JUST RECRUIT SOFTWARE LIMITED

CRM / MIS / ATS with option of integrated website

We offer a software solution for Economic Development / employment and business support activities that encompasses CRM (storing and tracking of people and organisation information), ATS (management of applicants) and MIS (reporting and analytics) functionality. We also offer integrated websites that include a portal for registrations.

Features

• Dynamic reporting, Excel, PDF, hard-coded and customisable
• Database, create records for people and organisations and track communication
• ATS - manage applicants through opportunity journey (jobs, training, etc)
• Search - conduct searches inside the database
• Email & calendar integation
• s106 management - management of s106 obligations
• Mass-mailing and mass SMS - communiate with your customers en-masse
• Portal - customers can register and apply online
• Integrated website with options to post opportunities and receive applications
• Value-adds - CV builder, surveys, project management, reminders, GDPR logging

Benefits

• Consolidation of information to aid crossfunctional working and reduce errors
• Analytics that negate the need for manual reporting, saving time
• Automated workflows to improve user productivity
• Easily captured information
• Insights that identify issues and highlight opportunities for improved workflows

Service documents

• Pricing document

  ODT

• Service definition document

  ODT

• Terms and conditions

  ODT

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at hello@justrecruit.co. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

215080308807498

Contact

Erika Clifford
07923220258
hello@justrecruit.co

About the service

• Service categories:
  • Applications
    • Customer relationship management
      • Marketing campaign management
        • Marketing campaign management
      • Customer service
        • Customer service
      • Contact centre
        • Contact centre
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: N/a
• System requirements: Internet connectivity

User support

• Email or online ticketing support: Yes
• Support response times: We are rapid on the helpdesk and pride ourselves on resolving queries in market-leading time. During UK working hours (9am - 6pm), we respond in minutes. ; ; How we responds depends on the query but we often reply with a video or jump on a video-call as we find this often helps everybody skip to the end quicker.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes
• Support levels: We offer support solutions tailored to individual customers so provide quotes outside of our inclusive support on a case-by-case basis. Do note however that our platform is extremely easy-to-use and intuitive and as such, support requirements are minimal. ; ; Our online helpdesk which inludes userguides, video-content and a search facility are all inclusive. We are very responsive on both the helpdesk and direct emails and regularly receive positive feedback on the speed of our query resolution. ; ; As well as the online helpdesk, we offer one onsite visit per year for free which can be used however the customer sees fit and will take the most benefit from - we are happy to advise on this.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: For onbarding, we provide online training (separate sessions for different user profiles) and are happy to offer onsite training at no extra cost if this is preferred. ; ; We also have a comprehensive online helpdesk and lots of video content and written userguides. ; ; Following the initial onboarding, we offer a follow-up 'post-onboarding training session' that further supports new customers. This session ensures customers derive the most value from the platform. We ensure workflows are both tailored and maximised.
• Service documentation: Yes
• Documentation formats: HTML
• Documentation accessibility standard: WCAG 2.2 AA
• End-of-contract data extraction: Customers are able to export all of their data to CSV at any time through the settings which are available to admin users. If you require your data in SQL, a request is made by the customer which we will action two weeks. ; ; Our data has unique identifier information enabling the data to be migrated with ease.
• End-of-contract process: We have supplied to our customers for many years and they remain extremely happy with our service. ; ; Should a customer's funding end / a specific project comes to an end and the need for Just Recruit's services no longer exist, any CSVs exported and manual file downloads are included in the price of the contract while SQL export and zipped file extraction incurs an additional charge.

Using the service

• Web browser interface: Yes
• Supported browsers: Chrome
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: N/a
• Service interface: No
• User support accessibility: WCAG 2.2 AA
• API: Yes
• What users can and can't do using the API: The Just Recruit platform includes an API that allows customers to integrate the service with other systems and automate data exchange.; SERVICE SETUP; The API is used for data migration from legacy systems (if required) and to support initial setup activities.; ; CHANGES VIA API; The API can be used to create, update and retrieve data held within the system, enabling ongoing synchronisation with third-party tools and supporting automated workflows where required.; ; LIMITATIONS; Access to the API is restricted to authorised users and subject to appropriate security controls. Usage limits may apply to protect the performance and stability of the service.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: The entire platform can be customised with ease. You can edit many parts of the platform including:; ; - custom fields; - registration form; - reports; - daily bulletin; - user permissions; - coding / tags associated to individual records for search purposes; - File categories; - Action options; - Opportunity / job specific e.g. interview outcomes, candidate status, job advert defaults, etc ; ; Should you also use one of our integrated websites, we provide access to an easy-to-use CMS (content management system) which means you can edit all parts of your frontend website giving you total control thereby substantially reducing both the lead team for required changes to go live and importantly completely removing associated costs.

Scaling

• Independence of resources: We ensure that users of our service are not affected by demand from other users through a combination of AWS architectural controls, automated scaling, resource isolation and performance monitoring. Our service is built on AWS On-Demand compute and managed services, which provide inherent multi-tenant isolation and the ability to scale resources in real time based on usage.; ; Performance remains consistent and predictable regardless of overall platform usage.

