TRACTIVITY LIMITED

Tractivity Stakeholder Management & Consultation Software (CRM/SRM)

Tractivity is a cloud-based, UK stakeholder engagement tool, providing functionality to manage and engage with all stakeholders through a single system. Whilst maintaining GDPR compliance, Tractivity facilitates the management of every aspect of your engagement process by securely logging communications with built-in tools such as surveys, newsletters and issue management.

Features

• Track all engagement of people and organisations
• Qualitative, Quantitative and AI analysis of feedback
• Collect and distribute information on consultation processes
• Stakeholder Mapping against custom attributes
• Built-In survey, event and newsletter tools
• Drag & Drop of MS Outlook Emails
• Issues tracking and Sentiment analysis
• Geographical mapping of Stakeholders, Issues and Interactions
• Google Map, Royal Mail, Political data and MSTeams integrations
• Real time reporting - dashboards, reports

Benefits

• Meet legislative requirements for Public Consultation
• Qualitative and Quantitative analysis of all feedback
• Ability to produce Strategic Engagement Action Plans
• Maintain up-to-date stakeholder lists of agencies, consultees
• Develop consistent approaches to public consultation
• Manage personal information and comply with GDPR
• Efficiently distribute information to stakeholders
• Efficiently collect feedback in formal public consultation processes
• Generate meaningful reports of consultation activities
• Manage tasks, complaints and grievances

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at enquiries@tractivity.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

932759147439890

Contact

Mark Rutter
07776 295599
enquiries@tractivity.co.uk

About the service

• Service categories:
  • Applications
    • Customer relationship management
      • Marketing campaign management
        • Marketing campaign management
      • Customer service
        • Customer service
      • Contact centre
        • Contact centre
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: Planned maintenance and emergency maintenance windows are defined within the service contract. Application Service Levels are defined in the client contract.
• System requirements:
  • Browsers: Chrome, Firefox, Microsoft Edge, Safari
  • Email plugin for Microsoft Outlook (Additional Add-On)

User support

• Email or online ticketing support: Yes
• Support response times: Support is offered during normal working business hours. The support ticketing system is available online 24/7 365 days a year.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• AI chatbot: No
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: N/A
• Onsite support: Yes, at extra cost
• Support levels: Tractivity licensing comes with standard support services that can be accessed via telephone, web or email services between Monday to Friday, during normal UK business hours (09:00- 17.30pm GMT (GMT+1)).; ; A dedicated account manager will be assigned as part of the on-boarding process and they will maintain regular contact with the client. Monthly online refresher training sessions are also available should these be required.; ; Further onsite support and training may attract an additional charge.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Tractivity provides onsite training to all UK based clients as part of the standard on-boarding process. User documentation is provided for all training sessions. Further on-site follow up and online training sessions can be arranged with the client's dedicated account manager.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • ODF
  • PDF
  • Other
• Other documentation formats:
  • Powerpoint
  • Word
• Documentation accessibility standard: WCAG 2.2 AA
• End-of-contract data extraction: All data can be extracted from Tractivity by using the reporting facilities in a range of formats such as MS Excel, CSV and XML. Tractivity can also securely provide an encrypted SQL Server (.BAK) file when the contract expires as part of the secure data deletion and service shutdown process.
• End-of-contract process: An encrypted SQL Server (.BAK) file is sent to the main contact via a secure and encrypted digital method.; ; Upon written confirmation of receipt and decryption of the data the database and backups are subjected to the secure data destruction procedure. Documentation that all the client data has been securely deleted can be provided upon request.; ; Bespoke data requests can be facilitated and this service will attract an additional charge which will be agreed beforehand with the dedicated account manager.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Tractivity provides a streamlined and dynamic version for Smart phones and tablets
• Service interface: Yes
• Description of service interface: The API gives clients the ability to add Buildings, Organisations, Contacts, Enquiries and Activities into Tractivity, including the ability to run duplication checks on all record types. Providing complete flexibility, clients can input data into all of the available data fields within Tractivity. Common uses for the API include – Enquiry Forms, Newsletter Sign Up Forms or Registration of Interest Forms.; ; The API uses industry standard security settings to ensure that all transmitted data is done securely and that all connections are legitimate.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: Tractivity use the Lighthouse report via Chrome Dev Tools as well as other tools such as WAVE (Web Accessibility Evaluation Tool).
• User support accessibility: WCAG 2.2 AA
• API: Yes
• What users can and can't do using the API: The API gives clients the ability to add Buildings, Organisations, Contacts, Enquiries and Activities into Tractivity, including the ability to run duplication checks on all record types. Providing complete flexibility, clients can input data into all of the available data fields within Tractivity. Common uses for the API include – Enquiry Forms, Newsletter Sign Up Forms or Registration of Interest Forms.; ; There is full online documentation about how to implement the API. Contact the Tractivity support desk for further information or customisation.; ; The API uses industry standard security settings to ensure that all transmitted data is done securely and that all connections are legitimate.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • ODF
  • PDF
  • Other
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Most of the settings in the software are customisable - data fields, data options and mandatory data field settings can be all controlled (per project) by nominated Administrator level person(s) only. Further development work can be considered at a chargeable fee.

