GOV.UK
Account-Ability Ltd
CP-Cloud
Cloud hosted corporate performance management solutions for between 5 and 300+ users. It comprises budgeting, planning, forecasting, scenario planning, integrated financial planning & statutory consolidation, costing, managment reporting and dashboard solutions
Features
- Rapid to implement (3 times faster than competing systems)
- Supports large numbers of multiple users
- Direct links to finance, ERP, data warehouse, and all pre-systems
- Export to Excel and BI and data warehouse systems
- Uses SQL database
- Up to 99 years planning and unlimited planning scenarios
- Platform independent web, dashboard and Excel access
- Workflow and audit trail
- Full system of user roles and rights to control access
- In memory technology delivers rapid response times
Benefits
- A true 'business application', owned and managed by users themselves
- Requires little or no IT support
- Rapid to implement (3 times faster than competitor products)
- Award-winning software, continuously developed over 30 years
- User base of 5,000 organisations
- Intuitive and highly visual for users
- Helps managers make the 'right decisons' more quickly
- Strengthens organisation performance & prepares them for future challenges
- Brings more certainty to decisions and reduces risk
- Delivers proven RoI and productivity & process efficiency improvments
Pricing
£100 per person per month
- Free trial available
Service documents
Framework
G-Cloud 10
Service ID
615381345046917
Contact
Service scope
| Software add-on or extension | Yes, but can also be used as a standalone service |
| What software services is the service an extension to | Our cloud service is an alternative to the on premise service |
| Cloud deployment model | Public cloud |
| Service constraints | Up to 2 software updates will be applied per annum, which will require a short planned outage. |
| System requirements | There are none that we know of |
User support
| Email or online ticketing support | Email or online ticketing |
| Support response times | Typically within 2 hours. It depends on the level of support level purchased. |
| User can manage status and priority of support tickets | No |
| Phone support | Yes |
| Phone support availability | 9 to 5 (UK time), Monday to Friday |
| Web chat support | No |
| Onsite support | Yes, at extra cost |
| Support levels | We provide full technical support and help to solve problems with the installation and operation of the system. This is included as free in the contract. We also provide help and support in the design, build and on-going operation and maintenance of the solution. This is chargeable where it more naturally falls under what would be classified as training or consultancy. |
| Support available to third parties | No |
Onboarding and offboarding
| Getting started |
We provide onsite training, online training and user documentation. The corporate performance management solution is unique to each customer and is designed and built jointly with them to their requirements |
| Service documentation | Yes |
| Documentation formats |
|
| End-of-contract data extraction | Users can extract data by a download into Excel or csv, or alternatively via a direct link to a SQL database. |
| End-of-contract process | At the end of the contract users can either terminate (and extract their data), or they can renew for a further period. |
Using the service
| Web browser interface | Yes |
| Supported browsers |
|
| Application to install | No |
| Designed for use on mobile devices | Yes |
| Differences between the mobile and desktop service | Web-access users can be access via mobile devices. |
| Accessibility standards | None or don’t know |
| Description of accessibility | Whilst not formally built to these standards, the application is developed in Germany consistent to European standards that are broadly similar. The colour of the screen and size of font can be adjusted. It can be used in conjunction with 'screen reader' products designed to enhance accessibility. |
| Accessibility testing | A number of our customers with users with accessibility issues have successfully used the product. |
| API | No |
| Customisation available | Yes |
| Description of customisation |
Users can customise fully the databases that they create. They cannot customise the hosting service (beyond specifying the level and times of service, number of users etc, and re-specifying these for any changes). Changes to the hosting service are made by CP Corporate Planning, in line with the customer specifications |
Scaling
| Independence of resources |
By correct specification of the type and size of the service. We use the CP Cloud which is hosted on Microsoft Azure in Germany. |
Analytics
| Service usage metrics | No |
Resellers
| Supplier type | Reseller providing extra features and support |
| Organisation whose services are being resold | CP Corporate Planning AG |
