XANTURA LIMITED

OneView

OneView helps the public, charitable sector to improve outcomes by; enabling the integration and sharing of multi-agency data and the application of advanced analytics (AI / ML / GenAI).

The product supports a full lifecycle; from data ingest to insight integration of insight into existing case management systems.

Features

• Information Governed, citizens / household single view using multi-agency data
• Natural language generation capability: Family chronologies and automated case summaries
• Integration of case summaries into existing case management systems
• Artificial intelligence / predictive analytics / advanced analytics
• Intervention analytics to understand impact of services
• Advanced analytics using cross agency pseudonymised datasets
• Accelerated Information Governance agreements, enduring approach
• MDM, covering ETL, data quality, data matching, data pseudonymisation
• Proactive case management, to view, refer and request information
• Solution designed to support multi-agency data sharing

Benefits

• Children’s; Prevention of statutory safeguarding interventions
• Adult’s; Prevention: e.g. reablement efficacy, falls, carer breakdown prevention
• Housing; Reduce homelessness applications through holistic early intervention
• Debt; Improved collection rates and mitigate impact on vulnerable groups
• Fraud, error detection: (RBV) Risk stratification to support investigations
• Serious violence: Prevention recidivism and repeat victimisation
• Advanced analytics identify risks earlier and effectivelly target interventions
• Fostering multi-agency working to provide best interventions and their impact
• Natural Language Generation operational efficiencies reduce front-line administration
• Serious mental health : Improve coordination to prevent deterioration.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at procurement@xantura.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

705561951048650

Contact

Tom Davies
07738 448045
procurement@xantura.com

About your service

• Service categories:

  Application Development and Deployment

  Analytics and business intelligence

  • Business Intelligence
  • Advanced and predictive analytics
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Hybrid cloud
• Service constraints: There are no constraints
• System requirements:
  • Windows operating system
  • Java
  • Connection to Xantura Secure Cloud via VPN or PSN

User support

• Email or online ticketing support: Yes
• Support response times: Initial response time; Target response time to respond to any queries or requests for support or Service Requests. 60 Minutes; High Priority; An issue that generates a catastrophic production problem in which your production systems are down or not functioning; loss of production data and no procedural workaround exists. 60 Minutes; Normal Priority; An issue where thers is a problem where your system is functioning but in a reduced capacity. 300 Minutes; Low Priority; A Low Priority issue is for a general questions, request for a modification. There is no impact on the quality of the product. None
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: The support is generally available during the standard working day and is chargeable. Special arrangements can be accommodated and are also chargeable.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We typically do initial training as part of our implementation program with a client. Training is delivered through a combination of classroom based learning, and video tutorials
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Users can extract data on a periodic basis from platform. This approach can support both local BI analytics as well as supporting contract-end.
• End-of-contract process: The following services are included in the contract: Data is deleted from the platform and user access is revoked. Final data extracts are produced and supplied to clients as CSV files
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: Yes
• Compatible operating systems: Windows
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: Master Data Management services are accessible through a secure web portal, OneView Management Centre; Access to development tools is through a secure VDE - OneView Development Centre; End user services / business outputs are also accessible through a secure web portal, OneView
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: We use WAVE to test user interfaces.; Narrator functionality in Microsoft Edge.
• API: Yes
• What users can and can't do using the API: Please contact us for more information.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Users can define data flows into the system. Users can create data visualisations Users can manage data quality, data correction Users can create their own predictive risk models

Scaling

• Independence of resources: The underlying technology platform is fully virtualised and with full redundancy designed / built in. All components of the software and underlying serevers can be scaled independently - with one to one mapping between resources and clients where needed. Forward planning of client demand supports the integration of new hardware into the platform.

Analytics

• Service usage metrics: Yes
• Metrics types: Data processing overview including reports on files processed, rejected, data quality metrics. We also provide risk model performance and data and model bias metrics. We can provide service usage metrics, broken down by data sharing protocols.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: CSV files or access through secure web services
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: 98.5% Target Service Availability
• Approach to resilience: The underlying technology platform is fully virtualised and with full redundancy designed / built in. All components of the software and underlying serevers can be scaled independently - with one to one mapping between resources and clients where needed. Forward planning of client demand supports the integration of new hardware into the platform.; ; Hybrid cloud configuration also facilitates the migration of services between secure public and private cloud infrastructure as needed.
• Outage reporting: Outages could be reported via email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: 2 level authentication based on Role Based Access Control/Data Sharing Protocols and customisable to buyer requirement
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: ISO27001 and ISO9001 PSN accredited (by arrangement)
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Configuration and change management processes available on request
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Servers are patched fully automatically, where appropriate, and patches are applied within one month of release.; SIEM software performs monthly internal vulnerability scans across all systems.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: SIEM system (AlienVault) performs constant monitoring and alerting; Response to compromise would depend on the nature of the issue, but would typically involve immediate network isolation of affected systems, followed by investigation and remediation or recovery – where appropriate.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Yes, there are pre-defined processes for common events.; ; Users report incidents through the Ticketing system with appropriate alert or reach out to the client manager depending on severity.; Incident reports can be made available according to client requirement;; ; Incident Management Response Times:; High Priority : 60 Minutes;; Normal Priority : 300 Minutes
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Citation ISO Certification Limited
• ISO/IEC 27001 accreditation date: Saturday 30 November 2024
• What the ISO/IEC 27001 doesn’t cover: N/a
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: Citation ISO Certification Limited
• ISO 9001 accreditation date: Tuesday 23 September 2025
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: B200e4bf-db3d-4277-96a9-9a64f46d66e0
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: F1912ef8-40d5-4829-bd88-15713b65facd
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Volunteering opportunities for staff

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at procurement@xantura.com. Tell them what format you need. It will help if you say what assistive technology you use.