Official UK procurement notice
Cyber Resilience Phishing Subscription Renewal
Procurement agent: Hywel da University Health Board·On behalf of: Cardiff and Vale University Health Board
What is being bought
Published requirement descriptionHywel Dda University Health Board (HDUHB) have awarded a contract to renew their cyber resilience licences utilised across the Health Board. The platform allows digital services to educate staff on how to identify attacks and respond with confidence by providing short training content for staff for awareness and reporting. The solution provides digital services with metrics to track trends and identify areas where further awareness or knowledge sharing is required.
The lotProcurement structure
single lot · no lot value publishedProcedure terms & legal framework
From the official record- Procedure method
- Direct award
- Legal basis
- UKPGA · 2023/54 Procurement Act 2023
- Notice status
- Awarded without competition
- Procurement threshold
- Unspecified in notice
- Regulatory regime
- Standard
- Commercial structure
- Stand-alone contract (no framework)
- Competition type
- Direct award (no call for competition)
- GPA / WTO covered
- Unspecified in notice
- Recurring procurement
- Unspecified in notice
- First published
- 25 Nov 2025, 11:47 GMT
- Last source update
- 22 May 2026, 12:55 BST
- Authority reference
P0195- FTS notice number
2026/S 000-047824- Latest notice
- Contract details notice (UK7)
- Delivery area
- Official registry OCID
ocds-h6vhtk-05e82dFind a Tender
- Why no open competition
- Single Suppliers Technical Reasons
- Published justification
The Health Board requires a cyber resilience phishing simulation and awareness subscription to strengthen staff readiness against phishing attacks and meet NHS Wales cyber security standards. They are looking to align this contract with their neighbouring Health Board, Swansea Bay to achieve significant technical, operational and monetary savings. This direct award is made under the provisions of Section 41 and Schedule 5 of the Procurement Act 2023, specifically given the exclusive integration and the absence of reasonable alternatives that can deliver the same level of interoperability and functionality without disproportionate cost and risk.
Notice history
5 events · 3 releases on Find a Tender · since 25 Nov 2025- Transparency notice published25 Nov 2025, 11:47 GMTUK5
- Contract signature expected22 Dec 2025, 23:59 GMTscheduled
- Contract details notice published14 Jan 2026, 12:04 GMTUK7
- Contract details notice published22 May 2026, 12:55 BSTUK7
- Buyer details updated22 May 2026, 12:55 BST
Commercial outcome & contract awards
Published awards, contracts and bid statistics, not a forecast| Awarded to | Value | Date | Status |
|---|---|---|---|
| MetaCompliance LtdSMEP0195 - Cyber Resilience Phishing Subscription1 Feb 2026 – 31 Jan 2031 | £194,325 | — | Awarded |
Contracts
Cyber Resilience Phishing Subscription Renewal · MetaCompliance LtdSME
- Signed
- 23 Dec 2025
- Value
- £194,325
- Period
- 31 Dec 2025 – 31 Dec 2030
- Status
- active
Contracting authority & participating public bodies
3 public bodies on the noticeClients of the procurement agent
- Cardiff and Vale University Health BoardBeneficiary authority
- NHS Wales Shared Services Partnership (hosted by Velindre University NHS Trust)Procuring entityPublic authority - sub-central governmentWelsh devolved regulations applyManagement of the procurement process from planning through to award and supporting with contract management.
Bidders & participating suppliers
1 commercial party on the notice- Meta Compliance LimitedAwarded supplier
Official documents & specifications (3)
Official links; attachments are not copiedNotices published for this procedure
- Contract details notice Contract details notice on Find a Tender
- Contract details notice Contract details notice on Find a Tender
- Transparency notice Transparency notice on Find a Tender