CROWDFUNDER LTD

Crowdfunder

Crowdfunder is an award-winning fundraising platform, connecting individuals and organisations, enabling them to turn their ideas into reality. Our platform helps partners to distribute match funding in an inclusive, highly effective way that stretches funds further, supporting targeted projects at lower cost and at scale, delivering measurable social impact.

Features

• Match Funding Distribution
• Employee & Customer Giving
• Employee & Customer Fundraising
• Powerful Data & Reporting, including social impact reporting
• Branded Micro sites & web pages
• Project Management and Helpdesk Support
• Applicant support, access to helpdesk and online self service portal
• Crowdfunding Education: Learn Programme, online webinars and coaching drop-in sessions
• Marketing: Communications toolkit and marketing guides

Benefits

• Tackles society's challenges by making ideas happen
• Fund amplification - stretches funds further
• Targeting of funds - strategic support where most needed
• Lower cost of fund distribution
• Creation of Ecosystem of and for good causes
• Community engagement with measurable social impact
• Inward investment - leveraging in additional funding for community benefit
• Helps build capacity and skills
• Distribution of funding to good ideas at scale
• Catalyst for ideas aligned with strategies for areas and people

£28,000 to £95,000 a licence a year

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jason@crowdfunder.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

169473674519725

Contact

Jason Nuttall
0141 673 1253
jason@crowdfunder.co.uk

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: Response times for technical and helpdesk support are as follows: Telephone support: 9:00 A.M. to 5:00 P.M. Monday – Friday (excluding bank holidays) ; ; Calls received out of office hours will be forwarded to a backup answer phone service ; ; Email support: 9:00 A.M. to 5:00 P.M. Monday – Friday (excluding bank holidays).
• System requirements: No system requirements

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Technical Support for partners: Telephone support: 9:00 A.M. to 5:00 P.M. Monday – Friday (excluding bank holidays). Calls received out of office hours will be forwarded to a backup answer phone service Email support: Monitored 9:00 A.M. to 5:00 P.M. Monday – Friday (excluding bank holidays).
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.1 AA or EN 301 549
• Web chat accessibility testing: Testing falls into the main accessibility testing for the platform - users can send a query via the platform or online help centre and Crowdfunder feeds this into the ticketed support system.
• Onsite support: Yes, at extra cost
• Support levels: Technical support provided as standard to all partners Telephone support: 9:00 A.M. to 5:00 P.M. Monday – Friday (excluding bank holidays) Calls received out of office hours will be forwarded to a backup answer phone service Email support: Monitored 9:00 A.M. to 5:00 P.M. Monday – Friday (excluding bank holidays).
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Crowdfunder has a defined welcome and onboarding process delivered by our Partner Delivery Team. We start the onboarding process after contracts have been finalised and signed. Delivered through one to one online sessions during which we agree the details of the campaign and prepare to launch. It's a collaborative process which includes advice, so that partners are clear on fund criteria, marketing, supporting projects, our platform and systems and have an opportunity to discuss the first phase of the campaign and subsequent management of the partnership. Access to the dashboards is granted through a username and password.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Through csv download and via Crowdfunder reports
• End-of-contract process: Crowdfunder operates an end of contract process which includes a review, an impact report and a step by step fund closure agreed in advance with the partner. The company operates a data retention, review and destruction process in line with GDPR requirements.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Crowdfunder's service is accessible to mobile devices. No mobile app is required. The site is optimised for mobile use and a majority of current users access using such devices
• Service interface: Yes
• User support accessibility: WCAG 2.1 AAA
• Description of service interface: The "my funds' dashboards enables users to manage campaigns centrally - reviewing projects, viewing application form responses, making notes visible to authorised users, and approving or declining projects for funding.
• Accessibility standards: WCAG 2.1 AAA
• Accessibility testing: The website is tested each month using our monitoring system and the Web Development Team perform ad-hoc internal tests and act to resolve issues as feedback is received. We are continually working to make improvements to the website and plan to extend this work to include wider user testing in the future. We are aware that some of our third-party forms and applications may not meet WCAG2.1. We are working with our suppliers to bring these up to the standard we expect. We will also be making an assessment when each supplier contract is up for renewal and building in accessibility requirements as part of our procurement process.
• API: No
• Customisation available: Yes
• Description of customisation: Our Crowdfunder Connect product offers two levels of customisation: 1. Standard: Based on the information provided, the templated fund page, hosted in the Crowdfunder environment, can be branded with relevant imagery and content. An editable application form is also provided. Your dashboard is tailored to your campaign and projects filtered according to location so you can quickly see the projects you want to support. 2. A Microsite: A fully branded microsite is available with full customisation. Customisations are delivered by the Crowdfunder team. POA.

