MASTERCARD EUROPE

Mastercard Geo Insights 2.0

Geo Insights 2.0 is an online data insight platform providing nationwide retail spend data across the entirety of the UK. This provides spend insights into physical and online spending across payment types with 7 years of historical data, including domestic and tourism spend across a wide-range retail industry sectors.

Features

• National , Regional and County level spend insights
• Near Real Time reporting of retail performance data
• Accurate monitoring of total spend values across multiple spend categories.
• Seven years of historic retail spend data
• Intra-day Retail Spend Insights
• Ecommerce Spend Insights for UK cardholders and UK merchants
• Mastercard’s proprietary advanced data-modelling techniques to build a predictive model
• National and International Tourism Spend Data
• Consumer Demographics based on cardholder residency location
• Business Opening/Closing Data

Benefits

• High-levels of merchant granularity to support decision making
• Rapid monitoring and evaluation of retail spend
• Supporting local businesses through data
• Historic analysis of retail spending trends
• Spend monitoring including day and night-time spending
• Understand the impact of online spending behaviour
• Predict the busiest retail spending days
• Measure the impact of domestic tourism and international tourism
• Accurate predictions on the origins of high-street visitors
• Monitor the health of businesses operating on the high street

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at simon.wrightlakin@mastercard.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

514478263884694

Contact

Simon Wright-Lakin
+447789877549
simon.wrightlakin@mastercard.com

About your service

• Service categories:

  Application Development and Deployment

  Analytics and business intelligence

  • Business Intelligence
  • Advanced and predictive analytics
  • Location and geospatial data management and analytics
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: No - The Geo Insights 2.0 platform is readily accessible by web browser
• System requirements: Access to an online web browser (desktop or mobile)

User support

• Email or online ticketing support: Yes
• Support response times: Subscribers are provided with a named customer success manager who will reply within 1- 2 business days. The customer success manager (or other named contact during periods of annual leave) will be available 9 -5pm, Monday to Friday during business operating hours.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes
• Support levels: Each subscriber will be assigned a dedicated customer success manager to support their use of their platform. They will co-ordinate the relevant onboarding, user set-up and demo/training sessions for the platform. Regular Demo/Training sessions may be performed in-person on site as required by the customer.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Subscribers will be assigned a dedicated customer success manager (CSM) who will assist with the entire onboarding process and throughout the term of the license. The CSM will schedule an initial onboarding planning session where the subscriber will outline the onboarding process and share all relevant platform guides, data dictionaries and FAQ documents. The CSM will also arrange a dedicated training or trainings for all users of the platform with the relevant product experts. These may be conducted virtually or physically at client site. The CSM will be available throughout the licence (including onboarding) to provide technical assistance where necessary to support clients ongoing use of the platform.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Not applicable - Users do not store their own data on the Geo Insights 2.0 platform. Mastercard retains sole ownership of the data presented within the Geo Insights 2.0 platform.
• End-of-contract process: At the end of the contract term if the subscriber chooses not to renew their license then the assigned commercial contact will, with 30 days notice, inform the named business contact at the subscriber that access will be revoked at the contract end date. On the contract end date the access for the logins provided to the subscriber will be revoked and the subscriber will no longer be able to access the platform and the associated Mastercard data viewable within the solution.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: We aim to make our documents accessible and easy to use for all readers. Onboarding and offboarding documentation is provided in PDF format and uses clear language, consistent headings, and readable formatting to support accessibility.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The platform is re-formatted to improve visibility and readability on mobile. Otherwise, all functionality remains consistent with the full web browser-based version of the platform.
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: Yes
• Description of customisation: The Geo Insights 2.0 platform may be customised by the subscriber based on the geographical boundaries selected during the initial order process. The admin users at the subscriber may choose to assign user-access to specific logins that can either access the entire platform for all geographies, or access for specific logins may be limited to select geographies so that the full set of geographies is not visible. This customisation is to be coordinated by the assigned customer success manager who will work with the product team to implement the customisation.

Scaling

• Independence of resources: Mastercard carefully monitors the number of subscribers and numbers of users as well as overall performance of the Geo Insights 2.0 platform. Should the number of users or overall use of the platform approach the level whereby the experience of users would be affected then additional processing capacity would be provided to the platform to retain a high-level of performance.