Staff security
| Staff security clearance | Staff screening not performed |
| Government security clearance | Up to Developed Vetting (DV) |
Asset protection
| Knowledge of data storage and processing locations | Yes |
| Data storage and processing locations | European Economic Area (EEA) |
| User control over data storage and processing locations | No |
| Datacentre security standards | Complies with a recognised standard (for example CSA CCM version 3.0) |
| Penetration testing frequency | Less than once a year |
| Penetration testing approach | In-house |
| Protecting data at rest | Physical access control, complying with CSA CCM v3.0 |
| Data sanitisation process | Yes |
| Data sanitisation type | Deleted data can’t be directly accessed |
| Equipment disposal approach | Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001 |
Data importing and exporting
| Data export approach |
Via Excel, csv or direct link to a SQL database. They can also publish reports to Excel and PDF. |
| Data export formats |
|
| Other data export formats |
|
| Data import formats |
|
| Other data import formats |
|
Data-in-transit protection
| Data protection between buyer and supplier networks | TLS (version 1.2 or above) |
| Data protection within supplier network | TLS (version 1.2 or above) |
Availability and resilience
| Guaranteed availability | The buyer specifies the level of availability required (continuous hours per day and number of days per week). Within this a standard availablility of 95% is guaranteed, and more may be specified. |
| Approach to resilience | We use Microsoft Azure, hosted in Germany. Details of resilience can be made available on request. |
| Outage reporting | Planned maintenance is advised by email. |
Identity and authentication
| User authentication needed | Yes |
| User authentication | Username or password |
| Access restrictions in management interfaces and support channels | The software has roles and rights; only those users with admin role can perform management tasks. |
| Access restriction testing frequency | Never |
| Management access authentication | Username or password |
Audit information for users
| Access to user activity audit information | Users have access to real-time audit information |
| How long user audit data is stored for | User-defined |
| Access to supplier activity audit information | No audit information available |
| How long system logs are stored for | Between 1 month and 6 months |
Standards and certifications
| ISO/IEC 27001 certification | Yes |
| Who accredited the ISO/IEC 27001 | This is the Mcrosoft Azure accreditation |
| ISO/IEC 27001 accreditation date | 2013 |
| What the ISO/IEC 27001 doesn’t cover | The Corporate Planner application running on Azure. |
| ISO 28000:2007 certification | No |
| CSA STAR certification | No |
| PCI certification | No |
| Other security certifications | No |
Security governance
| Named board-level person responsible for service security | Yes |
| Security governance certified | Yes |
| Security governance standards |
|
| Other security governance standards | In house equivalent to ISO/IEC 27001 |
| Information security policies and processes | Account-Ability has an information security policy that is risk based and is monitored by a Board Member. The cloud service is sub-contracted to CP Corporate Planning AG (the software application developers) which use Microsoft Azure hosted in Germany and the standards of security required in Germany. |
Operational security
| Configuration and change management standard | Supplier-defined controls |
| Configuration and change management approach | The components of the service form a contract with the buyer and are tracked through the lifetime of the contract. A formal (contract change) process is required to change them. |
| Vulnerability management type | Undisclosed |
| Vulnerability management approach | The services consists of Microsoft products which are maintained with recommended patches |
| Protective monitoring type | Undisclosed |
| Protective monitoring approach | Various sources. |
| Incident management type | Undisclosed |
| Incident management approach | Communication is via email. |
Secure development
| Approach to secure software development best practice | Supplier-defined process |
Public sector networks
| Connection to public sector networks | No |
Pricing
| Price | £100 per person per month |
| Discount for educational organisations | No |
| Free trial available | Yes |
| Description of free trial |
A free proof-of-concept for up to a month is possible, depending on cirmcumstanses, hosted on our own machines or on premise at the buyer's. The buyer then decides whther to proceed and pays for the service to be hosted on the CP Cloud. |
Documents
| Pricing document | View uploaded document |
| Terms and conditions document | View uploaded document |