CoreStream GDPR Information Asset Manager

{
  "id": "034572-2026",
  "tag": [
    "award",
    "contract"
  ],
  "bids": {
    "statistics": [
      {
        "id": "1",
        "value": 1,
        "measure": "bids",
        "relatedLot": "1"
      }
    ]
  },
  "date": "2026-04-16T11:09:05+01:00",
  "ocid": "ocds-h6vhtk-0683e6",
  "buyer": {
    "id": "GB-NHS-QNC",
    "name": "NHS Staffordshire and Stoke-on-Trent Integrated Care Board"
  },
  "awards": [
    {
      "id": "034572-2026-1",
      "title": "CoreStream  GDPR Information Asset Manager",
      "status": "active",
      "suppliers": [
        {
          "id": "GB-COH-5157767",
          "name": "CoreStream Ltd"
        }
      ],
      "relatedLots": [
        "1"
      ]
    }
  ],
  "tender": {
    "id": "WHISP-416",
    "lots": [
      {
        "id": "1",
        "status": "cancelled",
        "options": {
          "description": "Option to extend for up to a further 12-month period."
        },
        "hasOptions": true,
        "description": "Procurement of CoreStream GDPR Information Asset Manager  via the G-Cloud 14 Framework Agreement.\nThe CoreStream GDPR Information Asset Management (IAM) supports organisations in documenting their information assets and information / data flows (using the ISO27005 approach to information risk management), managing them throughout their respective lifecycles and automating the identification of key risks.  The contract also includes the scope of SARS, FOI, Risk and Complaints Management.   \nThe contract period is for 2 years with the option to extend for up to a further 12-month period, starting on 01/04/2026. The contract value is £82,450.00 excluding VAT.",
        "awardCriteria": {
          "criteria": [
            {
              "type": "price"
            }
          ]
        }
      }
    ],
    "items": [
      {
        "id": "1",
        "relatedLot": "1",
        "deliveryAddresses": [
          {
            "region": "UKG2"
          }
        ]
      }
    ],
    "title": "CoreStream GDPR Information Asset Manager",
    "status": "complete",
    "legalBasis": {
      "id": "32014L0024",
      "scheme": "CELEX"
    },
    "description": "CoreStream GDPR Information Asset Manager call off via the G-Cloud 14 Framework Agreement.",
    "classification": {
      "id": "48000000",
      "scheme": "CPV",
      "description": "Software package and information systems"
    },
    "procurementMethod": "limited",
    "mainProcurementCategory": "goods",
    "procurementMethodDetails": "Award procedure without prior publication of a call for competition",
    "procurementMethodRationale": "Contract is awarded under the G-Cloud 14 Framework Agreement (RM1557.14).",
    "procurementMethodRationaleClassifications": [
      {
        "id": "D_OUTSIDE_SCOPE",
        "scheme": "TED_PT_AWARD_CONTRACT_WITHOUT_CALL",
        "description": "The procurement falls outside the scope of application of the directive"
      }
    ]
  },
  "parties": [
    {
      "id": "GB-NHS-QNC",
      "name": "NHS Staffordshire and Stoke-on-Trent Integrated Care Board",
      "roles": [
        "buyer"
      ],
      "address": {
        "region": "UKG23",
        "locality": "Hanley, Stoke-on-Trent",
        "postalCode": "ST1 4FA",
        "countryName": "United Kingdom",
        "streetAddress": "Smithfield One, Leonard Coates Way"
      },
      "details": {
        "url": "https://staffsstoke.icb.nhs.uk/",
        "classifications": [
          {
            "id": "BODY_PUBLIC",
            "scheme": "TED_CA_TYPE",
            "description": "Body governed by public law"
          },
          {
            "id": "07",
            "scheme": "COFOG",
            "description": "Health"
          }
        ]
      },
      "identifier": {
        "id": "QNC",
        "scheme": "GB-NHS",
        "legalName": "NHS Staffordshire and Stoke-on-Trent Integrated Care Board"
      },
      "contactPoint": {
        "name": "Paul Winter",
        "email": "paul.winter@staffsstoke.icb.nhs.uk"
      }
    },
    {
      "id": "GB-COH-5157767",
      "name": "CoreStream Ltd",
      "roles": [
        "supplier"
      ],
      "address": {
        "region": "UKI",
        "locality": "London",
        "postalCode": "SW1X 7HN",
        "countryName": "United Kingdom",
        "streetAddress": "20 Grosvenor Place"
      },
      "details": {
        "scale": "sme"
      },
      "identifier": {
        "id": "5157767",
        "scheme": "GB-COH",
        "legalName": "CoreStream Ltd"
      }
    },
    {
      "id": "GB-FTS-180135",
      "name": "NHS Staffordshire and Stoke-on-Trent Integrated Care Board",
      "roles": [
        "reviewBody"
      ],
      "address": {
        "locality": "Hanley, Stoke-on-Trent",
        "postalCode": "ST1 4FA",
        "countryName": "United Kingdom",
        "streetAddress": "Smithfield One, Leonard Coates Way"
      },
      "identifier": {
        "legalName": "NHS Staffordshire and Stoke-on-Trent Integrated Care Board"
      }
    }
  ],
  "language": "en",
  "contracts": [
    {
      "id": "034572-2026-1",
      "title": "CoreStream  GDPR Information Asset Manager",
      "value": {
        "amount": 82450,
        "currency": "GBP"
      },
      "status": "active",
      "awardID": "034572-2026-1",
      "dateSigned": "2026-03-24T00:00:00Z"
    }
  ],
  "description": "Contract is awarded under the G-Cloud 14 Framework Agreement (RM1557.14) following a desktop assessment.",
  "initiationType": "tender"
}