Analytics

• Service usage metrics: Yes
• Metrics types: Number of logins. Number of logins per user. Time spent on the platform per user. Number of downloads per user. Scope of data downloaded per user.
• Reporting types: Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: In-house
• Protecting data at rest: Other
• Other data at rest protection approach: Data centres are fully air-gapped and accessible only to authorised personnel. For users working remote from office locations, VPN access is mandatory. Further detail is available upon request however is limited due to the sensitive nature of the assets and infrastructure we must safeguard.
• Data sanitisation process: Yes
• Equipment disposal approach: In-house destruction process
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Subscribers are able to readily download the Mastercard data viewable in the platform through an export functionality hosted on the main page of the dashboard. This export functionality will rapidly generate a CSV / .xls file for the user which will be automatically downloaded via the web browser.
• Data export formats:
  • CSV
  • Other
• Other data export formats: .xls
• Data import formats: Other
• Other data import formats: None - Users can not upload their own data

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • Other
• Other protection between networks: Data centres are fully air-gapped and accessible only to authorised personnel. For users working remote from office locations, VPN access is mandatory. Further detail is available upon request.
• Data protection within supplier network: Other
• Other protection within supplier network: Data centres are fully air-gapped and accessible only to authorised personnel. For users working remote from office locations, VPN access is mandatory. Further detail is available upon request.

Availability and resilience

• Guaranteed availability: This service does not have a guaranteed availability level but earlier version of the platform (Geo Insights 2.0 has launched in 2026) has suffered no unplanned outages in the past two years of operation. Refunds will only be considered in exceptional circumstances, to be agreed by the commercial contact with the customer on a pro rated basis.
• Approach to resilience: Available on request.
• Outage reporting: Information will be provided to customers prior to any planned service outage and on a reasonable endeavours basis if unplanned. Planned maintenance on average denies service for three hours every six months.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Support is provided by a dedicated customer success manager who has access to the named list of users/email addresses provided during the onboarding process. Support will be restricted to those with authorised login details.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Username or password
  • Other
• Description of management access authentication: Support is provided by a dedicated customer success manager who has access the named list of management users/email addresses provided during the onboarding process. Management access/support will be restricted to those with authorised login details.

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: – Center for Internet Security (CIS) Critical Security Controls for Effective Cyber Defense (CIS Controls); – American National Standards Institute/International Society of Automation (ANSI/ISA)-62443-2-1 (99.02.01)-2009; – International Organisation for Standardisation (ISO)/International; Electrotechnical Commission (IEC) 27001; – NIST Special Publication (SP) 800-53 Rev. 4 - NIST SP 800-53
• Information security policies and processes: – Center for Internet Security (CIS) Critical Security Controls for EffectiveCyber Defense (CIS Controls); – American National Standards Institute/International Society of Automation(ANSI/ISA)-62443-2-1 (99.02.01)-2009; – International Organisation for Standardisation (ISO)/International; Electrotechnical Commission (IEC) 27001; – NIST Special Publication (SP) 800-53 Rev. 4 - NIST SP 800-53
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Change Control and Configuration Management will include a registered take back plan, a testing process, management approval, and updated documentation, in line with PCI DSS guidelines for the payment industry. More detail is available on request.
• Vulnerability management type: Undisclosed
• Vulnerability management approach: Some limited further detail is available upon request but because of the sensitive nature of the business Mastercard conducts in the payment sphere we are not at liberty to provide detail publicly.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Some limited further detail is available upon request but because of the sensitive nature of the business Mastercard conducts in the payment sphere we are not at liberty to provide detail publicly.
• Incident management type: Undisclosed
• Incident management approach: Some limited further detail is available upon request but because of the sensitive nature of the business Mastercard conducts in the payment sphere we are not at liberty to provide detail publicly.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: Aeb6b76d-4733-46a6-a52e-fbf754914a21
• Cyber essentials plus: No
• Cyber Essentials Alternative: You do not have a current and valid Cyber Essentials Plus certificate, or will not have in place within 12 months of the date of award but have an IASME certified equivalent.
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at simon.wrightlakin@mastercard.com. Tell them what format you need. It will help if you say what assistive technology you use.