MPS' participation in the National Uniform Managed Service (NUMS)

Freedom of information request reference no: 01.FOI.25.045715

I note you seek access to the following information:

I am requesting information concerning the Metropolitan Police Service’s participation in the National Uniform Managed Service (NUMS), currently contracted to DHL Supply Chain with a particular focus on DHL Supply Chain’s subcontractors, technology providers and data handling processes. Please provide the following:

1. The name of the online ordering system or platform currently used by Metropolitan Police officers to order uniform and equipment.
2. The names of all subcontractors or third-party providers responsible for:
   o Developing, maintaining, or hosting the ordering platform used by police
   officers
   o Backend systems and digital infrastructure
   o Account management, order processing, or system integration.
3. The categories of personal data relating to police officers that are captured, stored, or processed by any of the above parties.
4. Whether any data is processed or stored outside the UK and the controls in place to ensure appropriate protection.
5. Contract start and end dates, including any extension options and the total contract value to date and at full term.
6. Any internal or external audit or review of the subcontractors or digital service performance since contract initiation.

Under the Procurement Act 2023, public bodies are required to maintain transparency in relation to subcontracting chains and the performance of suppliers involved in the delivery of public contracts. These obligations align with the disclosure requirements under FOIA and reinforce the expectation that such information should be made available to the public unless a valid exemption applies. If any part of the contract is managed centrally or through a lead authority, please advise accordingly.

Decision

I have today decided to disclose the located information to you in full. Please find below information pursuant to your request above.

Q1 - The name of the online ordering system or platform currently used by Metropolitan Police officers to order uniform and equipment.

Uniform Hub.

Q2 - The names of all subcontractors or third-party providers responsible for:

• Developing, maintaining, or hosting the ordering platform used by police officers
• Backend systems and digital infrastructure
• Account management, order processing, or system integration.

Fujitsu.

Q3 - The categories of personal data relating to police officers that are captured, stored, or processed by any of the above parties.

The HR files contain information relating to officers, including employment, assignment, training, and competency data.

The data includes:

• Personal and Employment Details: Officer identifier (employee number and user ID), name, email address, gender, last hire date, and (if applicable) termination date.
• Assignment Information: Start date of current assignment, organisational structure (across four levels to represent branch, borough, etc.), rank band, job role, employment type, assignment status, and associated cost centre.

Q4 - Whether any data is processed or stored outside the UK and the controls in place to ensure appropriate protection.

Any data is stored in the UK only.

Q5 - Contract start and end dates, including any extension options and the total contract value to date and at full term.

Contract Start Date - 1 December 2015

Contract End Date - 31 March 2027

Total Contract Value = £123m

A tender process is currently underway to establish a new contract starting from 1 April 2027.

Q6 - Any internal or external audit or review of the subcontractors or digital service performance since contract initiation.

The NUMS supplier conducts regular independent audits on their suppliers (MPS Sub Contractors) as part of their ISO 27001 certification.

The NUMS supplier also carries out independent IT Health Checks annually, or in response to a significant incident or change to the Uniform Hub.

The NUMS supplier’s facility at Brackmills (Northampton) is a Police Assured Secure Facility (PASF) approved. This certification is renewed every three years by the MPS.

The NUMS supplier’s IT partner, who hosts the Uniform Hub, is also PASF approved and subject to recertification every three years.