COPERCEPTUO LIMITED

Enterprise Architecture & Reporting Software

CoPerceptuo is an AI-driven SaaS platform that helps public sector IT and digital leaders turn fragmented technology data into clear, evidence-based insight. It uses structured assessments, surveys and analytics to support IT strategies, business cases and transformation plans, improving governance, reducing review effort and increasing value from technology investment.

Features

• Reports: AI-driven, consultant designed templates with continuously updating analytics.​
• Dashboards: Intelligent dashboards with prebuilt charts, summarised using organisational context.​
• Landscapes: EA diagrams via whiteboard tool integrated with your meta-model.
• Data repository: Central IT knowledge hub, contextually aligned for decisions.​
• Digital Maturity Assessment: Based on public sector aligned best practice.​
• Data-gathering tools: Collect information via APIs, questionnaires and intelligent uploads.​
• Satisfaction surveys: Capture IT service sentiment, linked directly to service-catalogue.​
• Technical reviews: Auto-identification of risks and issues from combined data.
• Cloud platform: Secure, scalable SaaS hosted in EU (Ireland) region.
• AI summaries: Instant overviews turning complex analytics into clear recommendations.

Benefits

• Reduce cost and effort of analysis through collaborative data gathering.
• Build solution architectures faster using a trusted enterprise IT repository.​
• Accelerate time to actionable insight and confident decision-making.
• Cut effort building business cases using clear, board-ready insights.
• Improve IT service quality by understanding capability, demand and capacity.
• Strengthen stakeholder relationships by ensuring their views are consistently captured.
• Reduce supplier costs through visibility of contracts, utilisation and value.
• Keep data current with minimal effort via secure integrations.
• Enable quicker, lower-risk and more cost-effective change using evidence.
• Reduce reliance on traditional consultancy by internalising repeatable insight generation.

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at contact@coperceptuo.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

790546809079137

Contact

Andy Shuttleworth
0161 513 4207
contact@coperceptuo.com

About the service

• Service categories:
  • Application Development and Deployment
    • Application development
      • Modelling and architecture
        • Enterprise Architecture Tools
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: CoPerceptuo is a cloud-based platform, operating 24 x 7. With no scheduled maintenance windows, occasional downtimes might occur for system updates or hardware/software enhancements. Up to 12 planned downtimes per year are possible. Where this is the case, customers will be notified up to 5 days beforehand, and executed outside regular business hours (0900-1700). Support is available from 8 am to 5 pm, Monday to Friday, excluding public holidays.
• System requirements:
  • Latest versions of Chrome, Firefox, Safari and Edge
  • Live internet connection

