-forces-recruitment"}]},{"id":"DEF-049","entity":"Defence","subUnit":"Defence Medical Services","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"DMICP – Defence Medical Information Capability Programme (EMIS PCS-based records, hosted by CGI in Wales)","vendor":"EMIS (with CGI)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"TPG (via Optum UK)","ownerCountry":"US","ownershipChange":"Yes – EMIS acquired by UnitedHealth/Optum (US) Oct 2023; Optum UK (incl. EMIS) sold to TPG (US), completed Mar 2026","ownershipSource":"https://managementinpractice.com/news/emis-1-2bn-takeover-by-us-healthcare-giant-has-completed/","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":200000,"seatsBasis":"Service personnel served (plus ~50,000 dependants); up to 2,500 concurrent users","dataFormat":"EMIS PCS proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Clinical data migration","osAlternative":"","sovereignAlternative":"TPP (GB) selected for CORTISONE EHR","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":80000000,"spendPeriod":"10-year project from 2006 (LogicaCMG)","evidence":"Reported","notes":"CGI (which bought Logica) hosts DMICP in its secure Wales data centre: 350,000+ records, 20,000 consultations/day, ~500 facilities. Being replaced via CORTISONE (TPP EHR; dental system pipeline £3.76m, 2026–2034).","dimsNote":"UK-origin clinical software now US PE-owned; CGI (CA) operates UK hosting per CGI case study; TPG sale per Becker's Payer (https://www.beckerspayer.com/m-and-a/unitedhealth-completes-sale-of-uk-business-to-tpg/)","scores":{"D1":3,"D2":3,"D3":3,"D4":2,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":1.2272727272727273},"refs":[{"id":"R107","author":"Digital Health","year":"2007","title":"Forces medical records system ready to roll out","url":"https://www.digitalhealth.net/2007/08/forces-medical-records-system-ready-to-roll-out/"},{"id":"R321","author":"Managementinpractice","year":"n.d.","title":"Emis 1 2bn takeover by US healthcare giant has completed","url":"https://managementinpractice.com/news/emis-1-2bn-takeover-by-us-healthcare-giant-has-completed/"}]},{"id":"DEF-050","entity":"Defence","subUnit":"Defence Medical Services (Programme CORTISONE)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"CORTISONE delivery partner: architecture, environments, integration and support for medical information services","vendor":"Atos","vendorCountry":"FR","vendorTier":"T2 EU/EEA","owner":"Atos SE","ownerCountry":"FR","ownershipChange":"Yes – Atos financial restructuring closed 18 Dec 2024, creditors taking ~90% of equity","ownershipSource":"https://www.atosgroup.com/en/press/atos-opens-a-new-chapter-with-the-successful-closing-of-its-financial-restructuring","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"Defence Medical Services","dataFormat":"N/A (integration)","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Integrator knowledge","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":25000000,"spendPeriod":"Estimated (2019 award); further 3+1-year award Dec 2022","evidence":"Reported","notes":"Atos announced a further CORTISONE ecosystem contract in Dec 2022 (value not stated). CORTISONE uses COTS products to replace and extend DMICP.","dimsNote":"French integrator whose ownership passed to creditors in 2024","scores":{"D1":null,"D2":2,"D3":null,"D4":2,"D5":0,"D6":null,"D7":2,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":1.125},"refs":[{"id":"R295","author":"Intelligentcio","year":"2019","title":"Ministry of defence selects atos to enable digital transformation of healthcare","url":"https://www.intelligentcio.com/eu/2019/10/14/ministry-of-defence-selects-atos-to-enable-digital-transformation-of-healthcare/"},{"id":"R012","author":"Atos","year":"n.d.","title":"Atos opens a new chapter with the successful closing of its financial restructuring","url":"https://www.atosgroup.com/en/press/atos-opens-a-new-chapter-with-the-successful-closing-of-its-financial-restructuring"}]},{"id":"DEF-051","entity":"Defence","subUnit":"British Army (THEIA)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"SitaWare Headquarters command-and-control software for all brigades and divisions (plus ARRC)","vendor":"Systematic","vendorCountry":"DK","vendorTier":"T2 EU/EEA","owner":"Systematic A/S","ownerCountry":"DK","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"Mixed","prevalence":"Dominant","seats":1400,"seatsBasis":"New licences in 2023 order","dataFormat":"Proprietary (NATO-interoperable)","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Training;Interoperability","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Vendor announcement; value not disclosed. Part of the Army's THEIA digital programme.","dimsNote":"Danish-owned C2 software; no ownership change found in sources reviewed","scores":{"D1":1,"D2":2,"D3":3,"D4":2,"D5":1.5,"D6":0,"D7":2,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":1.0454545454545454},"refs":[{"id":"R431","author":"Systematic","year":"2023","title":"2023 british army makes major commitment to sitaware","url":"https://systematic.com/us/industries/defense/news-knowledge/news/2023_british-army-makes-major-commitment-to-sitaware/"}]},{"id":"DEF-052","entity":"Defence","subUnit":"Strategic Command (jHub)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Anduril Lattice command-and-control software for force protection of Permanent Joint Operating Bases (Project TALOS)","vendor":"Anduril Industries","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Anduril Industries Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Niche","seats":null,"seatsBasis":"Permanent Joint Operating Bases","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Sensor integration","osAlternative":"","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"High","ukCapability":"None","ukValueCapture":"Low","spend":24000000,"spendPeriod":"31 months from 2023 (£17m initial, up to £24m)","evidence":"Reported","notes":"Anduril UK is also one of 26 suppliers on the DDAD/ASGARD framework.","dimsNote":"US-owned software; operator location not published; no published evidence of customer-held keys","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":0,"D10":0,"D11":0,"D12":0,"overall":0.4090909090909091},"refs":[{"id":"R520","author":"Unmannedairspace","year":"2023","title":"UK MOD orders c uas solutions from anduril as part of major force protection contract","url":"https://www.unmannedairspace.info/counter-uas-systems-and-policies/uk-mod-orders-c-uas-solutions-from-anduril-as-part-of-major-force-protection-contract/"}]},{"id":"DEF-053","entity":"Defence","subUnit":"Defence Digital","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Defence IT service desk and service centres (Nairn and Inverness)","vendor":"Capgemini","vendorCountry":"FR","vendorTier":"T2 EU/EEA","owner":"Capgemini SE","ownerCountry":"FR","ownershipChange":"No","ownershipSource":"https://www.thestack.technology/mod-dangles-168m-for-it-service-desk-support/","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":200000,"seatsBasis":"Defence users supported","dataFormat":"N/A (service)","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Transition;Knowledge base","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":225000000,"spendPeriod":"5 years (from 2021; retender £168m for 2027–2032)","evidence":"Confirmed","notes":"Over 250 jobs in the Highlands. The Stack (Aug 2025): successor estimated at £168m for 10 Jun 2027 – 9 Jun 2032, ~220,000 users across OFFICIAL and SECRET.","dimsNote":"French-owned provider delivering from UK centres","scores":{"D1":3,"D2":2,"D3":null,"D4":2,"D5":3,"D6":null,"D7":2,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.8333333333333333},"refs":[{"id":"R222","author":"GOV.UK","year":"2021","title":"Highlands opens largest IT service centres in europe","url":"https://www.gov.uk/government/news/highlands-opens-largest-it-service-centres-in-europe"},{"id":"R478","author":"The Stack","year":"n.d.","title":"MOD dangles 168m for IT service desk support","url":"https://www.thestack.technology/mod-dangles-168m-for-it-service-desk-support/"}]},{"id":"DEF-054","entity":"Defence","subUnit":"Defence Digital","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"IT service management tooling (BMC Remedy service desk; DD ITSM Tooling Service Partner)","vendor":"BMC Software","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"BMC Software (private-equity owned)","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.contractsfinder.service.gov.uk/Notice/762e648a-9bbd-4e1c-a237-a7120b6d147f","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"ISS/Defence Digital service desk","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Ticket history;Integrations","osAlternative":"iTop / GLPI","sovereignAlternative":"None","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":5700000,"spendPeriod":"Approx. annual ITSM cost (2019 FOI)","evidence":"Confirmed","notes":"FOI: Remedy plus Eracent, Riverbed NetIM and BMC Discovery; no contracts tie MoD to the tooling. 2022 tender for a £55m ITSM Tooling Service Partner (Apr 2023 – Mar 2027) names no product; current tool not confirmed.","dimsNote":"US vendor; ownership changes not verified this session","scores":{"D1":null,"D2":1,"D3":3,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":1},"refs":[{"id":"R218","author":"GOV.UK","year":"2019","title":"2020 foi 12373 service management final","url":"https://assets.publishing.service.gov.uk/media/5ea6bc25d3bf7f7b4a8f6f36/2020-FOI-12373-Service_Management-Final.pdf"},{"id":"R091","author":"Contracts Finder","year":"n.d.","title":"Contract notice 762e648a-9bbd-4e1c-a237-a7120b6d147f","url":"https://www.contractsfinder.service.gov.uk/Notice/762e648a-9bbd-4e1c-a237-a7120b6d147f"}]},{"id":"GOV-070","entity":"Defence","subUnit":"MoD","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Palantir defence AI/decision-support (strategic partnership)","vendor":"Palantir","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Palantir Technologies","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.publictechnology.net/2026/01/29/defence-and-security/mod-signs-240m-palantir-deal-as-ministers-insist-uk-defence-data-remains-sovereign/","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Armed Forces planning/targeting users","dataFormat":"Proprietary (Foundry ontology)","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Conversion;Re-platforming;Skills","osAlternative":"","sovereignAlternative":"Adarga (GB); Faculty (GB)","operator":"UK cleared","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":750000000,"spendPeriod":"Up to 5 years from Sep 2025","evidence":"Reported","notes":"Palantir pledged up to £1.5bn UK investment and London as European defence HQ. Covers decision support, planning and targeting.","dimsNote":"Minister: data stays MoD-owned on MoD-controlled system; software and ontology remain Palantir IP","scores":{"D1":3,"D2":1,"D3":3,"D4":3,"D5":0,"D6":0,"D7":1,"D8":1.5,"D9":null,"D10":0,"D11":0,"D12":0,"overall":1.1363636363636365},"refs":[{"id":"R070","author":"Computing","year":"2025","title":"UK signs defence AI partnership palantir","url":"https://www.computing.co.uk/news/2025/ai/uk-signs-defence-ai-partnership-palantir"},{"id":"R394","author":"PublicTechnology","year":"2026","title":"MOD signs 240m palantir deal as ministers insist UK defence data remains sovereign","url":"https://www.publictechnology.net/2026/01/29/defence-and-security/mod-signs-240m-palantir-deal-as-ministers-insist-uk-defence-data-remains-sovereign/"}]},{"id":"DEF-055","entity":"Defence","subUnit":"Defence Digital","layerId":"B4","layer":"Data & analytics","group":"Business apps","product":"Defence Data Analytics Platform (DDAP) – enablement partner (built on AWS)","vendor":"Kainos","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Kainos Group plc","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.kainos.com/insights/news/kainos-extends-partnership-with-ministry-of-defence-to-drive-data-and-ai-innovation-with-enhanced-platform-capabilities","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"Royal Navy, Army, RAF and support organisations","dataFormat":"Not published","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Pipelines;Cloud services","osAlternative":"Apache Spark / open lakehouse","sovereignAlternative":"","operator":"UK","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":50000000,"spendPeriod":"6 Jan 2025 – 6 Jan 2028","evidence":"Confirmed","notes":"Call-off from DIPS framework (RM6249). Earlier DDAP contract with Cognizant (£8.6m, G-Cloud, 2022-23). Separate from Palantir analytics (GOV-071).","dimsNote":"UK (Belfast) integrator on US AWS infrastructure; no published evidence of customer-held keys","scores":{"D1":null,"D2":3,"D3":0,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":1.5,"D9":null,"D10":1.5,"D11":3,"D12":3,"overall":1.85},"refs":[{"id":"R082","author":"Contracts Finder","year":"2025","title":"Contract notice 019cc5e2-e79f-4d11-ae95-402ad10a4c5d","url":"https://www.contractsfinder.service.gov.uk/Notice/019cc5e2-e79f-4d11-ae95-402ad10a4c5d"},{"id":"R311","author":"Kainos","year":"2025","title":"Kainos extends partnership with ministry of defence to drive data and AI innovation with enhanced platform capabilities","url":"https://www.kainos.com/insights/news/kainos-extends-partnership-with-ministry-of-defence-to-drive-data-and-ai-innovation-with-enhanced-platform-capabilities"}]},{"id":"DEF-056","entity":"Defence","subUnit":"British Army","layerId":"B4","layer":"Data & analytics","group":"Business apps","product":"Land Domain Data Fabric minimum viable product","vendor":"Telicent","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Telicent Ltd","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Niche","seats":null,"seatsBasis":"Army foundational data infrastructure (MVP)","dataFormat":"Not published","formatOwner":"Vendor","openSpec":"Partial","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Early stage","osAlternative":"","sovereignAlternative":"Telicent is UK-owned","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":619875,"spendPeriod":"Concluded 5 Nov 2025","evidence":"Confirmed","notes":"Direct award via G-Cloud 14 configuring components already used in other MOD projects; limited scope published (sensitive). Telicent is also on the DDAD/ASGARD framework.","dimsNote":"UK SME (London)","scores":{"D1":null,"D2":3,"D3":null,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":0,"D9":null,"D10":3,"D11":3,"D12":3,"overall":2.0555555555555554},"refs":[{"id":"R182","author":"Find a Tender Service","year":"2025","title":"Contract notice 079708-2025","url":"https://www.find-tender.service.gov.uk/Notice/079708-2025"}]},{"id":"DEF-057","entity":"Defence","subUnit":"Royal Navy","layerId":"B4","layer":"Data & analytics","group":"Business apps","product":"NELSON big-data and analytics platform (ashore and at sea)","vendor":"Royal