Digital & IT: Monthly Procurement Report — May 2026

1. Executive Summary

Digital & IT closed May 2026 with £12.65 billion in awarded contract value across the trailing twelve months. 650 awarded notices from more than 180 distinct public buyers — but do not let the headline figure mislead: a handful of Crown Commercial Service framework awards account for the majority of that number.

The defining pattern: framework re-let spikes distort everything. September to November 2025 saw three months of £2.5bn+ monthly spend — the signature of large CCS Technology Services framework awards being published simultaneously. Strip those out and the underlying run-rate is closer to £170–330 million per month. Suppliers reading the headline £12.65bn figure and expecting proportional open-tender volume will be disappointed.

31 active tenders were live at month-end. The real market for most suppliers is not the framework awards — it is the call-offs, mini-competitions, and direct awards that flow beneath the surface of the public record.

---

2. Market Overview

2.1 Spend Summary

The September–November 2025 spike is unmistakable — three consecutive months of £2.5bn+ in awards, followed by a sharp return to sub-£200m monthly run rates. This is framework procurement at scale: a handful of notices each worth hundreds of millions, published in a short window, then years of call-off activity that never fully appears in the public record.

2.2 Spend Distribution by Route

Framework dominance in Digital & IT is more pronounced than any other sector. CCS alone — through G-Cloud, Technology Products and Services, Digital Outcomes and Specialists, and the Technology Services frameworks — routes the majority of central government and NHS technology spend. Suppliers without framework positions are competing for less than a third of the total market.

---

3. Biggest Awards and Notable Contracts

3.1 Top Buyers by Awarded Value

3.2 Notable Awards Commentary

Crown Commercial Service at £9.74 billion is not a buyer in the traditional sense — it is a framework aggregator. Its awards represent frameworks that dozens of public bodies will call off against over the next 3–4 years. The headline figure is a commitment ceiling, not actual spend in the period.

BIP Solutions Limited at £3.05 billion and NHS Shared Business Services at £2.5 billion follow the same pattern: large framework lots awarded once, called off repeatedly. Suppliers winning these framework positions lock in pipeline visibility that competitors cannot access.

National Highways and PROSPER represent a different buyer type — large infrastructure and housing bodies with significant digital transformation programmes running in parallel with their core estate work.

---

4. Framework Activity

4.1 Active Frameworks Overview

4.2 Framework Commentary

The re-let of CCS Technology Services and the continued high volume on G-Cloud 15 define the framework landscape. G-Cloud 14 is formally sunset — buyers still running call-offs on it are generating compliance risk. The migration to G-Cloud 15 is accelerating, and new listings on G-Cloud 15 are seeing faster evaluation cycles than the previous iteration.

If you are not on at least one CCS framework and one regional digital framework, you are competing for roughly 20% of the public digital market. The remaining 80% is pre-allocated to framework suppliers.

---

5. Category Deep Dive

5.1 Spend by Category

5.2 Category Commentary

Software, Licensing & SaaS leads by value, dominated by large enterprise software renewals — Microsoft EA agreements, Oracle database licences, and SAP contracts account for a substantial portion. These are consolidation plays, not open competition: buyers are renewing with existing providers via CCS RM frameworks.

Digital Transformation & Advisory at £2.6bn is the most contested category in terms of new supplier opportunity. Transformation programmes — EPR implementations in NHS, case management system replacements in local government, data platform modernisation — tend to run open or restricted tender processes rather than pure framework call-offs.

Cyber Security at £1.1bn is growing faster than any other category. The Cyber Essentials mandate, NCSC guidance updates, and the increasing frequency of public sector ransomware incidents are driving both planned and reactive procurement. NCC Group, Actica Consulting, and specialist CREST-accredited providers are picking up the majority of awarded notices.

AI & Automation at £330m is the fastest-growing category from a standing start. Contract titles including "AI", "machine learning", "automation", and "intelligent document processing" have tripled year-on-year. Most are small proof-of-concept contracts (£50k–£500k); large AI platform awards remain rare but are beginning to appear in NHS and HMRC procurement.

---

6. Supplier Intelligence

Phoenix Software and Softcat leading on award count reflects the structural reality of the public sector software market: resellers win high-frequency, lower-value commodity transactions (Microsoft licences, endpoint devices, peripherals) rather than high-value transformation work. Their value-per-award is low precisely because they are winning in the right segment — one where volume matters more than individual contract size.

PA Consulting at £116.4m on just five awards shows the inverse: a management and technology consultancy winning fewer but materially larger transformation engagements. This is a different market requiring different capability.

NCC Group and Actica Consulting appearing in the top eight reflects cyber security's growing share of spend — both are established in the public sector cyber market and are well-positioned for the continued expansion of the category.

---

7. Regional Analysis

7.1 Spend Concentration by Region

London and the South East's 48% share reflects the concentration of central government departments, NHS England, and NHSE's national digital programmes. Suppliers without a London or near-London delivery footprint will find the majority of high-value central government work structurally difficult to win.

