Roelto Ltd

Visual Collaboration Solutions (VCSL)

R-VCS, (Roelto - Visual Collaboration Solutions) powered by SharpCloud enables you to visualise your data and collaborate. VCS includes Project Portfolio Management, Strategy and Technology Roadmapping, Collaboration, Digital Workshops, Risk and Innovation Management, helping you to uncover insights and simplify complex business decision making, all in one place.


  • Preconfigured SharpCloud accelerator templates including data, views and user cases
  • Multiple, configurable data attributes, numeric, date, list, text, and location
  • Data driven, visual and dynamic views highlights key relationships
  • Simultaneous user case updates using enterprise data governance data template
  • Multiple data visualisation options for different audiences
  • Single Sign On and data integration with O365 SharePoint Excel
  • Annotations enable you to create branded and specific dashboards
  • Configurable forms enables accurate data entry and supports workshops
  • Multiple data panels visualise data and connects digital content
  • API and SDK available to connect with other applications


  • Enterprise transparency enables faster and more effective decision making
  • Uncover insights and relationships across your business and strategic portfolios.
  • Continual connectivity and visibility of data, processes and people
  • Supports and enables an innovative and collaborative culture.
  • Automated real time updates providing timely and accurate information
  • Preconfigured user cases accelerates successful deployment across your business
  • 50% cost and time savings on implementation and handover
  • View and update across multiple devices, mobile, tablet, PC Laptop
  • Quickly identify key issues and risks enabling management by exception
  • Sharing and connecting people increases performance and supports continuous improvement


£5,000 a unit a year

  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Tell them what format you need. It will help if you say what assistive technology you use.


G-Cloud 12

Service ID

8 8 8 4 9 6 2 4 7 4 8 6 1 9 8


Roelto Ltd Jason Hier
Telephone: +447766442628

Service scope

Software add-on or extension
What software services is the service an extension to
An extension to SharpCloud; suite of preconfigured SharpCloud applications (Stories), including the following user cases:
● R-PPM: Project Portfolio Management.
● R-DBR: Dashboard Reporting.
● R-CaaS: Collaboration-as-a-Service (ISO 44001).
● R-WaaS: Workshop-as-a-Service.
● R-IMP: Innovation Management Platform.
● R-SCRUM: Agile Working.
● R-SRM: Strategic Roadmap.
● R-TRM: Technology Roadmap.
Cloud deployment model
  • Public cloud
  • Private cloud
Service constraints
Only certain web browsers (specified below) are supported, and the service may not function with other browsers. Various optional applications are limited to use on Microsoft
System requirements
  • Access to a suitable network connections
  • A compatible web browser

User support

Email or online ticketing support
Email or online ticketing
Support response times
Roelto: Level 1, 2 and 3 support is available Monday to Friday between 9am - 5:30pm (excludes UK bank holidays). Level 1 response, when support is available; Level 2, response within 24 hrs or less; Level 3 within 8 hours or less.
SharpCloud: P1 incidents raised with SharpCloud support will receive a response within 2hrs during UK working hours 9am-5.30pm Monday-Friday.
User can manage status and priority of support tickets
Online ticketing support accessibility
WCAG 2.1 AA or EN 301 549
Phone support
Web chat support
Onsite support
Yes, at extra cost
Support levels
Level 1 - Questions, issues, support and service requests related to a purchased VCS can be raised on the Roelto External Service Desk. Online support will be provided and excludes any additional configuration or modification to the installed solution(s). Level 1 support is free and will be responded when support is available.

Level 2 - Includes Level 1 support and will be responded within 24 hours or less – during UK working hours 9am to 5:30pm Monday to Friday, excluding UK bank holidays. Maintenance of VCS such as user/pack management, data and view templates are provided and will include 0.5 day per month.

Level 3 - Includes Level 1 support and will be responded within 8 hours or less - during UK working hours 9am to 5:30pm Monday to Friday, excluding UK bank holidays. Maintenance of VCS such as user/pack management, data and view templates are provided and will include 0.5 day per month.

Levels 2 and 3 support are provided as an additional cost and can include additional consulting, configuration and maintenance days and can be provided upon request. Refer to Roelto pricing document for more details.
Support available to third parties