Navy (developed with CTI Digital)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Ministry of Defence (Royal Navy)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"Navy developers, officers, civil servants, some suppliers","dataFormat":"Not published","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"App re-platforming","osAlternative":"","sovereignAlternative":"","operator":"Customer (in-house UK team)","keyCustody":"N/A","codeModelControl":"Self-hosted / open","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Design standards toolkit and boilerplate app published as open source; hosting/core technology not stated.","dimsNote":"MoD-owned platform with UK delivery partner; underlying stack not published","scores":{"D1":null,"D2":3,"D3":null,"D4":3,"D5":1.5,"D6":3,"D7":3,"D8":3,"D9":null,"D10":1.5,"D11":3,"D12":3,"overall":2.6666666666666665},"refs":[{"id":"R497","author":"UKAuthority","year":"2019","title":"Navy aims to build up use of nelson platform","url":"https://ukauthority.com/articles/navy-aims-to-build-up-use-of-nelson-platform/"}]},{"id":"GOV-071","entity":"Defence","subUnit":"MoD","layerId":"B4","layer":"Data & analytics","group":"Business apps","product":"MOD Palantir Enterprise Agreement (data analytics licensing & support)","vendor":"Palantir","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Palantir Technologies","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.publictechnology.net/2026/01/29/defence-and-security/mod-signs-240m-palantir-deal-as-ministers-insist-uk-defence-data-remains-sovereign/","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Defence analytics users","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Conversion;Skills","osAlternative":"Apache Spark / open lakehouse","sovereignAlternative":"Faculty (GB); Adarga (GB)","operator":"UK cleared","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":240600000,"spendPeriod":"1 Apr 2026-31 Mar 2029","evidence":"Confirmed","notes":"Follow-on agreement signed 30 Dec 2025; sits alongside the £750m strategic partnership.","dimsNote":"Data MoD-owned under contractual controls; deep proprietary lock-in to Foundry","scores":{"D1":3,"D2":1,"D3":3,"D4":3,"D5":0,"D6":0,"D7":1,"D8":1.5,"D9":null,"D10":0,"D11":0,"D12":0,"overall":1.1363636363636365},"refs":[{"id":"R186","author":"Find a Tender Service","year":"2026","title":"Contract notice 006088-2026","url":"https://www.find-tender.service.gov.uk/Notice/006088-2026/PDF"},{"id":"R394","author":"PublicTechnology","year":"2026","title":"MOD signs 240m palantir deal as ministers insist UK defence data remains sovereign","url":"https://www.publictechnology.net/2026/01/29/defence-and-security/mod-signs-240m-palantir-deal-as-ministers-insist-uk-defence-data-remains-sovereign/"}]},{"id":"DEF-058","entity":"Defence","subUnit":"DE&S","layerId":"A1","layer":"Foundation models","group":"AI","product":"OpenAI GPT model behind a DE&S cyber and security compliance chatbot hosted on MoD Cloud","vendor":"OpenAI","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"OpenAI","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Niche","seats":null,"seatsBasis":"DE&S staff","dataFormat":"Prompts/answers (no portability standard)","formatOwner":"Vendor","openSpec":"No","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Prompt/eval rework","osAlternative":"Llama / Mistral open-weight models","sovereignAlternative":"None at frontier scale","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Answers Secure by Design and minimum cyber requirement questions; trained on defence data; model version and hosting provider not stated.","dimsNote":"US model; no published evidence of customer-held keys","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":3,"D11":0,"D12":0,"overall":0.75},"refs":[{"id":"R102","author":"Des","year":"2024","title":"Des exploit AI to drive efficiencies in cyber and security compliance 2","url":"https://des.mod.uk/des-exploit-ai-to-drive-efficiencies-in-cyber-and-security-compliance-2"}]},{"id":"DEF-059","entity":"Defence","subUnit":"Cross-defence","layerId":"A1","layer":"Foundation models","group":"AI","product":"Microsoft 365 Copilot","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Secondary","seats":null,"seatsBasis":"Not disclosed","dataFormat":"N/A","formatOwner":"Vendor","openSpec":"No","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Licensing","osAlternative":"Open-weight models self-hosted","sovereignAlternative":"None at scale","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Written answer (PQ 13644): MoD uses \"Microsoft 365 Copilot and Chat-MOD\" and will not disclose a full list of AI tools, suppliers or contracts.","dimsNote":"US SaaS; no published evidence of customer-held keys","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":3,"D11":0,"D12":0,"overall":0.75},"refs":[{"id":"R532","author":"Westminsterbrief","year":"2026","title":"[Title to be confirmed]","url":"https://westminsterbrief.co.uk/archive/pq/13644"}]},{"id":"DEF-060","entity":"Defence","subUnit":"DE&S / Defence AI Centre","layerId":"A2","layer":"AI platform & hosting","group":"AI","product":"Chat-MoD secure generative-AI assistant (chatmod.desdigital.mod.uk)","vendor":"MoD (DE&S and DAIC; underlying model not named)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Ministry of Defence","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Primary","seats":2000,"seatsBasis":"Users since launch (10,000 queries/day)","dataFormat":"Not published","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Low","exitCostDrivers":"Model swap","osAlternative":"Open-weight models","sovereignAlternative":"UK-built front end","operator":"Customer (in-house UK team)","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Described as a secure version of ChatGPT; accessed from MODNET desktops, iPads and iPhones; model provider not disclosed.","dimsNote":"MoD-built service; foundation model owner not published","scores":{"D1":null,"D2":3,"D3":null,"D4":3,"D5":1.5,"D6":0,"D7":3,"D8":3,"D9":null,"D10":2.25,"D11":1.5,"D12":1.5,"overall":2.0833333333333335},"refs":[{"id":"R010","author":"Army","year":"2025","title":"Move over chat gpt","url":"https://soldier.army.mod.uk/issues/march-2025/soldier-life/technology/move-over-chat-gpt"}]},{"id":"DEF-061","entity":"Defence","subUnit":"British Army (ASGARD)","layerId":"A2","layer":"AI platform & hosting","group":"AI","product":"Digital Decision Accelerators for Defence (DDAD) open framework – AI/ML decision-support software for ASGARD","vendor":"26 suppliers incl. Anduril, Helsing, Faculty, Oracle, QinetiQ, Roke, Telicent","vendorCountry":"Mixed","vendorTier":"Unknown","owner":"Multiple","ownerCountry":"Mixed","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"26 suppliers (14 UK SMEs)","dataFormat":"Not published","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Multi-vendor integration","osAlternative":"","sovereignAlternative":"UK SMEs on framework","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Medium","spend":180000000,"spendPeriod":"Core period from Jan 2026 (ceiling, ex VAT)","evidence":"Confirmed","notes":"Five lots: data integration, accelerators, applications, edge storage and compute, services. Primary route for ASGARD (Army Transformative Capability Initiative), open to periodic re-entry.","dimsNote":"Mix of UK SMEs and US/EU primes (Anduril US, Helsing DE, Oracle US, Atos FR, CACI US, Cognizant US)","scores":{"D1":null,"D2":null,"D3":null,"D4":2,"D5":1.5,"D6":0,"D7":null,"D8":0,"D9":1.5,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.1875},"refs":[{"id":"R089","author":"Contracts Finder","year":"2026","title":"Contract notice 7aafc1b3-ff70-4d93-a920-a3e9100923f2","url":"https://www.contractsfinder.service.gov.uk/Notice/7aafc1b3-ff70-4d93-a920-a3e9100923f2"}]},{"id":"DEF-062","entity":"Defence","subUnit":"Defence AI Centre","layerId":"A2","layer":"AI platform & hosting","group":"AI","product":"AI technical and data science support to DAIC programmes (5 lots incl. Generative AI and AI Assurance)","vendor":"Capgemini; Deloitte; Applied Data Science Partners; Rowden Technologies; Advai","vendorCountry":"Mixed","vendorTier":"Unknown","owner":"Multiple","ownerCountry":"Mixed","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"DAIC programmes","dataFormat":"N/A (services)","formatOwner":"Vendor","openSpec":"Partial","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Knowledge transfer","osAlternative":"","sovereignAlternative":"UK SMEs (ADSP, Rowden, Advai)","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Medium","spend":17500000,"spendPeriod":"Framework concluded Dec 2025","evidence":"Confirmed","notes":"Lot 1 Capgemini (data & tech), Lot 2 Deloitte (assurance), Lot 3 ADSP (GenAI), Lot 4 Rowden (battlespace), Lot 5 Advai (data science).","dimsNote":"Three of five lots to UK SMEs","scores":{"D1":null,"D2":null,"D3":null,"D4":2,"D5":3,"D6":null,"D7":null,"D8":3,"D9":null,"D10":3,"D11":3,"D12":1.5,"overall":2.5833333333333335},"refs":[{"id":"R184","author":"Find a Tender Service","year":"2025","title":"Contract notice 083515-2025","url":"https://www.find-tender.service.gov.uk/Notice/083515-2025"}]},{"id":"DEF-063","entity":"Defence","subUnit":"Defence Digital","layerId":"A2","layer":"AI platform & hosting","group":"AI","product":"Hadean AI-enabled spatial computing platform (digital twins, synthetic environments) – R&D enterprise agreement","vendor":"Hadean","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Hadean Supercomputing Ltd","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Niche","seats":null,"seatsBasis":"Not published","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Platform lock-in","osAlternative":"","sovereignAlternative":"Hadean is UK-owned","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":20000000,"spendPeriod":"Up to £20m (notice also shows £2m)","evidence":"Confirmed","notes":"Negotiated without prior publication (research/development exemption); notice is internally inconsistent on value.","dimsNote":"UK SME (London)","scores":{"D1":null,"D2":3,"D3":null,"D4":2,"D5":1.5,"D6":0,"D7":3,"D8":0,"D9":null,"D10":1.5,"D11":3,"D12":3,"overall":1.8888888888888888},"refs":[{"id":"R155","author":"Find a Tender Service","year":"2024","title":"Contract notice 037739-2024","url":"https://www.find-tender.service.gov.uk/Notice/037739-2024"}]},{"id":"DEF-064","entity":"Defence","subUnit":"Dstl","layerId":"A2","layer":"AI platform & hosting","group":"AI","product":"Dstl–Google Cloud AI collaboration (MoU): access to Google Cloud AI tools, Marketplace and training","vendor":"Google Cloud","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Alphabet Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Niche","seats":null,"seatsBasis":"Dstl researchers","dataFormat":"N/A","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Low","exitCostDrivers":"Platform-specific skills","osAlternative":"Open-source ML stack","sovereignAlternative":"","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Signed 14 Jun 2023; no value; distinct from the Google Distributed Cloud SECRET contract (GOV-017).","dimsNote":"US hyperscaler; hosting not stated; no published evidence of customer-held keys","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":3,"D6":0,"D7":1,"D8":0,"D9":null,"D10":2.25,"D11":0,"D12":0,"overall":0.825},"refs":[{"id":"R226","author":"GOV.UK","year":"2023","title":"Dstl and google cloud sign a mou as part of new AI collaboration","url":"https://gov.uk/government/news/dstl-and-google-cloud-sign-a-mou-as-part-of-new-ai-collaboration"}]},{"id":"DEF-066","entity":"Defence","subUnit":"Defensive Cyber Operations","layerId":"SE2","layer":"SIEM / SOC","group":"Security","product":"Elastic SIEM licences and support for Defensive Cyber Operations big-data analytics","vendor":"Elastic (via Centerprise International)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Elastic NV","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Open core","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"Not published","dataFormat":"Elasticsearch indices","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Detection rules;Data volume","osAlternative":"OpenSearch (Apache 2.0)","sovereignAlternative":"None","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Version-pinnable","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":7809234,"spendPeriod":"Published Apr 2025","evidence":"Confirmed","notes":"Notice says DCO big-data analytics depend on SIEM as a core capability; reseller Centerprise is UK-based.","dimsNote":"Elastic is US-headquartered (NL-registered); self-managed licence implies MoD-run deployment but hosting not stated","scores":{"D1":null,"D2":1,"D3":3,"D4":2,"D5":1.5,"D6":1.5,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":1.3},"refs":[{"id":"R489","author":"UK Spending","year":"2025","title":"[Title to be confirmed]","url":"https://ukspending.com/contracts/67538"}]},{"id":"DEF-067","entity":"Defence","subUnit":"Defence Digital","layerId":"SE2","layer":"SIEM / SOC","group":"Security","product":"Access to Microsoft Threat Analysis Centre (MTAC) nation-state threat intelligence","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corp","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Secondary","seats":null,"seatsBasis":"Not published","dataFormat":"N/A","formatOwner":"Vendor","openSpec":"No","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Intel feed dependency","osAlternative":"","sovereignAlternative":"NCSC / UK threat-intel firms","operator":"Vendor-global","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":13320612,"spendPeriod":"2 years (2026–2028)","evidence":"Reported","notes":"Restricted procedure, Microsoft sole bidder; award decision 1 Apr 2026.","dimsNote":"US vendor intelligence service","scores":{"D1":null,"D2":1,"D3":null,"D4":1,"D5":3,"D6":0,"D7":1,"D8":0,"D9":null,"D10":3,"D11":1.5,"D12":0,"overall":1.1666666666666667},"refs":[{"id":"R518","author":"Ukdefencejournal","year":"2026","title":"UK awards microsoft 13 3m threat analysis contract","url":"https://ukdefencejournal.org.uk/uk-awards-microsoft-13-3m-threat-analysis-contract/"}]},{"id":"DEF-068","entity":"Defence","subUnit":"Atomic Weapons Establishment","layerId":"SE2","layer":"SIEM / SOC","group":"Security","product":"AWE cyber security services","vendor":"BT","vendorCountry":"GB","vendorTier":"T1 UK","owner":"BT Group plc","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"https://www.theweek.in/wire-updates/business/2024/11/18/dcm93-biz-bharti-global-bt.html","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"AWE","dataFormat":"N/A (services)","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Transition","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":15000000,"spendPeriod":"1 Oct 2024 – 30 Sep 2027","evidence":"Confirmed","notes":"Call-off via CCS (CCIT22A15) on behalf of AWE.","dimsNote":"UK telco/security provider; Ownership: Bharti Global