G-Cloud 14 Explained for Small IT Firms

G-Cloud is one of the most accessible routes for small IT companies to sell to the UK public sector. Unlike conventional tender processes, it does not require you to compete against other suppliers in a scored evaluation every time you want to win a contract. Once you are on the framework, buyers can select you directly.

This guide explains how G-Cloud 14 works, how to get on it, and what you need to do to actually win call-off contracts once you are listed.

What Is G-Cloud?

G-Cloud is a Crown Commercial Service (CCS) framework for cloud-hosted products and services sold to UK public sector organisations. It is procured via the Digital Marketplace.

The framework is open to hosting, software, and support services delivered via cloud infrastructure. It covers:

• Lot 1: Cloud hosting — Infrastructure as a Service (IaaS) and Platform as a Service (PaaS)
• Lot 2: Cloud software — Software as a Service (SaaS), including productivity tools, sector-specific applications, and AI tools
• Lot 3: Cloud support — Professional services supporting cloud adoption, migration, and management

Who Can Buy on G-Cloud?

Any UK public sector organisation can buy on G-Cloud without running a separate competitive tender:

• Central government departments and their arm's-length bodies
• NHS trusts and ICBs
• Local authorities and combined authorities
• Schools, universities, and colleges
• Police forces and emergency services
• Housing associations and registered providers

The annual spend through G-Cloud has exceeded £4 billion in recent years. The majority of buyers are not central government — they are the NHS, education, and local government.

How G-Cloud Applications Work

G-Cloud opens for new applications periodically. G-Cloud 14 was the most recent iteration.

The application process:

1. Create a supplier account on the Crown Commercial Service supplier portal
2. Complete the service submission for each service you want to list
3. Confirm your terms and pricing
4. Pass CCS's due diligence review (automated checks on company information, financial standing)
5. Your service goes live on the Digital Marketplace

There is no competitive evaluation. There is no scoring against other suppliers. CCS checks that you meet minimum eligibility criteria and that your service submission is complete and accurate.

What you need to submit for each service:

• Service name, description, and features
• Pricing model (must be transparent — buyers see your rates)
• Terms of service
• Service definition document (detailed technical and commercial specification)
• GDPR and data handling confirmation
• Security accreditation details (typically G-Cloud requires ISO 27001 or Cyber Essentials Plus)

The Service Description Is Your Sales Document

Here is the part that most small suppliers get wrong: the service description is the primary thing buyers read when choosing between suppliers on the marketplace. It is not a technical specification form — it is marketing copy with a compliance wrapper.

Write your service description for the buyer's decision-maker, not the technology team. Answer these questions clearly:

• What problem does this solve for public sector buyers specifically?
• What does onboarding look like?
• What support is included?
• Why should they choose you over the larger suppliers on the same lot?

Winning Call-Off Contracts

Getting on the framework is not the hard part. Winning call-off contracts through the marketplace is.

How buyers buy on G-Cloud:

1. A buyer searches the Digital Marketplace for services matching their needs
2. They shortlist services that fit their requirements
3. They may run a "further competition" (comparing 2–3 suppliers on price and specific capability) or direct award to a single supplier

For contracts under £100,000, direct award without further competition is permitted. This is where small suppliers win.

What drives selection:

• Search ranking — Your service title and description contain the search terms buyers use
• Pricing transparency — Buyers compare published rates. Opaque pricing models lose bids
• Case studies and references — Public sector case studies carry significant weight
• Accessibility statement — Required for public-facing services; buyers check compliance
• Response time to buyer enquiries — Buyers ask questions before awarding. Responding promptly signals operational competence

Practical Tips for Small IT Firms

Use sector-specific language in your service description. If your software handles procurement, say "public procurement" not just "procurement." Search on the marketplace is keyword-based.

Price clearly. The most common buyer complaint about G-Cloud listings is opaque pricing. A transparent per-user per-month rate is easier to buy than a "price on application" model.

Get a public sector reference before your application. Even one NHS trust or council as a client transforms your position. If you do not have one, consider a pilot programme or proof of concept at reduced cost.

Use the Cyber Essentials Plus certification pathway now. Many buyers filter by security accreditation. Cyber Essentials Plus is the minimum credible baseline; ISO 27001 is preferred for enterprise-grade contracts.

Monitor for relevant procurement notices. Even with G-Cloud, some buyers will post a Prior Information Notice (PIN) before using the framework for a significant contract. These are worth tracking.

Using Bid Refinery for G-Cloud Applications

G-Cloud application documents are structured differently from ITT responses, but the underlying challenge is the same: translating your organisation's actual capability into clear, credible written evidence.

Bid Refinery's evidence library and draft generation can be used to produce consistent, grounded service descriptions across multiple G-Cloud lots — anchored to your approved capability statements rather than starting from a blank page each time.

The framework opens periodically. When the next G-Cloud iteration opens, the suppliers with ready evidence assets and a clear proposition will submit faster and more consistently than those building their application from scratch.