NHS Agency Framework Compliance: The Evidence Pack Evaluators Expect From a Staffing Supplier

NHS Agency Framework Compliance: The Evidence Pack Evaluators Expect From a Staffing Supplier

NHS staffing framework evaluators award marks based on verifiable compliance evidence, not assurances or policy statements alone. Suppliers who submit declarations of intent without audit trails, third-party verification or system-generated records typically lose 30 to 40 per cent of available quality marks before the commercial envelope is opened.

What compliance means in NHS staffing procurement

Framework applications under RM6397 and its earlier versions ask suppliers to demonstrate operational compliance systems across recruitment, pre-employment screening, safeguarding, professional registration, mandatory training and ongoing workforce governance. Evaluators expect to see documentary proof that these systems exist, function at scale and produce defensible audit trails for every worker supplied.

The distinction matters because most staffing agencies maintain policies on paper but operate day-to-day through informal workflows, email threads and spreadsheet trackers that do not generate the evidence evaluators will accept. When a technical envelope asks how you verify DBS status before assignment, the answer must show the check, the renewal protocol and the record system, not a statement that you take compliance seriously.

Recruitment and pre-employment checks

The first layer of evidence covers how you onboard workers before they are cleared for NHS assignments. Evaluators look for documented processes that verify identity, qualifications, employment history and references in a sequence that meets NHS Employment Check Standards. A policy document describing your approach is worth little unless accompanied by examples of completed check logs, template verification forms and evidence of records stored in a compliant candidate management system.

Most marks are lost when suppliers describe aspirational processes rather than current operations. If your business currently handles references by email and stores scanned documents in shared folders, the evaluator will see that your described workflow does not match the infrastructure you actually use. Submit evidence from your live system. If that system is not fit for NHS standards, the time to fix it is before the tender opens.

DBS and right-to-work verification

NHS frameworks treat Disclosure and Barring Service checks and right-to-work verification as distinct, auditable compliance streams. For DBS, evaluators expect to see how you initiate checks, track expiry dates, renew on schedule and prevent lapsed workers from being assigned. The evidence should include a sample register with anonymised worker records, dates of issue, renewal triggers and removal protocols for adverse disclosures.

Right-to-work verification requires proof that you conduct checks in line with Home Office guidance, retain acceptable documents and maintain a time-stamped audit log. Suppliers often submit a policy stating they comply with legislation but omit the operational evidence. The evaluator wants to see anonymised examples of right-to-work documentation, the system that flags expiring visas for EU and international workers, and the escalation procedure when status cannot be confirmed.

Professional registration and revalidation

For clinical roles, evaluators assess how you verify registration with the Nursing and Midwifery Council, Health and Care Professions Council or General Medical Council before assignment and monitor revalidation or renewal throughout the worker's relationship with your agency. Evidence should include a sample registration log, the frequency of checks, automated alerts when registration lapses and the process that removes unregistered workers from your supply pool.

The common failure is submitting a statement that you check the relevant register without showing the operational rhythm. Evaluators know that registration status changes between assignments. They award marks to suppliers who demonstrate active, scheduled verification rather than one-off checks at onboarding.

Safeguarding and mandatory training records

NHS frameworks require workers to complete safeguarding training at levels appropriate to their role, plus a suite of mandatory and statutory training modules covering infection control, basic life support, information governance and other competencies. The evidence pack must show how you deliver or commission this training, track completion and expiry, manage renewals and prevent non-compliant workers from being offered assignments.

Submit a sample training matrix covering an anonymised cohort, showing module names, completion dates, expiry triggers and compliance percentage. If you rely on NHS trusts to provide some or all mandatory training, state this explicitly and explain how you verify completion before confirming bookings. Evaluators penalise suppliers who cannot demonstrate which workers hold which competencies at any given time.

Ongoing audit trails and governance

The highest-value evidence comes from systems that generate continuous audit trails without manual intervention. Evaluators look for candidate management platforms or compliance software that timestamps every verification, flags expiring credentials and produces management reports showing workforce compliance rates across your pool.

If your current system cannot produce this, consider whether you are ready to compete on a framework where 60 or 70 trusts will audit your compliance independently and expect real-time visibility. The infrastructure required to win the framework is the same infrastructure required to operate on it without reputational or contractual risk.