bought Altice UK's 24.5% stake, becoming BT's largest shareholder, completed 18 Nov 2024 — a minority stake, not a change of control","scores":{"D1":null,"D2":3,"D3":null,"D4":2,"D5":3,"D6":null,"D7":3,"D8":0,"D9":null,"D10":1.5,"D11":3,"D12":3,"overall":2.3125},"refs":[{"id":"R081","author":"Contracts Finder","year":"2024","title":"Contract notice 28a65c3a-bab0-4e6e-b16f-ac2d4b6ca7cf","url":"https://www.contractsfinder.service.gov.uk/Notice/28a65c3a-bab0-4e6e-b16f-ac2d4b6ca7cf"},{"id":"R480","author":"Theweek","year":"n.d.","title":"Dcm93 biz bharti global bt","url":"https://www.theweek.in/wire-updates/business/2024/11/18/dcm93-biz-bharti-global-bt.html"}]},{"id":"DEF-069","entity":"Defence","subUnit":"DE&S","layerId":"SE2","layer":"SIEM / SOC","group":"Security","product":"Support for the DE&S Security Operations Centre","vendor":"Accenture","vendorCountry":"IE","vendorTier":"T2 EU/EEA","owner":"Accenture plc","ownerCountry":"IE","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Niche","seats":null,"seatsBasis":"DE&S","dataFormat":"N/A (services)","formatOwner":"Vendor","openSpec":"Partial","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Transition","osAlternative":"","sovereignAlternative":"","operator":"UK","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":482000,"spendPeriod":"10 Mar 2025 – 9 Oct 2026","evidence":"Confirmed","notes":"Framework call-off; SOC tooling not named.","dimsNote":"Irish-domiciled consultancy, US-listed","scores":{"D1":null,"D2":2,"D3":null,"D4":2,"D5":3,"D6":null,"D7":2,"D8":0,"D9":null,"D10":3,"D11":1.5,"D12":1.5,"overall":1.875},"refs":[{"id":"R087","author":"Contracts Finder","year":"2025","title":"Contract notice a401dab9-d5f6-4ed5-b33f-c23707fffcb5","url":"https://www.contractsfinder.service.gov.uk/Notice/a401dab9-d5f6-4ed5-b33f-c23707fffcb5"}]},{"id":"DEF-070","entity":"Defence","subUnit":"Cross-defence","layerId":"SE3","layer":"Key management","group":"Security","product":"Ultra Cyber Multi Link Encryptor (MLE) family – NCSC CAPS-certified SECRET tactical data link crypto","vendor":"Ultra Cyber","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Advent International via Cobham Ultra (sale to Airbus SE agreed, pending)","ownerCountry":"US","ownershipChange":"Yes – Ultra Electronics acquired by Advent International (US) for £2.6bn, cleared Jul 2022 with UK national-security conditions; Airbus agreed Mar 2026 to buy Ultra Cyber (pending)","ownershipSource":"https://www.defensenews.com/global/europe/2022/07/07/british-government-clears-sensitive-ultra-electronics-sale-to-us-based-advent","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":null,"seatsBasis":"Not published","dataFormat":"Proprietary / NCSC-assured","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Re-certification;Platform integration","osAlternative":"","sovereignAlternative":"Ultra Cyber is itself the UK-based supplier","operator":"UK","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Encrypts LINK-11 tactical data links between tactical data system and modem/radio. Complements generic HSM row GOV-088. Airbus agreed Mar 2026 to buy Ultra Cyber (200+ staff, Maidenhead); closing expected H2 2026.","dimsNote":"Sensitive UK crypto capability passed to US private equity in 2022 under NSI Act undertakings (separate UK entities, national-interest directors); pending move to European Airbus","scores":{"D1":3,"D2":3,"D3":3,"D4":2,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":3,"D12":1.5,"overall":1.625},"refs":[{"id":"R340","author":"National Cyber Security Centre","year":"2026","title":"Multi link encryptors mle","url":"https://www.ncsc.gov.uk/organisation/ultra-cyber-limited/multi-link-encryptors-mle"},{"id":"R099","author":"Defensenews","year":"n.d.","title":"British government clears sensitive ultra electronics sale to US based advent","url":"https://www.defensenews.com/global/europe/2022/07/07/british-government-clears-sensitive-ultra-electronics-sale-to-us-based-advent"}]},{"id":"DEV-002","entity":"Devolved Governments","subUnit":"NHS National Services Scotland / PSD Scotland (SWAN, cross-Scotland)","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"Scottish Wide Area Network 2 (SWAN2): fibre, mobile, resilience and cyber services for Scottish public bodies","vendor":"BT","vendorCountry":"GB","vendorTier":"T1 UK","owner":"BT Group plc","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Dominant","seats":6000,"seatsBasis":"Sites connected across 94 public sector organisations","dataFormat":"IP/MPLS (open standards)","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-tender;Circuit migration;Site visits","osAlternative":"n/a (carrier service)","sovereignAlternative":"Other UK carriers (multi-supplier re-tender)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":350000000,"spendPeriod":"6 years from Apr 2023 (ceiling)","evidence":"Confirmed","notes":"Serves schools, hospitals, GP surgeries, pharmacies, NHS boards and council offices. Replaced SWAN1 run by Capita. Councils are users but this finding is the NSS-procured national network.","dimsNote":"UK carrier prime; network equipment makers, operator location and key arrangements not stated in source; no ownership change stated in source","scores":{"D1":3,"D2":3,"D3":0,"D4":1,"D5":3,"D6":0,"D7":3,"D8":0,"D9":1.5,"D10":1.5,"D11":3,"D12":3,"overall":1.8333333333333333},"refs":[{"id":"R354","author":"Nss","year":"2023","title":"NHS national services scotland nss awards 350million swan contract to bt for enhanced public sector connectivity","url":"https://www.nss.nhs.scot/news/nhs-national-services-scotland-nss-awards-350million-swan-contract-to-bt-for-enhanced-public-sector-connectivity/"}]},{"id":"DEV-003","entity":"Devolved Governments","subUnit":"Scottish Government (iTECS core WAN)","layerId":"P3","layer":"Networks & telecoms","group":"Physical","product":"SG core WAN circuits migrating from SWAN1 (Capita) to SWAN2 (BT), 131 sites","vendor":"BT (SWAN2); Capita (SWAN1, exiting)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"BT Group plc / Capita plc","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"UK","prevalence":"Primary","seats":131,"seatsBasis":"Sites supported by SG WAN","dataFormat":"IP/MPLS","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Circuit migration","osAlternative":"n/a","sovereignAlternative":"Commsworld (Scottish carrier, already used for resilience)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"High","spend":641236,"spendPeriod":"Annual SWAN2 cost (rising as sites migrate Aug 2024 - Mar 2026; 3-yr term per circuit)","evidence":"Confirmed","notes":"SWAN1 (Capita) GBP 462,585.60/yr on rolling monthly terms to Mar 2026; internet resilience from Commsworld (GBP 115,462/yr) and Virgin Media (GBP 21,000/yr) on annual rolling contracts with no central contract.","dimsNote":"UK carriers; operator location and network equipment origin not stated in source","scores":{"D1":3,"D2":3,"D3":0,"D4":1,"D5":3,"D6":0,"D7":3,"D8":0,"D9":1.5,"D10":1.5,"D11":3,"D12":3,"overall":1.8333333333333333},"refs":[{"id":"R209","author":"Gov","year":"2025","title":"[Title to be confirmed]","url":"https://www.gov.scot/publications/foi-202500493355/"}]},{"id":"DEV-008","entity":"Devolved Governments","subUnit":"Scottish Government (Cloud Platform Service)","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Cloud Platform Service - AWS environment (multi-tenant public cloud for Scottish public bodies)","vendor":"Amazon Web Services","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Amazon.com Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.gov.scot/publications/foi-202600516384/","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"41 CPS customers across AWS and Azure (FOI 2026)","dataFormat":"Proprietary cloud APIs","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Egress fees;Re-platforming;Skills","osAlternative":"OpenStack / Kubernetes","sovereignAlternative":"UK-owned clouds (e.g. via G-Cloud)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":65000000,"spendPeriod":"Award 24 Mar 2025 under G-Cloud 14 (duration not stated)","evidence":"Reported","notes":"Source is a commercial mirror of the award notice (value GBP 65m). CPS launched 2023; AWS also hosts ScotAccount and ScotPayments (FutureScot). SG cloud-first policy since June 2020.","dimsNote":"FOI: CPS contracts with AWS and Microsoft do not require UK-only hosting; no CLOUD Act assessment; no legal advice on UK-US Data Access Agreement; key custody not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0.75,"D11":1.5,"D12":0,"overall":0.75},"refs":[{"id":"R048","author":"Client","year":"2025","title":"1071065 916b6362707c2648df6b6fbd540f193d cloud platform service AWS environment","url":"https://client.tussell.com/award_notices/1071065-916b6362707c2648df6b6fbd540f193d-cloud-platform-service-aws-environment"},{"id":"R213","author":"Gov","year":"2026","title":"[Title to be confirmed]","url":"https://www.gov.scot/publications/foi-202600516384/"}]},{"id":"DEV-016","entity":"Devolved Governments","subUnit":"Social Security Scotland","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"AWS hosting for devolved benefits digital systems","vendor":"Amazon Web Services","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Amazon.com Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"Proprietary cloud APIs","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Egress;Re-platforming","osAlternative":"OpenStack","sovereignAlternative":"UK-owned clouds","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Audit Scotland: AWS, GOV.UK Notify and OS mapping in place; estimated GBP 190m on digital systems for the benefits programme; interdependence with DWP systems.","dimsNote":"Region and keys not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0.75,"D11":1.5,"D12":0,"overall":0.75},"refs":[{"id":"R495","author":"UKAuthority","year":"2019","title":"Auditor positive on scotland s benefits IT","url":"https://ukauthority.com/articles/auditor-positive-on-scotland-s-benefits-it"}]},{"id":"DEV-020","entity":"Devolved Governments","subUnit":"NHS Scotland (NSS)","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Microsoft Azure hosting renewal for national digital health systems","vendor":"Microsoft (via Computacenter)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"Proprietary cloud APIs","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Egress;Re-platforming","osAlternative":"OpenStack","sovereignAlternative":"UK-owned clouds","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":6105243,"spendPeriod":"Renewal concluded 1 Jul 2025 (duration not stated)","evidence":"Confirmed","notes":"Hosts a nationally accessed cloud system used across NHS Scotland; one tender received via SVAR framework.","dimsNote":"Region and keys not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0.75,"D11":1.5,"D12":0,"overall":0.75},"refs":[{"id":"R171","author":"Find a Tender Service","year":"2025","title":"Contract notice 037036-2025","url":"https://www.find-tender.service.gov.uk/Notice/037036-2025"}]},{"id":"DEV-021","entity":"Devolved Governments","subUnit":"NHS Education for Scotland (now PSD Scotland)","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"National Digital Platform hosted on AWS","vendor":"Amazon Web Services","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Amazon.com Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"Proprietary cloud APIs","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Egress;Re-platforming","osAlternative":"OpenStack","sovereignAlternative":"UK-owned clouds","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":15000000,"spendPeriod":"Up to 10 years from 2021","evidence":"Reported","notes":"Infrastructure/platform services for clinical data repositories, apps and integration layer; AWS registered address given as Luxembourg; three tenders, no SMEs.","dimsNote":"Region and keys not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0.75,"D11":1.5,"D12":0,"overall":0.75},"refs":[{"id":"R198","author":"Futurescot","year":"2021","title":"AWS secures 15m contract to host nhss digital health platform","url":"https://futurescot.com/aws-secures-15m-contract-to-host-nhss-digital-health-platform/"}]},{"id":"DEV-030","entity":"Devolved Governments","subUnit":"Welsh Government","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Microsoft Azure via Softcat Licensing Solutions Partner (cloud since 2013)","vendor":"Microsoft (via Softcat)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"82.3% of virtual servers and 96% of database instances in cloud","dataFormat":"Proprietary cloud APIs","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Egress;Re-platforming","osAlternative":"OpenStack","sovereignAlternative":"UK-owned clouds","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"All Azure procured through Softcat LSP contract (2019 tender, NPS framework). About 45% of IT-managed-services budget spent on cloud managed services; uptime not measured.","dimsNote":"Region and keys not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":0,"overall":0.6818181818181818},"refs":[{"id":"R318","author":"Llyw","year":"2023","title":"[Title to be confirmed]","url":"https://www.llyw.cymru/sites/default/files/publications/2023-05/ATISN%2017426.pdf"}]},{"id":"DEV-045","entity":"Devolved Governments","subUnit":"NHS Wales (DHCW)","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"DHCW cloud transition to Azure and Google Cloud (~90 national services, 1,600 servers)","vendor":"Microsoft; Google (partners TPX Impact, KPMG, Trustmarque)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation / Alphabet Inc","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.find-tender.service.gov.uk/Notice/039826-2024","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"~90 services on ~1,600 servers","dataFormat":"Proprietary cloud APIs","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Egress;Re-platforming","osAlternative":"OpenStack","sovereignAlternative":"UK-owned clouds","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"Migrations from early 2026; full transition target Oct 2028","evidence":"Confirmed","notes":"Moving national NHS Wales services from two on-prem data centres. The 2024 PIN for the programme mentioned possible off-shoring options (FTS 039826-2024).","dimsNote":"Regions and keys not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":0,"overall":0.6818181818181818},"refs":[{"id":"R104","author":"Dhcw","year":"2025","title":"Dhcw supplier away day aligning for cloud transition success","url":"https://dhcw.nhs.wales/news/latest-news/dhcw-supplier-away-day-aligning-for-cloud-transition-success/"},{"id":"R194","author":"Find a Tender Service","year":"n.d.","title":"Contract notice 039826-2024","url":"https://www.find-tender.service.gov.uk/Notice/039826-2024"}]},{"id":"DEV-050","entity":"Devolved Governments","subUnit":"HSC Northern Ireland (encompass)","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"Fully