Public Sector
Credentials, assurance, and a clear path to working together, however your procurement sits.
Built for regulated environments
Infomax was built for the environment where the consequences of getting it wrong are not commercial. They are clinical. Our founders led ImmForm, the UK's national vaccine supply chain platform, through the COVID-19 pandemic. That shapes how we approach every engagement.
Governance frameworks (ISO 27001, DSP Toolkit, NCSC CAF) are not credentials we hold on paper. They are frameworks our founders have been personally accountable for on nationally critical health services. We understand what compliance means in practice, under pressure.
The same rigour that applies in health applies across central government and regulated public sector. We bring it as standard, not as an add-on.
Proven on
ImmForm
The UK's national vaccine supply chain platform. Pandemic flu stockpile management, immunisation programme data, COVID-19 response. Serving DHSC, NHS England, UKHSA, and JCVI. A live, regulated, nationally critical government service.
Two decades. Eleven secretaries of state. One live service.
Governance credentials
First-hand accountability, not theoretical knowledge.
ISO 27001
Information security management certified to the international standard. Not a plan to achieve it: our founders operated under this framework on nationally critical services.
DSP Toolkit
Data Security and Protection Toolkit compliance, mandatory for NHS and health-adjacent systems. First-hand experience managing DSP Toolkit submissions for a nationally critical health platform.
NCSC CAF
Cyber Assessment Framework (the NCSC's framework for organisations responsible for critical national infrastructure or essential services). Applied in practice, not studied in theory.
SIRO/CISO experience
Senior Information Risk Owner accountability held personally by our founders on ImmForm. This is accountability for national health data at scale, not advisory from the outside.
GDS Service Standard
Every service we build aligns to the GDS Service Standard from the first line of code. Alpha and Beta assessment preparation is integral to our delivery, not a separate exercise.
WCAG 2.2 AA
Accessibility is built in from the start, checked on Day 4 of the Alpha intensive and throughout Beta. We do not bolt it on at the end and hope it passes.
Cloud-agnostic, to fit your estate
The UK public sector estate is split. Much of NHS England and GDS-heritage services run on AWS. UKHSA, the Cabinet Office estate, and others run on Azure. Buyers should not have to migrate platforms to work with their delivery supplier.
Infomax delivers across AWS and Azure and is genuinely platform-agnostic. We configure to the buyer's existing environment, whether that is a landing zone already in place, a greenfield cloud account, or a hybrid arrangement.
Talk to us about your next service
A discovery call requires no procurement process and commits to nothing. We scope from there and help you find the simplest compliant route.
Start a conversation