Scaling

• Independence of resources: Crowdfunder guarantees that the crowdfunding platform and processing will be available for 99% of time. We use Cloudflare and have good caching and redundancies. As a fall back we have a queueing system for extraordinarily high volumes.

Analytics

• Service usage metrics: Yes
• Metrics types: Partner dashboards provide metrics for visitors, project data, location mapping and pledging - giving a full view of the projects that they have or may want to support, as well as a tool for approving and feedback back on projects. ; ; User dashboards (for individuals or organisations running crowdfunding projects) provide all the information needed to manage the online campaign: funding data, visitor data as well as data required to manage gift aid on donations.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: In-house destruction process

Data importing and exporting

• Data export approach: Csv file
• Data export formats: CSV
• Data import formats: Other
• Other data import formats: Users can import images through a Wysiwyg editor

Data-in-transit protection

• Data protection between buyer and supplier networks: Other
• Other protection between networks: N/A - No data is transferred between networks.
• Data protection within supplier network:
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: The availability of the services will be no less than 99%, 24 hours a day, 7 days a week, such availability to be measured by using industry recognised methods and tools.; ; No refunds offered to users
• Approach to resilience: Our data security measures include: building security measures, cyber security measures, network access controls, encryption measures, system updates, data back ups, business continuity, rules about use of personal devices etc. Regular penetration tests and vulnerability scans are undertaken on our platform and systems. We require our suppliers, specifically our data centre provider to have equivalent measures in place. Our data centre is ISO27001 compliant. All data is encrypted in transit and at rest. Admin access to our platform is via 2 factor authentication. We also have requirements for complex passwords. Access to the database and servers and end data is only by VPN. Anti-virus software is installed on all our machines.
• Outage reporting: Email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Administrative access to our platform is via 2 factor authentication. We also have requirements for complex passwords. Access to the database and servers and end data is only by VPN. Within our administrative access and support channels we have different levels of access based on roles to ensure individuals only have the access required to perform their role.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: Between 6 months and 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: Self accreditation
• PCI DSS accreditation date: 10/11/2021
• What the PCI DSS doesn’t cover: None. The accreditation covers the payment services.
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Crowdfunder takes information security seriously. We have in place an effective information security management system. This document provides high level information as to how we manage and protect information. We ensure the confidentiality, integrity and appropriate availability of information we hold.
• Information security policies and processes: Information Security Policies: We have a set of detailed policies and procedures for information security which provide the necessary support and management for information security. This set of documents is available to all staff and is communicated to relevant third parties.; ; Organisation of Information Security: We have implemented suitable governance arrangements for the management of information security including roles and responsibilities to initiate and control the implementation and operation of information security at Crowdfunder.; ; Human Resources Security: We undertake appropriate screening and background checks on staff. We also have offboarding processes in place to ensure information security. We ensure Crowdfunder’s information security policies and procedures as well as our expectations relating to acceptable use (devices and information) and confidentiality are communicated to all staff and form part of employment contracts. All staff are required to undertake information security training on a continual basis, including contractors and temporary staff.; ; Asset Management: We ensure Crowdfunder’s assets are adequately protected according to their sensitivity. All assets are documented and accounted for. All assets no longer required are disposed of securely.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Crowdfunder has a change management policy. We also have Installation and configuration procedures we follow. Under the policy and process, all change requests are submitted to a central point and are assessed, categorised and prioritised. All changes are implemented in line with our Information security systems development process which involves thorough planning and sequencing of the change(s), pre-live testing and a roll back./mitigation plan in case of failure or issues. Specific penetration testing is carried out on major changes. We have separation between development, testing and production environments.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We have network, threat and vulnerability management control and intrusion detection procedures which we follow to reduce the risk and impact of network and targeted cyber attacks ,as well as to detect, prevent and deter intrusions. These include but are not limited to:; Perimeter security ; Firewalls ; Distributed denial of service (DDoS) protection. ; Monitoring and management of all servers; Rules to block IP addresses, users or transactions where suspicious activity is identified.; Anti-malware measures; Regular software updates; Regular penetration and vulnerability tests ; Patches are applied appropriately and promptly ; Event logs recording network and systems activity, exceptions, faults and information security events
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We follow processes in our Network, Threat and vulnerability management control and intrusion detection procedures. This includes logging and monitoring. We ensure adequate event logs recording network and systems activity, exceptions, faults and information security events are produced, kept and regularly reviewed. Logging facilities and log information shall be protected against tampering and; unauthorised access. ; ; We follow our incident management process in the event of any incident (see next question).
• Incident management type: Supplier-defined controls
• Incident management approach: Crowdfunder has an Information Security Incident Management Policy and Procedure. There is a staged approach. Incidents are reported centrally to our IT team which escalates actual or potential security incidents to the Head of Development who is then responsible for classification and determining the most appropriate response to include: ; Identifying the incident, analysis to ascertain cause and vulnerabilities exploited.; Limiting/restricting further impact of the incident.; Tactics for containment.; Corrective action to repair and prevent reoccurrence.; Communication across the company to those affected. ; External communications if external users impacted.; All stages should be recorded and a post incident review conducted.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  Many Local Authorities and Government departments have formally accepted the climate emergency and set targets to become ‘net zero’ in terms of carbon emissions by specific dates (often 2030). As part of that Crowdfunder supports them to enable community projects with a focus on the climate emergency, or who can make a meaningful contribution to the race to net zero. They can do so by match funding the projects that fit their agreed criteria, securing inward investment from other Crowdfunder partners such as Aviva or British Airways, or by running specific cohort campaigns on the Crowdfunder platform with outcomes that target the climate emergency. In our experience the key benefits of these campaigns are: To generate greater awareness of the climate emergency and the response of local or central government to it To immediately generate funding for climate emergency initiatives, from the local community To engage citizens and encourage them to play a part to address the climate challenge
• Covid-19 recovery:

