Liberty Create - Low-code application development platform
Liberty Create is an enterprise low code platform for rapid, secure application development. It accelerates delivery of digital services, case management and CRM with integration-ready architecture. Local Government and Housing Providers benefit from Citizen Hub and Tenant Hub foundations, plus AppShare libraries, to increase speed, capacity and resilience.
Features
- Rapid low-code development for digital services, workflows and automation.
- Citizen and Tenant Hub accelerators for case-management and CRM
- Integrated DevOps tools for build, test, deployment and monitoring
- Drag-and-drop interface with advanced code studio for custom logic
- Enterprise-grade security, governance controls and audit capabilities
- Responsive design adapts across devices with accessible UX standards.
- API-first architecture with REST, JSON and reusable connectors.
- Scalable, resilient UK cloud hosting on AWS infrastructure.
- Built-in automated testing and performance monitoring dashboards
- Structured onboarding with eLearning, training and mentoring support.
Benefits
- Accelerate delivery of digital services with rapid low-code development
- Reduce reliance on legacy systems through easy integration and automation.
- Empower business users and developers to collaborate effectively
- Improve citizen and customer experience with intuitive digital journeys.
- Increase development capacity without hiring additional technical resources.
- Ensure security, governance and compliance across all applications
- Access pre-built accelerators and AppShare library for faster deployment.
- Scale applications easily with resilient UK cloud hosting
- Simplify complex workflows and unify data for better decisions.
- Upskill teams quickly with structured training and mentoring support
Pricing
Service documents
Request an accessible format
Framework
G-Cloud 15
Service ID
1 1 1 6 9 6 4 7 2 8 6 9 9 1 4
Contact
CISILION LIMITED
Debbie Richardson
Telephone: 01372 201145
Email: drichardson@cisilion.com
About the service
- Service categories
-
- Application Development and Deployment
- Application development
- Development languages, environments and tools
- Development languages, environments and tools
- Software construction components
- Software construction components
- Business rules management
- Business rules management
- Development languages, environments and tools
- Application development
- Application Development and Deployment
- Multi cloud support
- No
Service scope
- Software add-on or extension
- Yes, but can also be used as a standalone service
- What software services is the service an extension to
- Liberty Create can be used as standalone or as an add-on to other modules that are part of the Netcall Liberty platform. This includes Liberty Converse CX Omnichannel contact centre solution and virtual Chat Assistant; Liberty RPA; Liberty AI; Liberty IDP; Liberty Spark for mapping/analysing processes.
- Cloud deployment model
- Public cloud
- Service constraints
- The service is subject to planned maintenance, which will be notified in advance.
- System requirements
-
- Internet Connectivity
- Users require a supported browser application
User support
- Email or online ticketing support
- Yes
- Support response times
-
"Netcall would classify a support question or enquiry a Priority 4 (P4) issue. A P4 issue has a target response time of 4 standard service hours.
P1 on a 24/7 basis has a target response time of 15 minutes.
P2 on an operating basis of 08:00-18:00 Mon-Friday (excluding UK Public Holidays) has a target response time of 15 minutes.
P3 on an operating basis of 08:00-18:00 Mon-Friday (excluding UK Public Holidays) has a target response time of 4 hours.
P4 on an operating basis of 08:00-18:00 Mon-Friday (excluding UK Public Holidays) has a target response time of 4 hours.
" - User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 24 hours, 7 days a week
- Web chat support
- Yes
- Web chat support availability
- 9 to 5 (UK time), 7 days a week
- AI chatbot
- Yes
- Web chat support accessibility standard
- WCAG 2.2 AA
- Web chat accessibility testing
- N/A
- Onsite support
- Yes, at extra cost
- Support levels
- We will provide a standard level of support which will be included within the software service (SaaS) cost. This includes access to the Support Online Portal, and contact by telephone, chat or email to the remote support teams during contracted hours. A technical account manager and cloud support engineer are provided.
- Support available to third parties
- Yes
Onboarding and offboarding
- Getting started
-
"Netcall will provide onboarding services, project management, engineering, and training to support customers adopting the Liberty Create service.
Our Training Academy provides an accredited training program for Create, which is delivered as trainer-supported eLearning. Netcall supports user training with eLearning resources available through the Netcall online Community portal. We also offer expert mentoring and engagement management services to support trained Create users as they use the service.
Netcall provides full user documentation through the Netcall online community." - Service documentation
- Yes
- Documentation formats
-
- HTML
- Documentation accessibility standard
- WCAG 2.2 AA
- End-of-contract data extraction
- At any point data can be extracted via API integration to another system or by file exports. Both are easily configured in the Build Studio.