hosted and managed Epic platform in two active-active data centres, plus L2 service desk","vendor":"Telefonica Tech","vendorCountry":"ES","vendorTier":"T2 EU/EEA","owner":"Telefonica SA (via Telefonica Tech)","ownerCountry":"ES","ownershipChange":"Yes – Telefonica Tech bought 100% of Cancom UK&I from Cancom Group for EUR 398m (Jul 2021) to build its UK cloud business","ownershipSource":"https://www.telefonica.com/en/communication-room/press-room/telefonica-tech-acquires-cancom-uki-to-build-up-a-leader-in-cloud-and-digital-services-in-europe/","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"5 trusts, 24 hospitals; 85m records migrated","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Hosting transition;Re-procurement","osAlternative":"n/a","sovereignAlternative":"UK-owned hosting providers","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Vendor case study: two data centres (locations not named), monthly zero-downtime patching, vFire-ServiceNow integration; steady state 2025.","dimsNote":"Acquisition per Telefonica press release; whether the encompass hosting contract originated with Cancom UK&I not stated in source; data centre locations not stated in source","scores":{"D1":null,"D2":2,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":2,"D8":0,"D9":1.5,"D10":0,"D11":1.5,"D12":0,"overall":0.8636363636363636},"refs":[{"id":"R440","author":"Telefonicatech","year":"2025","title":"Encompass northern ireland healthcare","url":"https://telefonicatech.uk/case-studies/encompass-northern-ireland-healthcare/"},{"id":"R439","author":"Telefonica","year":"n.d.","title":"Telefonica tech acquires cancom uki to build up a leader in cloud and digital services in europe","url":"https://www.telefonica.com/en/communication-room/press-room/telefonica-tech-acquires-cancom-uki-to-build-up-a-leader-in-cloud-and-digital-services-in-europe/"}]},{"id":"DEV-058","entity":"Devolved Governments","subUnit":"NICS (Department of Finance - IT Assist)","layerId":"I1","layer":"Cloud & hosting","group":"Infrastructure","product":"IT Assist cloud, infrastructure and support services (on-prem estate moving toward public cloud)","vendor":"Hewlett-Packard Ireland","vendorCountry":"IE","vendorTier":"T2 EU/EEA","owner":"Hewlett-Packard Ireland Ltd (group parent not stated in source)","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"Unknown","prevalence":"Dominant","seats":28000,"seatsBasis":"IT Assist customers across NICS departments and 40+ agencies (DoF)","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Managed service exit;Hardware refresh","osAlternative":"n/a","sovereignAlternative":"UK MSPs","operator":"Vendor-global","keyCustody":"Customer (on-prem)","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"High","ukCapability":"Partial","ukValueCapture":"Low","spend":60000000,"spendPeriod":"7 years from Feb 2023 (+2 +1)","evidence":"Confirmed","notes":"Covers desktop, network, telephony, data centre storage, server hosting and helpdesk support for IT Assist.","dimsNote":"Supplier address Leixlip, Ireland; key custody assumed customer only for on-prem estate - not stated in source","scores":{"D1":null,"D2":2,"D3":3,"D4":1,"D5":1.5,"D6":0,"D7":null,"D8":0,"D9":0,"D10":1.5,"D11":1.5,"D12":0,"overall":1.05},"refs":[{"id":"R139","author":"Find a Tender Service","year":"2023","title":"Contract notice 003527-2023","url":"https://www.find-tender.service.gov.uk/Notice/003527-2023"}]},{"id":"DEV-009","entity":"Devolved Governments","subUnit":"Scottish Government (Cloud Platform Service)","layerId":"I2","layer":"Data centre location","group":"Infrastructure","product":"Data residency of Cloud Platform Service (AWS and Azure): no contractual UK-only hosting","vendor":"Amazon Web Services; Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Amazon.com Inc / Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"41 customers incl. core SG","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Data repatriation;Contract renegotiation","osAlternative":"n/a","sovereignAlternative":"UK-sovereign hosting clause or UK-owned provider","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":1664189,"spendPeriod":"FY2025/26 (AWS and Azure combined, ex VAT)","evidence":"Confirmed","notes":"CPS spend rose from GBP 229,101 (2021/22) to GBP 1,664,189 (2025/26). DPIA assessed under UK GDPR only, not the US CLOUD Act. CPS itself does not replicate data outside UK but customers choose regions. Cloud and Hosting framework SP-22-023 has no jurisdiction requirement.","dimsNote":"All points from FOI; key custody not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":1.5,"D11":1.5,"D12":0,"overall":0.8181818181818182},"refs":[{"id":"R213","author":"Gov","year":"2026","title":"[Title to be confirmed]","url":"https://www.gov.scot/publications/foi-202600516384/"}]},{"id":"DEV-046","entity":"Devolved Governments","subUnit":"NHS Wales (DHCW)","layerId":"I2","layer":"Data centre location","group":"Infrastructure","product":"DHCW on-prem data centre DC1 (Tier III) being emptied to cloud; CDW migration contract","vendor":"CDW","vendorCountry":"Unknown","vendorTier":"Unknown","owner":"CDW (parent not stated in source)","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"On-prem","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Migration services","osAlternative":"n/a","sovereignAlternative":"n/a","operator":"Vendor-global","keyCustody":"N/A","codeModelControl":"N/A","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Medium","spend":5500000,"spendPeriod":"Feb 2021 - Feb 2029 (GBP 3.9m original + GBP 1.6m extension)","evidence":"Reported","notes":"All on-prem servers at DC1 to move to cloud; 'diminishing on-premises footprint' until Oct 2028.","dimsNote":"DC1 location and CDW ownership not stated in source","scores":{"D1":null,"D2":null,"D3":null,"D4":1,"D5":1.5,"D6":null,"D7":null,"D8":3,"D9":1.5,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.6428571428571428},"refs":[{"id":"R097","author":"DatacenterDynamics","year":"2025","title":"Digital services agency in wales UK to extend cloud migration contract","url":"https://www.datacenterdynamics.com/en/news/digital-services-agency-in-wales-uk-to-extend-cloud-migration-contract/"}]},{"id":"DEV-004","entity":"Devolved Governments","subUnit":"Scottish Government (SCOTS shared network)","layerId":"PL1","layer":"Operating systems","group":"Platform","product":"SCOTS shared desktop and network service (Microsoft software, run by SG iTECS)","vendor":"Microsoft (software); SG iTECS (operator)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"Unknown","prevalence":"Dominant","seats":21581,"seatsBasis":"~10,392 core SG users + ~11,189 users at 61 external bodies (FOI/202600516239)","dataFormat":"Windows / Microsoft formats","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Re-platforming;Skills","osAlternative":"Linux desktops (e.g. Ubuntu)","sovereignAlternative":"None at scale","operator":"Customer (in-house UK team)","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"FOI names only two ICT suppliers for SCOTS: iTECS (SG's own IT division, runs the network) and Microsoft (software). Separate FOI lists 68 organisations on the shared network incl. Social Security Scotland (4,547 staff) and Transport Scotland.","dimsNote":"Network run in-house by iTECS (FOI); Microsoft software; key custody not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":3,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.65},"refs":[{"id":"R210","author":"Gov","year":"2025","title":"Information that relates to the organisations contracts around ict contracts foi release","url":"https://www.gov.scot/publications/information-that-relates-to-the-organisations-contracts-around-ict-contracts-foi-release/"}]},{"id":"DEV-043","entity":"Devolved Governments","subUnit":"NHS Wales (DHCW / NHS Wales App)","layerId":"PL3","layer":"Database","group":"Platform","product":"EventStoreDB (event-sourced store for health timeline) on Azure DevOps","vendor":"Event Store","vendorCountry":"Unknown","vendorTier":"Unknown","owner":"Event Store (ownership not stated in source)","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Open source","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Niche","seats":null,"seatsBasis":"","dataFormat":"Event streams","formatOwner":"Open source","openSpec":"Yes","portability":"Moderate","switchingCost":"Low","exitCostDrivers":"Re-platforming","osAlternative":"EventStoreDB itself","sovereignAlternative":"n/a","operator":"Customer (in-house UK team)","keyCustody":"Vendor","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Computer Weekly describes EventStoreDB as open source; Azure DevOps hosts the software environment.","dimsNote":"Licence status as described in source; live hosting not stated in source","scores":{"D1":null,"D2":null,"D3":0,"D4":3,"D5":3,"D6":3,"D7":null,"D8":3,"D9":null,"D10":2.25,"D11":1.5,"D12":1.5,"overall":2.15625},"refs":[{"id":"R052","author":"Computer Weekly","year":"2023","title":"The welsh are building a dragon of an NHS app","url":"https://computerweekly.com/news/365534184/The-Welsh-are-building-a-dragon-of-an-NHS-app"}]},{"id":"DEV-014","entity":"Devolved Governments","subUnit":"Social Security Scotland","layerId":"PL4","layer":"Application framework","group":"Platform","product":"OutSystems low-code platform for benefits case management, portals and apps","vendor":"OutSystems (via Softcat; Deloitte configuration partner)","vendorCountry":"Unknown","vendorTier":"Unknown","owner":"OutSystems (ownership not stated in source)","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"OutSystems proprietary models","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Platform lock-in;Re-build of apps;Skills","osAlternative":"Open-source frameworks (e.g. Django/.NET) on open cloud","sovereignAlternative":"UK-built code on open frameworks","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":1600000,"spendPeriod":"Platform deal Jan 2020","evidence":"Reported","notes":"Deloitte awarded GBP 9.1m (May 2020) to configure; PIN sought strategic partner up to GBP 15m. Audit Scotland flagged technical debt risk. A 2023 OutSystems DPS was discontinued.","dimsNote":"Vendor ownership and hosting not stated in source","scores":{"D1":null,"D2":null,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":null,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.3125},"refs":[{"id":"R451","author":"The Register","year":"2021","title":"Scotland lowcode partner","url":"https://www.theregister.com/2021/01/05/scotland_lowcode_partner/"}]},{"id":"DEV-059","entity":"Devolved Governments","subUnit":"NICS (Department of Finance)","layerId":"PL4","layer":"Application framework","group":"Platform","product":"Drupal open-source CMS professional services","vendor":"Drupal (community) - contractor not named","vendorCountry":"OSS","vendorTier":"OSS (governance-led)","owner":"Drupal community","ownerCountry":"OSS","ownershipChange":"No","ownershipSource":"","licence":"Open source","governance":"Community","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Secondary","seats":null,"seatsBasis":"","dataFormat":"Drupal / PHP","formatOwner":"Open source","openSpec":"Yes","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Skills","osAlternative":"Drupal itself","sovereignAlternative":"UK Drupal agencies","operator":"Customer (in-house UK team)","keyCustody":"N/A","codeModelControl":"Self-hosted / open","ipOwner":"Open","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":2400000,"spendPeriod":"36 months + 2x12 (contract notice estimate)","evidence":"Confirmed","notes":"Three senior developers to cover skills shortages on critical services.","dimsNote":"Open-source CMS; hosting not stated in source","scores":{"D1":null,"D2":2,"D3":null,"D4":3,"D5":3,"D6":3,"D7":2,"D8":3,"D9":null,"D10":3,"D11":3,"D12":3,"overall":2.7777777777777777},"refs":[{"id":"R131","author":"Find a Tender Service","year":"2021","title":"Contract notice 031626-2021","url":"https://www.find-tender.service.gov.uk/Notice/031626-2021"}]},{"id":"DEV-010","entity":"Devolved Governments","subUnit":"Scottish Government (Digital Identity Scotland)","layerId":"W2","layer":"Identity & directory","group":"Workplace","product":"ScotAccount citizen sign-in and identity verification (OIDC, 2FA)","vendor":"Scottish Government (built with Scott Logic); hosted on AWS","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Scottish Government (service owner); Amazon.com Inc (hosting)","ownerCountry":"Mixed","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"See entity citizen_users","dataFormat":"OpenID Connect","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Relying-party re-integration","osAlternative":"Keycloak (OSS IdP)","sovereignAlternative":"GOV.UK One Login (UK)","operator":"Customer (in-house UK team)","keyCustody":"Vendor","codeModelControl":"N/A","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Strong","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Privacy notice lists AWS as external hosting processor. Supports OIDC, GPG 44/45 (Medium), NCSC CAF (service manual). Scott Logic as build partner is from AWS partner content (FutureScot, Nov 2025).","dimsNote":"SG is data controller and service owner (privacy notice); hosting region and key custody not stated in source","scores":{"D1":null,"D2":3,"D3":0,"D4":3,"D5":1.5,"D6":null,"D7":null,"D8":3,"D9":1.5,"D10":1.5,"D11":3,"D12":1.5,"overall":2},"refs":[{"id":"R335","author":"Mygov","year":"2026","title":"Privacy notice scotaccount","url":"https://www.mygov.scot/privacy-notice-scotaccount"}]},{"id":"DEV-011","entity":"Devolved Governments","subUnit":"Scottish Government (Digital Identity Scotland)","layerId":"W2","layer":"Identity & directory","group":"Workplace","product":"ScotAccount identity document, liveness and knowledge-based checks","vendor":"Experian (Mitek as sub-processor; Cifas fraud checks)","vendorCountry":"Mixed","vendorTier":"Unknown","owner":"Experian; Mitek (parents not stated in source)","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"Proprietary API","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Re-procurement;Re-certification","osAlternative":"n/a","sovereignAlternative":"Other certified UK IDSPs","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Experian is processor for document checks and independent controller for activity-history checks; Mitek sub-processor for document/liveness checks; HM Passport Office for passport checks.","dimsNote":"Processing location and ownership of Experian/Mitek not stated in source","scores":{"D1":null,"D2":null,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":null,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":0,"overall":0.6875},"refs":[{"id":"R335","author":"Mygov","year":"2026","title":"Privacy notice scotaccount","url":"https://www.mygov.scot/privacy-notice-scotaccount"}]},{"id":"DEV-033","entity":"Devolved Governments","subUnit":"NHS