Analytics

• Service usage metrics: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Data Erasure
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: For data protection purposes, only admins can export data. To not make admin users' lives laborious, it is possible for users to set the parameters for a data export and then an admin can access it to do the final step of triggering the export. ; ; Exports can be managed through a simple-to-use interface.
• Data export formats:
  • CSV
  • Other
• Other data export formats: PDF
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: 99.9%; ; We offer service credits at the following rates:; 99.9% – 99.0% 10% of monthly fee; 99.0% – 95.0% 25% of monthly fee; < 95.0% 100% credit (month free); ; Notes; Credits apply to future invoices, not cash back.; ; Credits are the sole and exclusive remedy, meaning the vendor caps liability.; ; Outages caused by 3rd parties (e.g. hosting provider) don’t trigger compensation.
• Approach to resilience: Our service is designed to meet the resilience requirements set out under the NCSC Cloud Security Principle “Asset Protection and Resilience.” The following summarises how we ensure resilience:; ; PHYSICAL LOCATION & LEGAL JURISDICTION; - Customer data is stored, processed, and managed exclusively within datacentres located in the UK. This ensures that data remains subject to UK (or EU) legal and regulatory frameworks.; ; DATACENTRE PHYSICAL SECURITY; - The hosting datacentres are operated by a certified provider with robust physical security controls ; - Infrastructure is deployed using geographically redundant sites so that failure or outage in one site does not lead to total service unavailability; ; DATA AT REST PROTECTION, BACKUP & RECOVERY; - All stored data is encrypted at rest, using industry-standard encryption mechanisms; - We maintain regular automated backups of operational data (including snapshots, full backups, transaction logs etc.); ; OPERATIONAL RESTILIENCE; - The architecture avoids single points of failure; - Continuous monitoring and alerting of service health, infrastructure status, backups, and performance; ; SEPARATION OF ENVIRONMENTS; - Where applicable (e.g. multi-tenant deployments), we enforce strict logical and network separation between customers / tenants, so that a failure or breach in one tenant does not affect others.
• Outage reporting: Should an outage occur, all users would be notified by email, detailing expected outage time (if known). Lead contacts for each customer receive phonecalls.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is restricted using role-based access controls, ensuring only authorised personnel can perform administrative tasks. All users authenticate via strong passwords. Privileges are granted on a least-privilege basis and reviewed regularly. Access to support channels, including ticketing systems and customer communications, is similarly restricted to trained staff. All access is logged and monitored for unusual activity and temporary or elevated privileges require formal approval. This ensures that sensitive functions are protected and aligned with security best practices.
• Access restriction testing frequency: At least once a year
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Cyber Essentials
• Information security policies and processes: We operate a structured information security management approach to ensure the confidentiality, integrity and availability of customer data. Our security policies cover key areas including access control, data protection, secure development, incident management, vulnerability management, business continuity, acceptable use, and supplier security. Policies are reviewed annually or following significant changes in risk, technology, or regulation.; ; Security oversight is led by our CTO. This ensures that security decisions are taken at an appropriate level and that issues can be escalated quickly. Day-to-day operational security tasks inlcude monitoring, patching, logging and user-access reviews.; ; Compliance with policies is ensured through a combination of regular internal audits, automated monitoring, mandatory staff training, and technical controls such as MFA, least-privilege access and enforced configuration standards. Any breach of policy or suspected incident triggers our documented incident response process, including reporting, containment and post-incident review.; ; Together, these measures ensure that policies are embedded into daily operations and that security is actively governed across the organisation.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We use a formal configuration and change management process to ensure service integrity and security. All service components are tracked throughout their lifecycle using an asset and configuration management system, covering versions, ownership and deployment history. Changes follow a documented workflow including review, approval and testing before release. Each change is assessed for security impact, with higher-risk changes undergoing additional technical review and where necessary, security testing. All changes are logged, auditable and monitored to ensure they are implemented safely and in line with our security policies.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We operate a continuous vulnerability management process that monitors threats, identifies weaknesses and prioritises remediation. We assess potential threats through automated scanning, log monitoring and regular security reviews. Threat intelligence comes from vendor advisories, CERT/NCSC updates and our monitoring tools. Patches for critical vulnerabilities are applied as soon as possible, typically within 24–48 hours; high-risk issues follow our expedited change process. Lower-risk patches are deployed during scheduled maintenance windows. All vulnerabilities are tracked until fully remediated.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We use protective monitoring across our infrastructure, including automated log analysis, anomaly detection and alerts for suspicious activity. Potential compromises are identified through unusual access patterns, failed authentication attempts, privilege escalations or abnormal system behaviour. When a potential compromise is detected, our incident response process is triggered: the event is assessed, contained and investigated, with affected systems isolated if required. We respond to security incidents immediately upon detection, with critical incidents addressed within minutes and fully managed until resolved, followed by a post-incident review.
• Incident management type: Supplier-defined controls
• Post-quantum cryptography secure: No
• Incident management approach: We operate a formal incident management process with predefined procedures for common events such as service outages, security alerts and access issues. Users can report incidents through our support portal or by email, where tickets are logged and prioritised. Each incident follows a documented workflow covering triage, investigation, resolution and communication. For significant incidents, we provide users with incident reports detailing the impact, root cause and corrective actions. Post-incident reviews ensure lessons are captured and improvements implemented.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 5%
• Between £250,000 and £500,000: 20%
• Between £500,001 and £1,000,000: 25%
• Between £1,000,001 and £2,500,000: 30%
• Between £2,500,001 and £5,000,000: 35%
• Over £5,000,001: 40%

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 6c57566e-4251-41c7-adea-a6c0a0113266
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
  • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
  • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
  • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract

  Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

  • Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
  • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
  • Plans for positive actions with community groups.
• Mission: Make Britain a clean energy superpower:

  To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

  Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
• Mission: Break down barriers to opportunity:

  By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

  Policy Outcome 6: Employment and training: For those who face barriers to employment

  • Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
  • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

  • Understanding of the issues affecting the development of new skills by target cohort
  • Understanding of issues relating to entering the contract workforce
• Mission: Build an NHS fit for the future:

  That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

  Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

  • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
  • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion

Service documents

• Pricing document

  ODT

• Service definition document

  ODT

• Terms and conditions

  ODT

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at hello@justrecruit.co. Tell them what format you need. It will help if you say what assistive technology you use.