UK Enterprise Software Procurement Guide (2025)

📋 RFP Process💷 GBP Contracts⚖️ IP Rights🔒 UK GDPR🆓 Free Consultation
July 202512 min readJames Whitmore, CTO

Direct Answer

UK enterprise software procurement involves: defining requirements (not solutions), running a structured RFP or ITT, evaluating technical responses honestly, negotiating contracts that protect IP and data rights, and managing the vendor relationship through delivery. The most common UK procurement mistakes are: writing requirements as a solution description, accepting T&M when fixed-price is available, and failing to negotiate IP transfer.

UK Software Procurement Methods

MethodWhen to UseThreshold (indicative)Key Requirements
Direct AwardKnown supplier, low value, non-complexUnder £10,000Competitive quote obtained, documented rationale
Simplified Competition (quotations)Low-medium value, few qualified suppliers£10K–£50K3 competitive quotes, evaluation criteria documented
Open Tender (RFP/ITT)Medium-high value, competitive market£50K–£250KPublished requirements, scored evaluation, standstill period
Competitive Procedure with NegotiationComplex, innovative, or regulatory requirements£250K+Pre-qualification stage, dialogue permitted, final offers
G-Cloud (public sector only)Cloud software/services, publicly funded organisationAny valueDirect award from G-Cloud catalogue — competitive procurement already done by CCS
Digital Outcomes (public sector)Bespoke development services, public sectorAny valueOpportunity posted, shortlisted suppliers, evaluation and award

RFP Writing — The Most Common Mistakes

MistakeWhat HappensHow to Avoid
Describing a solution not a problemSuppliers build what you described, not what you need. Your solution assumption may be wrong.Describe the business problem and outcome required — not the technical solution
Unclear evaluation criteriaAll responses look similar; decision is subjective and challengeablePublish weighted scoring criteria: 30% technical approach, 25% price, 20% experience, 25% compliance
No fixed-price requirementT&M responses — cost risk on buyer, no delivery incentive for supplierRequire fixed-price proposals (with Technical Discovery if needed)
Ignoring IP rightsSupplier retains code IP — you are licensing, not owning, on terminationRequire: all IP assigned to buyer, source code access from Day 1
Minimum compliance as standardAll suppliers claim compliance — no differentiation on compliance qualityAsk for specific evidence: ISO 27001 certificate, Cyber Essentials Plus certificate, specific case studies
Too long100-page RFP deters the best suppliers (busy) and attracts those who write bid documents (not deliver)20–30 page maximum. Detailed scope in annexes. Time-box the response to 2 weeks.

Contract Negotiation — UK-Specific Essentials

IP assignment: all intellectual property assigned to buyer — not licensed. On termination, buyer owns the code unconditionally.

Source code access: buyer has access to source code repository from Sprint 1 — not only at project end.

UK GDPR Article 28: if supplier processes personal data, a DPA (Data Processing Agreement) is mandatory before work begins.

Fixed price: insist on fixed price after Technical Discovery — not T&M for a defined delivery phase.

Exit rights: termination for convenience with 4-week notice, paying only for work completed to date.

Handover obligations: specified deliverables at project end — documentation, knowledge transfer, infrastructure access transfer.

Escrow (for SaaS): source code escrow with a UK-registered escrow agent if SaaS is business-critical.

Every UK software development contract should address these negotiation points:

UK Public Sector Procurement — G-Cloud and Digital Outcomes

FrameworkForHow It WorksClickMasters Status
G-Cloud 14Cloud software (SaaS/IaaS/PaaS), managed servicesSuppliers listed on catalogue; buyers direct award; no further competition requiredClickMasters on G-Cloud 14
Digital Outcomes & Specialists 6Bespoke digital development, user research, testingOpportunity published; shortlisted suppliers; evaluation and award; 2–4 week timelineClickMasters on DOS 6
NHS Software CatalogueNHS-specific software and servicesNHS Supply Chain managed list; DTAC compliance requiredApply via NHS Supply Chain
Crown Commercial Service Digital TechnologyTechnology products and services, larger contractsOpen tender via Find a Tender Service (FTS)Case-by-case tender application

Frequently Asked Questions

Common questions about uk enterprise software procurement guide (2025).

Public procurement thresholds (Procurement Act 2023): contracts above £213,477 (for central government) or £213,477 (sub-central public bodies) must be formally tendered via Find a Tender Service. Below threshold: simplified competition process (3+ quotes, documented rationale). G-Cloud and DOS are framework agreements — using them is a valid alternative to open tender at any value.

Essential RFP sections: business context and problem statement (2 pages), scope of work and acceptance criteria (5–10 pages), technical requirements (3–5 pages), compliance requirements (UK GDPR, security, accessibility — 2 pages), contract requirements (IP, SLAs, governance — 2 pages), evaluation criteria and weighting (1 page), and submission requirements (format, deadline, questions process — 1 page). Aim for 20–30 pages maximum.

About the Author

James Whitmore, CTO UK software procurement specialist — both supplier and adviser ClickMasters has responded to 100+ UK software tenders and advised 50+ UK businesses on procurement. This guide is for general guidance — consult a procurement specialist for regulated sectors.

Free Procurement Consultation ClickMasters can help...

Free Procurement Consultation ClickMasters can help write your RFP, evaluate responses, or respond to your tender. Free 45-minute consultation. → clickmasterssoftwaredevelopmentcompany.co.uk/contact/

Book a Free Consultation