User support

• Email or online ticketing support: Yes
• Support response times: CoPerceptuo is a cloud-based platform, operating 24x7 for users. Support queries are handled 8am–5pm, Monday to Friday, excluding public holidays. There is no enhanced weekend service; queries raised then are picked up on the next business day.; ​; ; The platform has no fixed maintenance windows, but may require occasional planned downtime for updates or enhancements, up to 12 times per year. Customers are notified at least five days in advance, and any planned work is scheduled outside regular business hours (09:00–17:00) to minimise disruption.; ​
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: CoPerceptuo provides early life support to help customers adopt the platform effectively, covering usability, training questions and general support enquiries. A dedicated customer success manager is available for up to four weeks after purchase, with tailored training and regular check-ins to embed the tool into existing governance processes. Beyond this, CoPerceptuo offers enhanced onboarding and managed service options. Assisted support includes a dedicated onboarding manager who helps interpret, structure and upload information, and guides teams through building initial reports and dashboards so value is realised quickly. Managed support provides an enterprise consultant who works alongside your organisation to maintain data quality, create custom insights and visualisations, and support ongoing governance forums such as Technology Design Authority or Steering Groups. These services combine platform expertise with consultancy-style guidance, helping organisations embed evidence-based decision-making and sustain effective IT governance over time. Please see the service definition and pricing documents for more information regarding costs.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: CoPerceptuo supports users with a structured onboarding approach combining early-life support, guided configuration and documentation. CoPerceptuo provides early life support for effective use of the platform, covering usability, training queries and general support enquiries, via a customer success manager available for questions for up to four weeks after purchasing the software. During this period, the customer success manager can run remote walkthroughs, signpost user guidance, and help teams embed CoPerceptuo into existing governance and reporting rhythms.; ; Beyond this, customers can choose additional onboarding and enablement services. The Assisted option provides a dedicated onboarding manager who offers hands-on help interpreting, shaping and uploading information into CoPerceptuo, and supports the initial configuration of reports, dashboards and surveys so organisations generate insight quickly. The Managed option provides a dedicated enterprise consultant who works alongside the organisation to create custom insights and charts, and to interpret findings in the context of governance forums and decision-making. These options are typically delivered remotely but can be complemented by workshops as agreed. Please see the service definition and pricing documentation for further detail on what is included.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Onboarding and offboarding documentation is provided primarily as accessible PDFs and web content through the CoPerceptuo website and customer support channels. Documents are created in line with recognised accessibility guidance, including good heading structure, meaningful sequence and compatible tagging so they can be navigated effectively with common screen readers. We use clear, plain language, sufficient contrast and readable fonts to support users with a range of access needs. Images, diagrams and tables include descriptive text so that key information is available in non-visual form.; ; Where customers require alternatives, we can provide documentation in different formats on request, for example simplified guides, large-print variants or formats optimised for specific assistive technologies. Links to onboarding and offboarding documents are grouped logically within our customer materials so that users can find step-by-step setup, configuration and exit information without needing to navigate complex menus. This approach is intended to ensure that all users, including those relying on assistive technologies, can access, understand and act on the guidance needed to start using, administer and, if required, safely disengage from the service.
• End-of-contract data extraction: Customers retain full access to their data until the contract expiry date, during which time they can continue to run reports and export information in line with their configuration. At the point you notify us of your intention to end the contract, a customer success manager will work with you to identify what data needs to be retained and in what structure. Together, we will plan and execute an export of the required datasets into CSV (and related supporting files where appropriate) and provide these via a secure transfer mechanism agreed with you. After contract expiry, data remaining in the live environment will be deleted within 90 days, and all associated backups will be deleted within 180 days of leaving the platform. These activities are performed in line with our data protection and retention policies. Any specific conditions, including responsibilities for storing or reusing exported data, are governed by our standard terms and conditions and any call-off contract, which should be reviewed for full details.
• End-of-contract process: Upon written notification to end the use of the platform, customers will have until their contract expiry date to work with a CoPerceptuo Customer Success manager to extract their data and stop using the platform. After which time the users will be deleted from the platform and their environment will be deleted after 90 days. Support with off-boarding is provided at no extra cost.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: CoPerceptuo exposes functionality through a secure, enterprise-grade integration platform that acts as the primary API layer. Users typically set up connectivity via an intuitive interface in CoPerceptuo, selecting pre-built connectors for common systems or defining new connections using open standards-based APIs. Through this interface, administrators can configure data sources, control which catalogues are populated, and schedule or trigger synchronisations without writing integration code. Once connected, users can change mappings, enable or disable feeds, and adjust which datasets are ingested, with updates reflected automatically in reports and dashboards.; ; Direct low-level manipulation of the CoPerceptuo data model, security configuration or application behaviour through custom APIs is not supported; changes must respect the structures exposed via the integration platform and the platform’s data catalogue model. CoPerceptuo currently focuses on inbound synchronisation and structured updates from external systems rather than providing a full CRUD API for every internal object. Where pre-built connectors are not available, third parties can still build integrations using the same open standards used by the integration platform.
• API documentation: No
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: CoPerceptuo supports both self-service and guided customisation, controlled through role-based permissions. With appropriate access, customers can customise stakeholder-facing elements such as surveys, questionnaires and assessment questions, typically by editing templates in the platform or uploading tailored question sets aligned to their governance or project needs. Authorised users can also adjust which insights, reports and dashboards are visible to different audiences, and in some cases tailor narrative content using built-in editing tools and AI prompts. These self-serve changes are usually performed by product owners, business analysts or power users who administer CoPerceptuo within the organisation.; ; For deeper platform configuration, CoPerceptuo offers “managed” and consultancy-led customisation, where CoPerceptuo consultants create new insights, goals, reviews and dashboards, and may extend analysis to reflect organisation-specific metrics or structures. This work is typically commissioned by IT leadership or governance leads and scoped as either part of the managed service or as a separate project, as described in the service definition and pricing documents. Core data model changes are limited and currently handled case by case, ensuring customisation remains consistent with the platform’s underlying structures and roadmap.

Scaling

• Independence of resources: CoPerceptuo utilises cloud auto-scaling, dynamically adjusting capacity to ensure consistent, predictable performance for all customers.

