Guidance for suppliers
The guidance is regularly updated.
Check this page regularly to make sure you are using the latest information and resources.
About this guidance
This page provides guidance for suppliers who want to apply to and access opportunities through R-Cloud.
Whether you are exploring R-Cloud for the first time or preparing to submit an application, the information below will help you access the resources available to support your organisation.
It brings together key information, supporting documents and guidance to help you understand the application process and supplier requirements.
Getting Started
To access research opportunities through R-Cloud, suppliers must:
- Create an R-Cloud account
- Provide the required company information
- Submit a company application
- Be approved
For help with your application use the Supplier Application Guide.
For further information on R-Cloud use the Quick Start Guide.
Security
When working with Dstl, MOD and Defence information, suppliers must comply with the requirements set out in the Industry Security Notices (ISNs.) These define the protection measures for Defence Related Classified Material (DRCM). DRCM is the current term used in place of MODII. Suppliers are responsible for ensuring that personnel, systems, and processes meet the applicable Defence security requirements before handling any DRCM or contract-related information.
Suppliers should familiarise themselves with the relevant Industry Security Notices (ISNs) and associated security guidance, as these provide the baseline controls and handling requirements that underpin contractual security obligations. Suppliers should also be aware that Dstl may require additional personnel security screening and, where necessary, security clearances for contract delivery.
Further guidance on handling DRCM can be found below.
- How to Sell or Work with Dstl: https://www.gov.uk/guidance/how-to-sell-to-dstl-industry-academia-and-other-research-organisations
- Defence Research Security Guidance: https://www.gov.uk/government/publications/defence-research-security/defence-research-security
- Industry Security Notices (ISNs): https://www.gov.uk/government/publications/industry-security-notices-isns
- Cyber Security Model (CSM): https://www.gov.uk/guidance/cyber-security-model
When delivering work for non-MOD Contracting Authorities, suppliers must comply with the specific security requirements defined by the Contracting Authority and the individual task or contract. Security obligations, information handling requirements, personnel vetting expectations, and technical controls may vary between Contracting Authorities and should be reviewed on a task-by-task basis. Suppliers are responsible for ensuring that they understand and adhere to all applicable security policies, instructions, and contractual requirements before commencing work.