Scaling

• Independence of resources: Tractivity is a SaaS platform which can scale required resources dependent on client traffic load. The Operations team also monitor all critical components within the SaaS platform and proactively remediate if required.

Analytics

• Service usage metrics: Yes
• Metrics types: User level service metrics and Project level service metrics
• Reporting types:
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Data can be exported using our reporting system. All data can be exported in a range of formats including as MS Excel, Word, CSV, PDF, XML or RTF.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • XML
  • MS Excel
  • MS Word
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • MS Excel
  • MS Outlook Emails
  • MS Outlook Meetings

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: Tractivity internally use a range of security controls within our network, ranging from disk level encryption, traffic encryption and VM level encryption. Other security tooling is also utilised to provide a high level of protection.

Availability and resilience

• Guaranteed availability: Tractivity Limited guarantees 99.9% availability of the Tractivity Software as a Service platform and downtime shall be avoided so far as practical. IT services / dependencies associated with the Tractivity SAAS platform are monitored 24 hours a day 7 days a week using a variety of different monitoring solutions. In the event of a monitoring alert, a notification is generated immediately and sent directly to the Tractivity support team who will prioritise the alert accordingly
• Approach to resilience: Azure UK data centres are certified to ISO 27001 and other globally recognised standards. They are designed for high availability and fault tolerance by default, incorporating multiple layers of redundancy for power, cooling, and supporting infrastructure.; ; Network Resilience; Connectivity is engineered with active/passive failover across diverse paths within the Microsoft Azure infrastructure.; ; Security Controls; Advanced security measures include an internal SIEM solution and monitoring platforms, enabling proactive detection and remediation of vulnerabilities to maintain resilience.; ; Data Protection and Backup; Daily immutable backups stored within Azure; Regular integrity checks as part of the backup process; ; Operational Assurance; 24/7 incident response capability; Dedicated security operations team monitoring around the clock.
• Outage reporting: A. Notifications can be sent to clients (once signed up accordingly) and automatically sent to clients when incidents / outages occur.; ; b. Notifications are displayed on the Tractivity SaaS platform via a banner at the top of the site when incidents / outages occur.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
• Other user authentication: Tractivity supports SSO using OAuth and OIDC.
• Access restrictions in management interfaces and support channels: Tractivity is a ISO27001 accredited company and operates a Zero Trust Security policy.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cyber Essentials & Cyber Essentials Plus.
• Information security policies and processes: ISO27001; Cyber Essentials and Cyber Essentials Plus.; NHS The Data Security and Protection Toolkit (DSPT)

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Tractivity has a documented change management policy included as part of the ISO27001.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Vulnerability management policy in place.; Operating system patching performed monthly according to the manufacturers recommendations. Emergency patching of critical threats are evaluated by the Technical Director and deployed accordingly, the process is handled through emergency change control procedure.; At least daily threat notifications come from source vendors and recognised security sources which included but is not limited to Microsoft, MD ATP, Prism Infosec, Webroot, ICO and NCSC. All the above is reviewed and approved by the Security Team on a monthly basis.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Regular Windows server and log file reviews in line with ISO27001.; Log file review using heuristic tool.; Perimeter Web Application Firewall Monitoring.; Internal SIEM solution.; Identified incidents managed through formal incident response plan according to ISO27001.; Priority and resolution is dependent upon the incident severity.
• Incident management type: Supplier-defined controls
• Post-quantum cryptography secure: No
• Incident management approach: Tractivity has an Incident Management policy documented as part of the ISO27001.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: LRQA
• ISO/IEC 27001 accreditation date: Wednesday 6 August 2025
• What the ISO/IEC 27001 doesn’t cover: Tractivity will provide a copy of the Statement of Applicability V5.0 which shows out of scope items on request.
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 28eeaa69-8256-4bbe-a136-b04a999c7e1d
• Cyber essentials plus: Yes
• Cyber Essentials Plus Certificate Number: F03438b4-1266-46ce-a00a-8540f5a14056
• Other security certifications: Yes
• Any other security certifications: NHS DSPT External audit and certification is enacted each year.

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
  • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
  • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
  • Plans to engage the contract workforce in deciding the most important workplace issues to address
  • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
  • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
  • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
  • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
  • Activities to cascade good practice on fair working conditions throughout the supply chain
  • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
  • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
  • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at enquiries@tractivity.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.