ADVICE INFRASTRUCTURE LTD

The FORT System - Fast Online Referral Tracking

The Fast Online Referral Tracking (FORT) system allows agencies to refer clients to each other through a cloud-based portal. The system also offers a multi-partner CRM function for the secure exchange of non-referral information.

Features

• Integrated Texting
• Remote Access
• Business Intelligence Reporting at Datazone Level
• Group Register Function
• Integrated Letter Templates
• Integrated Educational Psychology System
• Integrated System for Support Services in Education
• Integrated CLD and Youthwork Management System

Benefits

• Improves communication across teams
• Better understanding of client base
• Clients get to the right service
• Quickly Track Family Support Interventions
• Improve Referral Flow

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Joe@adviceinfrastructure.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

142918298076304

Contact

Joe MacIntyre
01382 238906
Joe@adviceinfrastructure.com

About your service

• Service categories:

  Applications

  Customer relationship management

  • Customer service
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: No constraints
• System requirements: Modern Browser Required

User support

• Email or online ticketing support: Yes
• Support response times: Response times vary depending on ticket complexity and the helpdesk is available Monday to Friday 9am to 5pm
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes
• Support levels: We provide the same support level to all our systems. System support is included as part of the service and is not highlighted separately.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We provide onsite training and a certified online training environment
• Service documentation: No
• End-of-contract data extraction: Data can be extracted via CSV tables and secure downloads of documents
• End-of-contract process: Clients who decide they want the data at the end of a contract have access to the basic tables containing client data via our reporting area. Clients who want a more structured exit with more complex data sets can engage with our exit team and receive a quote for a more mediated transfer of data.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: WCAG 2.2 A
• API: No
• Customisation available: Yes
• Description of customisation: Users can customise text size on our CRM and views on our forms and client hubs can also be customised.

Scaling

• Independence of resources: We monitor all our services to ensure equitable and fast access and increase server capacity when required.

Analytics

• Service usage metrics: Yes
• Metrics types: We provide data on system use by user role.
• Reporting types:
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Users export their data on our self-service reporting area
• Data export formats:
  • CSV
  • ODF
• Data import formats:
  • CSV
  • ODF

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: We have an SLA guarantee of 99% uptime for each year of the contract. If we don't meet the 99% uptime target, users are refunded 5% of their yearly contract value.
• Approach to resilience: For our company, 24/7 monitoring detects anomalies to prevent outages before they occur. Regular Testing: Routine disaster drills and simulation tests validate that systems work as intended under stress.; For our data centres reslilience is a central part of their service including a focus on power redundancy, cooling and environmental resilience and connectivity and network Redundancy.
• Outage reporting: Yes, we report all outages to our clients via email alerts.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Management Interfaces: Access to the digital management interface is automated through RBAC, ensuring users only see data within their remit.; Administrative Hierarchy: Our system admins create Council System Admins (CSAs), who are the only ones permitted to manage user accounts.; Infrastructure Access: Backend and system-level access is restricted to authorised staff via VPN and static IP white-listing.; Privileged Tasks: High-level administration is conducted via a Bastion Host requiring MFA and SSH with pre-shared keys.; Support Channels: All requests are funnelled through an integrated helpdesk, where users must be authenticated within our environment to effect changes.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Our security posture is championed at the highest level. With a dedicated board member overseeing our digital resilience, we ensure that strategic oversight is seamlessly converted into robust, everyday technical safeguards that protect our most critical operations. General adherence to NIST CFS 2.0 is part our; roadmap to ISO 27001.
• Information security policies and processes: Our security strategy is led directly by our Board of Directors, ensuring that data protection is integrated into our development lifecycle rather than treated as an afterthought. While we work towards ISO 27001 certification, we already align our internal processes with the NIST cybersecurity standards.; ; To ensure GDPR compliance, we employ 'Privacy by Design' principles. This includes strict data minimization, encrypted storage for sensitive client information, and regular self-assessments of our internal controls to ensure our CRM software meets the highest standards of data integrity and legal requirements.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We use a centralised Version Control System (VCS) to track the entire lifecycle of our CRM software components, from initial development to production deployment.; Asset Tracking: All software dependencies, libraries, and infrastructure configurations are managed as code. This allows us to maintain a "Single Source of Truth" for every component of our service.; Version History: Every modification is tagged with a unique version identifier, providing a full audit trail of who made the change, what was altered, and when it occurred.Security Impact Analysis: During the review phase, changes are specifically assessed for their security impact.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We identify potential threats through a combination of vendor-issued security advisories, daily reviews of system access logs, and bi-weekly application log audits. Our proactive defense includes monthly internal network penetration tests and a full annual audit by an independent, CREST-certified supplier.; Critical (exploitable) security patches are validated and deployed within three days of issue. High-severity (internal-facing) and medium-severity patches are applied during scheduled bi-weekly maintenance. This structured approach ensures our CRM remains resilient against evolving digital threats
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Our protective monitoring is board-led and integrated into daily operations. We identify potential compromises through daily reviews of system access logs and bi-weekly audits of application logs. All interactions are captured, including user IDs, timestamps, and failed access attempts, with logs stored on remote servers to prevent tampering.; Upon detecting a potential compromise, we utilize User Group/ACL controls to immediately suspend suspicious accounts. Incident progress is tracked via our service desk and reported to clients in real-time. Critical security issues are addressed within three days, supported by source version control for rapid rollbacks if required.
• Incident management type: Supplier-defined controls
• Incident management approach: Our incident management is structured around board-level accountability. We use pre-defined processes for common events, such as three-strike lockouts for failed logins and validated rollback procedures via source version control. Users report incidents through our integrated service desk, where all tickets are trackable. We provide real-time progress updates directly to clients. For security-critical events, we maintain remote, tamper-proof logs to support investigations. Following an incident, we provide detailed audit reports, including user IDs, IP addresses, and specific system actions.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 5%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 5%
• Between £2,500,001 and £5,000,000: 5%
• Over £5,000,001: 5%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 20994120-6a05-48e3-ae90-d1b5953e15da
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 066451ef-3f3d-4a7a-b203-a6eaaee8d367
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Ensuring new workers are informed of their right to join a trade union
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of issues relating to entering the contract workforce

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Joe@adviceinfrastructure.com. Tell them what format you need. It will help if you say what assistive technology you use.