- End-of-contract process
-
"At the end of the contract, Netcall will confirm the buyer's exit requirements. Buyer data can be extracted in a variety of file formats upon completion of the contract. If requested within thirty (30) days of the expiration or termination of this Agreement, Netcall can make all buyer data stored within the Netcall Service available.
Subject to agreed contract, Netcall can provide an exit plan which typically would include:
1. Measures to prevent disruption in the supply of the services during the period of transition from the Netcall Service to a replacement service;
2. Detail how the replacement service will be adopted by the replacement supplier and/or Customer;
3. Specify the scope of the Transitional Assistance Services (TAS) that may be required by the customer, together with any charges payable and how such services would be provided;
4. Provide a timetable and identify key actions for carrying out the TAS;
5. Set out the management structure to be put in place during the TAS."
Using the service
- Web browser interface
- Yes
- Supported browsers
- Microsoft Edge
- Application to install
- No
- Designed for use on mobile devices
- No
- Service interface
- Yes
- Description of service interface
- The Liberty Create platform has been designed to work equally well when used on both desktop and mobile devices. Whilst applications must be designed and built using a desktop device, the vast majority of user interfaces components will work equally well on either. Some features are designed to take advantage of the large screen sizes of a desktop device while some features require access to native mobile functionality so are only available on mobile. Create applications can be used via a web interface or a native mobile app, including offline capability.
- Accessibility standards
- WCAG 2.2 AA
- Accessibility testing
- The Liberty Create platform has been designed to work equally well when used on both desktop and mobile devices. Whilst applications must be designed and built using a desktop device, the vast majority of user interfaces components will work equally well on either. Some features are designed to take advantage of the large screen sizes of a desktop device while some features require access to native mobile functionality so are only available on mobile. Create applications can be used via a web interface or a native mobile app, including offline capability.
- User support accessibility
- WCAG 2.2 AA
- API
- Yes
- What users can and can't do using the API
- The Liberty Create platform has a generic REST adaptor that allows you to configure a connection to any REST-based resource. In addition, we have several adaptors created for specific solutions. API endpoints can be exposed using REST or SOAP. This allows you to configure endpoints and methods that third parties can consume to pull and push data or trigger events/actions. Liberty Create also provides ODBC views, allowing other applications to query the database directly. The API does not allow the user to set up or amend the configuration of the application.
- API documentation
- Yes
- API documentation formats
- HTML
- API sandbox or test environment
- Yes
- Customisation available
- Yes
- Description of customisation
- All aspects of Liberty Create applications can be customised by users with Create Builder Training and authorised access.
Scaling
- Independence of resources
-
"Liberty Create applications run on dedicated virtual instances using AWS cloud hosting.
The AWS class of service provided is dedicated to each customer. Server monitoring tools are provided for users to monitor their own platform hosting resources and to request changes be applied by Netcall as required."
Analytics
- Service usage metrics
- Yes
- Metrics types
-
"Metrics can be defined based on the applications implemented. Typically, this will include:• Number of active instances.• Pages per minute.• User logins and • Records created per minute.
All historic reports can be manually downloaded in .csv file format." - Reporting types
-
- API access
- Real-time dashboards
- Regular reports
- Reports on request
- Resource tagging
- Yes
- FOCUS resource tagging
- No
Supplier type
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Developed Vetting (DV)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
- United Kingdom
- User control over data storage and processing locations
- No
- Datacentre security standards
- Complies with a recognised standard (for example CSA CCM version 4.0)
- Penetration testing frequency
- At least once a year
- Penetration testing approach
- ‘IT Health Check’ performed by a CHECK service provider
- Protecting data at rest
-
- Physical access control, complying with CSA CCM v4.0
- Encryption of all physical media
- Data sanitisation process
- Yes
- Data sanitisation type
- Deleted data can’t be directly accessed / Cryptographic Erasure
- Equipment disposal approach
- Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
Data importing and exporting
- Data export approach
- Users can export their data from a Liberty Create solution via file such as .csv, API or ODBC connection.
- Data export formats
-
- CSV
- Other
- Other data export formats
- "XLSX JSON XML"
- Data import formats
- CSV
Data-in-transit protection
- Data protection between buyer and supplier networks
- Private network or public sector network
- Data protection within supplier network
- TLS (version 1.2 or above)
Availability and resilience
- Guaranteed availability
- Liberty Create has an agreed Service Availability Target of 99.9%. Service credits can be discussed as part of your contract.
