Orchestrate Every Bid.
Win More IT Services Contracts in Cardiff.

The State of IT Services Procurement in Cardiff

Updated 15 May 2026

## Distributing IT Architecture and Security Requirements via Sell2Wales

When Cardiff Council publishes a £4.2M cloud infrastructure overhaul on Sell2Wales, assigning the complex technical schedules to the right subject matter experts dictates the entire response trajectory. The Crown Commercial Service Technology Services 3 (RM6100) framework mandates distinct responses for Lot 3a (End User Services) and Lot 3b (Operational Management), requiring precise allocation of network engineers and cybersecurity leads. Lucius AI’s requirement distribution engine parses the raw Sell2Wales buyer attachments, automatically routing ISO 27001 compliance questionnaires to the Chief Information Security Officer and data residency queries to the Azure architecture team. By utilizing the Gemini-extracted compliance matrix, the platform maps specific ITIL v4 service transition questions directly to the designated IT operations manager. A recent £1.8M managed service provider contract for Cardiff Metropolitan University saw this engine distribute 142 distinct technical requirements across six engineering departments within fourteen minutes of the tender notice publication. Furthermore, the system cross-references the Skills Framework for the Information Age (SFIA) rate cards to ensure the assigned personnel match the exact grading required by the buyer.

## Managing Clarification Windows and FTS Submission Cut-offs

Navigating the strict procedural timelines of a £12M digital transformation procurement published on Find a Tender (FTS) demands rigorous oversight of the deadline stream. The standard Public Contracts Regulations 2015 (PCR 2015) open procedure enforces a rigid 30-day window, where the clarification question deadline often closes exactly 10 days prior to the final FTS submission cut-off. Lucius AI synchronizes these critical dates by extracting the exact timestamps from the Standard Selection Questionnaire (SQ) and the Invitation to Tender (ITT) documents. During a recent £3.5M NHS Wales Informatics Service (NWIS) software development bid, the platform's deadline stream alerted the bid manager that the intent-to-bid notification was due on October 14th at 12:00 GMT, preventing a technical disqualification. The system employs Files API caching to continuously monitor the eTenderWales buyer portal for addenda, instantly updating the internal clarification window if the procurement officer extends the Q&A period under Regulation 47. This ensures that the final submission aligns perfectly with the Crown Commercial Service (CCS) eSourcing suite upload protocols.

## Tracking Draft Status Across the Welsh Procurement Policy Statement Matrix

Maintaining visibility over a multi-author response for a £6M Welsh Government enterprise resource planning (ERP) implementation requires a granular section status dashboard. The Welsh Procurement Policy Statement (WPPS) introduces specific social value mandates, meaning the community benefits delivery plan must be tracked alongside the core SAP S/4HANA technical architecture schedules. Lucius AI provides a real-time dashboard that categorizes every individual requirement from the Joint Schedule 4 (Commercially Sensitive Information) as drafted, under review, or approved. For a £2.2M Cardiff Capital Region data analytics contract, the bid manager utilized this dashboard to identify that the Cyber Essentials Plus certification evidence remained stuck in the "drafted" phase just 48 hours before the deadline. The platform integrates File Search citations across the bid library to populate the dashboard with completion percentages, ensuring the WPPS economic regeneration metrics align perfectly with the proposed IT service level agreements (SLAs). Additionally, the dashboard flags any incomplete Data Processing Agreements (DPA) required under the UK General Data Protection Regulation (UK GDPR).

## Automated QA Sweeps Against JCT Constructing Excellence IT Clauses

Executing a pre-submission compliance QA sweep is critical when responding to the complex IT infrastructure requirements embedded within a £9M JCT Constructing Excellence contract for the new Velindre Cancer Centre. The National Procurement Service (NPS) Wales frameworks frequently penalize suppliers for minor deviations from the stated Data Protection Impact Assessment (DPIA) formats. Lucius AI deploys a Deep Think contradiction audit to cross-reference the finalized technical narrative against the original buyer requirements list extracted from the eTenderWales portal. In a recent £4.7M server virtualization bid for South Wales Police, this automated QA sweep flagged a critical discrepancy where the proposed VMware vSphere licensing model contradicted the mandatory pricing schedule format specified in Schedule 3. The system systematically verifies that every mandatory "shall" and "must" statement from the Ministry of Defence Industry Security Notice (ISN) 2023/01 is explicitly addressed in the final submission document. This audit also ensures that the proposed disaster recovery Recovery Time Objectives (RTO) match the exact stipulations of the ISO 22301 business continuity requirements.

## Governance Audit Trails for Cardiff Council Cloud Migrations

Securing internal sign-off for a high-risk £8.5M Cardiff Council AWS cloud migration demands a rigorous approval workflow coupled with an immutable version-control audit trail. The Local Government Act 1999 best value duty requires transparent governance, meaning every modification to the pricing matrix or the Master Services Agreement (MSA) redlines must be tracked to a specific commercial director. Lucius AI enforces a sequential approval workflow where the technical design authority must digitally sign off on the Network and Information Systems (NIS) Regulations 2018 compliance section before the commercial lead can approve the final pricing. During a £3.1M Natural Resources Wales digital archiving tender, the platform's version-control audit trail successfully documented that the legal team approved the limitation of liability clause revisions on November 2nd at 14:30 GMT. By utilizing the Files API caching mechanism, the system archives every iteration of the response document, providing a complete forensic history of the bid's evolution from the initial Sell2Wales notice to the final FTS contract award. This guarantees full compliance with the Freedom of Information Act 2000 (FOIA) disclosure requirements.

Bidders into Cardiff it services contracts compete under Find a Tender, Contracts Finder, JCT/NEC4 frameworks and Crown Commercial Service agreements. Sector-specific compliance bars include G-Cloud framework alignment, ISO 27001, Cyber Essentials Plus, GDPR DPIAs and data sovereignty. Lucius AI maps each one to your response with a page-cited audit trail, so legal review reads as fast as engineering review.