PROGRESSIVE TECHNOLOGY SOLUTIONS LIMITED

Infor SunSystems Cloud: Industry-leading financial management and accounting platform

Infor SunSystems Cloud is a scalable financial and accounting application also known as FMS (Financial Management System), designed to centralise, streamline and automate accounting processes.

Features

• Consolidated chart of accounts
• Consolidated financial reporting with notes
• Automate and pre-schedule reporting with a range of distribution channels
• Cost allocation, expense management, revenue and cost recovery tracking
• Multi-lingual and multi-currency at a transactional and reporting level
• Supports diverse global legislative and taxation requirements
• Extensive customisable management reporting
• Accounts Payable and Accounts Receivable processing
• Advanced payments and mixed currency payment generation and handling
• Advanced payments and mixed currency payment generation and handling

Benefits

• Centralised real time financial intelligence enables informed decision making
• Streamlined processing reduces manual entry and improves accuracy and efficiency
• Demonstrates strong financial control, governance, and audit readiness
• Supports international transactions and compliance with global tax standards
• Accelerates financial close with reduced team effort
• Familiar, spreadsheet style reporting and visuals improve user adoption
• Accurate on-time payments foster strong supplier relationships
• SaaS deployment lowers IT hardware, maintenance and resource costs.
• Scalable cloud platform adapts easily to changing workloads
• Cloud security protocols and updates protect systems from threats

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at helen.fisher@progressive-tsl.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

890781678316608

Contact

Helen Fisher
+447551625499
helen.fisher@progressive-tsl.com

About your service

• Service categories:

  Applications

  Enterprise resource management

  Financial

  • Financial and Accounting Applications
  • Accounts Payable Applications
  • Accounts Receivable Applications
  • Travel and Expense Management Applications
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: Planned maintenance is performed during scheduled windows and communicated in advance; emergency/security patches may occur outside these windows. Zero‑downtime upgrades are standard where feasible, but brief service interruptions may be required. Upgrades and patches are mandatory to keep all tenants on a secure, supported version. Service availability target is 99.7% monthly, excluding scheduled maintenance.
• System requirements:
  • Supported Browsers: Google Chrome, Microsoft Edge, Safari
  • Need reliable internet connection for consistent access and application performance.
  • Email system must allow notification delivery from cloud service environment.
  • User devices require up‑to‑date operating systems supporting secure browser functionality.
  • Single sign‑on integration requires compatible identity provider supporting SAML authentication.
  • JavaScript and cookies must be enabled for full system functionality.

User support

• Email or online ticketing support: Yes
• Support response times: Progressive’s ProCare Help Desk operates 08:30 to 17:30, Monday to Friday. Out‑of‑hours support is available 24/7 for Priority 1 incidents.; Support Service Levels (SLAs):; Priority 1 - Production Down: Complete system outage, no workaround, affecting all users - Response within 1 business hour. ; Priority 2 - High: Major functionality impaired, no workaround, significant user impact - Response within 2 business hours. ; Priority 3 - Medium: Moderate impact, workaround available, limited user impact - Response within 4 business hours. ; Priority 4 - Low: Minor issue, no impact on operations - Response within 1 business day; Pricing details in the Pricing Document
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: ProCare is a flexible support service tailored to your organisation’s needs, providing accelerated access to a proactive team with deep knowledge of your systems and operational environment. It offers the choice of a fixed monthly fee or a controlled pay‑as‑you‑go model, ensuring predictable and manageable costs. Progressive’s consultants deliver comprehensive assistance across all tasks relating to your deployed solutions, ensuring continuity, reliability and ongoing optimisation. ; Progressive’s Help Desk operates during standard business hours, 08:00 to 17:30, Monday to Friday.; Out‑of‑hours support is available 24/7 for Priority 1 incidents only and is charged at an additional cost.; Support Service Levels (SLAs):; Priority 1 – Production system down: Response within 1 business hour.; Priority 2 – Business‑critical failure: Response within 2 business hours.; Priority 3 – System or programme fault: Response within 4 business hours.; Priority 4 – General request or enquiry: Response within 1 working day.; For costs please see the Pricing Document
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: New customers are welcomed with key information regarding their cloud subscription. The software is provisioned and made available to the customer from the point of contract signature as a Software-as-a-Service. Full use of the service is enabled through an implementation project. Progressive TSL can deliver the implementation project through our listing for Progressive Cloud Support Services (Implementation), also on G-Cloud Lot 3. ; For new customers, we start with a project initiation meeting with key stakeholders to establish the solution landscape, set the baseline project plan and desired business outcomes. The relationship is overseen by a dedicated Account Manager who provides a point of continuity and support across the project and beyond. ; If offboarding the service, Infor provide a full data set upon contract termination.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: If offboarding the service, SunSystems provide a full data set upon contract termination. The customer is responsible for extracting any interim data prior to contract termination. Additional cost options are available from Progressive TSL for enhanced support in extracting the data.
• End-of-contract process: If offboarding the service, SunSystems provide a full data set upon contract termination. The customer is responsible for extracting any interim data prior to contract termination. Additional cost options are available from Progressive TSL for enhanced support in extracting the data.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Our documentation is designed to be simple, clear, and user-friendly, following accessibility best practices to ensure that everyone—regardless of ability or experience—can easily understand and use our content.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • MacOS
  • Windows
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: EN 301 549
• Description of service interface: SunSystems Cloud provides a modern, browser‑based user interface accessible via standard web browsers and mobile connectivity. Users can navigate through intuitive menus, search tools, visual insights and configurable layouts.
• Accessibility standards: EN 301 549
• Accessibility testing: SunSystems Cloud provides a modern, browser‑based user interface accessible via standard web browsers and mobile connectivity. Users can navigate through intuitive menus, search tools, visual insights and configurable layouts.
• API: Yes
• What users can and can't do using the API: SunSystems API provides programmatic access to the Infor SunSystems financial management platform. It enables secure integration with external systems for tasks such as posting journals, managing ledgers, retrieving financial data, and automating business processes. The API supports REST-based services and standard data formats, allowing organisations to connect SunSystems with ERP, reporting, payroll, or third‑party applications while maintaining data integrity, control, and auditability. SunSystems Connect (SSC) is an open integration toolset designed to enable seamless interaction between SunSystems and other applications. It provides a robust framework for integrating external systems, ensuring efficient data exchange and process automation.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Infor SunSystems Cloud is easily and flexibly configured to suit your operations. To configure SunSystems, you can use the Configuration Manager, which allows you to change system settings across multiple machines within the SunSystems environment. Key features include: ; Application Form: Change application properties like financial calendars and Ledger Import.; Integration Form: Set integration properties for various systems.; System Logging Form: Configure logging settings for better management.; Navigator (Web) Form: Adjust web navigator properties for the Infor OS Portal.

