TALOS360 LIMITED

Talos Performance and Talent Management

Talos Perform is a performance management system that enables organisations to manage employee performance, alignment, and progression. The platform supports continuous check-ins, performance reviews, objectives, feedback, recognition, and AI-assisted insights. Enterprise-grade features include calibration and talent mapping, administration groups, HRIS integrations, advanced reporting, and a high degree of configurability.

Features

• Performance reviews with customisable templates, competencies, ratings and calculations
• Continuous feedback, praise and recognition
• Structured 360 degree feedback
• Objective/goal setting, updating and tracking
• Personal development and growth plans
• Regular check-ins on workload, WFH, wellbeing, career conversations etc
• Automated AI notetaking for meetings
• Calibration import/export
• Talent and succession profiles with performance/potential analysis
• Microsoft Teams and Slack apps, APIs, Outlook integration

Benefits

• Enable people to perform to the best of their abilities
• Ensure teams are aligned with the organisation's strategic goals
• Ensure employees have opportunities for progression
• Reduce employee churn through higher engagement, motivation and autonomy
• Reduce HR paper-chasing time dramatically
• Move from Excel/Docs-based appraisals to continuous performance management seamlessly
• Free managers from writing up summaries with AI notetaker
• Provide performance insights to senior leadership
• A dedicated Success Manager to support implementation and beyond
• Ensure you have a pipeline of talent for future leadership

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@talos360.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

780745213790792

Contact

Talos GCloud Bids
01744 812612
gcloud@talos360.co.uk

About your service

• Service categories:

  Applications

  Enterprise resource management

  Human capital management

  • Core Human Resources Applications
  • Talent Management Applications
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: There are no service constraints. As a SaaS platform, Talos Perform is accessible via any internet browser. Service maintainance updates is completed out of office hours to minimise downtime although majority of updates are achieved with no downtime.
• System requirements:
  • An up-to-date desktop or mobile web browser is required
  • Google Chrome
  • Microsoft Edge
  • Mozilla Firefox
  • Safari
  • Other webkit-based browsers
  • Can also be used through Microsoft Teams or Slack
  • SAML2.0 compatible IdP for single-sign on