Wales (DHCW)","layerId":"W3","layer":"Email","group":"Workplace","product":"Exchange Online email for NHS Wales staff (within Microsoft deal)","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Dominant","seats":120000,"seatsBasis":"Users licensed for email and associated office products","dataFormat":"SMTP/IMAP; Exchange","formatOwner":"Standards body","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Mailbox migration","osAlternative":"Open-Xchange / Dovecot","sovereignAlternative":"None at scale","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Email licensed under the same Trustmarque-resold agreement.","dimsNote":"Region not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.6},"refs":[{"id":"R455","author":"The Register","year":"2024","title":"NHS in wales microsoft","url":"https://www.theregister.com/2024/02/13/nhs_in_wales_microsoft/"}]},{"id":"DEV-006","entity":"Devolved Governments","subUnit":"Scottish Government (SCOTS shared network)","layerId":"W4","layer":"Messaging & video","group":"Workplace","product":"Microsoft Teams Phone with Gamma Operator Connect","vendor":"Microsoft; Gamma","vendorCountry":"Mixed","vendorTier":"Unknown","owner":"Microsoft Corporation; Gamma (parent not stated in source)","ownerCountry":"Mixed","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Niche","seats":281,"seatsBasis":"Users on Teams Phone/Operator Connect (plus 12 domestic calling plans)","dataFormat":"Teams / SIP","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Low","exitCostDrivers":"Number porting;Licence","osAlternative":"Jitsi / Matrix","sovereignAlternative":"Gamma (UK carrier) already in chain","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"Gamma contract to Oct 2025 (+12 months option)","evidence":"Confirmed","notes":"Small telephony footprint; Teams is the collaboration platform across SG.","dimsNote":"Gamma's ownership and HQ not stated in source; Microsoft operates Teams service","scores":{"D1":null,"D2":null,"D3":0,"D4":1,"D5":3,"D6":0,"D7":null,"D8":0,"D9":null,"D10":2.25,"D11":1.5,"D12":1.5,"overall":1.15625},"refs":[{"id":"R207","author":"Gov","year":"2023","title":"Microsoft licencing foi release","url":"https://www.gov.scot/publications/microsoft-licencing-foi-release/"}]},{"id":"DEV-005","entity":"Devolved Governments","subUnit":"Scottish Government (SCOTS shared network)","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"Microsoft 365 E3/E5 (main SG tenant; some users also on NHS tenant)","vendor":"Microsoft (resellers Softcat, moving to Computacenter via SVAR framework)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"Licence count not disclosed","dataFormat":"OOXML / Exchange","formatOwner":"Standards body","openSpec":"Partial","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Licence;Data migration;Re-training","osAlternative":"LibreOffice / Nextcloud","sovereignAlternative":"None at scale","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Mix of Enterprise Agreement and CSP licences; EA renews each 1 Apr (year 2 of 3 in 2023). Licence costs not disclosed.","dimsNote":"Tenant region, operator location and customer key options not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0.75,"D11":0,"D12":0,"overall":0.525},"refs":[{"id":"R207","author":"Gov","year":"2023","title":"Microsoft licencing foi release","url":"https://www.gov.scot/publications/microsoft-licencing-foi-release/"}]},{"id":"DEV-018","entity":"Devolved Governments","subUnit":"NHS Scotland (national M365 tenant)","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"National Microsoft 365 tenant and licensing agreement for NHS Scotland","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"Licence numbers not held by SG","dataFormat":"OOXML / Exchange","formatOwner":"Standards body","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Tenant migration;Re-training","osAlternative":"LibreOffice / Nextcloud","sovereignAlternative":"None at scale","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":800000,"spendPeriod":"FY2024/25 SG revenue to NSS for M365 (GBP 615k 22/23; GBP 265k 23/24)","evidence":"Confirmed","notes":"National licensing agreement runs to 1 May 2030. GBP 500k grant to NHS GGC (2022/23). Oversight: SG Major Programmes Assurance Board and NHS Scotland Cloud Computing Strategy Board. No KPIs or value-for-money assessments held.","dimsNote":"Tenant region and key options not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.45},"refs":[{"id":"R214","author":"Gov","year":"2026","title":"[Title to be confirmed]","url":"https://www.gov.scot/publications/foi-202500499750/"}]},{"id":"DEV-019","entity":"Devolved Governments","subUnit":"NHS Scotland (NSS)","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"Microsoft Unified Performance Support for the National M365 Tenant","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Support dependency","osAlternative":"n/a","sovereignAlternative":"UK Microsoft partners","operator":"Vendor-global","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":8418435,"spendPeriod":"Call-off concluded 9 Jun 2024 (duration not stated)","evidence":"Confirmed","notes":"Call-off from Scottish Government Software Value Added Reseller framework; one tender received; supplements main M365 Enterprise Agreement.","dimsNote":"Support delivery location not stated in source","scores":{"D1":null,"D2":1,"D3":null,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.6666666666666666},"refs":[{"id":"R189","author":"Find a Tender Service","year":"2026","title":"Contract notice 008184-2026","url":"https://www.find-tender.service.gov.uk/Notice/008184-2026"}]},{"id":"DEV-031","entity":"Devolved Governments","subUnit":"Welsh Government (Hwb, maintained schools)","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"National Microsoft 365 licence for every teacher and learner in maintained schools","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"OOXML","formatOwner":"Standards body","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence;Habituation of learners","osAlternative":"LibreOffice / Nextcloud","sovereignAlternative":"None","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":3424000,"spendPeriod":"Average annual cost, 1 Apr 2025 - 31 Mar 2028 (3-yr extension)","evidence":"Confirmed","notes":"Centrally funded since 2018 so individual schools avoid commercial burden.","dimsNote":"Region and data handling not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.6},"refs":[{"id":"R401","author":"Record","year":"2025","title":"[Title to be confirmed]","url":"https://record.senedd.wales/WrittenQuestion/97513"}]},{"id":"DEV-032","entity":"Devolved Governments","subUnit":"NHS Wales (DHCW)","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"Microsoft 365 and Microsoft software/cloud for all NHS Wales via reseller Trustmarque","vendor":"Microsoft (via Trustmarque)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation (reseller Trustmarque owned by One Equity Partners)","ownerCountry":"US","ownershipChange":"Yes – reseller Trustmarque sold by Capita to One Equity Partners, 2022","ownershipSource":"https://www.theregister.com/2024/02/13/nhs_in_wales_microsoft/","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Dominant","seats":120000,"seatsBasis":"NHS Wales users licensed for email and office products","dataFormat":"OOXML / Exchange","formatOwner":"Standards body","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Licence;Tenant migration","osAlternative":"LibreOffice / Nextcloud","sovereignAlternative":"None at scale","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":450000000,"spendPeriod":"Up to 6 years from Apr 2024 (4+2; ~GBP 75m/yr indicative max)","evidence":"Reported","notes":"Indicative maximum, not a commitment; Trustmarque was sole winning bidder.","dimsNote":"Ownership change of reseller stated in source; tenant region not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.45},"refs":[{"id":"R455","author":"The Register","year":"2024","title":"NHS in wales microsoft","url":"https://www.theregister.com/2024/02/13/nhs_in_wales_microsoft/"}]},{"id":"DEV-052","entity":"Devolved Governments","subUnit":"HSC Northern Ireland (Belfast Trust)","layerId":"W5","layer":"Productivity suite","group":"Workplace","product":"Microsoft 365 and Teams (cloud-first from 2018; virtual consultations)","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Dominant","seats":23000,"seatsBasis":"Belfast Trust employees","dataFormat":"OOXML / Teams","formatOwner":"Standards body","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence;Workflow (Power Apps)","osAlternative":"LibreOffice / Jitsi","sovereignAlternative":"None","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Vendor (Microsoft) customer story: 3,000 regular Teams users by Mar 2020; Teams API used for consultations.","dimsNote":"Region not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.6},"refs":[{"id":"R324","author":"Microsoft","year":"2020","title":"Fa2 belfast trust reimagining patient care","url":"https://pulse.microsoft.com/en/work-productivity-en/healthcare-en/fa2-belfast-trust-reimagining-patient-care/"}]},{"id":"DEV-001","entity":"Devolved Governments","subUnit":"Scottish Government (Shared Services Programme)","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Oracle Fusion Cloud ERP (HR, payroll, finance) for SG and partner bodies","vendor":"Oracle (IBM as system integrator; Sopra Steria client-side partner)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Oracle Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.gov.scot/publications/shared-services-programme-phase-1-programme-closure-report/pages/4/","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":20000,"seatsBasis":"Users prepared for go-live on 1 Oct 2024","dataFormat":"Oracle Fusion data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Integrations;Re-training;SI dependency","osAlternative":"Odoo / ERPNext (OSS ERP)","sovereignAlternative":"None at national-government scale","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":59500000,"spendPeriod":"Implementation Apr 2022 - Mar 2025 (final cost after GBP 8m VAT recovery; EPM follow-on adds GBP 4.5m, total GBP 64m)","evidence":"Confirmed","notes":"Original business case GBP 22.4m-26m incl VAT (Apr 2022); rebaselined to GBP 46m-52m (Sep 2023) then GBP 63m-66m (Mar 2024). HR go-live slipped Oct 2023 -> Oct 2024, finance Apr 2024 -> Oct 2024; EPM descoped from phase 1. Final cost roughly 2.7x original net estimate.","dimsNote":"Oracle Fusion Cloud with IBM as Oracle SI and Sopra Steria as client-side partner (closure report p4); hosting region, operator location and key arrangements not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.45},"refs":[{"id":"R211","author":"Gov","year":"2025","title":"Shared services programme phase 1 programme closure report","url":"https://www.gov.scot/publications/shared-services-programme-phase-1-programme-closure-report/pages/8/"},{"id":"R215","author":"Gov","year":"n.d.","title":"Shared services programme phase 1 programme closure report","url":"https://www.gov.scot/publications/shared-services-programme-phase-1-programme-closure-report/pages/4/"}]},{"id":"DEV-027","entity":"Devolved Governments","subUnit":"Welsh Government","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"SAP finance system (Capgemini support)","vendor":"SAP","vendorCountry":"DE","vendorTier":"T2 EU/EEA","owner":"SAP SE","ownerCountry":"DE","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"SAP data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Integrations","osAlternative":"Odoo / ERPNext","sovereignAlternative":"None at scale","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":309962,"spendPeriod":"Annual (contract expiry Dec 2026)","evidence":"Confirmed","notes":"Separate FOI (ATISN 20344, Apr 2024): no planned upgrades and no plans to go to market for a replacement despite Dec 2026 expiry.","dimsNote":"Hosting and support location not stated in source","scores":{"D1":null,"D2":2,"D3":0,"D4":1,"D5":0,"D6":0,"D7":2,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.5},"refs":[{"id":"R208","author":"Gov","year":"2024","title":"[Title to be confirmed]","url":"https://www.gov.wales/sites/default/files/publications/2024-04/ATISN%2020313.pdf"}]},{"id":"DEV-028","entity":"Devolved Governments","subUnit":"Welsh Government","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Microsoft Dynamics 365 Finance & Operations as HR information system ('Pobl', Inciper support)","vendor":"Microsoft (Inciper support)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"Dataverse / Dynamics","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Data migration;Power Platform customisations","osAlternative":"Odoo HR","sovereignAlternative":"None at scale","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":400000,"spendPeriod":"2024-25 expected (recurrent licences)","evidence":"Confirmed","notes":"WG also uses Microsoft Power Platform (no cost given).","dimsNote":"Hosting region not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.6},"refs":[{"id":"R208","author":"Gov","year":"2024","title":"[Title to be confirmed]","url":"https://www.gov.wales/sites/default/files/publications/2024-04/ATISN%2020313.pdf"}]},{"id":"DEV-029","entity":"Devolved Governments","subUnit":"Welsh Government","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"ePayfact semi-managed payroll service","vendor":"CGI","vendorCountry":"CA","vendorTier":"T3 Five Eyes (ex-UK)","owner":"CGI (parent not stated in source)","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Payroll parallel-running","osAlternative":"n/a","sovereignAlternative":"UK payroll bureaux","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":263000,"spendPeriod":"Annual (expiry 30 Nov 2026)","evidence":"Confirmed","notes":"Payroll, finance (SAP) contracts both expire late 2026.","dimsNote":"Ownership and delivery location not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":null,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":1.5,"overall":0.8888888888888888},"refs":[{"id":"R208","author":"Gov","year":"2024","title":"[Title to be confirmed]","url":"https://www.gov.wales/sites/default/files/publications/2024-04/ATISN%2020313.pdf"}]},{"id":"DEV-048","entity":"Devolved Governments","subUnit":"NHS Wales (NWSSP payroll / Public Health Wales)","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Oracle ESR HR and payroll (DHSC contract covering England and Wales)","vendor":"Oracle (ESR, DHSC contract)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Oracle Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"Oracle EBS data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Pay rules","osAlternative":"n/a","sovereignAlternative":"n/a","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"Contract to 2034","evidence":"Confirmed","notes":"NWSSP manages payroll on an all-Wales basis; Wales depends on an England (DHSC) contract.","dimsNote":"Supplier