Freedom of Information Request – Ref: FOI 122-2026
Thank you for your recent Freedom of Information request. Please find our response below.
You asked:
SECTION 1 — IT BUDGET AND SPEND
1.1 What is your organisation’s total annual IT / digital technology budget for the current financial year (or most recently completed financial year)? Please break this down into:
Our response:
£10,621,616
You asked:
(a) Capital expenditure (CapEx)
Our response:
£3,600,000
You asked:
(b) Operational expenditure (OpEx)
Our response:
£7,021,616
You asked:
1.2 What proportion of your total organisational budget does IT / digital technology represent (as a percentage)?
Our response:
2.31%
You asked:
1.3 Is there a separate cyber security budget? If so, what is its value?
Our response:
Part of the managed service.
You asked:
1.4 Please provide the name(s) of any Commissioning Support Units (CSUs) or managed service partners that manage IT expenditure on your behalf, if applicable.
Our response:
Countywide Information Technology Service (hosted by Gloucestershire Hospitals NHS Foundation Trust).
You asked:
SECTION 2 — IT STAFFING
2.1 How many whole-time equivalent (WTE) staff are directly employed in IT, digital or technology roles within your organisation?
Our response:
100.16 wte
You asked:
2.2 Please provide a breakdown of IT staff by job role or band (e.g. Agenda for Change band or equivalent). Specific names are not required.
Our response:
Apprentice – 1
Band 4 – 9
Band 5 – 9
Band 6 – 9
Band 8 (Range A) – 2
Band 8 (Range B) – 2
You asked:
2.3 Does your organisation have the following named roles in post? (Please answer Yes / No / Vacant for each):
Our response:
(a) Chief Information Officer (CIO) or equivalent – No
(b) Chief Digital Officer (CDO) or equivalent – No
(c) Chief Technology Officer (CTO) or equivalent – No
(d) Chief Information Security Officer (CISO) or equivalent – No
(e) IT Director / Head of IT – Yes
(f) Digital Transformation Lead or equivalent – Yes
You asked:
2.4 How many IT staff are employed via third-party contractors or agency arrangements? What is the approximate annual spend on these arrangements?
Our response:
None.
You asked:
SECTION 3 — SERVER AND COMPUTE INFRASTRUCTURE
3.1 Does your organisation operate on-premise server infrastructure? If yes:
Our response:
Yes.
You asked:
(a) What is the approximate number of physical servers in operation?
Our response:
Approximately 20 – 30 Servers.
You asked:
(b) What server vendors / manufacturers does your organisation use (e.g. Dell, HPE, Lenovo, Cisco UCS)?
Our response:
HPE & Dell.
You asked:
(c) What is the approximate age profile of your server estate (e.g. percentage under 3 years, 3–5 years, over 5 years old)?
Our response:
For physical servicer: Under 3 years – 95%
Virtualisation environment on HPE is at 3 – 5 years.
You asked:
3.2 Does your organisation use virtualisation technologies? If yes, which platform(s) (e.g. VMware, Microsoft Hyper-V, Nutanix)?
Our response:
Nutanix (primary) and Hyper-V (limited).
You asked:
3.3 Does your organisation use hyperconverged infrastructure (HCI)? If yes, which vendor(s)?
Our response:
Yes, Nutanix AHV.
You asked:
3.4 Does your organisation use cloud computing services (not including office 365)? If yes:
Our response:
Yes.
You asked:
(a) Which cloud provider(s) do you use (e.g. AWS, Microsoft Azure, Google Cloud, other)?
Our response:
Microsoft Azure.
You asked:
(b) Approximately what proportion of your workloads are cloud-hosted vs on-premise?
Our response:
Approximately 5% are cloud hosted.
You asked:
(c) What is the approximate annual cloud spend?
Our response:
£40k
You asked:
SECTION 4 — STORAGE INFRASTRUCTURE
4.1 What storage platform(s) does your organisation use (e.g. NetApp, Dell EMC, Pure Storage, HPE, IBM)?
Our response:
Active server storage on HPE (Nutanix) and Azure, Backups Synology and Azure.
You asked:
4.2 What is the approximate total usable storage capacity across your estate (in TB or PB)?
Our response:
1 PB
You asked:
4.3 What is the approximate age of your primary storage estate?
Our response:
3-5 years for on-prem active HPE nutanix environment. Under 3 years for Synology backup environment.
You asked:
SECTION 5 — BACKUP, DISASTER RECOVERY AND BUSINESS CONTINUITY
5.1 What backup software solution(s) does your organisation currently use (e.g. Veeam, Commvault, Veritas NetBackup, Cohesity, Rubrik, Zerto)?
Our response:
Veeam.
You asked:
5.2 What is your backup target infrastructure (e.g. on-premise disk, tape, cloud)?
Our response:
On-premises disc for our server estate with Azure for immutable backups of our most critical infrastructure servers.
You asked:
5.3 Does your organisation have a documented Disaster Recovery (DR) plan? When was it last tested?
Our response:
Yes – 2025
You asked:
5.4 What is the current Recovery Point Objective (RPO) and Recovery Time Objective (RTO) for your critical clinical systems?
