Request
Under the Freedom of Information Act, I would request you to respond to questions included in the attachment.
For any reason if you are unable to open the attachment do let me know. I can then send the questions within the email itself.
Please note: If you do not have records relating to the questions in the attachment, please pass on this request to your IT department to provide us with the required information.
Q1. Can you please list the number of devices deployed by your organisation for the following?
Device Type | Number of Devices |
Desktop PCs | |
Laptops | |
Mobile Phones | |
Printers | |
Multi Functional Devices (MFDs) | |
Tablets | |
Physical Servers | |
Storage Devices (e.g., NAS, SAN) | |
Networking Infrastructure (e.g., Switches, Routers, Interfaces, Wireless APs) | |
Security Infrastructure (e.g., Firewalls, IDS, Virus Monitoring Tools) | |
Q2. Does your organisation have plans to procure any of the below services? If yes, please provide information in the format below.
Service | 2025/26 Spend/Budget | 2026/27 Spend/Budget | 2027/28 Spend/Budget | 2028/29 Spend/Budget |
Example: Platform as a Service | 1,000,000 | | 200,000 | |
a. Cloud computing | | | | |
b. Software as a Service (SaaS) | | | | |
c. Platform as a Service (PaaS) | | | | |
d. Infrastructure as a Service (IaaS) | | | | |
e. Anything as a Service (XaaS) | | | | |
Q3. Does your organisation have any plans to procure the below services? If yes, please provide the required information in the format below.
Service | 2025/26 Spend/Budget | 2026/27 Spend/Budget | 2027/28 Spend/Budget | 2028/29 Spend/Budget |
Example: IoT Security | 50,000 | 50,000 | 80,000 | |
a. Network Security | | | | |
b. Cloud Security | | | | |
c. Endpoint Security | | | | |
d. Mobile Security | | | | |
e. IoT Security | | | | |
f. Application Security | | | | |
Q4. Does your organisation have any plans to procure the below services? If yes, please provide the required information in the format below.
Font: Arial, Size: 12 pt, Font Color: Automatic
Service | 2025/26 Spend/Budget | 2026/27 Spend/Budget | 2027/28 Spend/Budget | 2028/29 Spend/Budget |
Example: Data and Analytics | 1,750,000 | 2,000,000 | | |
a. Data and Analytics | | | | |
b. AI and Automation | | | | |
c. Digital Transformation | | | | |
d. ERP Systems | | | | |
Q5. Has your organisation implemented any form of AI or Automation services? If not, what is the reason for not implementing?
Font: Arial, Size: 12 pt, Font Color: Automatic
Implementation Status | Yes | No | Reason |
Example: No, Legacy System | | ✓ | Legacy System |
a. Implemented | | | |
b. Minor implementation with completed AI strategy | | | |
c. Plans to develop implementation | | | |
d. Due to legacy systems | | | |
The NHS Business Services Authority (NHSBSA) received your request on 25 September 2025
We have handled your request under the Freedom of Information Act 2000 (FOIA).
Our response
I can confirm that the NHSBSA holds the information you have requested and a copy of the information and notes explaining it is below.
Please read the below notes to ensure correct understanding of the data.
Q1. Device Deployment
Device Type | Number of Devices |
Desktop PCs | 827 |
Laptops | 6,716 |
Mobile Phones | 360 |
Printers | 3 |
Multi Functional Devices (MFDs) | 97 |
Tablets | 21 |
Physical Servers | 107 |
Storage Devices (e.g., NAS, SAN) | 5 |
Networking Infrastructure | 273 |
Security Infrastructure | 8 |
Questions 2, 3 and 4
Under Section 21 of the FOIA we are not required to provide information in response to a request if it is already reasonably accessible to you.
The information you requested is available from NHSBSA Commercial Pipeline – Datasets – Open Data Portal.
Please see the following link to view the section 21 in full: https://www.legislation.gov.uk/ukpga/2000/36/section/21
In reference to Q2, Q3, and Q4
Please find a link to the NHSBSA Commercial Pipeline – Datasets – Open Data Portal. This resource outlines planned procurements with a value exceeding £10,000, is updated quarterly, and includes the expected route to market for future contract opportunities.
Question 5
NHSBSA has implemented Robotic Process Automation (RPA) and is actively appraising the use of Artificial Intelligence (AI). Where appropriate, AI technologies will be adopted—particularly within our Microsoft estate, where Copilot is already deployed as part of the Microsoft 365 product suite.
Publishing this response
Please note that this information will be published on our Freedom of Information disclosure log at:
https://opendata.nhsbsa.net/dataset/foi-03206
Your personal details will be removed from the published response.
Data Queries
Please contact foirequests@nhsbsa.nhs.uk ensuring you quote the above reference if you have any specific questions regarding this response; or, if you feel you may be misunderstanding or misinterpreting the information; or, if you plan on publishing the data.
Reusing the data and copyright
If you plan on producing a press or broadcast story based upon the data please contact communicationsteam@nhsbsa.nhs.uk. This is important to ensure that the figures are not misunderstood or misrepresented.
The information supplied to you continues to be protected by the Copyright, Designs and Patents Act 1988 and is subject to NHSBSA copyright. This information is licenced under the terms of the Open Government Licence detailed at:
http://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/
Should you wish to re-use the information you must include the following statement: “NHSBSA Copyright 2025”. Failure to do so is a breach of the terms of the licence.
Information you receive which is not subject to NHSBSA Copyright continues to be protected by the copyright of the person, or organisation, from which the information originated. Please obtain their permission before reproducing any third party (non NHSBSA Copyright) information.