Evaluator-led insight: where scores are lost

Framework evaluation teams typically allocate 40 to 50 marks out of 100 for compliance systems and evidence quality. Within that allocation, 10 to 15 marks cover policies and process descriptions, while 25 to 35 marks depend on tangible, verifiable evidence of those processes in operation. Suppliers who treat the question as a policy statement score in the low 20s. Suppliers who submit system-generated logs, anonymised case examples and third-party verification records score in the high 30s or low 40s.

The most frequent gap appears in the delta between described process and operational reality. Evaluators compare the sophistication of your described compliance regime against the candidate management platform named elsewhere in your response. If you describe automated renewals and risk-based escalation but list a basic CRM or a bespoke spreadsheet tool, the evaluator concludes you are describing ambition rather than capability. Consistency across technical answers matters as much as the quality of any single response.

A worked example

Consider a staffing agency with 850 active NHS workers bidding for lot 1 of RM6397. The quality method statement on compliance systems is allocated 45 marks. The supplier submits a four-page response describing recruitment checks, a two-page DBS policy, a safeguarding statement and a spreadsheet extract showing 40 worker records with some fields completed.

The evaluator awards 8 marks for policy content, 6 marks for process description and 9 marks for evidence quality, giving a total of 23 out of 45. The response fails because the spreadsheet does not show automated alerts, the DBS policy is generic rather than operationalised and there is no evidence of professional registration monitoring beyond initial onboarding. A competitor submitting compliance dashboard screenshots, anonymised training matrices and a live register export showing 98 per cent currency across all credentials scores 39 out of 45.

The commercial difference is material. Assuming a price score of 28 out of 40 for both suppliers, the first agency achieves 51 out of 85 overall while the second achieves 67. On a pass/fail threshold of 60, the first is excluded regardless of price.

Compliance under the Provider Selection Regime

NHS organisations now apply the Provider Selection Regime when procuring staffing services either directly or through further competition. The regime retains the expectation that suppliers evidence compliance through verifiable records rather than self-assessment. Trusts running mini-competitions from RM6397 routinely request updated compliance evidence as part of the call-off, even where the supplier is already framework-appointed. The evidence standards described here apply equally to direct awards, further competitions and framework accreditation.

What Glaxtons brings to the process

We work with staffing agencies preparing for NHS framework bids and call-off competitions under a success-fee model tied to contract wins, not framework appointment. Our approach starts with a compliance evidence audit that maps what you currently operate against what evaluators expect to see. Where gaps exist, we identify the operational changes or system upgrades required before the tender opens. Our writers then develop method statements anchored in your actual infrastructure, supported by the verifiable evidence the evaluator will score.

For agencies exploring whether they are ready to compete, we also provide NHS framework specialists guidance on accreditation pathways and lot selection. Where a formal bid is underway, our NHS tender writing service focuses on compliance-heavy technical envelopes that convert operational capability into scored evidence.

Frequently asked questions

Can I submit compliance evidence from a system I plan to implement after the framework starts?

No. Evaluators score the systems and evidence you hold at the point of submission. Commitments to upgrade or procure new platforms after award are treated as unsubstantiated and score poorly. If your current infrastructure cannot produce the required evidence, invest in the system before the tender opens or accept that your technical score will reflect the gap.

How much detail should I include in anonymised compliance records submitted as evidence?

Enough to prove the system works at scale and captures the data points the question asks for, but not so much that individuals become identifiable. A sample of 25 to 50 worker records showing credential types, issue dates, expiry dates and compliance status is typically sufficient. If the register contains thousands of workers, submit a representative extract rather than the full dataset, and confirm in your narrative that the sample reflects your wider pool.

Do I need third-party certification like ISO 9001 or SafeRecruit to score well on compliance questions?

Third-party certification strengthens your response and provides independent verification of your processes, but it does not replace operational evidence. Evaluators award marks for demonstrated capability, not badges. If you hold relevant accreditation, reference it and explain how the certified processes generate the audit trails described in your response. If you do not hold certification, focus entirely on the verifiable evidence your systems produce.

Call 020 3668 5488

Glaxtons, 3 More London Place, London SE1 2RE