Our response:
Recovery Point Objective (RPO) and Recovery Time Objective (RTO) for clinical systems are defined within supplier contracts, service level agreements, and disaster recovery documentation.
For the Trust’s core clinical systems, these arrangements are managed by system suppliers or hosting providers. The Trust ensures that appropriate recovery standards are contractually agreed and regularly reviewed as part of business continuity and disaster recovery governance.
You asked:
5.5 Does your organisation use an offsite or cloud-based backup solution? If yes, which provider?
Our response:
Yes – Azure with Veeam.
You asked:
SECTION 6 — NETWORKING AND END-USER COMPUTING
6.1 Who provides your Wide Area Network (WAN) and/or internet connectivity services?
Our response:
BT
You asked:
6.2 What network equipment vendors does your organisation use (e.g.Cisco, Juniper, Aruba, Palo Alto)?
Our response:
Cisco, Aruba, Barracuda.
You asked:
6.3 What is the approximate number of end-user devices (laptops, desktops, tablets) in your organisation?
Our response:
PC – 1200
Laptops – 6000
Tablets – 400
You asked:
SECTION 7 — SOFTWARE, LICENSING AND KEY CLINICAL SYSTEMS
7.1 What is your current Electronic Patient Record (EPR) / Electronic Health Record (EHR) system? Please provide the vendor name and product.
Our response:
Access group -Rio
TPP -SystmOne
Mayden – Iaptus
Systems for Dentists – Systems for Dentists
Idox -Lilie
You asked:
7.2 What Patient Administration System (PAS) does your organisation use?
Our response:
None.
You asked:
7.3 Does your organisation use a Picture Archiving and Communication System (PACS) / radiology imaging system? If yes, which vendor and product?
Our response:
No.
You asked:
7.4 Does your organisation have a Microsoft Enterprise Agreement (or equivalent) in place? When is this due for renewal?
Our response:
Yes, June 2026
You asked:
7.5 What is the approximate annual spend on software licences across the organisation?
Our response:
CA = 25/26 FY c. £4.4M
You asked:
7.6 Please list any other significant enterprise IT contracts (by contract type / system category — e.g. HR, finance, workforce management) with approximate annual values where held.
Our response:
Finance – Centros
Finance – Bookwise
Estates – MICAD
HR – TRAC
Workforce – ESR
You asked:
SECTION 8 — WARRANTIES, CONTRACTS AND PROCUREMENT
8.1 For your primary server, storage and network infrastructure, are vendor warranties and/or third-party maintenance contracts in place? Please provide:
Our response:
Yes.
You asked:
(a) The type of coverage (vendor warranty, third-party maintenance, or both)
Our response:
Both.
You asked:
(b) The name of the maintenance provider(s), if applicable
Our response:
GBE Coverage.
You asked:
(c) Approximate contract expiry dates where held
Our response:
2027.
You asked:
8.2 What procurement frameworks does your organisation use for IT hardware and services (e.g. Crown Commercial Service, NHS Shared Business Services, G-Cloud, Tech Products 4)?
Our response:
TBC
You asked:
8.3 Are any significant IT contracts due for renewal within the next 24 months? Please provide contract category (not necessarily full commercial detail).
Our response:
TBC
You asked:
SECTION 9 — DIGITAL MATURITY AND STRATEGY
9.1 Has your organisation completed a Digital Maturity Assessment (DMA) or equivalent framework in the last two years? If so:
Our response:
Yes.
You asked:
(a) Which assessment framework was used (e.g. NHS England DMA, HIMSS EMRAM, Other)?
Our response:
NHS England DMA.
You asked:
(b) What overall maturity score or rating was achieved?
Our response:
2.2 / 2.1.
You asked:
9.2 Does your organisation have a current Digital / IT Strategy? If so, what is the publication or approval date?
Our response:
No – currently being written. Due for approval end May 2026.
You asked:
9.3 Has your organisation achieved or is actively working towards any recognised digital accreditations (e.g. HIMSS Level, NHS Digital aspirant status, Cyber Essentials Plus)?
Our response:
Cyber Essentials Plus.
You asked:
9.4 What are the top three stated digital priorities for your organisation in the current or next financial year?
Our response:
NHS Connect, Transforming care Digitally, Sharepoint Migration.
Next steps:
Should you have any queries in relation to our response, please do not hesitate to contact us. If you are unhappy with the response you have received in relation to your request and wish to ask us to review our response, you should write to:
Louise Moss
Head of Legal Services / Associate Director of Corporate Governance
c/o Gloucestershire Health and Care NHS Foundation Trust
Edward Jenner Court
1010 Pioneer Avenue
Gloucester Business Park
Brockworth, GL3 4AW
E-mail: louise.moss@ghc.nhs.uk
If you are not content with the outcome of any review, you may apply directly to the Information Commissioner’s Office (ICO) for further advice/guidance. Generally, the ICO will not consider your case unless you have exhausted your enquiries with the Trust which should include considering the use of the Trust’s formal complaints procedure. The ICO can be contacted at: The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.