Applicant Tracking System and Career Site

Webrecruit ATS is an ideal choice for businesses who want to implement a simple-to-use recruitment management tool at a cost-effective price point. Webrecruit ATS is used by organisations across a range of different sectors to streamline recruitment processes, reduce administration time, and drive down costs associated with hiring.


  • Customisable & exportable reports including application sources and equal opportunities
  • Customisable job requisition & approval management process
  • Career Sites that link seamlessly into the ATS
  • Build, search and manage talent-pools, including agency applicants via portal
  • Onboarding including reference checking, offer letter generation, and contract signing
  • Integrations: job boards, digital signatures, social media, online testing, sms
  • Confidential shortlisting, and candidate management tools
  • Customised application forms and screening questions
  • GDPR compliant application process and data deletion on a cycle
  • Interview management module and self-service interview scheduling


  • Integration between ATS/Career Site allowing control of application journey
  • The ability to monitor your cost per hire
  • User friendly system supporting the end-to-end recruitment process
  • Calendar to schedule tasks including automated creation of tasks
  • Job alerts to build a pool of passive talent
  • On-boarding module to help with automating process of employee on-boarding
  • Real time reports driving increased efficiency throughout the recruitment process
  • Personalised email communications as part of the candidate journey
  • Technical support for system users and candidates
  • Portal to manage your PSL and report on Agency performance


£3000 to £12000 per instance per year

  • Education pricing available
  • Free trial available

Service documents


G-Cloud 11

Service ID

3 0 9 6 2 1 4 3 6 0 9 8 6 3 7



Sam Gedye

01392 822196


Service scope

Service scope
Software add-on or extension No
Cloud deployment model Public cloud
Service constraints No constraints
System requirements Standard web browser

User support

User support
Email or online ticketing support Email or online ticketing
Support response times Critical - response time within 1 business hour by email or phone call, and resolution time within 4 business hours.

High - response time within 4 business hours by email or phone call, and resolution time within 8 business hours

Medium - response time within 8 business hours by email or phone call, and resolution time within next software upgrade release (On average, these are every 3 weeks)

Webrecruit shall provide the Customer with Standard Helpdesk Support services during Normal Business Hours 08:30-17.30 GMT Monday to Friday excluding Bank Holidays in the UK
User can manage status and priority of support tickets No
Phone support Yes
Phone support availability 9 to 5 (UK time), Monday to Friday
Web chat support No
Onsite support Yes, at extra cost
Support levels All customers receive the same support levels from an in-house support function who have direct access to our development team. If a patch is required, this will be applied to a test environment and after testing,will be installed into the production environment. Support levels are follows: Category – Critical; Definition – Issue prevents users from using crucial functionality; Resolution – We will immediately commence investigations and will work until the problem has been solved or an acceptable workaround devised; Resolution Time - Within 4 business hours. Category – High; Definition – Prevents users from using non-crucial functionality with no workaround available; Resolution - We will commence investigations within 4 hours; Resolution Time - Within 8 business hours. Category – Medium; Definition – Prevents users from using functionality but a workaround is available; Resolution – We will respond to reports within 8 hours; Resolution Time - Within next software upgrade release. Category – Low; Definition – Prevents users from implementing a particular functionality outside of normal system usage. This may be an enhancement request; Resolution - Webrecruit and the Customer will agree whether the enhancement will be part of a new release or will be considered Consultancy; Resolution Time - N/A.
Support available to third parties Yes

