Pop Pop Studio Ltd

SEND Local Offer

A digital SEND Local Offer to conform to the SEND Code of Practice 2015.

Features

• Separate Local Offer websites, each with unique URLs.
• Weekly technical and organisational support for professionals.
• Localised design co-created with young people and parent carers.
• Colour-coded sections for Education, Health, Social Care, PfA.
• Filterable, shareable directory of organisations, services, and events.
• Custom mini-sites for specialised audiences like Preparing for Adulthood.
• Events listings and real-time news feed updates.
• Guide pages for easy navigation of sub-themes (e.g., EHCPs).
• Step-by-step pages for complex processes (e.g., EHCP applications).
• Accessible publication pages for documents like SEND Strategy.

Benefits

• Reflects user needs through co-designed, inclusive platform development.
• Simplifies navigation with intuitive, colour-coded sections and guides.
• Centralises directories, reducing administrative burden for professionals.
• Single database powers multiple sites, each with unique URLs.
• Keeps users updated with real-time news and events.
• Builds confidence with clear step-by-step process guidance.
• Ensures accessibility for all with user-friendly document formats.
• Privacy-friendly analytics support continuous platform improvement.
• Aligns with SEND policy, fostering high aspirations and compliance.
• Content support keeps information current, accurate, and effortless.

Service documents

• Pricing document

  ODT

• Service definition document

  ODT

• Terms and conditions

  ODT

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jonny@poppop.studio. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

128201696316910

Contact

Jonny Holden
01619871909
jonny@poppop.studio

About your service

• Service categories:

  Applications

  Content workflow and management

  • Document
  • Media Services
  • Creative

  Content services

  • Content Sharing and Collaboration Applications

  Persuasive content management

  • Website Software
  • Digital Asset Management Applications

  Enterprise portals and digital workspaces

  • Multi-Audience Portals
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: Planned upgrades to Drupal and LocalGov Drupal versions.
• System requirements:
  • Modern Browser
  • Up to date Operating system

User support

• Email or online ticketing support: Yes
• Support response times: 1 day during school term times, Monday to Friday.; Up to 1 week during school holidays.; Critical server availability prioritised and dealt with urgently between 8am and 8pm, 365 days a year.
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Support is what makes us different. We don't hide behind levels of support tickets. We work closely with our clients, proactively helping them with planning content, features, and solving technical issues. We have weekly meetings with content managers to help with making the SEND Local Offer the best it can be for young people, parent carers, and professionals.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We work with young people and parent carers on the look and feel of their SEND Local Offer. ; ; We offer training to content creators on the how and why of content features, such as pages, guides, step-by-steps, and publications. ; ; We can help with content migration.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • Other
• Other documentation formats:
  • Video
  • Screenshots
• End-of-contract data extraction: As the SEND Local Offer is built in Drupal, at the end of the contract we can transfer ownership of the site. ; Code base can be made available through a version control system.; Data can be exported as a database dump or requested extracts as CSV, JSON, XML. ; ; We will then cease any hosting or support.
• End-of-contract process: Pop Pop Studio will either delete the whole SEND Local Offer or create a copy of the whole site on a version control system, to be passed on to the client.; ; If users require a download of content in any other format, Pop Pop Studio will charge for the time taken.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The usual responsive Menu and Layout changes are applied to make sure the app is WCAG Robust
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: Generic Drupal back end allows users to edit content and configure the functions as needed.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: None
• API: No
• Customisation available: Yes
• Description of customisation: The SEND Local Offer is built on LocalGov Drupal. Customisations include; 1) Branding and design, the "look and feel"of the site, including the option to have sections of the site with an alternative "look and feel". 2) Content sections and page layouts.; 3) Features such as Services, News, Events; 4) User accounts; ; Customisation is part of the collaboration work we do, and can include engagement with young people and parent carers.

Scaling

• Independence of resources: Each site it hosted in a separate hosting service that allows scaling, the specification of which can be increased as needed, without extra charge.

Analytics

• Service usage metrics: Yes
• Metrics types: We use Plausible.io, an open-source, privacy friendly analytics service.
• Reporting types: Real-time dashboards
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: Never
• Protecting data at rest: Other
• Other data at rest protection approach: Security controls fall inside of ISO 27001:2022, through our hosting partners
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Option to extract data within one of the usual data formats (CSV, XLS, XML, JSON)
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • XML
  • XLS
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: 99.99% uptime expected, with infrastructure monitors alerting hosting engineers.
• Approach to resilience: Our hosting partner is ISO 2700:2022 compliant
• Outage reporting: Hosting partner email alerts and support.

Identity and authentication

• User authentication needed: No
• Access restrictions in management interfaces and support channels: Management access to the platform is restricted and authenticated via username, password. Role based permissions are used and all actions are audit logged.; Support channels are email based for clients, and MFA restricted for our staff.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: Between 1 month and 6 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Working directly with our hosting partners, our developers, and client tech teams (where required) we use the Software Security Code of Practice to guide our best practice at POP POP STUDIO
• Information security policies and processes: All developers report directly to the company Director. ; With each new deployment information security policies and processes are followed.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: All development work is version controlled. ; Internal QA testing in staging environments. ; UAT testing as required.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: As we use Drupal and LocalGov Drupal, we are notified of threats and patches directly from these organisations. Security patches are deployed as soon as possible, within 24 hours.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Drupal and LGD report on potential compromises and we act on these as soon as possible. ; All security patches are installed and updated in line with their instructions.
• Incident management type: Supplier-defined controls
• Incident management approach: Any incidents or suspected incidents should be reported directly to Pop Pop Studio, and they will be reviewed by our technical team. Resolutions will be reported back to the client.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 10%
• Over £5,000,001: 15%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Working conditions which promote an inclusive working environment and promote retention and progression

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery

Service documents

• Pricing document

  ODT

• Service definition document

  ODT

• Terms and conditions

  ODT

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jonny@poppop.studio. Tell them what format you need. It will help if you say what assistive technology you use.