COMMERCIAL EVALUATIONS LIMITED

Mapolitical

The Mapolitical suite of Political contacts (see www.mapolitical.com) contains VIP political contact Data, refreshed daily covering – MPs, Ward Councillors, Portfolio Holders, Committees, Officers, Parish Clerks, Devolved Parliamentarians, Peers, LEPs and other bespoke VIP Stakeholders. Find Political Stakeholders by clicking on a map, using the search engine or by postcode.

Features

• Political Data refreshed daily by an in-house research team.
• Fresh contact Data entered continuously into Mapolitical.
• Click on UK map to street level and contact stakeholders.
• Contact Data covering MPs, Ward & Parish Councillors, L.A. Officers.
• Contact Data covering Council Portfolio Holders, Chairs and Council Leaders.
• Contact Data covering Council Group Party Leaders, Devolved Parliamentarians, Peers.
• Fully GDPR compliant Data covering Public Domain stakeholders.
• Bespoke map issue management features covering serious incidents.
• Powerful search engine and mail merge facility across UK Government

Benefits

• Immediate contact via a UK Map with VIP Government Stakeholders.
• Currently used by UK Utilities to manage their Network infrastructure.
• Optimisation of PR & Public Affairs across complex networks.
• Used by Housing Groups and Corporates to manage Asset incidents.
• Used to manage serious incidents e.g. Gas or similar explosions.
• Used to manage issues such as Water contamination, floods etc.
• Used to plan and communicate new infrastructure build programmes.
• Used by Infrastructure builders to comply with Government Communication Regulations.
• A stakeholder risk analysis tool in planning new road-rail routes.

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at daryl@comeval.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

960907291470795

Contact

Mike Hickman
01245 420048
daryl@comeval.com

About your service

• Service categories:

  Application Development and Deployment

  Analytics and business intelligence

  • Location and geospatial data management and analytics
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: SRM/CRM Systems.
• Cloud deployment model: Private cloud
• Service constraints: Our service is located in a secure hosting centre and is available 24 hours a day seven days a week. In the last 5 years our service has been available on all of the days, with the occasional short outage for service upgrades / maintenance, as well as data centre upgrades. We do not make any guarantee of service availability and users are not refunded based on outages.
• System requirements: Accessed by web browser, support all main web browsers.

User support

• Email or online ticketing support: Yes
• Support response times: Our response times are normally within 24/48 hours of a request.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: Onsite support is provided by user training sessions, in the first instance, which is covered by the user licence fee. We can also provide online user training via screen share applications - Teams/Zoom etc.; We also provide phone support, 9 to 5 (UK time), Monday to Friday. Our response times are normally within 24/48 hours of request.; The Mapolitical application comes with a built-in online help facility as part of the application, which contains text and graphical explanations of the main system features and functions.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Onsite support is provided by user training sessions, in the first instance, which is covered by the user licence fee. We can also provide online user training via screen share applications such as Teams/Zoom.; We also provide phone support, 9 to 5 (UK time), Monday to Friday. Our response times are normally within 24/48 hours of request.; The Mapolitical application comes with a built-in online help facility as part of the application, which contains text and graphical explanations of the main system features and functions.
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: There is no user data.
• End-of-contract process: A client has the renew their annual licence for a further year or more. If they do not, the licence and their user access terminates.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: We have a process where the client nominates an administrator who will work with us on user changes.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The graphic display will be limited to the screen size available.
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: We have postcode lookup and data APIs where data can be exported from Mapolitical for data provision purposes, no changes can be made to data within Mapolitical via a user API. We have instructions covering how users can make requests from the API.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: We can customise our application upon application for clients.

Scaling

• Independence of resources: Our service is located in a secure hosting centre and is available 24 hours a day seven days a week. In the last 5 years our service has been available on all of the days, with the occasional short outage for service upgrades / maintenance, as well as data centre upgrades. We do not make any guarantee of service availability and users are not refunded based on outages. There is a built in load balancing process to stop system processes impacting on the user experience.

Analytics

• Service usage metrics: Yes
• Metrics types: User access logins.
• Reporting types: Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: In-house destruction process
• Data sanitisation type: Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: There is no user owned data. Mapolitical researched stakeholder data can be exported (we will answer these questions in this context).
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Our service is located in a secure hosting centre and is available 24 hours a day seven days a week. In the last 5 years our service has been available on all of the days, with the occasional short outage for service upgrades / maintenance, as well as data centre upgrades. We do not make any guarantee of service availability and users are not refunded based on outages.
• Approach to resilience: We use secure data centres to host our application.; Please see their websites below for further information:- https://www.layershift.com/enscale-paas-hosting and https://www.ukhost4u.com/application-as-a-service/; both of which maintain industry standard asset protection and resilience, and are ISO27001 accredited.
• Outage reporting: We receive email alerts from the datacentre in advance of planned outages and pass onto our users if applicable (most of these are out of hours). We also contact users via email if there are any unexpected outages.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Username or password
• Access restrictions in management interfaces and support channels: Users cannot access any management interfaces.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: We use secure data centres to host our application. Please see their websites below for further information:- https://www.layershift.com/enscale-paas-hosting and https://www.ukhost4u.com/application-as-a-service/ both of which maintain industry standard asset protection and resilience, and are ISO27001 accredited.
• Information security policies and processes: We have internal processes covering: Roles and Responsibilities, Data Classification, Security Awareness Training, Incident Response Plan, Compliance Requirements (via hosting center) and Data Support and Operations.; ; We use secure data centres to host our application. Please see their websites below for further information:- https://www.layershift.com/enscale-paas-hosting and https://www.ukhost4u.com/application-as-a-service/ both of which maintain industry standard asset protection and resilience, and are ISO27001 accredited.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We have an internal system and software upgrade and maintenance process covering key system components such as the web application and database.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Our service is located in a secure hosting centre and is available 24 hours a day seven days a week. ; Please see their websites below for further information:- https://www.layershift.com/enscale-paas-hosting and https://www.ukhost4u.com/application-as-a-service/ both of which maintain industry standard asset protection and resilience, and are ISO27001 accredited.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We maintain rigourous testing of our application and rarely encounter any software issues. If there is an issue we deal with it on a case by base basis keeping the client informed with a timeline for resolution.
• Incident management type: Supplier-defined controls
• Incident management approach: We maintain rigourous testing of our application and rarely encounter any software incidents. If there is an issue we deal with it on a case by base basis keeping the client informed with a timeline for resolution.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: None of the criteria
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: Yes
• Any other security certifications: Our hosting centres are ISO27001 accredited.

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
    • Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
    • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
    • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
    • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
    • Plans for positive actions with community groups.
    • Measures for making facilities used in the delivery of the contract available for community groups, education or training
    • Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
    • Plans to respond flexibly and adapt approaches to community engagement and initiatives
    • Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds
    • Collaborating with anchor institutions and community groups to make facilities available for education, training or community events

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at daryl@comeval.com. Tell them what format you need. It will help if you say what assistive technology you use.