"Airlock" Output Checking System OCS Decision Engine Development Partner

UKB is seeking to further improve its technical controls and intends to implement a functional mechanism to check data egress requests

to ensure that participant record-level data is not being removed and does not contain information that can identify individual

participants. This Output Checking System (OCS) functionality will allow UKB to enhance the security of the UKB-RAP, reduce the

risk of advertent and inadvertent data breaches and importantly increase the trust and transparency of the UKB resource. UKB intends

to commence a procurement exercise to procure a replacement for the current UKB-RAP in 2027, which will come into effect in 2028.

The OCS will need to be integrated with the new UKB-RAP.

To develop and deliver the OCS, UKB is separating the procurement into two elements which will need to be fully interoperable:

1. OCS User Interface (UI) and Workflow (subject to a separate tender exercise completed via the CCS G-Cloud 14 framework): The

development of a seamless UI and Workflow for the OCS, including secure movement of data and integration with existing UKB

infrastructure.

2. The OCS Decision Engine (this procurement): The development of the core algorithms to allow an automated assessment of the data

being egressed, giving an overall confidence assessment score and a Red/Amber/Green (RAG) rating for decision making

The OCS Decision Engine is made up of two components:

1. Data Trust Engine: reviews the egressed file(s) from UKB-RAP to detect the presence of sensitive information. Through the

application of transparent, heuristic rules and configurable thresholds, the Data Trust Engine will create a score for how 'disclosive' the

egressed data is that, when coupled with the researcher confidence score below, provides a Red (fail), Amber (unclear) or Green (pass)

egress rating.

2. Researcher Behaviour Engine: derives the overall credibility of a given researcher within AMS and UKB-RAP, and assigns a

confidence score, which will dictate how human-review decisions are made for 'Amber' outcomes from the Trust Engine.

This procurement relates to a development partner to design and deliver the OCS Decision Engine, which will include the Data Trust

Engine and Researcher Behaviour Engine.

• The evaluation was concluded and a decision to award was made on Friday 22 May 2026
• UK Biobank has provided an assessment summary to each supplier on Friday 19 June 2026
• The standstill period ran until midnight on 30 June 2026