Analytics

• Service usage metrics: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: Physical security of data centres is assured by our Cloud Provider AWS. AWS is CSA CCM v3.0 and SOC2 (SSAE-16) certified. We do not maintain data centres at all. All data is encrypted at rest in the database uses the industry standard AES-256 encryption algorithm with, keys managed securely using cloud key management services that conform to FIPS140-2.
• Data sanitisation process: Yes
• Data sanitisation type: Data Erasure
• Equipment disposal approach: In-house destruction process

Data importing and exporting

• Data export approach: Data can be downloaded upon request to a CoPerceptuo support team, and will be provided in CSV format via a secure channel of communication.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: CoPerceptuo aims to provide a highly available cloud service but does not offer a formal uptime guarantee. Instead, we describe availability through our incident handling approach. Severity 1 issues (where all or significant parts of the service are unavailable) are typically prioritised for resolution within one business day. Severity 2 issues (where core functions are available but significantly degraded) are generally targeted for resolution within three business days. Severity 3 issues (non‑critical functions with little or no business impact) are managed on a continuous, best‑efforts basis. Where we do not meet these targets for Severity 1 or 2 incidents, we may offer a discretionary free extension period, agreed with the customer on a case‑by‑case basis rather than as an automatic entitlement.
• Approach to resilience: The service is designed to use the built‑in resilience, redundancy and recovery capabilities of its underlying public cloud platform, including geographically separate facilities, managed storage replication and resilient networking. The environment is monitored and maintained following our hosting provider’s recommended best practices for availability, backup and recovery. Specific details of the architecture, fault‑tolerance mechanisms, data replication approach and recovery procedures are not published for security reasons but can be provided to customers and prospective buyers on request under appropriate confidentiality arrangements, along with any additional information required to assess compliance with the UK government’s cloud security principles, including asset protection and resilience.
• Outage reporting: Internal alerting and dashboards are setup and maintained as part of our internal operations monitoring service. Upon initial investigation as to the incident taking place, we will then alert affected end users via direct communications and via our service management platform that customers have access to.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: For application users, access to the systems is controlled in the following ways: 1. User must have access to the environment, which is controlled through manual user setup by system administrators. 2. User access is role-based and controls system functionality. 3. Users must have been added to the platform manually by either a CoPerceptuo administrator or an internal administrator of the organisation in scope. For all management interfaces to hosting and backend administration, passwords are controlled using MFA. MFA is available to all users, set by administrators.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: No
• Security governance certified: No
• Security governance approach: Cloud hosting design aligned to and continually monitored against UK Official recommended blueprint. As a minimum, this means policies aligned to this standard are set up, applied and monitored across the solution (using native public cloud toolsets) and assured by CCSP qualified security experts.
• Information security policies and processes: Information security policies and processes aligned to Cyber Essentials+ and ISO 27001.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: There is a systematic approach to configuration and change management across application development. Enhancement requests are evaluated and added to a prioritised backlog that is managed on daily and weekly basis across product and technical teams. The backlog is managed within a software project management tool and tickets are reported on as they are progressed or closed.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: All services are monitored using Public cloud-native security management toolsets with regular CVE vulnerability assessments and reporting implemented. Upon identification, vulnerabilities are assessed for severity, investigated and typically resolved within that development sprint.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: All services are monitored through Public cloud-native toolsets and alerted upon as part of a central monitoring dashboard with email alerts. Checks are also carried out daily for suspicious activity. These events are responded to, investigated and resolved the same day with escalations where necessary to senior management in the organisation through procedure defined as part of our regularly updated incident response plan.
• Incident management type: Supplier-defined controls
• Post-quantum cryptography secure: No
• Incident management approach: We use industry standard IT service management tooling for logging, tracking and updating customers with respect to incidents where notified by end users. Our end to end process covers periodic communication and update reporting with the end-user are provided until the incident is fully resolved.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: A limited free trial consisting of a subset of surveys, questions and insights, limited to up to 5 users and for a maximum of 2 weeks.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 15%
• Between £250,000 and £500,000: 15%
• Between £500,001 and £1,000,000: 15%
• Between £1,000,001 and £2,500,000: 15%
• Between £2,500,001 and £5,000,000: 15%
• Over £5,000,001: 15%

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 159460b9-6587-4068-9090-b3a839e22e28
• Cyber essentials plus: Yes
• Cyber Essentials Plus Certificate Number: 5e503d2f-39fa-4488-a192-8498c2237efb
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
  • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at contact@coperceptuo.com. Tell them what format you need. It will help if you say what assistive technology you use.