Onboarding and offboarding

Getting started
Training on how to use VCS user cases and standard SharpCloud functionality is provided either as part of set up/deployment for both users and administrators with supporting documentation. This can be delivered onsite or online, supported with training documentation.
Additional training content can be accessed online via Roelto website and YouTube to view "How To" videos.
Access to the SharpCloud Academy a Learning Management System . provides online SharpCloud training from Beginner to Expert status is also included.
Tailored training courses can be produced and delivered on request.
Refer to Roelto Pricing document for SharpCloud and ISO 44001 Collaboration training courses and includes the following:
ISO 44001 Collaboration Introduction and Awareness – 1 Day Training.
ISO 44001 Collaboration Gap Analysis – 1 Day.
ISO 44001 Awareness and Relationship Management Plan - 2 Day Training.
SharpCloud Overview – 1 Day Training.
SharpCloud Overview and PoC - 2 Day Training.
Online SharpCloud Training - 10 online sessions.
Service documentation
Documentation formats
  • HTML
  • PDF
  • Other
Other documentation formats
  • Microsoft Word
  • Microsoft Excel
  • Microsoft PowerPoint
  • Microsoft Visio
End-of-contract data extraction
Data within the system can be copied to an excel file, or downloaded as a storyzip file. Data in storyzip files can be extracted into resource files and JSON objects.
End-of-contract process
All users shall be disabled in the Pack Manager console
Extraction of data shall be copied and issued to end user Administrator or as directed. Data shall be deleted from all VCS user cases and applicable SharpCloud Stories (Up to max of 20). Where there are more than 20 Stories a cost will be provided.
All VCS user cases and applicable SharpCloud Stories (up to a maximum of 20) shall be zipped, downloaded and issued to the end user Administrator or as directed. All VCS user cases and applicable SharpCloud Stories shall be deleted in the Pack. Where there are more that 20 Stories a cost will be provided.

Using the service

Web browser interface
Supported browsers
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari 9+
Application to install
Designed for use on mobile devices
Differences between the mobile and desktop service
Roelto support service is delivered via Jira Service Desk. This can be accessed via Jira Service Desk Portal on PC laptop at
To access via mobile device the Jira Service Desk app has to be downloaded from Google Play for Android or App Store for iPhone
Service interface
Description of service interface
The Roelto Service Desk provides several options for users to select and include:
Technical Support: configurations, troubleshooting or request assistance.
Subscription and billing: request additional subscriptions, questions and queries.
Report bugs: notify problems or issues.
Suggest a new feature / improvement: Share ideas for a new feature of improvement.
Accessibility standards
WCAG 2.1 AA or EN 301 549
Accessibility testing
What users can and can't do using the API
SharpCloud offer two APIs.

ODATA REST API (public web).
Provides access to story data via RESTFUL services using ODATA syntax for batch and filter operations..
Full documentation of the service can be found here:

Most objects can be created/updated via the API but the service is intended to simplify data access for web developers. As such, the API is not used by the application per se and does not enable all functionality.

.NET SDK (requires .NET 4.7).
Provides full object model access to the story (items, relationships attributes etc) and can be used to interrogate and create stories. It uses the same private endpoint as the web clients so is functionally rich and can do everything the web client can.

It requires some basic knowledge of SharpCloud story structure and a .Net environment making it less suitable for simple integration with other web systems.

It is ideal for complex batch operations or desktop tools, and is used in a number of free add-on tools (e.g. Query connect which connects on-prem databases to the cloud service).
API documentation
API documentation formats
  • Open API (also known as Swagger)
  • PDF
API sandbox or test environment
Customisation available
Description of customisation
All VCS and individual SharpCloud Stories can be configured and customised by the end user.
Configuration of VCS and SharpCloudstories include but not limited to: Categories, Attributes, Relationships, Tags, Images, Annotations, Panels, Views, Resources, VCS/Enterprise Templates, Performance and Terms.
VCS and or SharpCloud stories can be configured by Story Owners, and people who have ADMIN permissions
Configurations and customisation support can be provided by Consultancy Support. Refer to Roelto SharpCloud Professional Services in Digital Market Place, Cloud Support.


Independence of resources
The Public Cloud instance is a shared service. The API is throttled in order to limit the load that can be applied by anyone customer. Private Cloud deployments are also available on request to separate data and load for an additional fee.


Service usage metrics
Metrics types
Usage metrics are available through administration portal, usage data on shared content is available to the story owner directly.
Activity usage including name of person, time and date stamp, what was viewed, edited at a data attribute level, relationship, tags can be viewed online and downloaded as a csv file for further analysis and review.
Reporting types
  • Real-time dashboards
  • Reports on request


Supplier type
Not a reseller

Staff security

Staff security clearance
Conforms to BS7858:2012
Government security clearance
Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
Datacentre security standards
Managed by a third party
Penetration testing frequency
At least once a year
Penetration testing approach
‘IT Health Check’ performed by a CHECK service provider
Protecting data at rest
Physical access control, complying with another standard
Data sanitisation process
Data sanitisation type
Deleted data can’t be directly accessed
Equipment disposal approach
A third-party destruction service

Data importing and exporting

Data export approach
Data within the system can be copied to an excel file, or downloaded as a storyzip file. Data in storyzip files can be extracted into resource files and JSON objects.
Data export formats
  • CSV
  • Other
Other data export formats
Data import formats
  • CSV
  • Other
Other data import formats
JSON (via API)