- Approach to resilience
- Information regarding the resilience of the data centre is available upon request.
- Outage reporting
-
"Netcall’s Cloud systems and services are proactively monitored for availability and system health by the event management process. System events and alerts of threshold breaches are detected by Netcall’s system management tools and these alert our Customer Support team of state changes, including service outages in any of Netcall Cloud service offerings.
Customer Support are responsible for informing service affecting outages to customers and these are tailored to match the business needs of the customer. The form of the communication can be either email or telephone to the customer’s service desk or preferred service contacts. The alert to the customer contains information on which service has failed, the likely effect it will have on customers IT service along with reference information for follow up. Netcall Customer Support then maintain regular updates to affected customers on the expected service restore time until de-escalation."
Identity and authentication
- User authentication needed
- Yes
- User authentication
- Multi-Factor Authentication (MFA)
- Access restrictions in management interfaces and support channels
- Liberty Create has a range of security controls to ensure the security requirements will be met. These include built-in firewall and access profiles, role management, Security Policy, Login Control, Object permissions and Interface permissions.
- Access restriction testing frequency
- At least once a year
- Management access authentication
-
- Multi-Factor Authentication (MFA)
- Username or password
Audit information for users
- Access to user activity audit information
- Users have access to real-time audit information
- How long user audit data is stored for
- User-defined
- Access to supplier activity audit information
- Users have access to real-time audit information
- How long supplier audit data is stored for
- User-defined
- How long system logs are stored for
- At least 12 months
Security governance
- Named board-level person responsible for service security
- Yes
- Software Security Code of Practice
- Yes
- Security governance certified
- Yes
- Security governance standards
- ISO/IEC 27001
- Information security policies and processes
-
"All Information Security policies and processes are documented and audited via the ISO27001:2022 Info Sec Statement of Applicability (SOA). It lists the Netcall controls, policies and work instructions documented and recorded for the standard and the SOA is publically available. All process owners are internally/externally audited for compliance with our code of conduct, policies and plans listed in the SOA and below:
Policies:
• Acceptable Use
• Access Control
• Anti-Virus
• Audit Log
• Backup
• Business Continuity
• Change Management
• Clear Desk
• Cloud Security
• Cryptographic
• Data Classification Labelling and Handling
• Data Ethics
• Data Protection
• Data Retention
• Development Operational Change Control
• Disposals
• External Parties Access Control
• Information Security
• Infrastructure Monitoring
• IT Change Management
• Liberty Product Security Testing
• Key Management
• Keyholder
• Network Access Control
• Patching
• Password
• Quality
• Records Management
• Security Event and Incident
• Security Guiding Principles
• Security Training, Awareness and Testing
• Software Engineering
• Software Testing
• Supplier Management
• Vetting Policy
Plans:
• Major Incident Management Plan
• Incident Response Plan
All are reviewed throughout the year and recorded in the Audit Calendar."
Operational security
- Configuration and change management standard
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Configuration and change management approach
-
"Netcall's Change Management processes are audited under the ISO27001:2022 and ISO9001:2015 standards. The statement of applicability for the standards can be shared.
No change will be permitted unless it has been approved by the relevant authority at Netcall against the relevant change control ticket. This change control process includes assessing the impact of a change for any impact on security." - Vulnerability management type
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Vulnerability management approach
- Netcall operate a bespoke Risk Assessment Methodology to evaluate the impact of newly discovered vulnerabilities, ensuring they are managed quickly and effectively. Patches are released as soon as they pass quality assurance (QA), so that they can be rapidly deployed to maintain security. Netcall subscribes to vulnerability management feeds from major product vendors and professional bodies, including US CERT and the National Vulnerability Database (NVD) and CrowdStrike is deployed to provide threat intelligence feeds highlighting cyber risks. Netcall is also a member of the Cyber Security Information Sharing Partnership (CiSP) and subscribes to the NCSC Early Warning Service.
- Protective monitoring type
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Protective monitoring approach
-
"Netcall manages and controls compromises to the confidentiality, integrity, availability of information assets through its Managed Detection and Response system (MDR). This allows Netcall staff to respond, triage and remediate identified issues. The process is ISO27001:2022 compliant. Compromises are monitored, tracked, and recorded:
• via customer/production support calls.
• via account managers.
• after changes.
• after risk reviews.
• post actual security incidents.
• picked up via MDR/IDS/IPS systems.
