Policies, statements and contractual templates published in line with UK procurement expectations. See also the trust centre.
Policies & contractual templates.
The documents a UK funder, council or NHS Trust expects on a serious vendor's website. Each is a real policy — sober, reviewed annually, attached to tenders as-is.
Data Processing Addendum (DPA)
UK GDPR processor terms — roles, security measures, subprocessors, breach notification, transfers.
Service Level Agreement (SLA)
Uptime targets, support hours, severity-based response times, service credits.
Acceptable Use Policy
Permitted use, prohibited content and activity, monitoring, enforcement, suspension.
Information Security Policy
Classification, access control, encryption, logging, vulnerability management, IR.
Subject Access Request (SAR) process
How to exercise UK GDPR rights — request, identity check, response timescale, fees.
Accessibility Statement
WCAG 2.2 AA conformance status, known issues, testing approach, feedback channel.
Modern Slavery Statement
Voluntary statement, supply chain, due diligence, training, reporting channels.
Equality & Diversity policy
Equality Act 2010 commitments — recruitment, suppliers, product accessibility.
Anti-bribery & Corruption policy
UK Bribery Act 2010 — gifts and hospitality limits, facilitation payments, reporting.
Carbon Reduction Plan
PPN 06/21-aligned baseline, targets, reduction projects, executive sign-off.
Last reviewed: 2026-05-17 · Next review: 2027-05-17 · Document owner: Navdeep Singh
Need a tailored version for procurement? Email hello@sifotech.co.uk.