QUADIENT UK LIMITED

Postal Tariff Optimiser

Postal Tariff Optimiser
Enables access to Royal Mail and Downstream access providers cheaper postal tariffs

Features
Format Address Line with Royal Mail Standard
Access cheaper Royal Mail tariffs
Mailmark
Benefits
Correct Address when sending communications
Cost savings using 'best' tariffs when sending communications

Features

• Enables PAF address validation
• Enables postal discounts and mailmark barcoding

Benefits

• Aligns your database to the PAF address database
• Saves Money on physical mail

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bids.uk@quadient.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

404140299517435

Contact

Adam Smith
07725 826750
bids.uk@quadient.com

About your service

• Service categories:

  Application Development and Deployment

  Data management

  Database management systems

  • Relational Database Management Systems
  • Document-Oriented Database Systems

  Database administration and development

  • Database Administration
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Quadient Impress
• Cloud deployment model: Private cloud
• Service constraints: No
• System requirements:
  • Internet connection
  • Windows based

User support

• Email or online ticketing support: Yes
• Support response times: Within 4 hours
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Within 24 hours, with the aim to resolve within 48 hours
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: On site / remote training schedules are proposed to the customer.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: This is not possible. The service will end with the contract
• End-of-contract process: 3 months before expiry we will approach to review the contract. The customer can continue as is, add features or decline to renew
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Sent by email, general information available on internet

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: Unlimited users based on licensing model, the system would be specced and priced according to requirements
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: The workflow is typically determined by the customer

Scaling

• Independence of resources: We actively monitor system resources and automatically monitor resource utilisation. This can scale responsively

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: In-house
• Protecting data at rest: Physical access control, complying with CSA CCM v4.0
• Data sanitisation process: No
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: CSV, Excel, database interface, PDF, DocX, PCL5,
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: 99.5%
• Approach to resilience: Available on request
• Outage reporting: Email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Password controlled
• Access restriction testing frequency: At least once a year
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: Less than 1 month

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: DNV GL Business Assurance Limited 27001
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Internal monitoring of usage levels
• Vulnerability management type: Undisclosed
• Vulnerability management approach: The service generates adequate audit events to support the effective identification of suspicious activity. We operate a 'deny all' policy on access. Events are analysed to identify potential compromises or inappropriate use of service, these are prioritised and scheduled. Prompt and appropriate action to address incidents is scheduled, depending on priority
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: We have an Incident Management Policy, which is covered under our ISO27001 standard. Users can report issues via the customer ticketing system and incident reports provided during and upon conclusion of the incident
• Incident management type: Undisclosed
• Incident management approach: We have an Incident Management Policy, which is covered under our ISO27001 standard. Users can report issues via the customer ticketing system and incident reports provided during and upon conclusion of the incident
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks:
  • Public Services Network (PSN)
  • Police National Network (PNN)
  • Scottish Wide Area Network (SWAN)
  • Health and Social Care Network (HSCN)

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Fully featured

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: DNV
• ISO/IEC 27001 accreditation date: Saturday 1 November 2025
• What the ISO/IEC 27001 doesn’t cover: This certificate is valid for the following site scope:; The security and privacy of all information and data assets Quadient use for the delivery of all core activities surrounding the provision of a range of communication solutions in accordance with the Quadient UKI & CEI Statement of Applicability version 1.0
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: DNV
• ISO 9001 accreditation date: Tuesday 3 June 2025
• What the ISO 9001 doesn’t cover: This certificate is valid for the following scope:; The marketing, sales, provision, installation and maintenance of mailing and document handling equipment and parcel lockers. The marketing, sales and support of customer communication solutions
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: None of the criteria
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: C795b54f-685b-4494-91c1-4ccb64625516
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
    • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bids.uk@quadient.com. Tell them what format you need. It will help if you say what assistive technology you use.