User support

• Email or online ticketing support: Yes
• Support response times: Talos has a structured Service Level Agreement (SLA) for responding to support questions, categorised by case types: Product Issue: For faults causing incorrect or unexpected system behaviour - Response time: within 8 hours. Client Showstopper: For critical issues affecting a single client – Response: 30 minutes, with efforts to resolve within 4 hours. System Showstopper: For serious problems affecting all clients - Response time: 30 minutes, with efforts to resolve within 4 hours. Providing helpdesk support during the hours of 09:00 - 17:00 Monday to Friday, excluding Bank Holidays.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: Annual testing for accessibility compatibility
• Onsite support: No
• Support levels: We provide the same level of support to all clients, and account and end-user support is included in the licence fees.; ; A dedicated customer success manager is assigned to each customer who will oversee the implementation and ongoing support and training of the customer. They work with the customer to establish a Success Plan with appropriate metrics for the organisation. Their role is to ensure the Success Plan metrics are met through the correct implementation of the features.; ; Unlimited training and support is provided to the customer's main administrator.; ; Customers can also access our online help guides and Youtube channel which provide further detail on individual features and best practice.
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: Onboarding and implementation is overseen entirely by your Customer Success Manager.; ; They will provide you with a project and communications plan that outlines the different steps in the process. There's an overview available here: https://www.appraisd.com/article/onboarding-guide/; ; All training and project meetings are conducted over web calls.; ; Onboarding includes the following areas:; - Project plan and stakeholder alignment; - Account configuration (ensuring it's set up correctly for your organisation); - Technical configuration (eg SSO and API integrations); - Administrator training (conducted by your CSM or using online resources); - Administrator or pilot user testing and sign off; - Launch; - Post-launch reviews; ; The above is supported with helpful documentation and online resources at all times.
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: Your CSM will prepare a ZIP file of all data in a format that can be imported into another tool. We provide a set of CSV files that correspond to data entities in Talos Performance Management with relational keys that can be re-mapped in your subsequent system if desired.
• End-of-contract process: The standard ZIP export is included at no cost.; ; A custom format would cost extra.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The Talos Perform offers a consistent experience across desktop and mobile, with a responsive, browser-based interface, with the exception of administrative screens that are not mobile responsive. Overall Talos Perform is designed with a mobile-first approach and optimised for easy navigation and improved user interaction on smaller screens. Key features remain fully accessible regardless of device, ensuring functionality is not compromised.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: Talos Perform uses a responsive, browser-based interface accessible on all browsers. It is designed with a user-friendly layout supporting both recruiters and candidates. The interface allows users to manage objective setting, annual reviews and check-ins with reporting all from a central dashboard. With customisable workflows, drag-and-drop tools, and mobile optimisation, the interface ensures efficient navigation and a seamless user experience. Accessibility standards WCAG 2.2 AA are met, and support resources like live chat and ticketing are integrated directly within the platform.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: Talos ATS conducts annual accessibility testing to ensure compatibility with assistive technologies.
• API: Yes
• What users can and can't do using the API: The API is a set of RESTful JSON endpoints.; ; Authorization is achieved via a bearer token that can be generated by a suitably-privileged user.; ; The API has the following capabilities (at the time of writing):; - search/add/update/delete users; - search/add/update/delete reviews and checkins; - get responses for a review or a checkin, or for a question across many reviews; - get objectives/personal development goals for a set of users or matching other criteria; - add instant feedback; - add personal notes; - get account configuration data such as review templates and questions, administration groups, objectives templates etc.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Talos Performance Management is a highly configurable system, because all of our clients wish to use it in different ways. Configuration is done via administrative screens and not bespoke development activity.; ; You can:; - enable or disable whole features; - create unlimited custom review and checkin forms; - change the wording of many features (eg check-ins to 1-to-1s or goals to priorities); - add your colour scheme and brand identity; - configure how many features work (eg whether feedback is given anonymously, or managers can navigate the hierarchy); - create your own objectives templates with customisable fields to describe objectives; - create unlimited 'review cycles' which define who has what set of reviews and check-ins and when; - and much more

Scaling

• Independence of resources: Talos uses Microsoft Azure's Platform as a Service (PaaS) with automatic scaling, ensuring computing resources adjust in real time based on demand. Azure Traffic Manager distributes user requests across multiple regions and instances, preventing any single point from becoming overloaded. This guarantees consistent performance and minimal latency, even during peak usage, so users remain unaffected by others’ activity.