Scaling

• Independence of resources: In the event of excessive demand, Infor may queue or prioritize requests to maintain system performance for all Customers without limiting Availability, provided the foregoing does not relieve Infor from its obligations of supplying adequate computing infrastructure for the Cloud Services. Infor will restrict a limitation in time and scope to the extent reasonably possible under the circumstances.

Analytics

• Service usage metrics: Yes
• Metrics types: Basic system usage and licence consumption.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: We resell Infor SunSystems Cloud as a Gold Partner

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure

Data importing and exporting

• Data export approach: Users can export data from SunSystems through several built-in tools. Most list screens, grids, and query results allow direct export to Excel format using on-screen export functions. Reporting modules provide additional export options for scheduled or on-demand reports such as pdf, html and xml. ; Data extracts can also be generated via integrations (using RestAPIs) where permitted.
• Data export formats: Other
• Other data export formats:
  • Excel (.xlsx)
  • Html
  • Pdf
  • Xml
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Excel (.xlsx)
  • Ison
  • Xml

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The minimum service level for availability in the multi tenant production environment is 99.7%, measured monthly as a percentage of Scheduled.; The customer is entitled to Service Level Credits as provided below if the Availability in a month does not equal or exceed 99.7%. ; For single-tenant environments (a single instance of Cloud Services serving a single Customer) Service Level Credits are ; provided only for Availability below 99.5%.; The Service Level Credit is calculated as a % of the monthly Subscription Fee on a pro rata basis: service level 99.699% - 99.000% = 5% discount; service level 98.999% - 98.500% = 15% discount; service level 98.499% - 95.000% = 25%; below 95.000% = 35% discount.
• Approach to resilience: Infor maintains a written business continuity plan (“BCP”) designed to allow Infor to continue to provide Cloud Services without material interruption in the event of a business disruption. Infor performs regular back-ups (weekly for full back up, daily for differentials) of Customer Data and periodically (no less than annually) tests its disaster recovery procedures in order to help maintain its ability to meet the following disaster recovery service level objectives. Relevant BCP controls are audited on an annual basis and reviewed within third party System and Organization Controls reports which reports are available to Customer through the Infor Customer Portal. Backups are replicated to geographically dispersed data centers within the same region where Cloud Services are provisioned. The Infor disaster recovery process supports the full production environment. Infor initiated Cloud Service backups are exclusively for data recovery in the event of data loss (ie., are not intended to meet Customer’s internal or legal data retention requirements) and restore requests can be raised by Customer through support cases.
• Outage reporting: There is a regular release and maintenance cycle, with functional updates delivered throughout the year. Patches and updates are deployed during scheduled maintenance windows, which are communicated in advance, except where emergency or critical security changes are required. ; Outages, whether scheduled or unscheduled, are communicated through the publicly available support platform, with additional communication provided over email. All operational reports are scheduled to run periodically and are distributed by email.; An incident report is completed after any service‑impacting event. These reports include, but are not limited to: severity classification, a clear timeline, a Root Cause Analysis (RCA), corrective actions, and lessons learned. This ensures consistent documentation, transparent communication, and traceable follow‑up activity.; Availability reports include, and are not limited to: overall service availability, incidents affecting availability, total downtime in minutes, top contributors to downtime, and trends over time. These metrics provide visibility into service performance and help identify recurring issues or emerging risks.; Resilience reports include, and are not limited to: identified single points of failure, capacity thresholds, backup success rates, patch compliance, and failover testing outcomes. These measures highlight areas where resilience can be strengthened and ensure proactive risk management across supported environments.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Other
• Other user authentication: Supports single sign-on with Microsoft 363 (Azure AD/Entra ID) via SAML or OIDC federation.
• Access restrictions in management interfaces and support channels: Access to management interfaces is restricted to ensure only authorised personnel can perform administrative duties/actions. Controls include: RBAC (Role Based Access Control); strong authentication including enforced password polices; MFA. Actions are logged and monitored for unusual activity, failed logon attempts and privilege escalation. Suspicious behaviour generates alerts. Support channel controls prevent unauthorised access to systems or sensitive information. The controls are and not limited to: authenticated user access, secure communication and RBAC. Access reviews are conducted periodically to ensure permissions are appropriate and whether user access is still required. Privileged access requires approval to ensure there is an audit trail.
