MICROLINK PC (UK) LIMITED

Calibrai Platform

Calibrai is a SaaS platform for producing accessible image descriptions, captions, and audio descriptions at scale. It uses AI-assisted processing with mandatory human review to generate WCAG-compliant outputs for images and video, supporting high-volume accessibility remediation, planning, and delivery across multiple languages.

Features

• High-volume alt text generation with human review
• Automated image assessment for accessibility remediation
• Video closed caption and audio description generation
• Domain-aware accessibility processing
• Multi-language accessibility output support
• API-based batch processing
• Secure cloud-based workflow
• Quality scoring and escalation
• Standards-based accessibility compliance
• Scalable production pipelines

Benefits

• Produces accessible content at scale
• Reduces manual accessibility workload
• Improves remediation planning accuracy
• Accelerates delivery timelines
• Supports regulatory compliance
• Lowers cost per asset
• Ensures consistent quality
• Enables large-volume processing
• Minimises operational risk
• Supports multi-language accessibility

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sam@microlinkpc.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

354320946180739

Contact

Hazel Knights
02380240300
sam@microlinkpc.com

About your service

• Service categories:

  Application Development and Deployment

  AI platforms

  AI software services

  • Computer Vision AI Software Services
  • Generative AI Software Services
  • Document AI Software Services
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: No service constraints.
• System requirements:
  • Modern web browser
  • Secure internet connection
  • Supported file formats
  • User authentication credentials
  • API credentials (optional)
  • Secure file transfer access
  • Role-based user access
  • PDF, image, or video files
  • Standard enterprise firewall
  • No local installation required

User support

• Email or online ticketing support: Yes
• Support response times: Calibrai provides email and online ticketing support during business hours, Monday to Friday. Support requests are acknowledged within one business day, with resolution times dependent on issue severity. Critical service-impacting issues are prioritised and escalated internally. Customers are kept informed of progress through the ticketing system. Weekend support is available for critical incidents by prior agreement.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: No
• Web chat support: No
• Onsite support: No
• Support levels: Calibrai provides a standard support level included in the service price. This includes access to email and ticket-based support, incident response, service guidance, and issue resolution during UK business hours. Support covers platform availability, data ingestion, processing issues, and delivery queries.; A named technical contact may be provided for enterprise customers where required. Additional support services, such as extended hours or dedicated account management, can be agreed separately where necessary.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: We support users in getting started through a combination of online and, where required, in‑person training. Our primary onboarding method is through online webinars, which provide step‑by‑step guidance on how to access, configure, and use the service effectively. These sessions cover core functionality, best‑practice workflows, and common troubleshooting scenarios, ensuring users feel confident from day one.; For organisations with more complex requirements or specialist use cases, we can also deliver in‑person training sessions. These are tailored to the buyer’s environment and can include hands‑on demonstrations, role‑specific training, and support with initial configuration.; Our onboarding approach is designed to be flexible, accessible, and scalable, ensuring that users receive the level of support they need to adopt the service smoothly and efficiently.
• Service documentation: No
• End-of-contract data extraction: At contract end, users can export all processed outputs and associated metadata using the web interface or API. Data is provided in open, standard formats. Upon confirmation, customer data is securely deleted in line with Calibrai’s data retention and sanitisation policies.
• End-of-contract process: At contract end, users can export all processed outputs and associated metadata using the web interface or API. Data is provided in open, standard formats. Upon confirmation, customer data is securely deleted in line with Calibrai’s data retention and sanitisation policies.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: Calibrai provides a web-based interface for managing accessibility workflows. Users can upload assets, configure processing options, monitor job status, review outputs, and download results. The interface supports role-based access, clear status indicators, and audit visibility. API access is available for automated workflows and large-scale batch processing.
• Accessibility standards: None or don’t know
• Description of accessibility: At present, the web-based interface is not fully accessibility compliant. However, improving accessibility is already part of our product roadmap and is actively in our pipeline. We have a clear plan in place and are planning to implement the required enhancements shortly, to ensure the interface aligns with accessibility standards and provides an inclusive user experience for all users.
• Accessibility testing: Not Applicable
• API: Yes
• What users can and can't do using the API: Calibrai provides a REST API that allows users to submit images and video files for processing, configure accessibility options, retrieve job status, and download completed outputs. The API supports batch submissions, metadata tagging, and automated delivery. Users can manage workflows programmatically without using the web interface. API access is secured using authentication tokens. Limitations include rate controls and file size thresholds to ensure platform stability.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Users can customise the Calibrai service through the web interface or API by configuring workflow and processing parameters to align with their operational and accessibility requirements. Customisation options include selecting the type of accessibility outputs to be generated, defining language preferences, specifying delivery formats, and choosing delivery methods such as API retrieval or secure file transfer.; Users can also configure processing rules, and prioritisation settings to support different content types or internal workflows. These configurations can be updated at any time, allowing users to make changes without service interruption.; Customisation is limited to configuration and workflow settings. Users cannot modify, fine-tune, or retrain the underlying AI models, alter core platform logic, or bypass required quality or human review controls. These limitations are in place to maintain service stability, security, and consistent performance across all users.; Customisation does not require local software installation and is applied through authenticated access. Guidance on available configuration options is provided through service documentation and onboarding support.