---

8. Policy & Regulatory Watch

8.1 Procurement Act 2023 — Digital Impact

The Procurement Act is changing digital procurement in specific ways. Transparency requirements around commercial pipelines are forcing departments to publish forward-looking digital spend plans. Several departments have published Digital and Technology Spend Pipelines for 2026–27, signalling upcoming procurements in AI infrastructure, data platforms, and legacy system replacement.

8.2 Cyber Security Requirements Tightening

NCSC's updated guidance on supply chain security is working its way into procurement requirements. Cyber Essentials Plus is now mandatory for many government technology contracts; Cyber Essentials (standard) is effectively a floor. Suppliers without current certification are being eliminated at PQQ stage, not scored down.

8.3 AI Procurement Policy

The Central Digital and Data Office (CDDO) has published interim guidance on AI procurement. Key requirements emerging in tender specifications: explainability requirements, data governance compliance, human-in-the-loop requirements for high-stakes decisions. Suppliers offering AI capability need documented compliance frameworks — buyers are asking, and "we follow AI principles" is no longer an acceptable answer.

8.4 Legacy Modernisation Mandate

The government's legacy IT modernisation programme is accelerating. HMRC, DWP, and several NHS trusts have live procurements for legacy system replacement. These are large, complex, often restricted procedure contracts — but they represent the biggest single new-work opportunity in public digital for the next three years.

---

9. Trends & Signals

9.1 Emerging Patterns

• AI spend inflecting — contract titles with AI/ML/automation tripled year-on-year; most are still small pilots but larger platform awards are beginning to appear
• Cyber consolidation — buyers are moving from point-solution cyber procurement to managed security service provider (MSSP) relationships; fewer awards, larger values
• Reseller market pressure — commodity software and hardware reselling is high-volume but margin-compressed; Phoenix Software and Softcat's award counts reflect volume, not profitability
• EPR super-cycle — NHS EPR implementations are the defining large-contract opportunity; Oracle Health (Cerner), Epic, and TPP are the platform winners, but the implementation partner and integration market remains open
• Data platform consolidation — local authorities are pooling data infrastructure through shared service vehicles; PSBA in Wales, regional data partnerships in the North are creating new multi-authority procurement vehicles

9.2 What This Means for Suppliers

• Framework position is a binary qualifier. Not optional, not a "nice to have." Without G-Cloud 15 or DOS 6, you are competing for 20% of the market. Get on the next available lot or wait for the next re-let.
• Cyber credentials are table stakes. Cyber Essentials Plus, ISO 27001, and an up-to-date penetration test report are being requested at PQQ stage across all technology categories — not just cyber-specific contracts.
• AI capability needs to be documented. Buyers are asking about AI in every technology tender now, whether or not the contract is AI-related. Have a one-page AI policy: what you use, how you govern it, what you won't do.
• The real opportunity is below the surface. Framework call-off volumes — which largely don't appear in the public record — dwarf open tenders. The best signal of future call-off opportunity is framework position, not Contracts Finder notice volume.

---

10. Forward Pipeline: June Outlook

10.1 Opportunities to Watch

10.2 June Forecast

June is historically one of the two busiest months for digital procurement publication alongside October. Year-end budget commitment pressure, combined with Q2 financial reviews, drives a spike in notice volume.

Suppliers should expect:

• Legacy system replacement tenders as departments commit pre-year-end budgets
• A batch of cyber security contract renewals as annual certifications expire
• NHS digital transformation notices tied to EPR programme wave timings
• AI pilot tenders from departments responding to CDDO guidance

The digital market looks larger than it is and smaller than it feels. £12.65bn sounds like open ground — most of it is already spoken for by framework incumbents. The genuine open competition sits in the £170–330m monthly run-rate once you strip out the framework re-lets.

---

11. Methodology & Data Sources

Data sources: Contracts Finder API v2, Find a Tender OCDS API, AtlasRevenue platform intelligence layer.

Scope: All digital and IT-classified procurement activity published by UK public-sector buyers — central government departments, NHS bodies, local authorities, education institutions, and arms-length bodies. Keyword-driven search with parallel CPV-code pass per sector.

Exclusions: Sub-threshold contracts not published on Contracts Finder. Framework call-offs where individual values are not disclosed. Private-sector technology activity.

Classification: Contracts are categorised using AtlasRevenue's sector taxonomy, driven by LLM-generated keywords matched against notice titles. Description-level matching is excluded to avoid false positives.

Reporting period: Trailing 12 months to 31 May 2026. Open tender counts reflect live status at month-end.

Confidence note: The monthly spend spikes in September–November 2025 reflect large framework award publications, not actual spend delivery. The underlying call-off run-rate is materially lower. Treat the trailing 12m headline as a commitment ceiling, not a throughput figure.

---

Next report: June 2026 (published July 2026)

This report is produced by AtlasRevenue. For live procurement intelligence, sector signals, and weekly alerts, visit atlasrevenue-agent-production.up.railway.app.