TransportAPI Software as a Service

The TransportAPI platform provides a comprehensive UK transport data catalogue of live and timetabled public transport departures, national journey planning, performance indicators, bus or train stops and routes, car routing and taxi costs, cycle routing, rail fares, rail freight live and timetabled departures, places, points-of-interest, stations, stop look-up services.


  • Application Programme Interface (API) service for UK transport data
  • Scalable source of UK transport data service
  • Unlimited downstream usage of UK transport data service
  • Uninterrupted software as a service
  • Data warehousing of polling or streaming sources in secure repositories
  • Content validation to standards used in transport data sector
  • Realtime data integration logic for heterogeneous transport data sources


  • TransportAPI harmonises all transport data sources in a RESTful format
  • TransportAPI provides an AWS infrastructure with unlimited transport data queries
  • TransportAPI licences downstream data for any business usage
  • TransportAPI provides failure-safe logic for continuous access and delivery
  • Offers data handling on secure AWS infrastructure in UK/ globally
  • Customisable service level agreements for data delivery guarantees
  • Flexible support arrangements for public/ private content distribution


£500 to £5000 per licence per month

Service documents

G-Cloud 11



Jonathan Raper


Service scope

Service scope
Software add-on or extension No
Cloud deployment model
  • Public cloud
  • Private cloud
Service constraints Core support is provided between 9:00am to 5:00pm on UK working days.
Extended support is provided from 7:00am to 8:00pm during UK working days and 9:00am to 6:00pm on weekends and UK bank holidays. Full 24/7 support is provided on application.
System requirements
  • Service is provided over private cloud network
  • Service is provided over public cloud subject to bandwidth connection

User support

User support
Email or online ticketing support Email or online ticketing
Support response times RansportAPI telephone and email support is provided on the following basis: 1. Core platform support is provided between 9:00am to 5:00pm on UK workings days. 2. Extended support is provided from 7:00am to 9:00am and 5.00pm to 8.00pm on UK working days and between 9:00am and 6:00pm at weekends and on UK bank holidays. 4. 24/7 support is available on application.
User can manage status and priority of support tickets Yes
Online ticketing support accessibility WCAG 2.1 A
Phone support Yes
Phone support availability 9 to 5 (UK time), Monday to Friday
Web chat support No
Onsite support Yes, at extra cost
Support levels TransportAPI offers three levels of telephone and email support: P1. The entire TransportAPI service is unavailable and/or inaccessible to service user P2. One or more TransportAPI service fail ten consecutive one minute Service Level Agreement (SLA) checks or where the response time rises 50% above the SLA metric for 10 consecutive one minute checks P3. Service performance is affected by behaviour of an upstream or downstream service outside TransportAPI These service levels are included within the service cost unless service-specific variations are agreed with the customer. TransportAPI customers are provided with account management and support contacts.
Support available to third parties Yes

Onboarding and offboarding

Onboarding and offboarding
Getting started RansportAPI provides comprehensive on-boarding support to the client operations team through our Go-Live process and Support manual documentation. TransportAPI will work in partnership with clients through our Slack messaging service to manage and support the development, alpha/beta testing and deployment to live processes. TransportAPI will operate within client change control processes within the cost of the contract. On site training is available at extra-cost and will be delivered by professional trainers experienced at cloud service deployments.
Service documentation Yes
Documentation formats
  • HTML
  • Other
Other documentation formats RESTful API markup language
End-of-contract data extraction TransportAPI will offer export functions to download users and analytics data from the service as an integral part of the delivered service.
End-of-contract process At termination contracts provide for the downloading of user details and client-specific data analytics.

Using the service

Using the service
Web browser interface Yes
Supported browsers
  • Internet Explorer 7
  • Internet Explorer 8
  • Internet Explorer 9
  • Internet Explorer 10
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari 9+
  • Opera
Application to install No
Designed for use on mobile devices Yes
Differences between the mobile and desktop service There are no differences between the access available on desktop and mobile web browsers.
Accessibility standards WCAG 2.1 A
Accessibility testing Testing of new accessibility features is scheduled for the quarter beginning July 2019.
What users can and can't do using the API Robust and high-performing API which aggregates, validates, enhances and tests all of its data sources and provides sophisticated fail-over logic to provide uninterrupted service.
API documentation Yes
API documentation formats
  • HTML
  • Other
API sandbox or test environment Yes
Customisation available Yes
Description of customisation The web interface can be adapted by users who are developers or by project commissioned with the platform licensor.