The owner is the Information Security Manager working with Process Owners and any impacted stakeholders to resolve any compromises and apply preventative actions as soon as possible, measured against SLAs." - Incident management type
- Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
- Post-quantum cryptography secure
- Yes
- Incident management approach
- Netcall has a security event and incident policy that includes a predefined process for managing incidents and common events. Issues can be reported by users via email/telephone/Microsoft Teams/in person. Netcall uses licensed software to manage risks and is ISO27001:2022 compliant for Incident Management. It is tracker-based linking risks, assessments into corrective and preventative processes. Compromises are recorded after changes, risk reviews, security incidents, event identification or, in worst-case scenarios, invoking the Business Continuity Plan. The owner is the Head of Information Security, working with the respective Process Owners and impacted stakeholders to identify, contain and resolve an incident.
Secure development
- Approach to secure software development best practice
- Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)
Public sector networks
- Connection to public sector networks
- No
Pricing
- Discount for educational organisations
- No
- Free trial available
- No
Discount percentage by annual call-off contract value (excluding VAT)
- Less than £250,000
- 0%
- Between £250,000 and £500,000
- 2%
- Between £500,001 and £1,000,000
- 2.5%
- Between £1,000,001 and £2,500,000
- 3.5%
- Between £2,500,001 and £5,000,000
- 4%
- Over £5,000,001
- 4.5%
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- ISO/IEC 27001 accredited by
- British Assessment Bureau
- ISO/IEC 27001 accreditation date
- Tuesday 2 September 2025
- What the ISO/IEC 27001 doesn’t cover
- Ur ISO/IEC 27001 certification covers the design, support, and delivery of IT solutions within the defined scope of our Statement of Applicability. However, it does not extend to every element of our operations or third-party services. Specifically, outsourced cloud platforms such as Microsoft Azure or other vendor-hosted environments fall outside our certification boundary, although these providers maintain their own ISO certifications. Additionally, ISO/IEC 27001 audits are not designed to detect or prevent criminal activity or guarantee immunity from breaches; they confirm compliance with an Information Security Management System, not absolute security. The certification also excludes any services or processes not listed in the approved scope, such as certain subcontractor activities or bespoke client systems. While we maintain rigorous controls internally, gaps are mitigated by requiring partners to hold equivalent certifications and by implementing contractual security obligations. This layered approach ensures comprehensive coverage while acknowledging the limitations inherent in the standard.
- ISO 28000:2022 certification
- No
- ISO 9001 certification
- Yes
- ISO 9001 certification accredited by
- British Assessment Bureau
- ISO 9001 accreditation date
- Tuesday 9 September 2025
- What the ISO 9001 doesn’t cover
- CopilotOur ISO 9001 certification applies to the quality management system governing our core services and processes within the defined scope. However, it does not cover every aspect of our operations. Specifically, activities outside the documented scope, such as bespoke client solutions developed under separate agreements, fall outside certification boundaries. Third-party services and subcontractor activities are also excluded, although we require them to maintain equivalent quality standards contractually. ISO 9001 does not guarantee product performance or compliance with external regulations; it focuses on process consistency and continual improvement rather than technical specifications. Additionally, non-operational functions such as marketing or certain administrative tasks may not be included in the certified scope. While these exclusions exist, we mitigate risks through robust supplier management, internal audits, and adherence to best practices across all areas. This ensures that even non-certified elements align with our commitment to quality, delivering reliable outcomes and maintaining customer satisfaction
- Quality management systems (QMS)
- Yes
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber Essentials Certificate Number
- 625ce49e-bafe-4222-8e24-8f43e5e0dc48
- Cyber essentials plus
- Yes
- Cyber Essentials Plus Certificate Number
- 17f5ab9f-5b07-4bab-a2a1-458a07801692
- Other security certifications
- Yes
- Any other security certifications
- Cisco Advanced Security Architecture Specialisation
Social value
- Mission: Kick start economic growth
-
To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority
- New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
- New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
- Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
- Plans to engage the contract workforce in deciding the most important workplace issues to address
- Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
- Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
- Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
- Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
- Activities to cascade good practice on fair working conditions throughout the supply chain
- Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
- Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
- Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
- Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
- Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
- Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
- Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Volunteering opportunities for staff
- Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
- Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
- Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
- How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
- How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
- Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract
Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.
- Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
- Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract
Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises
- Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
- Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
- Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
- Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
- Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
- Mission: Make Britain a clean energy superpower
-
To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero
Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.
- Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
- Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it
- Mission: Break down barriers to opportunity
-
By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 6: Employment and training: For those who face barriers to employment
- Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
- Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
- Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
- Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
- Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
- Collection of the views and expertise of disabled people and their representative organisations on successfully supporting disabled employees or applicants
- Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
- Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain