Workplus

Place-Based Apprenticeship Recruitment Platform

Workplus helps local and combined authorities deliver coordinated apprenticeship campaigns with employers of all sizes. The platform is a one-stop-shop for employers and applicants. Provides employer profiling, vacancy publishing, single application process, psychometric assessments and reporting through a secure, cloud-hosted platform. Can also be used for other early talent pathways.

Features

• Secure, role-based remote access for employers, applicants and delivery partners
• Real-time dashboards and reporting across campaigns, employers and applicants
• Automated eligibility checks against apprenticeship standards and entry requirements
• Candidate management tools for applications, shortlisting and interview tracking
• Configurable employer profiles and opportunity publishing within campaign windows
• Integrated psychometric assessments scored against apprenticeship standards
• Automated communications including email notifications and applicant updates
• GDPR-compliant data management with audit trails and consent tracking
• Employer knowledge base and in-platform guidance resources
• Scalable cloud-hosted infrastructure with high availability and resilience

Benefits

• Simplify apprenticeship recruitment through a single brokerage and clearing platform
• Reduce administrative burden with automated eligibility checks and candidate workflows
• Quickly manage candidates, shortlisting and interviews in one secure system
• Improve employer decision-making using real-time campaign and applicant insights
• Increase applicant reach through coordinated campaigns and shared promotion
• Save time with standardised application processes across multiple employers
• Support compliance through built-in GDPR controls and auditable data trails
• Enable faster onboarding with guided employer setup and knowledge resources
• Improve collaboration between employers, partners and support teams
• Scale recruitment activity without increasing internal staffing or systems

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at richard@workplus.app. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

374909797912632

Contact

Richard Kirk
07495690192
richard@workplus.app

About your service

• Service categories:

  Applications

  Production and operations

  • Other operations

  Service industry and public sector operations

  • Education
  • Other
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: Applicants can access and apply using a mobile web browser.; ; Employer and administrator interfaces are designed for desktop or laptop browsers.; ; The service requires a modern, standards-compliant web browser and internet access.; ; Planned maintenance may cause short periods of reduced availability, scheduled outside core hours where possible.; ; Support is provided remotely during standard UK business hours, with extended support by agreement.
• System requirements:
  • Modern web browser supporting current HTML5, CSS and JavaScript standards
  • Stable internet connection for secure, reliable access to cloud service
  • Desktop or laptop device recommended for employer and administrator users
  • Mobile browser supported for applicant access and application submission
  • JavaScript enabled in browser to support interactive platform functionality
  • Cookies enabled to allow authentication, sessions and user preferences
  • Secure email access to receive notifications and verification messages
  • Screen resolution suitable for desktop dashboards and management interfaces
  • Up-to-date operating system with current security patches applied
  • No additional software licences or local installations required

User support

• Email or online ticketing support: Yes
• Support response times: An in-platform helpdesk chatbot provides immediate responses to administrator, employer and applicant queries 24 hours a da, 7 days per week.; ; Where required, queries are escalated to human support via ticketing, with administrator requests prioritised. Such requests at weekends or public holidays are logged and handled on the next working day, unless enhanced support has been agreed.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: No
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: Worked with Disability Action to design this.
• Onsite support: Yes, at extra cost
• Support levels: Included within the service price. Provides an in-platform helpdesk chatbot with immediate responses for administrators, employers and applicants. Administrator queries are escalated to human support via email and ticketing during UK business hours. ; ; A named Customer Success Manager is provided to engage with the client, support onboarding, and assist with effective use of the service.
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: We help users get started through a structured onboarding process.; ; Administrators receive guided setup with a named Customer Success Manager, online onboarding sessions, and configuration support. Employers are supported through in-platform knowledge base, templates, and onboarding webinars. Applicants access step-by-step application guidance, FAQs, and helpdesk chatbot support. Comprehensive online documentation is provided. No onsite training is required; all support is delivered remotely.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: At contract end, administrators can extract their data through standard export tools.; ; Data can be exported in commonly used formats (such as CSV) covering employers, applicants, applications, assessments and reporting data. On request, we provide assisted data extraction and guidance to support transition to another service, in line with agreed exit plans and data protection requirements.
• End-of-contract process: At the end of the contract, administrator access is maintained for an agreed transition period to allow data export and service close-down. Standard data export tools and guidance are included in the contract price.; ; On contract completion, the service is deactivated and customer data is securely deleted in line with data protection policies, following confirmation. Optional assisted data extraction, extended access, or migration support beyond the standard transition period are available at an additional cost.
• Documentation accessibility standard: WCAG 2.2 A

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Desktop or laptop device recommended for employer and administrator users.; ; Mobile browser supported for applicant access and application management.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Administrators, employers and applicants access the platform through a secure browser-based interface with role-based permissions. ; ; The interface supports campaign management, employer profiles, candidate management and reporting for administrators; opportunity management and shortlisting for employers; and application submission and tracking for applicants. ; ; No additional software installation is required.
• Accessibility standards: None or don’t know
• Description of accessibility: The service is accessed through a secure, browser-based interface with role-based permissions.; ; Administrators can configure campaigns, manage employers, oversee candidates, access reporting, and manage compliance. Employers can manage profiles, publish opportunities, shortlist candidates and schedule interviews. ; ; Applicants can search opportunities, submit applications, track progress, and access support. ; ; Applicants can use mobile browsers; employer and administrator access is designed for desktop use.
• Accessibility testing: Worked with Disability Action to test
• API: No
• Customisation available: Yes
• Description of customisation: The service supports configurable customisation through role-based access.; ; Administrators can configure all customisable elements: ; campaign settings, employer onboarding workflows, eligibility rules, application questions, assessments, communications, reporting dashboards, and branding elements.; ; Employers can customise their own profiles and opportunity listings within administrator-defined parameters.

Scaling

• Independence of resources: The service is delivered on scalable cloud infrastructure designed to manage variable demand.; ; We use resource isolation, load balancing, and auto-scaling to manage peak usage across campaigns and users. While there may be short periods of high demand, capacity is monitored and scaled to maintain performance. No single user can directly consume or control shared resources in a way that impacts other users.

Analytics

• Service usage metrics: Yes
• Metrics types: Metrics include employer onboarding and engagement, live opportunities, applicant volumes, eligibility pass rates, assessment scores, shortlisting and interview progress, conversion to offers, campaign performance, and system usage. Administrators can view aggregated metrics, while employers see metrics related to their own opportunities only.
• Reporting types:
  • Real-time dashboards
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: Less than once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: Yes
• Equipment disposal approach: In-house destruction process
• Data sanitisation type: Data Erasure

Data importing and exporting

• Data export approach: Administrators can export structured data tables, including employers, applicants, applications, assessments and reports, using built-in export tools.; ; Employers can export their organisation profile, published opportunities and associated applicant data within campaign timeframes.; ; Applicants can export their submitted application data and request account deletion through the platform, in line with data protection requirements.
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats: PDF/A standard
• Data import formats: Other
• Other data import formats: Created within the system through structured forms

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The service is designed for high availability and is delivered on resilient, cloud-hosted infrastructure with monitoring and automated scaling.; ; We target 99.5% service availability per calendar month, excluding planned maintenance.; ; Planned maintenance is scheduled outside UK core business hours where possible and is excluded from availability calculations.; ; Where availability falls below the stated target, we will work with the buyer to investigate the cause, implement remedial actions, and agree appropriate service improvements in line with the G-Cloud Model Contract.
• Approach to resilience: Multi-server architecture, load balanced solution with scaling in place. Backups taken at hourly intervals with code held in Git repository. Capability to deploy new servers as required in an autoscaling environment.
• Outage reporting: Service outages and significant service degradation are reported through in-app notifications visible to all users.; ; Where appropriate, outage notifications and updates are also sent via email to registered users.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Username or password
  • Other
• Other user authentication: PIN by email for applicants
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is restricted through role-based controls.; ; Administrators, employers and applicants are assigned distinct roles with defined permissions. Management interfaces are only accessible to authorised administrators and employers using secure authentication. Support channels are segmented so administrators can raise service and configuration requests, while employers and applicants access user support through in-platform guidance and the helpdesk chatbot. All access is logged and monitored for audit purposes.
• Access restriction testing frequency: At least once a year
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: You control when users can access audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Using the ISO 27001 framework
• Information security policies and processes: ISMS
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Changes are deployed on a test environment with identical set up to live and tested using a defined UAT process. ; ; All code is run through automated test suites and deployment to both staging and production environments is disabled unless the test suite passes.; ; Test coverage is around 90% and we are aiming for 100% code coverage in the calendar year.; ; Hosting environment changes are similarly tested through automated coverage with metrics and response times tested before changes can be made live.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We operate an ongoing vulnerability management process to protect the service.; ; Potential threats are assessed through regular review of system configurations, dependency scanning, access controls, and monitoring of application and infrastructure logs. Risk is evaluated based on likelihood, impact, and exposure.; ; Security patches are prioritised by severity. Critical security updates are deployed as soon as practicable, typically within days, with lower-risk updates applied through scheduled maintenance windows.; ; Information about potential threats is obtained from cloud provider advisories, software vendor security bulletins, open-source dependency alerts, and recognised security sources such as national and industry security advisories.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We operate protective monitoring processes to detect, assess, and respond to security risks. Potential compromises are identified through monitoring of application and infrastructure logs, authentication activity, access patterns, system health indicators, and error rates. Software dependencies are regularly reviewed, unused packages removed and active dependencies monitored for security advisories.; ; When issues are identified, they are assessed by severity and impact. Critical or major security issues are typically remediated within one week, with minor issues resolved within two weeks. Security patches are applied and deployed as soon as practicable. Protective monitoring is reviewed regularly to reflect changes in the threat landscape.
• Incident management type: Supplier-defined controls
• Incident management approach: We operate a defined incident management process aligned to ISO 27001 principles.; ; Pre-defined procedures are in place for common incidents such as service outages, security events, and access issues. Incidents may be reported by users through in-platform support, email, or the helpdesk chatbot, which routes issues for assessment and escalation.; ; Incidents are logged, prioritised, and managed according to severity. Administrators are kept informed through in-app and email updates during significant incidents. Following resolution, incident summaries or reports can be provided to the buyer on request, including cause, impact, and remedial actions taken.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 1%
• Between £250,000 and £500,000: 2%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 7%
• Between £2,500,001 and £5,000,000: 10%
• Over £5,000,001: 15%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
    • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery
    • Content of the outreach activity is designed to suit the target cohort
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at richard@workplus.app. Tell them what format you need. It will help if you say what assistive technology you use.