Public Sector
Credentials, assurance, and a clear path to working together, however your procurement sits.
Built for regulated environments
Infomax was built for the environment where the consequences of getting it wrong are not commercial. They are clinical. Our founders led ImmForm, the UK's national vaccine supply chain platform, through the COVID-19 pandemic. That shapes how we approach every engagement.
Governance frameworks (ISO 27001, DSP Toolkit, NCSC CAF) are not credentials we hold on paper. They are frameworks our founders have been personally accountable for on nationally critical health services. We understand what compliance means in practice, under pressure.
The same rigour that applies in health applies across central government and regulated public sector. We bring it as standard, not as an add-on.
Proven on
ImmForm
The UK's national vaccine supply chain platform. Pandemic flu stockpile management, immunisation programme data, COVID-19 response. Serving DHSC, NHS England, and UKHSA. A live, regulated, nationally critical government service.
Two decades. Eleven secretaries of state. One live service.
Credentials at a glance
ISO 27001
Information Security
DSP Toolkit
NHS Data Security
NCSC CAF
Cyber Assessment
GDS Service Standard
Assessment-aligned
WCAG 2.2 AA
Accessibility
AWS + Azure
Cloud-agnostic
Environmental Policy
Carbon reduction plan
Governance credentials
First-hand accountability, not theoretical knowledge.
ISO 27001
Information security management certified to the international standard. Not a plan to achieve it: our founders operated under this framework on nationally critical services.
DSP Toolkit
Data Security and Protection Toolkit compliance, mandatory for NHS and health-adjacent systems. First-hand experience managing DSP Toolkit submissions for a nationally critical health platform.
NCSC CAF
Cyber Assessment Framework (the NCSC's framework for organisations responsible for critical national infrastructure or essential services). Applied in practice, not studied in theory.
SIRO/CISO experience
Senior Information Risk Owner accountability held personally by our founders on ImmForm. This is accountability for national health data at scale, not advisory from the outside.
GDS Service Standard
Every service we build aligns to the GDS Service Standard from the first line of code. Alpha and Beta assessment preparation is integral to our delivery, not a separate exercise.
WCAG 2.2 AA
Accessibility is built in from the start, checked on Day 4 of the Alpha intensive and throughout Beta. We do not bolt it on at the end and hope it passes.
Environmental policy
Infomax has a documented environmental policy and carbon reduction plan aligned to the UK government's PPN 06/20 requirements. We are committed to reducing our environmental impact and can provide our policy on request.
Cloud-agnostic, to fit your estate
The UK public sector estate is split. Much of NHS England and GDS-heritage services run on AWS. UKHSA, the Cabinet Office estate, and others run on Azure. Buyers should not have to migrate platforms to work with their delivery supplier.
Infomax delivers across AWS and Azure and is genuinely platform-agnostic. We configure to the buyer's existing environment, whether that is a landing zone already in place, a greenfield cloud account, or a hybrid arrangement.
How to work with us
Public sector procurement is genuinely hard to navigate. Infomax helps buyers find the simplest compliant route, and that guidance is itself part of the offer. Start with a conversation. We take it from there.
Start with a conversation
A discovery call requires no procurement process and commits to nothing. It is the right first step. We scope a potential engagement, agree whether there is a fit, and identify the best procurement route, all before any formal process begins.
Crown Commercial Service frameworks
G-Cloud and the Digital Outcomes and Specialists (DOS) framework are the standard CCS routes for digital delivery in the public sector. Infomax is joining G-Cloud and DOS at the next available windows. We help buyers understand how these frameworks work and identify whether one fits their timeline and spend.
Existing framework partners
Many buyers already hold contracts with framework-appointed suppliers. Where that is the case, Infomax can deliver through an established framework partner, giving buyers the simplest compliant route without opening a new procurement.
Direct award
Where the value of the engagement falls within direct award thresholds, this is often the fastest and most straightforward compliant route. We help buyers understand whether this applies to their situation.