Independence of resources TransportAPI is based on a single tenant architecture for each enterprise user.


Service usage metrics Yes
Metrics types TransportAPI provides the following metrics around usage of:
HTTP request and response status
Number of active instances
Number of API requests
Upstream data source performance
System administration indicators
Reporting types
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request


Supplier type Not a reseller

Staff security

Staff security
Staff security clearance Other security clearance
Government security clearance Up to Baseline Personnel Security Standard (BPSS)

Asset protection

Asset protection
Knowledge of data storage and processing locations Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
  • EU-US Privacy Shield agreement locations
User control over data storage and processing locations Yes
Datacentre security standards Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency At least once a year
Penetration testing approach Another external penetration testing organisation
Protecting data at rest Physical access control, complying with SSAE-16 / ISAE 3402
Data sanitisation process Yes
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
Equipment disposal approach Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data importing and exporting
Data export approach TransportAPI software permits data extraction via the RESTful API.
Data export formats Other
Other data export formats JSON
Data import formats CSV

Data-in-transit protection

Data-in-transit protection
Data protection between buyer and supplier networks TLS (version 1.2 or above)
Data protection within supplier network TLS (version 1.2 or above)

Availability and resilience

Availability and resilience
Guaranteed availability TransportAPI provides a service level agreement (SLAs) over average platform availability (Uptime) and response times (Response time). SLA commitments are applied to monthly minimum levels of Uptime and Response time. Credits are applied if service levels fall below monthly SLA limits.
Approach to resilience TransportAPI uses AWS' proven platform resilient features and details of resilience configuration are available.
Outage reporting TransportAPI uses standard AWS outage reporting which is relayed to customers via a public dashboard, API and by email.

Identity and authentication

Identity and authentication
User authentication needed Yes
User authentication Username or password
Access restrictions in management interfaces and support channels TransportAPI manages all access to the platform interfaces by username and passwords conforming to the ISO27001 password standards. No role based user accounts are permitted for management interfaces or support channels.
Access restriction testing frequency At least every 6 months
Management access authentication
  • 2-factor authentication
  • Username or password

Audit information for users

Audit information for users
Access to user activity audit information Users contact the support team to get audit information
How long user audit data is stored for Between 1 month and 6 months
Access to supplier activity audit information Users contact the support team to get audit information
How long supplier audit data is stored for Between 1 month and 6 months
How long system logs are stored for Between 1 month and 6 months

Standards and certifications

Standards and certifications
ISO/IEC 27001 certification No
ISO 28000:2007 certification No
CSA STAR certification No
PCI certification Yes
Who accredited the PCI DSS certification SecurityMetrics
PCI DSS accreditation date 15/02/2019
What the PCI DSS doesn’t cover All transactions are covered by PCI DSS certification.
Other security certifications No

Security governance

Security governance
Named board-level person responsible for service security Yes
Security governance certified Yes
Security governance standards ISO/IEC 27001
Information security policies and processes TransportAPI applies the principles of The ISO27001 quality management system for information security. Responsibilities are devolved from the CTO at board level to development operations management and all development team members according to ISO27001 standard.

Operational security

Operational security
Configuration and change management standard Supplier-defined controls
Configuration and change management approach All platform changes are handled through change management processes including pull-requests on Github and User Acceptance Testing is applied to new feature roll-outs and customer change control processes before deployment to production.
Vulnerability management type Undisclosed
Vulnerability management approach The TransportAPI platform manages threats to the service through the procedures set out in its business continuity policy. The TransportAPI development operations team subscribe to 'patch and threat' notification systems however TransportAPI does not publish details except on demand.
Protective monitoring type Undisclosed
Protective monitoring approach The TransportAPI platform responds to potential compromise situations in accordance to its business continuity policy. Further details are available on request.
Incident management type Undisclosed
Incident management approach The TransportAPI platform deals with incidents according to the principles of the Business Continuity Policy. Further details are available on request.

Secure development

Secure development
Approach to secure software development best practice Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Public sector networks
Connection to public sector networks No


Price £500 to £5000 per licence per month
Discount for educational organisations No
Free trial available Yes
Description of free trial TransportAPI's fee trial option offers customer access to the full functionality of the TransportAPI platform with access restrictions limited to 1000 hits per day. Full details are available on request.
Link to free trial

Service documents

pdf document: Pricing document pdf document: Skills Framework for the Information Age rate card pdf document: Service definition document pdf document: Terms and conditions
Service documents
Return to top ↑