Planning

SPS-02319 Prisoner Records System Move to Open Source

  • Scottish Prison Service

F01: Prior information notice (prior information only)

Notice identifier: 2025/S 000-078324

Procurement identifier (OCID): ocds-h6vhtk-05eb91

Published 1 December 2025, 9:10am



Section one: Contracting authority

one.1) Name and addresses

Scottish Prison Service

One Lochside, 1 Lochside Avenue

Edinburgh

EH12 9DJ

Contact

Jenny Nairn

Email

Jennifer.Nairn@prisons.gov.scot

Telephone

+44 1313303778

Country

United Kingdom

NUTS code

UKM75 - Edinburgh, City of

Internet address(es)

Main address

http://www.sps.gov.uk

Buyer's address

https://www.publiccontractsscotland.gov.uk/search/Search_AuthProfile.aspx?ID=AA00384

one.3) Communication

Additional information can be obtained from the above-mentioned address

one.4) Type of the contracting authority

National or federal Agency/Office

one.5) Main activity

Public order and safety


Section two: Object

two.1) Scope of the procurement

two.1.1) Title

SPS-02319 Prisoner Records System Move to Open Source

Reference number

SPS-02319

two.1.2) Main CPV code

  • 72222300 - Information technology services

two.1.3) Type of contract

Services

two.1.4) Short description

The Scottish Prison Service (SPS) is initiating a procurement project to migrate its primary prisoner management system, PR2, from the legacy Oracle Forms and Reports platform (version 12.2.1.4), currently backed by an Oracle 19c database, to a modern, open-source, solution hosted in the Cloud. This transition is aimed at improving scalability, maintainability, and alignment with contemporary digital standards. See "Additional Information" for further details

two.1.6) Information about lots

This contract is divided into lots: No

two.2) Description

two.2.3) Place of performance

NUTS codes
  • UKM - Scotland

two.2.4) Description of the procurement

The procurement route for this procurement activity is still being determined. It is expected that this will either be issued as an Open ITT or as an ITT via a Scottish Government Dynamic Purchasing System. Suppliers will be notified via this PIN notice of the intended route once determined.

two.3) Estimated date of publication of contract notice

2 March 2026


Section four. Procedure

four.1) Description

four.1.8) Information about the Government Procurement Agreement (GPA)

The procurement is covered by the Government Procurement Agreement: Yes


Section six. Complementary information

six.3) Additional information

SPS seeks a delivery partner with proven expertise in the automated transposition of Oracle Forms and Reports into open-source equivalents. The migration will be executed modularly to ensure the existing PR2 application remains operational and interoperable with the new environment throughout the transition. Prospective partners will be expected to provide examples of similar modular migrations, demonstrating their capability to manage phased deployments while maintaining service continuity.

To support this transition, we seek a delivery partner with proven expertise in automated code translation from Oracle-based legacy systems to modular Open-Source architectures. The migration approach should enable incremental transformation, allowing individual components of the application to be operated on the new platform while coexisting with the remaining legacy elements. Throughout the migration, a consistent user interface must be maintained to ensure continuity of user experience. The existing application is currently hosted on-premise, however the future platform must be architected to enable seamless deployment in a cloud environment, aligning with our strategic aspiration to embrace cloud capabilities for scalability, resilience, and innovation.

The provider should propose a suitably secure Cloud environment that can host the application and provide assurance that it complies with UK Data Protection Act 2018, and specifically where applicable Part 3 pertaining to data processed for Law Enforcement purposes including measures to ensure UK-only data residency, UK-based support, and no remote access from outside the UK, except where access is strictly necessary and limited to countries with a UK adequacy decision and subject to prior approval and robust safeguards. The provider must also be able to demonstrate their ability to implement technical safeguards to mitigate exposure to foreign jurisdiction, such as the U.S. CLOUD Act (2018)

NOTE: To register your interest in this notice and obtain any additional information please visit the Public Contracts Scotland Web Site at https://www.publiccontractsscotland.gov.uk/Search/Search_Switch.aspx?ID=817050.

(SC Ref:817050)