and hosting not stated in source (Oracle by product name)","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.45},"refs":[{"id":"R374","author":"Phw","year":"2024","title":"Foi 2024 069 payroll hr and finance software","url":"https://phw.nhs.wales/use-of-site/contact-us/freedom-of-information/disclosure-log/foi-2024-069-payroll-hr-and-finance-software"}]},{"id":"DEV-053","entity":"Devolved Governments","subUnit":"HSC Northern Ireland (BSO)","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Regional HSC Learning Management System","vendor":"Civica","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Blackstone funds (owner of Civica)","ownerCountry":"Unknown","ownershipChange":"Yes – Blackstone funds completed acquisition of Civica from Partners Group, 2 May 2024","ownershipSource":"https://www.blackstone.com/news/press/blackstone-completes-acquisition-civica/","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"Target 100% of HSC organisations by Sep 2023","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Training record migration","osAlternative":"Moodle","sovereignAlternative":"n/a","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"BSO serves 18 customer organisations plus DoH; also supporting Equip programme to replace FPL and HRPTS (vendor not named).","dimsNote":"Blackstone press release; Civica HQ and hosting not stated in source","scores":{"D1":null,"D2":3,"D3":0,"D4":1,"D5":3,"D6":0,"D7":null,"D8":0,"D9":null,"D10":3,"D11":1.5,"D12":1.5,"overall":1.4444444444444444},"refs":[{"id":"R400","author":"Qub","year":"2023","title":"Bso annual business plan 2023 24 final doh version approved","url":"https://niopa.qub.ac.uk/bitstream/NIOPA/8826/27/BSO-Annual-Business-Plan-2023-24-Final-DOH-Version-Approved.pdf"},{"id":"R019","author":"Blackstone","year":"n.d.","title":"Blackstone completes acquisition civica","url":"https://www.blackstone.com/news/press/blackstone-completes-acquisition-civica/"}]},{"id":"DEV-054","entity":"Devolved Governments","subUnit":"NICS (Department of Finance - Account NI)","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Account NI shared finance service on Oracle E-Business Suite","vendor":"BT (Oracle EBS)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"BT Group plc / Oracle Corporation","ownerCountry":"Mixed","ownershipChange":"No","ownershipSource":"https://www.theregister.com/2022/05/06/bt_gets_26m_contract_extension/","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":23000,"seatsBasis":"Finance Shared Services customers (DoF)","dataFormat":"Oracle EBS","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Repeated extensions","osAlternative":"Odoo / ERPNext","sovereignAlternative":"Integr8 replacement (Oracle cloud)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":40000000,"spendPeriod":"Extension Mar 2018 - Dec 2027 (ceiling)","evidence":"Confirmed","notes":"Awarded 2006 for 12 years; extended almost 10 years. Running cost GBP 5.769m in 2022-23 (DoF FOI 2024-0095). The Register: original GBP 52m, ~GBP 129m after three extensions.","dimsNote":"BT as supplier and Oracle EBS per The Register (2022); hosting and keys not stated in source","scores":{"D1":null,"D2":3,"D3":0,"D4":1,"D5":0,"D6":0,"D7":null,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":0.7777777777777778},"refs":[{"id":"R233","author":"GOV.UK","year":"2025","title":"[Title to be confirmed]","url":"https://www.niauditoffice.gov.uk/files/niauditoffice/documents/2025-07/NI%20Audit%20Office%20Report%20-%20Major%20IT%20Projects%20in%20NI_0.pdf"},{"id":"R469","author":"The Register","year":"n.d.","title":"Bt gets 26m contract extension","url":"https://www.theregister.com/2022/05/06/bt_gets_26m_contract_extension/"}]},{"id":"DEV-055","entity":"Devolved Governments","subUnit":"NICS (Department of Finance - HRConnect)","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"HRConnect HR and payroll on Oracle E-Business Suite (HRMS, Payroll)","vendor":"Fujitsu Services (Conexia sub-contractor)","vendorCountry":"JP","vendorTier":"T4 Other allied/partner","owner":"Fujitsu Ltd","ownerCountry":"JP","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":24521,"seatsBasis":"NICS headcount 1 Apr 2025 (NISRA)","dataFormat":"Oracle EBS","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Repeated extensions","osAlternative":"n/a","sovereignAlternative":"Integr8 replacement (Oracle cloud)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":15000000,"spendPeriod":"Annual service charge (approx.); contract to Mar 2026","evidence":"Confirmed","notes":"NIAO: 15-year contract to Mar 2021 extended six years to Mar 2027 at up to GBP 86.6m, with a further extension expected.","dimsNote":"Fujitsu main contractor per FOI; hosting and delivery location not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":0.6},"refs":[{"id":"R228","author":"GOV.UK","year":"2024","title":"[Title to be confirmed]","url":"https://www.finance-ni.gov.uk/sites/default/files/publications/dfp/FOI%20DOF%202024-0095%20Response.PDF"}]},{"id":"DEV-056","entity":"Devolved Governments","subUnit":"NICS (Department of Finance - Integr8)","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Integr8 integrated cloud ERP for NICS finance, HR and payroll (Oracle)","vendor":"Oracle","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Oracle Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://www.find-tender.service.gov.uk/Notice/010198-2024","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"Oracle Fusion data model","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;SI dependency","osAlternative":"Odoo / ERPNext","sovereignAlternative":"None at scale","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":294000000,"spendPeriod":"Whole programme estimate (OBC 2021, unchanged at OBC2 2023)","evidence":"Confirmed","notes":"ERP contract awarded May 2024 for 10 years with no extensions; Finance go-live slipped Oct 2025 -> May 2027, HR/payroll Oct 2026 -> Nov 2027. Oracle named in FTS contract notice 010198-2024.","dimsNote":"Oracle cloud named in FTS notice; region and keys not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.45},"refs":[{"id":"R233","author":"GOV.UK","year":"2025","title":"[Title to be confirmed]","url":"https://www.niauditoffice.gov.uk/files/niauditoffice/documents/2025-07/NI%20Audit%20Office%20Report%20-%20Major%20IT%20Projects%20in%20NI_0.pdf"},{"id":"R193","author":"Find a Tender Service","year":"n.d.","title":"Contract notice 010198-2024","url":"https://www.find-tender.service.gov.uk/Notice/010198-2024"}]},{"id":"DEV-057","entity":"Devolved Governments","subUnit":"NICS (Department of Finance - Integr8)","layerId":"B1","layer":"ERP / HR / finance","group":"Business apps","product":"Integr8 Delivery Partner: Oracle implementation, ITSM platform and managed services","vendor":"Version 1","vendorCountry":"IE","vendorTier":"T2 EU/EEA","owner":"Partners Group (majority shareholder of Version 1)","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"https://www.volpicapital.com/news/volpi-capital-announces-landmark-transaction-with-the-sale-of-version-1","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"SI knowledge;Managed service exit","osAlternative":"n/a","sovereignAlternative":"UK-owned Oracle partners","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":150000000,"spendPeriod":"Estimated max (range GBP 63m-150m); 5 years + up to 5","evidence":"Reported","notes":"Wide value range reflects potential modifications.","dimsNote":"Volpi Capital announced (22 Apr 2022) sale of its stake making Partners Group majority shareholder, completion expected mid-2022 - completion not confirmed in source, so not recorded as an ownership change; Partners Group HQ and delivery locations not stated in source","scores":{"D1":null,"D2":2,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":null,"D8":1.5,"D9":null,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.1666666666666667},"refs":[{"id":"R508","author":"UKAuthority","year":"2025","title":"Northern ireland dof signs version 1 for integr8 programme","url":"https://www.ukauthority.com/articles/northern-ireland-dof-signs-version-1-for-integr8-programme"},{"id":"R530","author":"Volpicapital","year":"n.d.","title":"Volpi capital announces landmark transaction with the sale of version 1","url":"https://www.volpicapital.com/news/volpi-capital-announces-landmark-transaction-with-the-sale-of-version-1"}]},{"id":"DEV-013","entity":"Devolved Governments","subUnit":"Scottish Government (Digital Identity Scotland)","layerId":"B2","layer":"CRM","group":"Business apps","product":"Atlassian user-support tooling for ScotAccount","vendor":"Atlassian","vendorCountry":"Mixed","vendorTier":"Unknown","owner":"Atlassian (parent not stated in source)","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Mixed","prevalence":"Niche","seats":null,"seatsBasis":"","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Easy","switchingCost":"Low","exitCostDrivers":"Ticket history export","osAlternative":"Zammad / osTicket","sovereignAlternative":"None needed (commodity)","operator":"Offshore","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Privacy notice warns support data collected by Atlassian products may be transferred outside the EEA.","dimsNote":"Possible transfer outside EEA stated in privacy notice; operator location otherwise not stated in source","scores":{"D1":1,"D2":null,"D3":0,"D4":0,"D5":3,"D6":0,"D7":null,"D8":0,"D9":null,"D10":3,"D11":1.5,"D12":0,"overall":0.9444444444444444},"refs":[{"id":"R335","author":"Mygov","year":"2026","title":"Privacy notice scotaccount","url":"https://www.mygov.scot/privacy-notice-scotaccount"}]},{"id":"DEV-012","entity":"Devolved Governments","subUnit":"Scottish Government (Digital Identity Scotland)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"ScotAccount Digital Mailbox for citizen correspondence","vendor":"Netcompany","vendorCountry":"DK","vendorTier":"T2 EU/EEA","owner":"Netcompany (parent not stated in source)","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Niche","seats":null,"seatsBasis":"","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Data migration","osAlternative":"n/a","sovereignAlternative":"UK digital agencies","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"NetCompany named as independent processor that builds and supports the Digital Mailbox.","dimsNote":"Data location and ownership not stated in source","scores":{"D1":null,"D2":2,"D3":0,"D4":1,"D5":3,"D6":0,"D7":null,"D8":0,"D9":null,"D10":1.5,"D11":3,"D12":0,"overall":1.1666666666666667},"refs":[{"id":"R335","author":"Mygov","year":"2026","title":"Privacy notice scotaccount","url":"https://www.mygov.scot/privacy-notice-scotaccount"}]},{"id":"DEV-015","entity":"Devolved Governments","subUnit":"Social Security Scotland","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Third-line support of applications on the OutSystems platform","vendor":"Fujitsu Services","vendorCountry":"JP","vendorTier":"T4 Other allied/partner","owner":"Fujitsu Ltd","ownerCountry":"JP","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Secondary","seats":null,"seatsBasis":"","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Knowledge transfer","osAlternative":"n/a","sovereignAlternative":"UK SMEs","operator":"Vendor-global","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":1000000,"spendPeriod":"4 years from Sep 2023 (est. GBP 250k/yr max)","evidence":"Confirmed","notes":"Award notice published 21 months after contract concluded (26 Sep 2023).","dimsNote":"Fujitsu Services is the Fujitsu UK arm; delivery location not stated in source","scores":{"D1":null,"D2":1,"D3":null,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":1.5,"D9":null,"D10":1.5,"D11":1.5,"D12":1.5,"overall":1.1666666666666667},"refs":[{"id":"R170","author":"Find a Tender Service","year":"2025","title":"Contract notice 030271-2025","url":"https://www.find-tender.service.gov.uk/Notice/030271-2025"}]},{"id":"DEV-017","entity":"Devolved Governments","subUnit":"NHS Scotland (NSS/PSD Scotland national framework)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"InterSystems TrakCare patient administration / EPR (plus HEPMA in Forth Valley)","vendor":"InterSystems","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"InterSystems Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"11 health boards + Golden Jubilee + NSS national licence named as participants","dataFormat":"InterSystems IRIS/Cache database","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Clinical re-training;Integrations","osAlternative":"OpenEHR-based platforms","sovereignAlternative":"None at scale","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"Framework from 25 Jan 2010; current end 31 Mar 2029, no extension options","evidence":"Confirmed","notes":"Participants: Highland, Lanarkshire, Lothian, Ayrshire & Arran, Borders, Grampian (incl. Shetland and Orkney), Greater Glasgow, Tayside, Forth Valley, Fife, Golden Jubilee. NSS and NES merged into PSD Scotland on 1 Apr 2026.","dimsNote":"Hosting and support location not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.3},"refs":[{"id":"R357","author":"Nss","year":"2026","title":"Foi 2026 3363 contract for intersystems trakcare intended for use by multiple NHS scotland health boards and hospitals therein","url":"https://www.nss.nhs.scot/media/6837/foi-2026-3363-contract-for-intersystems-trakcare-intended-for-use-by-multiple-nhs-scotland-health-boards-and-hospitals-therein.pdf"}]},{"id":"DEV-022","entity":"Devolved Governments","subUnit":"NHS Scotland (GP IT, national contract)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Vision GP clinical system - single approved GP system for NHS Scotland","vendor":"OneAdvanced (formerly In Practice Systems / Cegedim)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"OneAdvanced (investors Vista Equity Partners and BC Partners)","ownerCountry":"Unknown","ownershipChange":"Yes – In Practice Systems Ltd (Vision; UK subsidiary of French Cegedim SA) entered administration Dec 2024; business and assets bought by OneAdvanced, completed Aug 2025","ownershipSource":"https://www.consultancy.uk/news/41383/inps-clinical-system-bought-by-oneadvanced-to-secure-nhs-services","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"e.g. 98 of 115 NHS Lothian practices (Apr 2026)","dataFormat":"Proprietary GP record","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Practice re-training","osAlternative":"n/a","sovereignAlternative":"n/a","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":null,"spendPeriod":"Contract runs to 2029","evidence":"Confirmed","notes":"Scotland was migrating practices EMIS -> Vision when INPS entered administration (10 Dec 2024); NSS kept service running; OneAdvanced took over the contract Aug 2025.","dimsNote":"Administrator Crowe ran accelerated sale (Consultancy.uk); OneAdvanced lists Vista and BC Partners as investors (oneadvanced.com/investors/vista-equity-partners); investor