Explained / Other / 21 August 2026
Selling into UK central government: Crown Commercial Service and GDS standards
UK central government procurement runs almost entirely through Crown Commercial Service (CCS) frameworks, supplemented by departmental procurement for specific categories. Government Digital Service (GDS) standards apply to digital products. The Procurement Act 2023 reshaped framework operation in February 2025; vendors must understand the new regime.
CCS framework registration is mandatory for substantive UK central government sales. GDS Service Standard applies to digital products; vendor must align with the 14-point standard or face screening. The new Procurement Act regime introduces 'open frameworks' that allow new vendors to join during framework lifetime; legacy assumptions about static framework membership are out of date.
How UK central government procurement actually works
UK central government procurement runs through Crown Commercial Service (CCS) frameworks for the substantial majority of categories. Departments procure outside CCS frameworks only where no relevant framework exists or where exceptional circumstances justify a bespoke procurement. Vendor registration on relevant CCS frameworks is therefore the entry point for substantive central government sales.
CCS operates frameworks covering technology (G-Cloud, DOS, Technology Services), professional services, facilities management, energy, and many other categories. Each framework has its own joining process, eligibility criteria, and call-off mechanism. Vendors should map which frameworks are relevant to their offering and prioritise registration accordingly. G-Cloud is the dominant cloud and SaaS framework and the most commercially active for technology vendors.
The Procurement Act 2023 came into force on 24 February 2025 and reshaped how UK central government procurement operates. Notable changes: the Single Central Digital Platform replaces multiple notice publications; open frameworks allow new vendors to join during framework lifetime (rather than only at renewal); lighter-touch regimes apply to certain service categories; below-threshold transparency requirements are tighter.
The Government Digital Service Standard
The GDS Service Standard is a 14-point standard that applies to digital services built or bought by UK central government. The standard covers user-centred design, accessibility, agile delivery, technical openness, security, and other dimensions. New service procurements above modest scale must pass a GDS Service Standard assessment.
Vendors providing digital products to UK central government should align their offering with the Service Standard and present evidence of alignment. Specific points commonly tested: accessibility (WCAG 2.2 AA conformance), open standards (use of open APIs and data formats), technology openness (avoidance of proprietary lock-in), security (Cyber Essentials Plus often required, ISO 27001 commonly required, data residency aligned with public-sector classification).
The Cabinet Office spend control regime
UK central government spend above defined thresholds requires approval from the Cabinet Office under the published spend control regime. Technology spend, consultancy spend, marketing spend, property spend, and others have specific approval routes. Vendors should expect the buying department to need Cabinet Office approval for substantive commitments and should plan cycle accordingly. Cabinet Office approval can add 4 to 8 weeks to the cycle and can result in scope changes.
Open frameworks and the new joiner pattern
The Procurement Act 2023 introduced open frameworks that allow new vendors to join during the framework's lifetime, rather than only at the original procurement and renewal. The G-Cloud framework, for example, has historically been refreshed every 12 to 18 months; under the open framework regime, new vendors may have routes to join more frequently.
Vendors who were previously locked out of CCS frameworks until the next refresh should reassess their position. The open framework regime is still bedding in across categories; some frameworks have moved to open status and others have not. Vendors should check the current status of their target framework and engage CCS directly if uncertain.
Security clearance and data classification
UK central government data is classified at OFFICIAL, OFFICIAL-SENSITIVE, or SECRET (with TOP SECRET reserved for highly sensitive material). Vendor offerings must be cleared to handle data at the classification of the relevant procurement. OFFICIAL is the default for the substantial majority of procurements; OFFICIAL-SENSITIVE applies where data is more sensitive; SECRET is rare.
Personnel security clearance (Baseline Personnel Security Standard, Counter Terrorist Check, Security Check, Developed Vetting) applies to vendor staff working on relevant procurements. Vendors who can resource cleared staff or who can support the clearance process for new staff have an advantage in procurements where clearance is required.
Source: Crown Commercial Service framework documentation. GDS Service Standard. Procurement Act 2023. Editorial synthesis.