ADMINCONTROL AS

Board Management Portal

Admincontrol is a leading Board Portal provider. Working to the highest level of security and with a tablet based intuitive user interface, our services are utilised by private and public sector organisations to enhance the the flow of sensitive information across Boards and Management worldwide.

Features

• Build agenda, boardbook and minutes in the portal.
• Drag, drop, add, rearrange or delete, late papers easily incorporated.
• Two factor security, esignature and voting.
• Control access and document permissions.
• Available online or offfline. 24/7 support.
• Share annotations and notes within encrypted secure messaging
• Undertake Board Evaluations within the portal
• Accessed via any device (iOS, Android apps).
• Launch Teams and Zoom meetings from portal and apps.
• Full reporting on who is accessing board papers.

Benefits

• Protect board materials with secure, encrypted access controls
• Save time by automating agendas, papers, and meeting packs
• Ensure GDPR compliance and strong governance with audit trails
• Access board documents anytime, anywhere, on any device
• Reduce risk with full version control and activity tracking
• Collaborate securely using annotations, comments, and approvals
• Increase board engagement with intuitive, user-friendly workflows
• Eliminate manual admin through structured archives and automation
• Monitor, Year on Year, the performance of the Board
• Get reliable UK-based support and onboarding expertise

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at edward.rees@admincontrol.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

563597720583615

Contact

Edward Rees
+44 07595 995373
edward.rees@admincontrol.com

About the service

• Service categories:
  • Applications
    • Content workflow and management
      • Content services
        • Enterprise Content Management Applications
        • Content Sharing and Collaboration Applications
      • Document
        • Document
      • Enterprise portals and digital workspaces
        • Multi-Audience Portals
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: No service constraints
• System requirements: No system requirements - SAAS solution

User support

• Email or online ticketing support: Yes
• Support response times: Normally within 20 seconds via telephone and less than 5 minutes via email. No difference at weekends as 24/7/365 support included within license.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• AI chatbot: No
• Web chat support accessibility standard: WCAG 2.2 A
• Web chat accessibility testing: To evaluate accessibility, we emply a combination of methods : automated accessibility testing using Axe DevTools accessibility checker, manual testing for keyboard accessibility, and manual testing using screen readers (VoiceOver for macOS and NVDA for Windows).
• Onsite support: Yes
• Support levels: All support is included in license fee. Local support team in UK can be onsite if required. Training is for all users and is also included within license. We undertake training and onboarding online or onsite dependent on numbers of users. Thereafter support tends to be based over web, telephone or video conference.; ; Any onsite refresher training for existing or new staff is also included.Phone, Chat & Email based support is available on a 24x7x365 basis and is included within license fee.; ; Service and support includes setting up the Portal and/or Data Room, assist customer in getting started and technical assistance and/or user issues that may occur.; ; Our goal is to provide truly excellent support service around the clock and respond on all support requests as soon as possible.; ; Support statistics may be provided upon request.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Working to a clients corporate governance structure,; we provide onsite and online onboarding services depending on the client requirements.; ; Our onboarding takes two formats; ; 1. Board Administration Team: We provide at least 1 training sessions covering all topics of; -setting up users; - setting up interactive agenda and creating boardbooks; - uploading papers; - recording decisions; - setting up meetings and votes; - using version control; ; 2. Board members :- we offer an onsite and online one to one training for users that as tailored to their preferred device ( laptop, iPad, iPhone, Microsoft Surface, Android tablet etc). This is also offered in webinar format.
• Service documentation: Yes
• Documentation formats: PDF
• Documentation accessibility standard: WCAG 2.2 A
• End-of-contract data extraction: Admincontrol activates export function and / or supplies all data on hard disk and then deletes data from our data centres. Admincontrol has over 96% annual retention of clients.
• End-of-contract process: Contract is all inclusive, there are no additional costs :-; Access to the Admincontrol service; - Unlimited storage capacity for scanned and; uploaded documents; - Unlimited distribution of documents between; registered users; - Support to users by phone and e-mail 24/7 days a week; - Always access to the latest version of the service; - At end of contract full export funtionality is avialable

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • MacOS
  • Windows
  • ChromeOS
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Desktop service is accessed through a browser. Mobile devices are accessed via apps. Users can work offline as well as online unsing the apps.
• Service interface: No
• User support accessibility: WCAG 2.2 A
• API: No
• Customisation available: Yes
• Description of customisation: Logos and banners.; ; Portal is designed to reflect each client's governance structure.; ; Administrators to the portal have the right to customise the look and feel of the portal.

Scaling

• Independence of resources: Capacity demand is in place, monitored on a continuous basis.

Analytics

• Service usage metrics: Yes
• Metrics types: A full suite of reports is available to the Administrators ranging from:-; - logins; - user access of materials; - meeting attendance records; - votes
• Reporting types:
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type:
  • Data Erasure
  • Physical Destruction / Hardware containing data is completely destroyed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Either use the export functionality or simply ndocuments and folders individually.
• Data export formats: Other
• Other data export formats: Original Format
• Data import formats:
  • CSV
  • Other
• Other data import formats: Original data can be uploaded

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: We guarantee an uptime of 99.7%.
• Approach to resilience: Available on Request
• Outage reporting: Public dashboard and email alerts are issued.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Only security cleared resources have access to management interfaces.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cyber Essentials
• Information security policies and processes: We are certified with ISO 27001/2022 and our policies are aligned with this certification.

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Admincontrol has policies for configuraition and change management.; ; Documented configuration management processes in place including hardening of devices.; ; Documented change management involving approval gates is in place.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: 1. Weekly vulnerability scans are in place; 2. Weekly follow up for remediation; 3. Intelligence from security vendors.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: 1. Service is monitored 24/7 by Security Operation Centre (SOC); 2. Intrustion detection service is in place; 3. Immediate response.
• Incident management type: Supplier-defined controls
• Post-quantum cryptography secure: No
• Incident management approach: Admincontrol has predefined processes in place and are availabe via SOC2 Audit.; ; Users can email a dedicated mailbox or report vis a form in a dedicated security department channel.; ; Incident reports are validated in our SOC2 Audit.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Access to full service including training is included. Maximum trial period is two weeks.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 2.5%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 12.5%
• Over £5,000,001: 15%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: DNV
• ISO/IEC 27001 accreditation date: Tuesday 5 March 2024
• What the ISO/IEC 27001 doesn’t cover: This covers the whole organisation
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 35d77567-1a1d-4554-b7a3-44d44e109949
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
  • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
  • Plans to engage the contract workforce in deciding the most important workplace issues to address
  • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
  • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
  • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
  • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
  • Activities to cascade good practice on fair working conditions throughout the supply chain
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
  • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
  • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
  • Volunteering opportunities for staff
  • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
  • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
  • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

  Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
  • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
  • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
  • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract
• Mission: Build an NHS fit for the future:

  That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

  Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

  • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at edward.rees@admincontrol.com. Tell them what format you need. It will help if you say what assistive technology you use.