Onboarding and offboarding

Onboarding and offboarding
Getting started Webrecruit ATS is an easy-to-use system that doesn’t require a lengthy training/implementation period. You'd be supported with any set-up from day one by your dedicated Account Manager and Product Support Manager.
Webrecruit provides system induction training to all users inclusive of the prices quoted as standard. The sessions will comprise of four main sessions; one for HR Users and three for Hiring Managers.
Webrecruit can deliver this training either onsite or online. Online user guides are available for both Hiring Managers and HR Users via a tool called Zendesk, available 24/7. This guide is presented in a modular format, providing user guidance for all individual areas of the system via descriptive detail and screen shots.
Recorded video training of Fusion Plus can be arranged on request.
It is important to clarify and stress that Webrecruit are flexible to tweaking the structure and elements within the inclusive training package that we deliver, mindful of the sometimes unique requirements of individual organisations. For example, if there is a very high volume of Hiring Managers who will require training but the managers are based across multiple locations, two days of face to face training across four separate locations may be more pertinent.
Service documentation Yes
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction At the end of the contract Webrecruit can provide the customer with a CSV of all candidate data, and a zip file with all supporting documentation, application forms and CV's.
End-of-contract process All licences and access to the Services granted under this agreement shall immediately terminate. If requested, Webrecruit will provide the customer with all candidate data via a CSV file, and all supporting documentation via a zip folder as per the contract agreement.

Using the service

Using the service
Web browser interface Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari 9+
  • Opera
Application to install No
Designed for use on mobile devices Yes
Differences between the mobile and desktop service No key differences, responsive web design is used for all Webrecruit ATS interfaces including portals for Candidates, Hiring Managers and HR/Recruitment Users.
Service interface No
Customisation available Yes
Description of customisation Webrecruit has many configuration options as standard including job fields, company branding, email communications, on-boarding workflows, document templates, job requisition workflows, and talent pool tag types. Access to configuration options is controlled by granular permissions/privileges. Bespoke and Templated Career Sites can also be customised by users to match the look and feel of their brand and main website.


Independence of resources The system has been designed to be highly scalable and extremely efficient so that extra users utilising the system do not have any noticeable impact on other system users.


Service usage metrics Yes
Metrics types User metrics (users, logins, activities etc.)
Candidate / application metrics (Candidates created, applications, vacancies created etc.)
Database size & bandwidth
Emails sent
SMS sent
Reporting types
  • Real-time dashboards
  • Regular reports
  • Reports on request


Supplier type Not a reseller

Staff security

Staff security
Staff security clearance Other security clearance
Government security clearance Up to Developed Vetting (DV)

Asset protection

Asset protection
Knowledge of data storage and processing locations Yes
Data storage and processing locations European Economic Area (EEA)
User control over data storage and processing locations No
Datacentre security standards Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency At least once a year
Penetration testing approach ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
Protecting data at rest Physical access control, complying with another standard
Data sanitisation process Yes
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
Equipment disposal approach In-house destruction process

Data importing and exporting

Data importing and exporting
Data export approach All report "grids" provide an "Export" option either via PDF, CSV, or Excel. At the end of the contract (or at any other time) customers may get an extract of their data in zipped CSV format (plus CV's, and application forms as requested by the customer, being generated into a separate zip file)
Data export formats CSV
Data import formats CSV

Data-in-transit protection

Data-in-transit protection
Data protection between buyer and supplier networks TLS (version 1.2 or above)
Data protection within supplier network IPsec or TLS VPN gateway

Availability and resilience

Availability and resilience
Guaranteed availability Webrecruit ensures that the system availability level maintains at 99.9% during normal business hours (08:30 to 17:30) and 99.5% out of business hours, excluding scheduled maintenance. This availability refers to the Customer's ability to access the Webrecruit ATS. Uptime includes the functioning of all network infrastructure operated by Webrecruit including routers, switches and cabling. Each Customer is responsible for its own Internet access.

Availability does not include Maintenance Events, Customer-caused or third party-caused outages or disruptions, or outages or disruptions attributable in whole or in part to events not within Webrecruit's control.
Approach to resilience The server environment is provided by OVH. To guarantee high speed, high quality bandwidth and low latency time, OVH has deployed its own global fibre optic network. The network is managed using DWDM devices and is currently being migrated to 100G coherent technology, offering a total capacity of 7.5 Tbps to the worldwide web.