countries and hosting not stated in source","scores":{"D1":null,"D2":3,"D3":0,"D4":1,"D5":0,"D6":0,"D7":null,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":0.7777777777777778},"refs":[{"id":"R356","author":"Nss","year":"2025","title":"NHS scotland transitions GP IT contract to new provider following company acquisition","url":"https://www.nss.nhs.scot/news/nhs-scotland-transitions-gp-it-contract-to-new-provider-following-company-acquisition/"},{"id":"R075","author":"Consultancy","year":"n.d.","title":"Inps clinical system bought by oneadvanced to secure NHS services","url":"https://www.consultancy.uk/news/41383/inps-clinical-system-bought-by-oneadvanced-to-secure-nhs-services"}]},{"id":"DEV-023","entity":"Devolved Governments","subUnit":"NHS Scotland (NHS Lothian GP practices)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"EMIS Web GP clinical system in remaining Scottish practices (migrating to Vision)","vendor":"EMIS (Optum UK, now TPG)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"TPG (owner of Optum UK / EMIS)","ownerCountry":"Unknown","ownershipChange":"Yes – EMIS Group bought by UnitedHealth's Optum UK for GBP 1.2bn (completed Oct 2023); UnitedHealth sold Optum UK (core asset EMIS) to TPG, closed 13 Mar 2026","ownershipSource":"https://www.beckerspayer.com/m-and-a/unitedhealth-completes-sale-of-uk-business-to-tpg/","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Secondary","seats":17,"seatsBasis":"NHS Lothian practices still on EMIS (of 115)","dataFormat":"Proprietary GP record","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration","osAlternative":"n/a","sovereignAlternative":"n/a","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"NHS Lothian: 17 EMIS practices preparing to move to Vision; NSS holds GP system contracts for all boards.","dimsNote":"Optum completion: managementinpractice.com/news/emis-1-2bn-takeover-by-us-healthcare-giant-has-completed/; TPG HQ not stated in source","scores":{"D1":null,"D2":3,"D3":0,"D4":1,"D5":0,"D6":0,"D7":null,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":0.6111111111111112},"refs":[{"id":"R368","author":"Org","year":"2026","title":"[Title to be confirmed]","url":"https://org.nhslothian.scot/foi/wp-content/uploads/sites/22/2026/04/11251.pdf"},{"id":"R015","author":"Becker's Payer Issues","year":"2026","title":"Unitedhealth completes sale of UK business to tpg","url":"https://www.beckerspayer.com/m-and-a/unitedhealth-completes-sale-of-uk-business-to-tpg/"}]},{"id":"DEV-024","entity":"Devolved Governments","subUnit":"NHS Scotland (NSS PACS Reprovisioning)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Sectra enterprise imaging PACS managed service (single national instance, 15 board sites)","vendor":"Sectra","vendorCountry":"SE","vendorTier":"T2 EU/EEA","owner":"Sectra (parent not stated in source)","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"https://pacsreprovisioning.scot.nhs.uk/wp-content/uploads/2023/12/20231212-PACS-RP-Contract-Award-Announcement.pdf","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"55m+ radiology studies to migrate","dataFormat":"DICOM","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Image migration;Integrations","osAlternative":"Orthanc / OHIF (OSS)","sovereignAlternative":"None at scale","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":137000000,"spendPeriod":"10-year managed service from Dec 2023","evidence":"Confirmed","notes":"Public cloud hybrid architecture (award announcement; cloud provider not named). Replaces Philips national PACS contract ending Dec 2026.","dimsNote":"Cloud provider, region and keys not stated in source","scores":{"D1":null,"D2":2,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":null,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.6666666666666666},"refs":[{"id":"R143","author":"Find a Tender Service","year":"2023","title":"Contract notice 037593-2023","url":"https://www.find-tender.service.gov.uk/Notice/037593-2023"},{"id":"R409","author":"Scot","year":"n.d.","title":"20231212 pacs rp contract award announcement","url":"https://pacsreprovisioning.scot.nhs.uk/wp-content/uploads/2023/12/20231212-PACS-RP-Contract-Award-Announcement.pdf"}]},{"id":"DEV-034","entity":"Devolved Governments","subUnit":"NHS Wales (DHCW LIMS programme)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"InterSystems laboratory information system (legacy TCL2016; contingency 5-year extension)","vendor":"InterSystems","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"InterSystems Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":21,"seatsBasis":"NHS Wales pathology labs in national LIMS scope (2021 procurement)","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Lab validation;Analyser interfaces","osAlternative":"OpenELIS","sovereignAlternative":"None","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Citadel replacement terminated FY2022/23; InterSystems agreed 5-year extension as contingency with new procurement by 2030. Milestones missed (UAT defects); TCL2016 near end-of-life late 2025; DHCW sought extra GBP 1.6m; pathology-loss risk scored 20.","dimsNote":"Hosting not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.3},"refs":[{"id":"R277","author":"Hduhb","year":"2025","title":"3 7 lims laboratory information management system","url":"https://hduhb.nhs.wales/about-us/governance-arrangements/board-committees/digital-data-and-innovation-committee-ddic/digital-data-and-innovation-committee-22-july-2025/3-7-lims-laboratory-information-management-system/"}]},{"id":"DEV-035","entity":"Devolved Governments","subUnit":"NHS Wales (DHCW LIMS programme)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Citadel Health Evolution vLab LIMS (contract terminated)","vendor":"Citadel Health","vendorCountry":"AU","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Citadel Health","ownerCountry":"AU","ownershipChange":"No","ownershipSource":"https://hduhb.nhs.wales/about-us/governance-arrangements/board-committees/digital-data-and-innovation-committee-ddic/digital-data-and-innovation-committee-22-july-2025/3-7-lims-laboratory-information-management-system/","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Niche","seats":21,"seatsBasis":"Labs originally in scope","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Contract termination","osAlternative":"OpenELIS","sovereignAlternative":"None","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":15900000,"spendPeriod":"7 years (+2) from Oct 2021 award","evidence":"Reported","notes":"Hywel Dda board paper (Jul 2025) records the Citadel contract as terminated during FY2022/23, forcing reliance on incumbent InterSystems.","dimsNote":"Source describes Citadel as an Australian software firm; termination per HDUHB paper","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.3},"refs":[{"id":"R279","author":"Healthcareitnews","year":"2021","title":"Citadel health awarded ps159m contract modernise welsh national pathology services","url":"https://www.healthcareitnews.com/news/emea/citadel-health-awarded-ps159m-contract-modernise-welsh-national-pathology-services"},{"id":"R277","author":"Hduhb","year":"2025","title":"3 7 lims laboratory information management system","url":"https://hduhb.nhs.wales/about-us/governance-arrangements/board-committees/digital-data-and-innovation-committee-ddic/digital-data-and-innovation-committee-22-july-2025/3-7-lims-laboratory-information-management-system/"}]},{"id":"DEV-036","entity":"Devolved Governments","subUnit":"NHS Wales (DHCW RISP)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Philips managed radiology RIS/PACS and patient dose monitoring (all Wales)","vendor":"Philips","vendorCountry":"NL","vendorTier":"T2 EU/EEA","owner":"Philips (parent not stated in source)","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"10 health boards/trusts plus DHCW","dataFormat":"DICOM / HL7","formatOwner":"Standards body","openSpec":"Yes","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Image migration;Integrations","osAlternative":"Orthanc / OHIF","sovereignAlternative":"None","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":47222003,"spendPeriod":"7-year MSA (+2) from Sep 2023, incl. extension options","evidence":"Confirmed","notes":"RIS and dose monitoring subcontracted (~GBP 6.7m). Initial estimate GBP 56m.","dimsNote":"Contracting entity Philips Electronics UK Ltd; parent and hosting not stated in source","scores":{"D1":null,"D2":2,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":null,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.6666666666666666},"refs":[{"id":"R142","author":"Find a Tender Service","year":"2023","title":"Contract notice 033518-2023","url":"https://www.find-tender.service.gov.uk/Notice/033518-2023"}]},{"id":"DEV-037","entity":"Devolved Governments","subUnit":"NHS Wales (DHCW framework)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Hospital ePMA framework (Better, Nervecentre, CareFlow Medicines Management)","vendor":"Better; Nervecentre; CareFlow","vendorCountry":"Mixed","vendorTier":"Unknown","owner":"Not stated in source","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"Mixed (openEHR for Better not stated)","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Local mini-competition lock-in","osAlternative":"n/a","sovereignAlternative":"Nervecentre (UK address)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":100000000,"spendPeriod":"Framework ceiling from Nov 2022","evidence":"Confirmed","notes":"Multi-vendor framework; boards call off locally. Supplier addresses Cardiff, Wokingham and Basildon.","dimsNote":"Ownership of the three suppliers not stated in source","scores":{"D1":null,"D2":null,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":null,"D8":0,"D9":null,"D10":1.5,"D11":1.5,"D12":1.5,"overall":0.875},"refs":[{"id":"R137","author":"Find a Tender Service","year":"2022","title":"Contract notice 035353-2022","url":"https://www.find-tender.service.gov.uk/Notice/035353-2022"}]},{"id":"DEV-038","entity":"Devolved Governments","subUnit":"NHS Wales (all GP practices)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"EMIS Web GP clinical system (all Welsh practices after Vision exit)","vendor":"EMIS (Optum UK, now TPG)","vendorCountry":"GB","vendorTier":"T1 UK","owner":"TPG (owner of Optum UK / EMIS)","ownerCountry":"Unknown","ownershipChange":"Yes – EMIS Group bought by UnitedHealth's Optum UK for GBP 1.2bn (completed Oct 2023); Optum UK (core asset EMIS) sold to TPG, closed 13 Mar 2026","ownershipSource":"https://www.beckerspayer.com/m-and-a/unitedhealth-completes-sale-of-uk-business-to-tpg/","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"Every GP practice in Wales (193 moved from Vision by Jun 2026, HTN)","dataFormat":"Proprietary GP record","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Practice re-training","osAlternative":"n/a","sovereignAlternative":"n/a","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Low","spend":80000000,"spendPeriod":"GP Systems and Services framework from Jan 2022 (EMIS, Vision, TPP)","evidence":"Confirmed","notes":"Wales consolidated on EMIS Web (programme Jun 2024 - Jun 2026) just as EMIS changed owner twice; Scotland went the other way (to Vision). DHCW manages All Wales framework.","dimsNote":"Optum completion: managementinpractice.com/news/emis-1-2bn-takeover-by-us-healthcare-giant-has-completed/; TPG HQ not stated in source","scores":{"D1":null,"D2":3,"D3":0,"D4":1,"D5":0,"D6":0,"D7":null,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":0,"overall":0.6111111111111112},"refs":[{"id":"R414","author":"Sell2wales","year":"2022","title":"[Title to be confirmed]","url":"https://www.sell2wales.gov.wales/search/search_switch.aspx?ID=118274"},{"id":"R015","author":"Becker's Payer Issues","year":"2026","title":"Unitedhealth completes sale of UK business to tpg","url":"https://www.beckerspayer.com/m-and-a/unitedhealth-completes-sale-of-uk-business-to-tpg/"}]},{"id":"DEV-039","entity":"Devolved Governments","subUnit":"NHS Wales (DHCW)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Welsh Clinical Portal (national clinical record viewer)","vendor":"Digital Health and Care Wales","vendorCountry":"GB","vendorTier":"T1 UK","owner":"NHS Wales (DHCW)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"All-Wales service","dataFormat":"NHS Wales national architecture","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Low","exitCostDrivers":"n/a (publicly owned)","osAlternative":"n/a","sovereignAlternative":"Already NHS-built","operator":"Customer (in-house UK team)","keyCustody":"Vendor","codeModelControl":"Version-pinnable","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Managed all-Wales by DHCW, 'hosted within national architecture'; DHCW integration platform listed as Fiorano.","dimsNote":"DHCW supplies and manages the service (FOI); key arrangements not stated in source","scores":{"D1":null,"D2":3,"D3":0,"D4":3,"D5":3,"D6":1.5,"D7":3,"D8":3,"D9":null,"D10":2.25,"D11":3,"D12":3,"overall":2.475},"refs":[{"id":"R385","author":"Pthb","year":"2023","title":"Foi 23r164 clinical systems","url":"https://pthb.nhs.wales/use-of-site/freedom-of-information/disclosure-log/foi-disclosure-log-2023/may/foi-23r164-clinical-systems/"}]},{"id":"DEV-040","entity":"Devolved Governments","subUnit":"NHS Wales (DHCW)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Welsh PAS (WPAS) incl. maternity and theatre modules","vendor":"Digital Health and Care Wales","vendorCountry":"GB","vendorTier":"T1 UK","owner":"NHS Wales (DHCW)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"NHS Wales national data model","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Low","exitCostDrivers":"n/a (publicly owned)","osAlternative":"n/a","sovereignAlternative":"Already NHS-run","operator":"Customer (in-house UK team)","keyCustody":"Vendor","codeModelControl":"Version-pinnable","ipOwner":"Customer","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"FOI lists DHCW as supplier of WelshPAS modules used by Powys.","dimsNote":"DHCW named as supplier; underlying product origin and hosting not stated in source","scores":{"D1":null,"D2":3,"D3":0,"D4":3,"D5":1.5,"D6":1.5,"D7":3,"D8":3,"D9":null,"D10":2.25,"D11":3,"D12":3,"overall":2.325},"refs":[{"id":"R385","author":"Pthb","year":"2023","title":"Foi 23r164 clinical systems","url":"https://pthb.nhs.wales/use-of-site/freedom-of-information/disclosure-log/foi-disclosure-log-2023/may/foi-23r164-clinical-systems/"}]},{"id":"DEV-041","entity":"Devolved Governments","subUnit":"NHS Wales (DHCW)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Welsh Nursing Care Record (single national instance since Nov 2023)","vendor":"Digital Health and Care Wales","vendorCountry":"GB","vendorTier":"T1 UK","owner":"NHS Wales (DHCW)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"83%+ of eligible adult inpatient wards; 10.3m inpatient