How to Win NHS Tenders: The Complete SME Guide
NHS procurement is the largest single buyer of services in the UK — but it is also the most heavily gated. This guide walks an SME through the full NHS tender journey: finding opportunities, qualifying, passing DSPT and CQC gateways, decoding the NHS Standard Contract, scoring on social value and submitting cleanly. Every step links to the deeper guide, tool or template you need next.
14 min read1. Where NHS opportunities are actually advertised
Above-threshold NHS opportunities appear on Find a Tender and many trusts and ICBs run their procurements through Atamis (Health Family eProcurement). Frameworks are commissioned by NHS Shared Business Services, NHS Commercial Solutions, CCS and regional procurement hubs.
Find a Tender and Contracts Finder are the legal advertising channels; trust-level portals (Atamis, Bravo, Proactis, Delta) are where the actual document packs sit. SMEs that win consistently watch all of these — and have alerting set up on the right CPV codes and keywords for their service.
- Find a Tender — above-threshold notices.
- Contracts Finder — below-threshold and central government notices.
- Atamis — NHS Health Family eProcurement; many trusts host their packs here.
- NHS SBS, NHS Commercial Solutions, CCS — framework hosts.
2. Qualify NHS tenders early — most are no-bid for an SME
Most published NHS tenders are not winnable for any given SME. The cost of writing a serious NHS response is high — clinical sign-off, governance evidence, social value commitments, NHS Standard Contract review. Bidding the wrong tender is the single biggest profit leak in SME public-sector sales.
Run a structured Bid/No-Bid decision before writing a word. Anchor it against your accreditation set (CQC, DSPT, ISO 27001, Cyber Essentials Plus), your evidence library (case studies of NHS or comparable work) and the time you genuinely have. Upload the tender pack to the Bid/No-Bid Tool for a structured first pass.
3. The NHS-specific gateways every SME must clear
NHS tenders add a layer of clinical, information-governance and contract obligations on top of standard UK procurement rules. These are pass/fail at selection — and the most common cause of SME exclusion.
- Data Security and Protection Toolkit (DSPT) — mandatory for any supplier accessing NHS patient data or systems. Annual NHS Digital submission. See the NHS & Healthcare industry page.
- CQC registration — for clinical services, registration for the specific regulated activity is mandatory; inspection rating evidence is typically required. For social care providers, CQC for adult services and Ofsted for children's services.
- ISO 27001 + Cyber Essentials Plus — frequently required alongside DSPT for digital health, EPR, RTT or data-handling work.
- NHS Standard Contract — Service Conditions, KPIs and payment-by-results clauses; price the contract, not the spec.
- Safeguarding & clinical governance — named leads, DBS-checked staff, SAR/SI reporting, supervision.
- NHS Net Zero supplier roadmap — Carbon Reduction Plan (PPN 06/21) plus Evergreen sustainability assessment for in-scope contracts.
4. How NHS tenders are scored — and where SMEs lose marks
Quality/price weighting on NHS tenders is typically 60/40 or 70/30; clinically sensitive work pushes higher (80/20 or 100% quality). Quality is split into sub-criteria — service delivery, mobilisation, governance, KPI management, social value.
Social value (PPN 06/20) is normally 10–20% of the total score and increasingly evidenced against MAC themes. SMEs typically lose marks not because of weak service narrative but because they treat social value as boilerplate — see Understanding Tender Evaluation Weighting and use the Social Value Response template.
5. Mobilisation, TUPE and the questions SMEs underprice
NHS contracts often run to a published go-live date that is non-negotiable. Mobilisation plans, TUPE liability (for cleaning, catering, FM, recruitment, social care contracts), staff training, supervision and equipment commissioning are normally scored.
Read the TUPE annex line by line — staff numbers, hours, accrued holiday, pension scheme membership and sleep-in pay liability all directly affect price. The most common SME mistake is to read the spec but not the TUPE schedule.
6. Submission — the easy way to lose a compliant bid
NHS portals are often dated and unforgiving. Word counts are enforced, file format rules are strict, and the last-minute portal upload at 11:55am on submission day is when bids are lost to network errors.
Run the Tender Submission Checklist, submit 24 hours early, and save your portal receipt. See the UK Tender Compliance Guide for the universal gateway rules.
Related tools and guides
Continue from here:
- Bid/No-Bid Decision Framework — qualifying NHS opportunities.
- UK Tender Compliance Guide — universal gateways.
- Healthcare industry page — sector-specific NHS gateways.
- Social Care industry page — council and ICB social-care commissioning.
- Tender Compliance Checker — extract NHS gateways from your pack.
- BidPilot vs Loopio — analysis tooling compared.
Analyse your tender in minutes
Upload your ITT or PQQ and get a structured compliance and risk breakdown. New verified users get one free analysis.
FAQs
Can SMEs realistically win NHS tenders?
Yes — but selectively. SMEs win NHS work by qualifying ruthlessly, only bidding tenders where they hold the gateway accreditations (CQC, DSPT, ISO 27001 or sector equivalents), can credibly mobilise on the published date, and have relevant case-study evidence. Volume-bidding NHS tenders without these in place wastes time. Start with the [Bid/No-Bid Tool](/tools/bid-no-bid-tool).
Do I need DSPT to bid for NHS work?
If your service touches NHS patient data or NHS systems — yes, almost always. DSPT (Data Security and Protection Toolkit) is the standard NHS information-governance bar and is typically pass/fail at selection. Lead time to first submission is weeks, so it is rarely possible to acquire it inside a single bid window.
What is the NHS Standard Contract and why does it matter?
The NHS Standard Contract is a template contract used across most NHS commissioning. It sets payment-by-results clauses, KPIs, Service Conditions and reporting obligations. Pricing the contract (and the deductions risk) — not just the service — is one of the biggest commercial differences between NHS bids and council bids.
How long does an NHS tender take to write?
Realistic preparation time for a serious NHS bid is 3–6 weeks of partial bid-team availability, with clinical or technical SME input. SMEs that try to write an NHS response in a few days normally underprice mobilisation and TUPE and lose on quality scoring even when they pass selection.
What is social value worth on an NHS tender?
Typically 10–20% of the total score under PPN 06/20, structured against MAC themes (jobs, supply-chain resilience, environment, equal opportunity, wellbeing). Evidenced, measurable commitments — local apprenticeships, supply-chain SMEs, carbon reduction — outscore generic statements. Use the [Social Value Response template](/templates/social-value-response-template).
Where are NHS frameworks advertised?
NHS Shared Business Services (SBS), NHS Commercial Solutions, Crown Commercial Service (CCS) and regional NHS procurement hubs host the major frameworks; call-offs from those frameworks then appear on Atamis or trust portals. Watching only Find a Tender will miss most NHS framework activity.