ZALARIS UK LIMITED

SAP SuccessFactors

This service provides all SAP SuccessFactors modules or a personalised combination of modules into a single service.

Features

• SAP SuccessFactors Employee Central
• SAP SuccessFactors Employee Central Payroll
• SAP SuccessFactors Talent Management Modules

Benefits

• Deliver suite of HR capabilities across employee lifecycle
• Implement modules in a way that works for you
• Comprehensive, cloud-based HR suite based on best-practices
• Streamline HR and employee life-cycle processes
• Connect people to purpose & drive business results
• Create exceptional employee experiences
• Compliant with GDPR and UK legislation

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at UKIE_Info@zalaris.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

124534008972459

Contact

Stephen Burr
07970019272
UKIE_Info@zalaris.com

About your service

• Service categories:

  Applications

  Enterprise resource management

  • Payroll management

  Human capital management

  • Core Human Resources Applications
  • Talent Management Applications
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: SAP Data Cloud and SAP SuccessFactors
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: Zalaris apply no service constraints. Services are aligned to customer requirements.
• System requirements:
  • Desktop Browser: IE11, Edge, Firefox, Safari, Chrome
  • Mobile Browser: Safari, Android7 + default browser, Chrome
  • Network bandwidth Recommended connection speed 300 - 400 kbit/s
  • Screen resolution XGA 1024x768 (high color) or higher

User support

• Email or online ticketing support: Yes
• Support response times: The support response times are detailed on SAP support policy for Cloud services.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: Screen Reader; Keyvboard Navigation and Focus Management; ARIA Live regions
• Onsite support: Yes, at extra cost
• Support levels: Support level are detailed in SAP Support for Cloud services policy
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: New customers are onboarded onto the service via a number of well defined processes aimed at making the transition seamless and easy.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: You are able to export your data at any time during the subscription term. Data can be retrieved in a readily readable, structured and documented format, such as CSV. This is a self-service feature that allows you to download data from the system at any time, without any special request to us.; ; Customers may also request that our support services provide them with a full data extract.
• End-of-contract process: At the end of the contract customers are offered the opportunity to extend their commitment, should they decide not to continue with the service, they must ensure that all data is extracted before the access to the service is terminated on the contract end date. SAP support will be able to provide advice and guidance on this process.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: SuccessFactors may be accessed via a mobile web browser or a dedicated iOS or Android mobile app.; ; The dedicated mobile apps provides a set of functions which are most commonly needed by employees and managers whilst on the go.; ; Capabilities include, but are not limited to: managerial approvals and tasks, full employee and manager self service, time tracking, viewing payslips, goals and performance management, giving and receiving feedback, learning, recruiting, compensation, career planning, searching and view organisational chart, and tracking development.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: SuccessFactors is delivered with an Admin Centre which can be accessed by users of the service who have been granted the correct permissions by system administrators.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: We develop and test to WCAG 2.1 AA standard.; ; Accessibility is a priority in every phase of development – Design, Development, and Testing.; ; Design: User experience experts design user interactions with optimal usability in mind for all users. They collaborate with graphic designers to design the best approach for both disabled and non-disabled users.; ; Development: On each page they create, software engineers examine the code for appropriate tagging, tab through the page evaluating focus and navigation, and use JAWS to check for appropriate audio cues such as labels, alt tags and instructions.; ; Testing: On each page the software testers execute full end-to-end scenarios using a screen reader and keyboard-only navigation. The same full suite of test scripts are used for both accessibility testing and standard functional testing. Testers use an accessibility testing checklist that includes but is not limited to:; * Form Controls/Readability/Labels; * Links; * Images; * Font Size and Colour Contrast; * Keyboard Navigation; * JAWS audio narration.
• API: Yes
• What users can and can't do using the API: Our platform provides REST based web service for importing and exporting data to and from a customer’s solution instance. They provide generic CRUD (Create, Read, Update, Delete) operations to access data, as well as meta-data operations to allow runtime discovery of the data.; Our OData APIs provide a standardized protocol for creating and consuming data APIs which are REST based (Representational State Transfer - HTTP + URLs + XML*).; ; The HCM Suite OData API is SuccessFactors Web Services API based on the OData protocol intended to enable access to data in the SuccessFactors system. The API is best used for frequent or real-time requests for small amounts of data. This OData API is used to configure entities. Each SuccessFactors module can be accessed using its own set of entities. SuccessFactors OData API service is based on OData V2.0.; ; The latest full details of our API coverage can be found here: https://api.sap.com/
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: SAP SuccessFactors provides a comprehensive set of configuration and administration tools via a self service interface. All capabilities in the solution can be configured to support the design of specific business processes as standard.; ; New objects can be added as well as new user interfaces in order to build new business processes. (this is completed via the extension centre that allows for the ability to build objects, rules, workflow and UI without coding); ; Extension through coding is also possible via the SAP Cloud Platform which is a Platform as a Service completely integrated with SAP SuccessFactors as well as other SAP applications. SAP Cloud Platform provides a number of intelligent technologies including, robotic process automation, a predictive analytics engine, machine learning libraries and a conversational AI capability.

