Blog
G-Cloud 14 — a first-time applicant's checklist
G-Cloud is one of the easiest ways into UK public sector technology procurement, but a lot of first-time applicants make the same mistakes and spend three weeks fixing things that could have been right on day one.
This is a working checklist for getting through G-Cloud 14 application without the usual rework.
What G-Cloud actually is
G-Cloud is a framework agreement run by Crown Commercial Service (CCS). Suppliers apply, get accepted, and then list services on the Digital Marketplace. Buyers from public sector bodies can purchase those services without running a full tender — they search the catalogue, compare, and award.
Key things to internalise:
- You're not bidding for a contract. You're applying to be on a list of approved suppliers.
- Acceptance is binary — you're either on or off. There's no "ranked" position.
- Sales happen after acceptance, through the Digital Marketplace. CCS doesn't sell for you.
- G-Cloud refreshes annually (G-Cloud 13, 14, 15…). You re-apply for each iteration.
What's different about G-Cloud 14
G-Cloud 14 went live in November 2024. The notable changes from G-Cloud 13:
- Procurement Act 2023 alignment — applications now include questions about supply chain transparency and modern slavery in a more detailed format than before.
- Carbon Reduction Plan now mandatory for all in-scope suppliers — previously some lower-risk suppliers were exempt. Now everyone needs one.
- Cyber Essentials Plus required for any service handling sensitive data — was "recommended" on G-Cloud 13.
- Pricing must be published as a "rate card" with specific units. The old "from £X per day" format is no longer accepted for many service types.
The three service categories
G-Cloud 14 has three lots. Pick the right ones — applying to the wrong lot gets you rejected.
- Cloud Hosting — IaaS, PaaS, content delivery, hosting platforms.
- Cloud Software — SaaS, application services, anything where the buyer accesses your hosted application.
- Cloud Support — services around cloud (migration, transition, training, security testing) but not the cloud itself.
A common mistake: applying with a service like "we'll build you a custom solution" — that's not G-Cloud, that's Digital Outcomes & Specialists (DOS) on a different framework.
The four pitfalls that cost first-time applicants weeks
1. Service Descriptions are too short and too marketing-y
Each service you list needs:
- Description (~50 words) — a short summary, written for buyers, not investors
- Features (10 bullet points max, ~10 words each)
- Benefits (10 bullet points max, ~10 words each)
Most first-time applicants write the description like a webpage. CCS rejects vague, benefit-led descriptions and asks for concrete service definitions. Lead with what the service does, not why it's transformative.
2. Pricing document is wrong
CCS publishes a pricing template. Use the template literally:
- Match the unit format CCS requires (per user per month, per GB per month, per hour, etc.)
- All prices ex-VAT
- Include any minimum spend / setup fees
- Include any volume discounts as separate rate-card rows
A pricing doc submitted as a free-form PDF will be rejected even if all the numbers are correct.
3. Terms & Conditions are non-standard
G-Cloud has a mandatory call-off contract all suppliers accept. You can attach your own T&Cs as a "service definition" document, but the call-off contract terms always take precedence. Suppliers who try to vary key clauses (liability cap, data ownership, payment terms) get pushed back into rework.
The pragmatic move: accept the call-off contract terms unchanged for your first G-Cloud listing. You can negotiate around it once you've built relationships.
4. Cyber Essentials Plus isn't booked early enough
CE Plus assessment takes 4–6 weeks from start to certificate, longer if remediation is needed. You can't backfill this. Many first-time applicants try to apply without CE Plus and then realise they need it 10 days before the application window closes.
Book CE Plus as soon as you decide to apply.
A practical application checklist
- Decided which lot(s) you're applying to
- Cyber Essentials Plus certificate in date (book NOW if not)
- Carbon Reduction Plan published at a public URL, signed off by a director
- ISO 27001 or equivalent (recommended, sometimes required)
- Insurance evidence — public liability £5m, PI £2m typical
- Service description, features, benefits per service (kept tight)
- Pricing in CCS template format
- Service Level Agreement document
- Modern Slavery statement (if turnover >£36m)
- DUNS number registered
The 80/20
- Book Cyber Essentials Plus before you do anything else — it's the longest lead-time item.
- Write service descriptions concretely, not aspirationally — CCS rejects marketing-style content.
- Use the CCS pricing template literally — no inventive formats.
Get those three right and your application is mostly defensive against rework. The rest is admin.