G-Cloud & Digital Marketplace: UK Government IT Procurement

G-Cloud is a Crown Commercial Service (CCS) framework agreement for cloud computing services. Currently on its 14th iteration (G-Cloud 14), it allows suppliers to list pre-priced cloud services that public sector buyers can purchase without running a full competitive procurement. The Digital Marketplace (digitalmarketplace.service.gov.uk) is the online platform through which G-Cloud services are discovered and purchased.

The framework divides cloud services into three lots: Lot 1 (Cloud Hosting) covers infrastructure-as-a-service, platform-as-a-service, and managed hosting environments. Lot 2 (Cloud Software) covers software-as-a-service applications across all categories. Lot 3 (Cloud Support) covers implementation, migration, and ongoing support services for cloud technologies. Each supplier lists individual services with descriptions, features, pricing, and certifications. Buyers search the catalogue, shortlist services that meet their requirements, and make call-off purchases at the listed prices.

To list services on G-Cloud, suppliers must apply during the framework’s opening window. The application process involves a declaration confirming legal, financial, and professional standing, plus individual service submissions describing each cloud service you want to list. Each service requires a detailed description, pricing model, terms and conditions, and security certifications. There is no limit on the number of services a supplier can list.

Once accepted, your services appear in the Digital Marketplace catalogue immediately. Buyers can find your services through keyword search, category browsing, or by filtering on specific criteria (pricing model, data hosting location, security certifications). When a buyer selects your service, they place a call-off order at your listed price — no further negotiation or competition is required for orders below £20,000. Above £20,000, buyers may compare multiple suppliers or run a mini-evaluation. G-Cloud listings are valid for the framework’s duration (typically 12 months, with extensions). New iterations (G-Cloud 15, 16, etc.) require fresh applications.

While G-Cloud is the Digital Marketplace’s most prominent framework, the platform also hosts Digital Outcomes and Specialists (DOS). DOS allows buyers to post specific requirements for digital outcomes (a team to deliver a defined project), digital specialists (individual contractors with specific skills), and user research participants. Unlike G-Cloud’s catalogue model, DOS works as a competitive listing: buyers post a brief, framework suppliers respond with proposals, and the buyer evaluates and awards.

DOS is particularly valuable for digital consultancies, agile delivery teams, user research agencies, and specialist contractors. Each DOS brief typically has a 1–2 week response window, making monitoring speed critical — late discovery means a missed opportunity. Between G-Cloud and DOS, the Digital Marketplace covers the majority of UK government digital and technology procurement below the major programme level. Combined spending through the platform exceeds £2 billion annually.

UK government buyers on the Digital Marketplace have specific security expectations. For cloud services handling government data, compliance with the UK government’s Cloud Security Principles (based on NCSC guidance) is expected. Cyber Essentials certification is a minimum requirement for many government contracts, while Cyber Essentials Plus is increasingly common for services handling sensitive data. ISO 27001 (information security management) is frequently requested.

Data residency is a key concern — many buyers require that data is stored and processed within the UK or, at most, within the EEA. Your G-Cloud listing should clearly state where data is hosted and processed. For services handling personal data, compliance with UK GDPR is mandatory. NHS-specific services may additionally require compliance with the Data Security and Protection Toolkit (DSPT). Including these certifications in your G-Cloud listing improves discoverability and buyer confidence.

G-Cloud call-offs below £20,000 happen directly on the Digital Marketplace without external publication — these are driven by buyer search behaviour, so having clear, keyword-rich service descriptions is essential. Larger G-Cloud call-offs and all DOS briefs are published on the Digital Marketplace itself, and some also appear on Contracts Finder. Above-threshold call-offs appear on Find a Tender.

Jorpex monitors Contracts Finder and Find a Tender for G-Cloud and Digital Marketplace call-off opportunities. By including keywords like “G-Cloud,” “Digital Marketplace,” “cloud services,” and your specific technology terms in your notification profile, you can surface relevant call-offs as soon as they’re published. This is especially valuable for larger call-offs that involve mini-competitions, where early awareness gives you more preparation time. For DOS briefs, which have tight 1–2 week response windows, speed of discovery directly affects your ability to compete.