Contract

Cyber Resilience Phishing Subscription Renewal

  • NHS Wales Shared Services Partnership-Procurement Services (hosted by Velindre University NHS Trust)

UK7: Contract details notice - Procurement Act 2023 - view information about notice types

Notice identifier: 2026/S 000-003065

Procurement identifier (OCID): ocds-h6vhtk-05e82d (view related notices)

Published 14 January 2026, 12:04pm



Scope

Reference

P0195

Description

Hywel Dda University Health Board (HDUHB) have awarded a contract to renew their cyber resilience licences utilised across the Health Board. The platform allows digital services to educate staff on how to identify attacks and respond with confidence by providing short training content for staff for awareness and reporting. The solution provides digital services with metrics to track trends and identify areas where further awareness or knowledge sharing is required.


Contract 1. Cyber Resilience Phishing Subscription Renewal

Supplier

Contract value

  • £194,325 excluding VAT
  • £233,190 including VAT

Above the relevant threshold

Date signed

23 December 2025

Contract dates

  • 31 December 2025 to 31 December 2030
  • 5 years, 1 day

Main procurement category

Services

CPV classifications

  • 48170000 - Compliance software package
  • 72000000 - IT services: consulting, software development, Internet and support

Contract locations

  • UKL14 - South West Wales

Other information

Conflicts assessment prepared/revised

Yes


Procedure

Procedure type

Direct award

Direct award justification

Single supplier - technical reasons

The Health Board requires a cyber resilience phishing simulation and awareness subscription to strengthen staff readiness against phishing attacks and meet NHS Wales cyber security standards. They are looking to align this contract with their neighbouring Health Board, Swansea Bay to achieve significant technical, operational and monetary savings. This direct award is made under the provisions of Section 41 and Schedule 5 of the Procurement Act 2023, specifically given the exclusive integration and the absence of reasonable alternatives that can deliver the same level of interoperability and functionality without disproportionate cost and risk.


Supplier

Meta Compliance Limited

  • Public Procurement Organisation Number: PHGZ-5665-QPWP

Third Floor Old City Factory, 100 Patrick Street

Londonderry

BT48 7EL

United Kingdom

Region: UKN0A - Derry City and Strabane

Small or medium-sized enterprise (SME): No

Voluntary, community or social enterprise (VCSE): No

Supported employment provider: No

Public service mutual: No

Contract 1. Cyber Resilience Phishing Subscription Renewal


Contracting authority

NHS Wales Shared Services Partnership-Procurement Services (hosted by Velindre University NHS Trust)

  • Public Procurement Organisation Number: PXWV-6492-CGMN

4-5 Charnwood Court,

Cardiff

CF14 3UZ

United Kingdom

Region: UKL22 - Cardiff and Vale of Glamorgan

Organisation type: Public authority - sub-central government

Devolved regulations that apply: Wales