• Access restriction testing frequency: At least once a year
• Management access authentication: Multi-Factor Authentication (MFA)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • CSA CSM version 4.0
  • ISO/IEC 27001
• Information security policies and processes: Acceptable Use Policy, Asset Management Policy, Backup Policy, Business Continuity Policy, Change Management Policy, Code of Conduct, Data Classification Policy, Data Protection Policy, Data Retention Policy, Disaster Recovery Plan, Document Control Policy, Encryption Policy, Health and Safety Policy, Incident Response Plan , Information Security Management System Plan, Information Security Policy, Logging and Monitoring Policy, Network Security Policy, Password Policy, Physical Security Policy, Quality Management Policy, Quality Management System Plan, Risk Assessment Policy, Secure Coding Guidelines, Software Development Life Cycle Policy, System Access Control Policy, Vendor Management Policy, Vulnerability Management Policy
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Infor's change control process governs the identification and implementation of changes within Infor’s Cloud Services delivery resources, to help prevent unwanted changes to application source code, interfaces, operating systems or back-end changes to data within existing fields and tables. All requested changes, must follow an implementation change control process. Infor documents and retains a detailed record of its compliance with this process, such as a ticketing system, and records of testing procedures for any change, including without limitation the date and time of any such change and a description of the nature of the change.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Infor maintains a vulnerability management process to scan for risks resulting from exploitation of published or identified flaws or weaknesses that could be exercised (accidentally or intentionally) and result in harm or unauthorized access to the Systems (“Vulnerabilities”). Infor will address Vulnerabilities within generally accepted industry standard time frames. Infor shall remediate or mitigate Vulnerabilities in a manner commensurate with the risk those Vulnerabilities represent, according to Infor’s defined framework, which is consistent with generally accepted industry standards.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Infor maintains a vulnerability management process to scan for risks resulting from exploitation of published or identified flaws or weaknesses that could be exercised (accidentally or intentionally) and result in harm or unauthorized access to the Systems (“Vulnerabilities”). Infor will address Vulnerabilities within generally accepted industry standard time frames. Infor shall remediate or mitigate Vulnerabilities in a manner commensurate with the risk those Vulnerabilities represent, according to Infor’s defined framework, which is consistent with generally accepted industry standards.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: If Infor becomes aware of an unauthorized use or disclosure of Data (“Information Security Incident”), it will: notify the affected Customer promptly and within 48 hours; investigate and reasonably analyze the cause; provide periodic investigative updates; implement a remediation plan for causes within its control; and cooperate with the Customer’s reasonable investigation and regulatory compliance efforts. Upon the Customer’s request and at the Customer’s expense, and to the extent permitted by law with appropriate confidentiality, Infor will deliver records of relevant Systems activity (limited to the Customer-related incident) for use in the Customer’s legal, regulatory, proceedings as needed.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 1%
• Between £500,001 and £1,000,000: 2%
• Between £1,000,001 and £2,500,000: 3%
• Between £2,500,001 and £5,000,000: 5%
• Over £5,000,001: 5%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: The Certification Body of Sensiba Australia Pty Ltd: Certificate 202512-169
• ISO/IEC 27001 accreditation date: Wednesday 3 December 2025
• What the ISO/IEC 27001 doesn’t cover: The Information Security Management System (ISMS) of Progressive, supporting the tailored business systems and software solutions for asset-intensive industries, including the management, delivery and support, in accordance with the Statement of Applicability (SoA) and ; aligned with the control requirements of ISO/IEC 27001:2022.”
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: Interface, Certificate: Q9029
• ISO 9001 accreditation date: Tuesday 11 November 2025
• What the ISO 9001 doesn’t cover: Provision of business systems and solutions for asset intensive sectors such as energy, mining, and transport - specialising in cloud-based ERP platforms to streamline finance, asset management, ESG, and procurement processes.
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: C10b75aa-a63e-4e1b-bd24-dc607f9c742f
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 63642ef8-04e0-4902-9492-4bd9a5ca83e8
• Other security certifications: Yes
• Any other security certifications: SOC 2 Type 2 Report

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at helen.fisher@progressive-tsl.com. Tell them what format you need. It will help if you say what assistive technology you use.