BidSkim
Free report
Service market

Grc software contracts

UK public sector · 90 contracts awarded in the 12 months to 6 October 2026

Covering 600+ buyer portals · 5 years of records · Updated 6 October 2026 · How we count

Contracts awarded
90
Last 12 months
Median contract
£65k
Recorded value
Recorded value
£13.7m
87 of 89 main-service contracts have a published value
Buyers
80
Suppliers
44

BidSkim assigns contracts to services from the notice text. How services are assigned

What stands out

  • The five suppliers that won the most grc software contracts took 33% of them (30 of 90).
  • Contracts awarded per quarter fell 31% from the first half of the period to the second.
  • The median contract, £65k, is 41% below the median across it & software contracts (£110k).

Who buys grc software

By contracts awarded, the 12 months to 6 October 2026.

  1. 1Stockton-on-Tees Borough Council3 contracts
  2. 2GENOMICS ENGLAND LIMITED3 contracts
  3. 3British Business Bank2 contracts
  4. 4Student Loans Company2 contracts
  5. 5Greater Manchester Combined Authority2 contracts
  6. 6UK Health Security Agency2 contracts
  7. 7Homes England2 contracts
  8. 8Leicestershire County Council2 contracts
  9. 9Audit Scotland1 contract
  10. 10H M REVENUE & CUSTOMS1 contract

Top grc software contractors by contracts won

The 12 months to 6 October 2026.

  1. 1Risk Ledger Ltd8 contracts
  2. 2Ideagen7 contracts
  3. 3RSM6 contracts
  4. 4Softcat5 contracts
  5. 5CORE STREAM LTD4 contracts
  6. 6Riskonnect4 contracts
  7. 7Ideagen Gael Ltd.4 contracts
  8. 8OneAdvanced3 contracts
  9. 9JC Applications Development (JCAD)3 contracts
  10. 10Alliantist Ltd3 contracts

Latest and largest awards

Each links to the official notice.

Latest

Largest

Contracts awarded by quarter

19Q4 2025*29Q1 202621Q2 202620Q3 20261Q4 2026*
* part quarter

Where the contracts were awarded

England 82 · Scotland 4 · Wales 4

London12East of England10Yorkshire and The Humber9South East7South West7North West6North East4West Midlands4Scotland4East Midlands3Wales3UK-wide or not stated21

What is included

Software for risk registers, internal audit, controls and compliance evidence, policy management, information security risk and ISO 27001 compliance, declarations of interest and corporate performance reporting.

  • Risk registers and risk management software
  • Internal audit management
  • Compliance, controls and policy management
  • Information security risk and ISO 27001 compliance evidence
  • Declarations of interest, gifts and hospitality registers
  • Corporate performance management and reporting
  • Insurance and liability claims management software for self-insured organisations
  • Risk and insurance records management

What is not included

  • Quality management systems -> it.ent.quality-management-system
  • Health and safety management -> it.ent.health-safety-management
  • Project risk in PPM tools -> it.ent.project-portfolio-management
  • Council committee management -> it.lob.committee-management
  • Consultancy to write policies or prepare for ISO 27001 -> it.cyber.security-consultancy-assurance
  • Certification assessments -> it.cyber.cyber-essentials-certification
  • Configuration benchmarking tools -> it.cyber.vulnerability-management

Often bought by the same buyers