Analytics

• Service usage metrics: Yes
• Metrics types: - Number of users and user characteristics (last login date etc); - Activity log/audit trail per user/review/objective; - Number of reviews/objectives/feedback etc conducted/given/received according to criteria eg date range; ; Almost all entities have metrics associated with them.
• Reporting types:
  • API access
  • Real-time dashboards
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: All tabular reports can be downloaded to CSV/Excel files.; ; Employees can also download individual performance reviews and check-ins as a PDF.; ; The API can be used by administrators to download data in JSON format (eg for PowerBI/Tableau)
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Talos360 guarantees system availability of over 99.5% per calendar month and hosts its services on Microsoft Azure with geo-redundant storage, a 4-hour Recovery Time Objective (RTO), and a 5-minute Recovery Point Objective (RPO). While outages are communicated via email and in-platform alerts, no explicit refund or financial remedy is offered if availability falls below this threshold. Support SLAs include 30-minute response times for critical issues and 8 hours for product faults, with service hours from 9:00–17:00, Monday to Friday (excluding UK bank holidays).
• Approach to resilience: Talos360's service is designed with high resilience through its hosting on Microsoft Azure’s Platform as a Service (PaaS) infrastructure. Data is geo-replicated across multiple UK and EEA Azure regions, providing robust protection against localised outages or disasters. This setup ensures continuity even in the event of regional failure. Automatic scaling and traffic distribution via Azure Traffic Manager help maintain optimal performance and prevent bottlenecks. Regular encrypted backups are performed, with a Recovery Time Objective (RTO) of 4 hours and a Recovery Point Objective (RPO) of 5 minutes, ensuring fast and minimal-loss recovery. All data in transit and at rest is encrypted using TLS 1.2+ and complies with ISO 27001, Cyber Essentials Plus, and CSA CCM standards. Physical access to datacentres is strictly controlled, and annual penetration testing is conducted by CREST-accredited providers. Further architectural details can be provided upon request.
• Outage reporting: Public dashboard available: http://stats.pingdom.com/kls26vswpbi7; ; Email alerts to customers are provided in the case of significant unplanned downtime.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
• Other user authentication: SAML 2.0 single sign on
• Access restrictions in management interfaces and support channels: Azure AD is used to to restrict access to data and services according to their individual responsibility and role. When role changes are made, access is reviewed, along with periodic access control reviews every 6 months in line with ISO27001 standards. Access is provided on a least privilege basis.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: No
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Talos360 operates an ISO/IEC 27001:2022 certified Information Security Management System (ISMS) and is Cyber Essentials Plus accredited. We have comprehensive security policies covering data protection, access control, incident response, encryption, and supplier risk management. Policies are reviewed annually and embedded through mandatory staff training and awareness programmes. Our security governance is overseen by a named board-level executive responsible for information security. Regular internal audits, annual penetration testing (by CREST-accredited providers), and a documented risk management process ensure compliance and continuous improvement. Security incidents are reported through defined channels and investigated promptly, with corrective actions logged and reviewed.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Significant changes require a ISO27001-approved RFC process.; ; Product updates are subject to rigorous planning and definition that involves QA, domain expert and tech resources.; ; All software development is subject to review by a separate, suitably qualified member of the team. This review includes security and penetration checks.; ; All features changes and additions must pass QA and UAT prior to release, with automated testing (unit tests, integration tests, browser tests) included as appropriate.; ; All code is stored in source control systems to facilitate rollback or recovery.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Talos360 operates a proactive vulnerability management process as part of its ISO 27001-certified ISMS. We assess threats through regular internal scans, annual CREST-accredited penetration testing, and vendor security advisories. Threat intelligence is sourced from Microsoft, NCSC, and industry feeds. Identified vulnerabilities are risk-assessed and prioritised. Critical patches are deployed within 24–72 hours, with others scheduled based on severity. All patching activities are logged and verified post-deployment. Configuration and security baselines are continuously monitored to ensure systems remain protected and compliant.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Talos360 uses automated monitoring tools and Azure Security Centre to detect anomalies, unauthorised access, and potential compromises in real time. Security alerts are triaged by our technical team, with high-risk incidents escalated immediately. On detection, incidents are investigated, contained, and resolved following our ISO 27001-aligned incident response plan. For critical issues, we respond within 30 minutes and aim to resolve them within 4 hours. All incidents are logged, reviewed, and followed by root cause analysis and corrective actions to prevent recurrence. Regular audits and alerts ensure continuous visibility and rapid response to security threats.
• Incident management type: Supplier-defined controls
• Incident management approach: Talos360 has a defined incident management process aligned with ISO 27001 standards, including pre-defined procedures for common events such as data breaches, service outages, and unauthorised access. Users can report incidents via email, phone, or our online support ticketing system. All incidents are logged, investigated, and resolved by our support and technical teams. For significant incidents, we provide incident reports to affected clients detailing the root cause, impact, response actions, and preventative measures. Post-incident reviews are conducted to improve future response and ensure continuous improvement in our security posture.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Free 14 day trial with a standardised account for up to 3 users.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau
• ISO/IEC 27001 accreditation date: Thursday 11 January 2024
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: PCI
• PCI DSS accreditation date: Wednesday 17 December 2025
• What the PCI DSS doesn’t cover: Face-to-Face Channels; Service Providers
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 2e08ece2-80b8-4d82-905d-7fe8bd59cbc2
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 83d99682-67d0-4272-a185-9164fb4919c6
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Understanding of issues relating to entering the contract workforce

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@talos360.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.