Scaling

• Independence of resources: Calibrai uses isolated, cloud-native resources to ensure customer workloads are not impacted by other users. Capacity is managed through scalable infrastructure and workload separation, ensuring consistent performance during peak demand.

Analytics

• Service usage metrics: Yes
• Metrics types: Calibrai provides usage metrics including volume processed, processing status, turnaround times, and error rates. Metrics are available via dashboards and API access. Reports can be generated on request.
• Reporting types: Real-time dashboards
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: In-house destruction process
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure

Data importing and exporting

• Data export approach: At contract end, users can export all processed outputs and associated metadata using the web interface or API. Data is provided in open, standard formats. Upon confirmation, customer data is securely deleted in line with Calibrai’s data retention and sanitisation policies.
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats:
  • JSON
  • XML
  • WebVTT
• Data import formats: Other
• Other data import formats:
  • PDF
  • HTML
  • XML

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Calibrai targets high service availability through resilient cloud infrastructure. Planned maintenance is communicated in advance. Availability SLAs can be agreed contractually. Service credits may apply if agreed availability levels are not met.; Calibrai is designed to deliver high availability and operational resilience using enterprise-grade cloud infrastructure and best-practice service management processes. The platform is hosted on Amazon Web Services, utilising multiple availability zones, built-in redundancy, and automated failover to reduce the risk of service disruption and support continuous operation.; Our services are continuously monitored to detect and respond to incidents quickly, with established escalation and incident management procedures in place. Planned maintenance is performed during low-usage periods wherever possible and is communicated to customers in advance to ensure transparency and minimise impact.; Availability targets and SLAs can be defined contractually to meet customer requirements. These SLAs typically specify minimum uptime levels measured over a defined reporting period and include clear definitions of availability, exclusions (such as scheduled maintenance) and reporting mechanisms.; If guaranteed availability levels are not achieved, remediation measures such as service credits or other contractual remedies may be made available, depending on the agreed terms. This approach provides customers with confidence in both service reliability and accountability.
• Approach to resilience: The service is designed with resilience as a core architectural principle and aligns with the UK Government’s Cloud Security Principle. The SaaS application is hosted on Amazon Web Services (AWS), leveraging AWS’s highly available, fault-tolerant cloud infrastructure.; The application is deployed across multiple Availability Zones within an AWS region to ensure continued operation in the event of infrastructure or data centre failure. Stateless application components, load balancing, and auto-scaling are used to manage demand spikes and recover automatically from component failures. Data is stored on resilient, managed services that provide built-in redundancy and durability.; Regular, automated backups and snapshots are performed, with defined retention policies and tested restoration procedures to support disaster recovery. Monitoring, alerting, and logging are in place to detect issues early and enable rapid response.; AWS data centres are designed for high availability and resilience, incorporating redundant power, cooling, networking, and physical security controls. Physical infrastructure resilience and media protection are managed by AWS in accordance with internationally recognised standards (such as SSAE-18 / ISAE 3402).; Together, these technical, operational, and infrastructural controls ensure the service can withstand faults, recover quickly from incidents, and protect customer assets throughout their lifecycle.
• Outage reporting: Our service is designed to promptly detect and report outages to ensure customers are aware of any disruption and can take appropriate action. The service is continuously monitored using automated monitoring systems that track availability, performance, and key service metrics. Any anomaly or interruption that meets predefined thresholds triggers an outage alert.; When an outage is detected, an automated notification is generated and sent via email to pre-registered user(s). These recipients are designated points of contact ensuring that the alert reaches the right stakeholders without delay.; The alerts are logged in our support desk system, allowing our technical support team to review, acknowledge, and track the incident. Our support desk coordinates the response, providing updates to the client until the service is fully restored. This process ensures that all communications are consistent, timely, and auditable.; In addition to reactive notifications, the monitoring system helps proactively identify potential issues before they impact service availability. Clients can request access to historical outage reports, metrics, and resolution times to support compliance and reporting needs.