INTEC FOR BUSINESS LIMITED

IDIS Tenancy Verification

IDIS Tenancy Verification is a cloud-based solution that allows public sector organisations to check a property for illegal subletting or abandonment. All results are risk and RAG scored. IDIS provides users with extremely cost-effective credit bureau services from TransUnion as well free matching using internal datasets.

Features

• Securely upload and process your datasets
• Evidence based analytics and risk scoring for each match
• Identify evidence of fraud and error via TransUnion credit data
• Automated mail merging and export for claimant canvas letters
• Create and manage cases for high-risk matches
• Validate and cleanse addresses during upload using PAF validation
• Tiered access allowing multiple departments/organisations to use one system
• Free and unlimited data matching using internal datasets
• Enhanced security functionality including two factor authentication
• Extensive reporting functionality and convenient data export options

Benefits

• Access extremely competitive rates for TransUnion credit data
• Save time with instant results on data matching campaigns
• Receive credit search results in less than 24 hours
• Enhance accuracy of results via risk and RAG scoring
• Save time on formatting spreadsheets with import merge fields
• Save costs when compared to fully managed services
• Verify who's living in your properties
• Suitable for ad-hoc, bulk or rolling reviews

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@intecforbusiness.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

131795834198571

Contact

Theo Gregory
01615071599
info@intecforbusiness.com

About your service

• Service categories:

  Application Development and Deployment

  Analytics and business intelligence

  • Business Intelligence
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: InCase 365 Case Management
• Cloud deployment model: Public cloud
• Service constraints: There are no service constraints and clients have 24/7 access.
• System requirements:
  • Users must have a stable internet connection
  • Users are responsible for information security on their own devices

User support

• Email or online ticketing support: Yes
• Support response times: Priority One - Response within 1 Working Hour; Priority Two - Response within 3 Working Hours; Priority Three - Response within 1 Working Day
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Unlimited Online Training and Support is included in the licence fee at no extra charge, ensuring all users have access to support and training at any point during the contract.; Most support queries are resolved via Email, Phone Call or Microsoft Teams. Onsite Training and Support may incur an additional fee.; Each customer is provided with a dedicated account manager who they can escalate any questions or concerns to.; In addition to this, users are provided with a manual with instructions on how to use the system. As new functionality is released, users are given updated manuals including instructions and advice on how to use the new functionality.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Once an order has been placed INTEC will;; - Appoint an account manager, who will be responsible for ensuring that the onboarding process takes place smoothly and in line with the clients time frame requirements.; - Account manager will arrange an initial meeting where specific client requirements will be discussed and key dates, including for training and 'Go-Live' will be put in place.; - Create a client-specific environment on INTEC's hosted server and configure the system as per the clients requirements.; - Carry out the initial training with the users.; - Follow up meeting after the 'Go-Live' date, (usually one week after) where client can request extra training and support if required.; - Throughout the process and during the lifetime of the contract the client will be able to contact INTEC's customer care team who will be on hand to provide support and training whenever necessary.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: All information held within IDIS can simply be downloaded to a .csv file when the contract ends.
• End-of-contract process: A contract end timetable will be agreed.; The schedule will depict when;; - Access to the software is to be disabled.; - The data is to be extracted.; - The client's data instance is to be deleted.; - Secure data deletion has been performed.; - Confirmation of when the data has been deleted will be provided.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: WCAG 2.2 AA
• API: No
• Customisation available: No

Scaling

• Independence of resources: The service is monitored and alerts are raised with the support team where performance issues are identified. Each customer has their own database to minimise the impact of one customer being affected by another. Additional resource can be provisioned as and when required, however INTEC reserve the right to charge for these additional resources.

Analytics

• Service usage metrics: Yes
• Metrics types: Key Performance Indicators; Some of the key performance indicators used by INTEC for Business Ltd include:; • On time delivery performance against agreed project milestones; • Average Support Desk response time; • Average time and effort required to resolve incidents; • Number of incidents registered by the Service Desk; • Percentage of incidents resolved within the agreed SLA; • Number of escalations for Incidents not resolved in the agreed resolution time; • Number of repeated Incidents reported
• Reporting types: Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: All data lists within the system have built-in export options to standard document types including .PDF and .CSV files.
• Data export formats:
  • CSV
  • Other
• Other data export formats: PDF
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: IDIS Availability is 99.75%; Service unavailability refunds are not provided.
• Approach to resilience: Our services are hosted on Microsoft Azure. MS Azure complies with the UK Governments Cloud Security Principle 2 “asset protection and resilience”. Further information on how our service is designed to be resilient is available on request.
• Outage reporting: Email Alerts

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: INTEC adapt strict security principles. Only fully authorised members of staff are allowed access to the software platform itself. During the development of the software, support or training, if INTEC are required to access the clients data/environment then we must have written authorisation from a nominated user before access.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Information security for IDIS is governed by an ISO/IEC 27001 certified Information Security Management System (ISMS). The ISMS defines the policies, processes, and controls used to protect information across the organisation and the service. Core policies include information security, access control, asset management, incident management, supplier security, risk management, and business continuity. These policies are supported by documented procedures and operational controls that are reviewed regularly. Overall responsibility for information security sits with senior management, with day-to-day management of the ISMS delegated to a designated information security lead. Information security risks, incidents, and compliance issues are reported through a defined management reporting structure and reviewed as part of regular governance meetings. Compliance with information security policies is ensured through mandatory staff training, role-based access controls, formal onboarding and offboarding processes, and continuous monitoring of systems and activities. Internal audits, risk assessments, and management reviews are conducted on a scheduled basis to verify that controls remain effective and are being followed. Security incidents are managed in line with documented incident management procedures, including investigation, escalation, corrective action, and lessons learned. The ISMS is subject to continual improvement and external audit as part of ISO/IEC 27001 certification.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Intec for Business Ltd has documented configuration and change management policies and processes, which have been implemented, maintained and assessed in accordance with the guidance from ITIL v.3 and the current ISO20000 standard.; Formal configuration management activities, including record management and asset reporting, are monitored and validated constantly, and any identified discrepancies promptly escalated for investigation.; A robust, established process for the formal submission of change requests is mandated prior to review and approval of the daily Change Advisory Board, which is attended by a quorum of operational and technical management personnel.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: IDIS makes use of the Microsoft Azure platform which has multiple accreditations including ISO27001. We make use of Microsoft Defender for Cloud which through it's vulnerability management has real-time protective monitoring and scheduled vulnerability assessments.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: IDIS is hosted on the Microsoft Azure Platform and uses Microsoft Defender for Cloud which provides a centralized, real-time monitoring view into the security state of our hybrid cloud resources. In the event of an incident inhouse staff are notified and will begin an immediate investigation.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: IDIS is hosted on the Microsoft Azure Platform and uses Microsoft Defender for Cloud. The Microsoft global incident response service works every day to mitigate the effects of attacks and malicious activity. The goal of security incident management is to identify and remediate threats quickly, investigate thoroughly, and notify affected parties. The incident response team follows an established set of procedures for incident management, communication, and recovery. Incidents passed from the Azure team are immediately investigated by our in house staff.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau
• ISO/IEC 27001 accreditation date: Thursday 15 January 2026
• What the ISO/IEC 27001 doesn’t cover: Our ISO 27001 certification covers our entire organisation.
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 68530cd1-dcdb-46b1-92d8-068a7f2354ae
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@intecforbusiness.com. Tell them what format you need. It will help if you say what assistive technology you use.