Should a total utility power outage ever occur, all of OVH’s data centre’s power systems are designed to run uninterrupted, with every server receiving conditioned UPS (Uninterruptible Power Supply) power. The OVH datacentres are powered by two separate electrical power supplies and are also equipped with UPS devices. Power generators have an initial autonomy of 48hrs to counteract any failure of the electricity supply network. OVH data centres are accredited to PCI DSS, ISO27001, and ISAE 3402 Type II standards, ensuring sites and applications are secured by the best processes and technologies.
Outage reporting Outages of the service are reported through public social-media channels, such as LinkedIn, Twitter. Additionally clients may be informed through email and telephone contact.

Identity and authentication

Identity and authentication
User authentication needed Yes
User authentication Username or password
Access restrictions in management interfaces and support channels Access is restricted through the use of individual logins to management interfaces and support channels that can be revoked if necessary.
Access restriction testing frequency At least once a year
Management access authentication
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

Audit information for users
Access to user activity audit information Users contact the support team to get audit information
How long user audit data is stored for At least 12 months
Access to supplier activity audit information Users contact the support team to get audit information
How long supplier audit data is stored for At least 12 months
How long system logs are stored for Between 1 month and 6 months

Standards and certifications

Standards and certifications
ISO/IEC 27001 certification Yes
Who accredited the ISO/IEC 27001 Schellman & Company, formerly BrightLine,
ISO/IEC 27001 accreditation date 16/03/2019
What the ISO/IEC 27001 doesn’t cover This certification covers the services provided by our hosting provider - OVH.
Webrecruit Information Security Policies have been certified to the IASME standard.
ISO 28000:2007 certification No
CSA STAR certification No
PCI certification No
Other security certifications Yes
Any other security certifications Cyber Essentials

Security governance

Security governance
Named board-level person responsible for service security Yes
Security governance certified Yes
Security governance standards
  • ISO/IEC 27001
  • Other
Other security governance standards Cyber Essentials
Information security policies and processes All Webrecruit's security policies and processes are aligned to ISO27001:2013

Operational security

Operational security
Configuration and change management standard Supplier-defined controls
Configuration and change management approach Webrecruit ATS is updated on a monthly basis, normally on the last Tuesday of each month. All new updates go through an in-house QA procedure as part of our software development processes. Quality is maintained through regression testing of all functionality in addition to new features on a monthly basis. We also conduct vulnerability scans on the web application on a monthly basis. Penetration testing is undertaken by an independent third-party firm on an annual basis.
Vulnerability management type Supplier-defined controls
Vulnerability management approach Our server provider (OVH) work with Approved Scanning Vendors (ASV) and together, can assess server environments at OVH and assist in implementing controls. Webrecruit also conduct vulnerability scans on the web application on a monthly basis. Penetration testing is undertaken by an independent third-party firm on an annual basis. If an issue/threat is discovered that prevents users from using crucial functionality of the service or represents a potential data or security breach then we aim to deploy a patch within 4 business hours.
Protective monitoring type Supplier-defined controls
Protective monitoring approach We utilise a Security Information and Event Management solution that provides 24/7 monitoring of our infrastructure, systems, network and applications. It protects us from potential security incidents with proactive alerts, incident response and reporting. It has integrated threat intelligence, machine learning to detect behavioral changes, real-time active threat hunting and log management. We respond to incidents inline with our Business Continuity & Disaster Recover Plan (which can be supplied upon request). In the event of any Personal Data Breach, we would use all reasonable endeavours to immediately notify our clients and the ICO.
Incident management type Supplier-defined controls
Incident management approach There are a number of processes for dealing with different types of incident, that include details of how to log the incident, the action to be taken and reporting of the outcomes.

Secure development

Secure development
Approach to secure software development best practice Supplier-defined process

Public sector networks

Public sector networks
Connection to public sector networks No


Price £3000 to £12000 per instance per year
Discount for educational organisations Yes
Free trial available Yes
Description of free trial Webrecruit can provide a 30-day trial system for prospective clients to test the service before purchase. This includes access to all core system functions and features. This can be extendable on request.

Service documents

Return to top ↑