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Access to Calibrai management interfaces and support channels is restricted through authenticated user accounts and role-based access controls. Users are granted permissions based on defined roles, limiting access to only necessary functions. Administrative and support access is restricted to authorised personnel. Access rights are reviewed and updated as roles change, and all access is logged for audit and security monitoring purposes.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: SOC2-Type 2; ISO 9001: 2015 accredited
• Information security policies and processes: Microlink is ISO 27001:2022 certified and maintains information security policies accordingly.; This includes the Business Management System Manual, which details the scope, the objectives, the responsibilities and the risk rating and management, as well as the mobile device policy, clear desk, access, teleworking, and encryption management policy.; Several other policies are also in force, including Change and Release procedure, document retention policy, incident management procedure, information classification and handling policy and the physical security policy.; Finally, Microlink maintains a detailed Risk register for logging of events and triggering any preventative/remedial measures. There is a documented escalation path from operator level right through to our board with dynamic stakeholder alerting at each level.; All of these policies and procedures are subject to independent external review at least once a year, and also the subject of annual audit by many of our corporate clients.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: All changes to the production platform go through a change request process, overseen by our services delivery manager. This process ensures appropriate approvals are in place before changes are made. Configuration information is stored in a revision control system to track all changes made through the lifetime of the system.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Through AWS we have a number of systems in place including automated container vulnerability scanning, monthly patching of servers, and annual penetration testing of the service. We subscribe to relevant vendor security announcement lists in addition to monitoring the IT media for new vulnerabilities and threats.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: The application is continuously monitored using automated tools that track system performance, user activity, and security events to identify potential compromises. Alerts are triggered for anomalies, suspicious activity, or policy violations. When a potential compromise is detected, the support and security teams immediately investigate the event, assess its impact, and contain it to prevent further risk. Predefined incident response procedures ensure a rapid response, typically within minutes of detection. All incidents are logged, communicated to affected stakeholders, and reviewed post-incident to strengthen controls and prevent recurrence.
• Incident management type: Supplier-defined controls
• Incident management approach: We have a defined Incident Management Process that outlines how incidents are reported, tracked, and resolved. All incidents are logged in an internal issue tracking system, which automatically alerts appropriate staff to ensure timely prioritisation and resolution. The process covers initial investigation, containment, and recovery of affected services, as well as client notification when appropriate. Following resolution, incidents undergo analysis and remediation to identify root causes and implement corrective actions. This structured approach ensures effective response, provides a complete audit trail of incidents, and supports continuous improvement of operational security and service resilience.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 1%
• Between £500,001 and £1,000,000: 2%
• Between £1,000,001 and £2,500,000: 5%
• Between £2,500,001 and £5,000,000: 7.5%
• Over £5,000,001: 10%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: NQA
• ISO/IEC 27001 accreditation date: Wednesday 9 July 2025
• What the ISO/IEC 27001 doesn’t cover: Due to the nature of the services we provided, data masking or anonymisation is not possible, so it is not covered by our certification. We can provide a redacted version of our SOA for ISO27001 showing all the sections covered.
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: NQA
• ISO 9001 accreditation date: Monday 18 December 2023
• What the ISO 9001 doesn’t cover: Nothing. Everything is covered.
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 3646e13c-d7dc-42b3-a7ed-07a5814cc080
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 80f895cd-7070-464a-98f1-307a7c616c2f
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
    • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sam@microlinkpc.com. Tell them what format you need. It will help if you say what assistive technology you use.