Scaling

• Independence of resources: Our system is designed with maximum scalability and can accommodate millions of users with no performance impact.; We also use the concept of “PODS,” from a hardware perspective. A POD is a fault tolerant cluster of application & DB servers designed, as a scalable unit, to provide core processing and data storage services for fixed increment of customers.; • A POD is designed to support millions of subscribers. Our current 2nd Generation POD is scaled to 5M+; • Excess capacity PODs are always available on standby (scalability-on-demand); • We will increase capacity if data center utilization surpasses the 70% threshold

Analytics

• Service usage metrics: Yes
• Metrics types: Dashboards and reports are available within the customer community tools that detail service up time and planned outages.; ; The SAP Trust Centre contains detailed information online about the current service status of all SAP cloud applications including SAP SuccessFactors; ; https://www.sap.com/uk/about/trust-center/cloud-service-status.html
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: SAP

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: We use AES 256 bit encryption for data at rest.
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Reporting and Integration tools are available within the solution to allow admin users to export data down to field level. Customers may also request a data export from SAP support.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • XML
  • Excel
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Xml
  • Excel

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: 99.5% System Availability percentage during each Month
• Approach to resilience: Available on request
• Outage reporting: Outages are reported using e-mail alerts as well as public dashboard available in the user community and the SAP Trust Centre: https://www.sap.com/uk/about/trust-center/cloud-service-status.html

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Via IP Filtering, 2 Factor Authentication. and other information can be provided on request.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: Between 6 months and 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: ISO 27017; ISO 27018; BS 10012
• Information security policies and processes: The head of SAP Global Security (Chief Security Officer; CSO) reports; via the Security Steering Committee to the SAP Executive Board and is; responsible for the overall security strategy of SAP across lines of businesses.; This includes besides others: corporate security, physical security, IT/Cloud security,; cybersecurity and product security. As an industry best practice SAP defines; its security goals and objectives. This is done by the SAP Security Policy Framework,; which is the fundamental basis for defining the security level at which SAP operates; and consists of multiple layers targeting different groups and satisfying different needs.; The SAP Security Policy Framework addresses general security topics to all SAP employees,; satisfies compliance and certification needs and provides detailed guidance to cloud operation units.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: All processes and policies are defined following industry best practice standards.; ; Most of those policies are internal and are audited in our SOC2 Audit which is made twice a year and available to our customers.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: All processes and policies are defined following industry best practice standards.; ; Most of those policies are internal and are audited in our SOC2 Audit which is made twice a year and available to our customer
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: All processes and policies are defined following industry best practice standards.; ; Most of those policies are internal and are audited in our SOC2 Audit which is made twice a year and available to our customer
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: All processes and policies are defined following industry best practice standards.; ; Most of those policies are internal and are audited in our SOC2 Audit which is made twice a year and available to our customer
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: A trial service is available on request and subject to individual evaluation. Please ask your SAP/Zalaris representative.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 1%
• Between £250,000 and £500,000: 2%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 7%
• Between £2,500,001 and £5,000,000: 12%
• Over £5,000,001: 20%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: KPMG
• ISO/IEC 27001 accreditation date: Monday 3 May 2021
• What the ISO/IEC 27001 doesn’t cover: N/a
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: MSECB
• ISO 9001 accreditation date: Monday 2 June 2025
• What the ISO 9001 doesn’t cover: N/a
• Quality management systems (QMS): Yes
• CSA STAR certification: Yes
• CSA STAR accreditation date: Monday 2 June 2025
• CSA STAR certification level: Level 2: CSA STAR Attestation
• What the CSA STAR doesn’t cover: N/a
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 771a9621-ccb0-44d2-b987-c4aebdf9c6d7
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 39219e3b-3d2a-404c-855f-f82e5281e73e
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Collection of the views and expertise of disabled people and their representative organisations on successfully supporting disabled employees or applicants
    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Introducing transparency to pay and reward processes
    • Offering a range of quality opportunities with routes of progression if appropriate, e.g. T Level industry placements, students supported into higher level apprenticeships.
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at UKIE_Info@zalaris.com. Tell them what format you need. It will help if you say what assistive technology you use.