Award

Cyber Resilience Phishing Subscription

  • NHS Wales Shared Services Partnership-Procurement Services (hosted by Velindre University NHS Trust)

UK5: Transparency notice - Procurement Act 2023 - view information about notice types

Notice identifier: 2025/S 000-076796

Procurement identifier (OCID): ocds-h6vhtk-05e82d

Published 25 November 2025, 11:47am



Scope

Reference

P0195

Description

Hywel Dda University Health Board (HDUHB) are looking to renew their cyber resilience licences utilised across the Health Board. The platform allows digital services to educate staff on how to identify attacks and respond with confidence by providing short training content for staff for awareness and reporting. The solution provides digital services with metrics to track trends and identify areas where further awareness or knowledge sharing is required.


Contract 1. P0195 - Cyber Resilience Phishing Subscription

Supplier

Contract value

  • £194,325 excluding VAT
  • £233,190 including VAT

Above the relevant threshold

Earliest date the contract will be signed

22 December 2025

Contract dates (estimated)

  • 1 February 2026 to 31 January 2031
  • 5 years

Main procurement category

Services

CPV classifications

  • 48170000 - Compliance software package
  • 72000000 - IT services: consulting, software development, Internet and support

Contract locations

  • UKL14 - South West Wales

Other information

Conflicts assessment prepared/revised

Yes


Procedure

Procedure type

Direct award

Direct award justification

  • Single supplier - technical reasons
  • Additional or repeat goods, services or works - extension or partial replacement

The Health Board requires a cyber resilience phishing simulation and awareness subscription to strengthen staff readiness against phishing attacks and meet NHS Wales cyber security standards. They are looking to align this contract with their neighbouring Health Board, Swansea Bay to achieve significant technical, operational and monetary savings.

This direct award is made under the provisions of Section 41 and Schedule 5 of the Procurement Act 2023, specifically given the exclusive integration and the absence of reasonable alternatives that can deliver the same level of interoperability and functionality without disproportionate cost and risk.


Supplier

Meta Compliance Limited

  • Public Procurement Organisation Number: PHGZ-5665-QPWP

Third Floor Old City Factory, 100 Patrick Street

Londonderry

BT48 7EL

United Kingdom

Region: UKN0A - Derry City and Strabane

Small or medium-sized enterprise (SME): No

Voluntary, community or social enterprise (VCSE): No

Contract 1. P0195 - Cyber Resilience Phishing Subscription


Contracting authority

NHS Wales Shared Services Partnership-Procurement Services (hosted by Velindre University NHS Trust)

  • Public Procurement Organisation Number: PXWV-6492-CGMN

4-5 Charnwood Court,

Cardiff

CF14 3UZ

United Kingdom

Region: UKL22 - Cardiff and Vale of Glamorgan

Organisation type: Public authority - central government

Devolved regulations that apply: Wales