Data-in-transit protection

Data protection between buyer and supplier networks
  • Private network or public sector network
  • TLS (version 1.2 or above)
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
SharpCloud Public Cloud Multi-tenant instance is available on Microsoft Azure offering 99.95% availability.
This is not a guaranteed service availability and there is no refund.
Approach to resilience
SharpCloud uses Microsoft Azure PaaS to make sure the service is always available. Each server is duplicated (twice as a minimum, sometimes more) meaning if one should fail for any reason a backup is available to provide uninterrupted access. The platform itself is constantly patched updated to the latest versions and allows SharpCloud to continually develop and deploy new versions of SharpCloud software without any interruption to the service.
Note: Connection to other services such as O365
Outage reporting
If there are any service outages an email alert will be sent to all users by SharpCloud informing of the outage, what level of service degradation will/is being experienced with an estimate of when the service will be fully restored.

If prior warning is given of an outage users will be informed whereby recommendation and advice will be provided if work needs to continue by using SharpCloud PC Offline. This involves the user downloading SharpCloud PC onto their laptop of PC and opening the VCS user case / SharpCloud Story that they want to continue working on. All functionality will be available while working offline and access to the data for that VCS user case / SharpCloud story. When the service is restored the user will be able to resynchronise any updates to the web server.

Identity and authentication

User authentication needed
User authentication
  • 2-factor authentication
  • Username or password
  • Other
Other user authentication
Identity Federation (AAD)
Access restrictions in management interfaces and support channels
Username or password.
Identity Federation (AAD).
2 Factor Authentication.
Access restriction testing frequency
At least once a year
Management access authentication
  • 2-factor authentication
  • Limited access network (for example PSN)
  • Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
Users contact the support team to get audit information
How long supplier audit data is stored for
At least 12 months
How long system logs are stored for
At least 12 months

Standards and certifications

ISO/IEC 27001 certification
Who accredited the ISO/IEC 27001
ISO/IEC 27001 accreditation date
What the ISO/IEC 27001 doesn’t cover
There are no exclusions
ISO 28000:2007 certification
CSA STAR certification
PCI certification
Other security certifications
Any other security certifications
Cyber Essentials Plus (SharpCloud)

Security governance

Named board-level person responsible for service security
Security governance certified
Security governance standards
ISO/IEC 27001
Information security policies and processes
VCS user cases are delivered using the SharpCloud Service, which is ISO/IEC 27001 certified.

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
Configuration and changes for the Roelto VCS are managed using the Roelto Quality Management System (QMS) based
Configuration and changes for the Sharpcloud service are managed directly by the SharpCloud with upgrades to the environment occurring c1 month after major releases have been tested in their public cloud environment and bugs fixed. The service utilises Azure DevOps for deployment which ensures that the build process, configuration and deployment is managed consistently via a change process.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
SharpCloud follow best practice guidelines for software development using design patterns created or approved by MS including the multi-tier design pattern and application security layers (OWIN, MVC etc). Any threat we are made aware of is treated via our incident management process with changes tracked using our normal release process.
The service is constantly updated with new features and improvements. These are released approx. weekly to our SaaS services. If a security flaw is exposed, it would be patched within that timeframe. We conduct application penetration tests at least annually. MS provide constant patching and monitoring to the underlying PaaS.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
The underlying Azure PaaS has built in protection for DOS attacks etc. We recommend clients implement SSO via AAD which gives you further protection for authentication (e.g. enforce multi-factor authentication, password policies, prevent login from multiple locations etc). In addition, each story has an audit displaying access details enabling admin users to identify any suspicious activity.
The service is actively monitored by SharpCloud support staff for application level issues and Microsoft for underlying hosting (Network, storage and compute) issue.
The support team are constantly monitoring the system and performance and will react appropriately in a timely manner to any issues.
Incident management type
Supplier-defined controls
Incident management approach
Roelto: All incidents shall be reported via the Roelto Service Desk either via the customer portal at or via email

SharpCloud: All incidents are currently reported to '' and escalated accordingly.
Common issues like password resets, account unlocks will be handled by your internal IT if SSO is configured (if not this is easily done by users themselves automatically via email).
Security incidents will be reported in accordance with SharpCloud incident management policy.

Secure development

Approach to secure software development best practice
Supplier-defined process

Public sector networks

Connection to public sector networks


£5,000 a unit a year
Discount for educational organisations
Free trial available
Description of free trial
A free 1/2 day workshop is provided per VCS user case.
If a free trial is required for a longer period this can be requested.
Refer to the Roelto Pricing document for further details.

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Tell them what format you need. It will help if you say what assistive technology you use.