records","dataFormat":"Unknown","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Low","exitCostDrivers":"n/a","osAlternative":"n/a","sovereignAlternative":"Already NHS-run","operator":"Customer (in-house UK team)","keyCustody":"Vendor","codeModelControl":"N/A","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Eight databases consolidated into one; GBP 1.7m Digital Priorities Investment Fund for paediatric extension. Builder not stated.","dimsNote":"DHCW announced and runs service; build and database product not stated in source","scores":{"D1":null,"D2":3,"D3":0,"D4":3,"D5":3,"D6":null,"D7":3,"D8":3,"D9":null,"D10":2.25,"D11":3,"D12":3,"overall":2.5833333333333335},"refs":[{"id":"R505","author":"UKAuthority","year":"2024","title":"Welsh nursing care databases consolidated into one","url":"https://ukauthority.com/articles/welsh-nursing-care-databases-consolidated-into-one/"}]},{"id":"DEV-042","entity":"Devolved Governments","subUnit":"NHS Wales (DHCW / NHS Wales App)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"NHS Wales App delivery partner (discovery, development, operations, support)","vendor":"Kainos","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Kainos Group (Belfast address in notice)","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"See entity citizen_users","dataFormat":"FHIR / APIs","formatOwner":"Standards body","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Knowledge transfer","osAlternative":"n/a","sovereignAlternative":"Kainos is UK (Belfast)","operator":"UK","keyCustody":"Vendor","codeModelControl":"Version-pinnable","ipOwner":"Customer","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":20000000,"spendPeriod":"Sole-supplier framework from Apr 2024","evidence":"Confirmed","notes":"Kainos built the app from the England NHS App codebase; hosting environment cited as Azure DevOps (Computer Weekly 2023).","dimsNote":"Notice gives Belfast address; IP terms and live hosting region not stated in source","scores":{"D1":null,"D2":3,"D3":0,"D4":2,"D5":3,"D6":1.5,"D7":3,"D8":3,"D9":null,"D10":1.5,"D11":3,"D12":3,"overall":2.3},"refs":[{"id":"R146","author":"Find a Tender Service","year":"2024","title":"Contract notice 010945-2024","url":"https://www.find-tender.service.gov.uk/Notice/010945-2024"}]},{"id":"DEV-049","entity":"Devolved Governments","subUnit":"HSC Northern Ireland (encompass)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"encompass regional EHR (Epic) across all five HSC trusts, with My Care portal","vendor":"Epic Systems","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Epic Systems Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"All five HSC trusts live by May 2025; ~45 legacy systems replaced","dataFormat":"Epic Chronicles/Clarity","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Data migration;Clinical re-training;Time-and-materials contract","osAlternative":"OpenEHR platforms","sovereignAlternative":"None at scale","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":1930000000,"spendPeriod":"Whole-programme estimate (latest)","evidence":"Confirmed","notes":"OBC 2017 GBP 982.5m -> FBC 2020 GBP 1.61bn -> addendum 2022 GBP 1.95bn. Sole-supplier negotiation after second bidder withdrew; contract on time-and-materials not fixed price. No legacy system yet switched off (~GBP 6.5m/yr). Epic contract itself GBP 275m (HTN 2020). Hosting is a Telefonica-run managed service (see next row).","dimsNote":"Epic named as supplier (NIAO calls it Supplier A); hosting region and keys not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":0,"D6":0,"D7":1,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.3},"refs":[{"id":"R233","author":"GOV.UK","year":"2025","title":"[Title to be confirmed]","url":"https://www.niauditoffice.gov.uk/files/niauditoffice/documents/2025-07/NI%20Audit%20Office%20Report%20-%20Major%20IT%20Projects%20in%20NI_0.pdf"}]},{"id":"DEV-051","entity":"Devolved Governments","subUnit":"HSC Northern Ireland (BSO ITS)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"Northern Ireland Electronic Care Record (NIECR) and patient portal on Orion Health","vendor":"Orion Health","vendorCountry":"NZ","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Orion Health (parent not stated in source)","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"Partial","portability":"Hard","switchingCost":"High","exitCostDrivers":"Vendor-owned IP;Direct awards","osAlternative":"n/a","sovereignAlternative":"n/a","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":8500000,"spendPeriod":"Direct award May 2022 (duration not stated)","evidence":"Confirmed","notes":"Awarded without competition because Orion Health owns the NIECR intellectual property - a textbook lock-in.","dimsNote":"IP ownership by Orion stated in notice; ownership/HQ not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":null,"D8":0,"D9":null,"D10":0,"D11":0,"D12":0,"overall":0.3888888888888889},"refs":[{"id":"R134","author":"Find a Tender Service","year":"2022","title":"Contract notice 011791-2022","url":"https://www.find-tender.service.gov.uk/Notice/011791-2022"}]},{"id":"DEV-060","entity":"Devolved Governments","subUnit":"NICS (Land & Property Services, DoF)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"LandWeb land registration system (BT PFI since 1999) pending NOVA replacement","vendor":"BT","vendorCountry":"GB","vendorTier":"T1 UK","owner":"BT Group plc","ownerCountry":"GB","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"","dataFormat":"Proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Repeated extensions;Legal challenge delay","osAlternative":"n/a","sovereignAlternative":"NOVA (new contract)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":76700000,"spendPeriod":"Extensions Jul 2019 - Jul 2028 (ceiling)","evidence":"Confirmed","notes":"Original GBP 46m PFI 1999-2016; extended four times. Replacement delayed a year by bidder legal challenge; new extension needs GBP 1.4m tech refresh + GBP 2.2m/yr. Rates system also extended to 2030 (GBP 42.4m).","dimsNote":"BT operated ICT infrastructure and managed service (NIAO); hosting not stated in source","scores":{"D1":null,"D2":3,"D3":0,"D4":1,"D5":0,"D6":0,"D7":3,"D8":0,"D9":null,"D10":0,"D11":3,"D12":3,"overall":1.3},"refs":[{"id":"R233","author":"GOV.UK","year":"2025","title":"[Title to be confirmed]","url":"https://www.niauditoffice.gov.uk/files/niauditoffice/documents/2025-07/NI%20Audit%20Office%20Report%20-%20Major%20IT%20Projects%20in%20NI_0.pdf"}]},{"id":"DEV-061","entity":"Devolved Governments","subUnit":"Education Authority NI (Department of Education)","layerId":"B3","layer":"Sector systems","group":"Business apps","product":"C2k / EN(ni) managed schools service incl. SIMS management information system","vendor":"Not named in source (EN(ni) managed service provider)","vendorCountry":"Unknown","vendorTier":"Unknown","owner":"Not stated in source","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Unknown","hostingLocation":"Unknown","prevalence":"Dominant","seats":null,"seatsBasis":"1,100+ schools","dataFormat":"SIMS proprietary","formatOwner":"Vendor","openSpec":"No","portability":"Hard","switchingCost":"High","exitCostDrivers":"Repeated extensions;Data migration","osAlternative":"n/a","sovereignAlternative":"EdIS strategic partner (new)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"High","supplyChainRisk":"N/A","ukCapability":"Partial","ukValueCapture":"Medium","spend":312900000,"spendPeriod":"Extensions Mar 2017 - Mar 2027 (option to 2029)","evidence":"Confirmed","notes":"EN(ni) awarded 2012 for 5 years and extended six times. EdIS replacement programme latest FBC GBP 734.4m.","dimsNote":"Supplier not stated in source","scores":{"D1":null,"D2":null,"D3":0,"D4":1,"D5":0,"D6":0,"D7":null,"D8":0,"D9":null,"D10":0,"D11":1.5,"D12":1.5,"overall":0.5},"refs":[{"id":"R233","author":"GOV.UK","year":"2025","title":"[Title to be confirmed]","url":"https://www.niauditoffice.gov.uk/files/niauditoffice/documents/2025-07/NI%20Audit%20Office%20Report%20-%20Major%20IT%20Projects%20in%20NI_0.pdf"}]},{"id":"DEV-044","entity":"Devolved Governments","subUnit":"NHS Wales (DHCW National Data Resource)","layerId":"B4","layer":"Data & analytics","group":"Business apps","product":"National Data Resource data platform on Google Cloud (reseller Computacenter)","vendor":"Google Cloud (via Computacenter)","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Alphabet Inc (Google)","ownerCountry":"US","ownershipChange":"No","ownershipSource":"https://dhcw.nhs.wales/national-data-resource/ndr-blog/what-is-a-data-platform","licence":"Proprietary","governance":"Single vendor","hosting":"Non-UK cloud","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"BigQuery / FHIR","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"High","exitCostDrivers":"Egress;Re-platforming;Skills","osAlternative":"Apache Spark / Trino on open cloud","sovereignAlternative":"UK-owned clouds","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"Medium","ukCapability":"Partial","ukValueCapture":"Low","spend":10000000,"spendPeriod":"Sole-supplier framework from Dec 2022","evidence":"Confirmed","notes":"GCP chosen after a Gartner-assisted evaluation (DHCW NDR blog); NHS Executive moved datasets to the platform (NDAP) Mar 2024.","dimsNote":"GCP selection per DHCW blog; region and keys not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":1.5,"D10":0.75,"D11":1.5,"D12":0,"overall":0.75},"refs":[{"id":"R138","author":"Find a Tender Service","year":"2023","title":"Contract notice 000051-2023","url":"https://www.find-tender.service.gov.uk/Notice/000051-2023"},{"id":"R105","author":"Dhcw","year":"n.d.","title":"What is a data platform","url":"https://dhcw.nhs.wales/national-data-resource/ndr-blog/what-is-a-data-platform"}]},{"id":"DEV-047","entity":"Devolved Governments","subUnit":"Powys Teaching Health Board (NHS Wales)","layerId":"B4","layer":"Data & analytics","group":"Business apps","product":"SQL Server 2019, Power BI and SSRS for BI and data warehousing","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"SQL Server / PBIX","formatOwner":"Vendor","openSpec":"Partial","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Report rebuild;Licence","osAlternative":"PostgreSQL + Apache Superset","sovereignAlternative":"None","operator":"Customer (in-house UK team)","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"Power BI licences come via the NHS Wales M365 agreement; SharePoint provides some document-management functionality.","dimsNote":"Hosting not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":3,"D5":3,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.95},"refs":[{"id":"R385","author":"Pthb","year":"2023","title":"Foi 23r164 clinical systems","url":"https://pthb.nhs.wales/use-of-site/freedom-of-information/disclosure-log/foi-disclosure-log-2023/may/foi-23r164-clinical-systems/"}]},{"id":"DEV-007","entity":"Devolved Governments","subUnit":"Scottish Government","layerId":"A1","layer":"Foundation models","group":"AI","product":"Microsoft Copilot Chat - preferred corporate generative AI tool for all SG staff","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"Available to all SG staff (count not stated)","dataFormat":"Proprietary prompts/outputs in M365","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence;Workflow lock-in","osAlternative":"Self-hosted open-weight models (e.g. Mistral, Llama)","sovereignAlternative":"None (no UK frontier model)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"SG treats GenAI use as an operational matter; no usage figures or costs given.","dimsNote":"Underlying model provider, processing region and data handling not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.6},"refs":[{"id":"R212","author":"Gov","year":"2026","title":"[Title to be confirmed]","url":"https://www.gov.scot/publications/foi-202500496787/"}]},{"id":"DEV-025","entity":"Devolved Governments","subUnit":"NHS Scotland (NSS National Security Operations Centre)","layerId":"SE1","layer":"Endpoint protection","group":"Security","product":"Windows Advanced Threat Protection (Microsoft Defender ATP) used by national SOC","vendor":"Microsoft","vendorCountry":"US","vendorTier":"T3 Five Eyes (ex-UK)","owner":"Microsoft Corporation","ownerCountry":"US","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"SaaS","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"Proprietary telemetry","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Licence bundle (E5)","osAlternative":"Wazuh / OSSEC","sovereignAlternative":"UK EDR vendors (few)","operator":"Vendor-global","keyCustody":"Vendor","codeModelControl":"Vendor-controlled","ipOwner":"Vendor","continuityRisk":"Medium","supplyChainRisk":"N/A","ukCapability":"None","ukValueCapture":"Low","spend":null,"spendPeriod":"","evidence":"Confirmed","notes":"NSOC lists Windows ATP, an unnamed SIEM and vulnerability scanners; works daily with NCSC. The 2018 NHS Scotland Microsoft deal covered Windows 10 E5 incl. Defender ATP for 160,000+ staff (Neowin).","dimsNote":"Telemetry location not stated in source","scores":{"D1":null,"D2":1,"D3":0,"D4":1,"D5":1.5,"D6":0,"D7":1,"D8":0,"D9":null,"D10":1.5,"D11":0,"D12":0,"overall":0.6},"refs":[{"id":"R355","author":"Nss","year":"2025","title":"National security operations centre","url":"https://www.nss.nhs.scot/digital-systems-and-security/secure-solutions-and-information/national-security-operations-centre/"}]},{"id":"DEV-026","entity":"Devolved Governments","subUnit":"NHS Scotland (NSS National Security Operations Centre)","layerId":"SE2","layer":"SIEM / SOC","group":"Security","product":"National SOC (Dundee) delivery partner","vendor":"Systal","vendorCountry":"GB","vendorTier":"T1 UK","owner":"Systal (ultimate parent not stated in source)","ownerCountry":"Unknown","ownershipChange":"No","ownershipSource":"","licence":"Proprietary","governance":"Single vendor","hosting":"Hybrid","hostingLocation":"Unknown","prevalence":"Primary","seats":null,"seatsBasis":"","dataFormat":"n/a","formatOwner":"Vendor","openSpec":"No","portability":"Moderate","switchingCost":"Medium","exitCostDrivers":"Knowledge transfer","osAlternative":"n/a","sovereignAlternative":"Systal is Glasgow-headquartered","operator":"UK","keyCustody":"N/A","codeModelControl":"Vendor-controlled","ipOwner":"Shared","continuityRisk":"Low","supplyChainRisk":"N/A","ukCapability":"Strong","ukValueCapture":"High","spend":null,"spendPeriod":"","evidence":"Reported","notes":"Value and SIEM product not disclosed.","dimsNote":"Source states Glasgow HQ and Dundee SOC; ownership not stated in source","scores":{"D1":null,"D2":3,"D3":null,"D4":2,"D5":3,"D6":0,"D7":null,"D8":1.5,"D9":null,"D10":1.5,"D11":3,"D12":3,"overall":2.125},"refs":[{"id":"R199","author":"Futurescot","year":"2024","title":"Systal to increase capacity and capability of NHS national services scotlands security operations centre soc","url":"https://futurescot.com/systal-to-increase-capacity-and-capability-of-nhs-national-services-scotlands-security-operations-centre-soc/amp/"}]}]}