  Covid-19 recovery

  From closures and staff shortages to increased demand on services, charities and organisations across the UK have faced countless difficulties since March 2020. Many have had to reinvest their financial reserves to continue supporting their community, while being unable to fundraise in the usual ways. As restrictions have eased, life is slowly returning to the ‘new normal’. However, for these organisations, it’s not that simple. Continued demand combined with shortfalls in funding or staff mean that many will continue to feel the impact of Covid-19 for some time. To aid in recovery Crowdfunder partners with organisations such as the National Emergencies Trust, Aviva, Sport England, Ireland and Wales as well as the crowd to help voluntary and community organisations access crowd funding and match-funding to help them continue making a real difference to people across the UK. for example, in 2020 Crowdfunder and its partners responded to the lock down within hours: £7m was raised for projects directly affected by Covid-19, £5.8m for the NHS and PPE requirements, £2m for foodbanks and £4.4m for sports clubs. Should any new emergency emerge Crowdfunder can quickly adapt to respond to the new need.
• Tackling economic inequality:

  Tackling economic inequality

  The Crowdfunder platform is accessible to all and project owners need only prove their identity, comply with Crowdfunder’s terms of use and adhere to our guidelines in order to access our services and get started with their crowdfunding. As a result of this inclusive, easy to access approach the site is used widely - from small grassroots organisations needing a couple of hundred pounds to organise a litter pick or a coffee morning, to the widely publicised Save Our Stables campaign which raised over £1m for an inner city stables serving disabled participants. Through the Community Business Crowdmatch fund Crowdfunder has been supporting community owned trading enterprises to raise finance through crowdfunding with match funding from Power to Change. This programme has KPIs to track the support provided through funding to organisations in deprived areas and to BAME led organisations. At the end of the latest reporting period the fund had been allocated as: IMD 1-3: 77% IMD 1: 17% BAME Led: 20% Crowdfunder’s Active Together partnership with Sport England is proving effective in reaching groups from both diverse and deprived communities. Match funding at 50% is being prioritised for organisations based in IMD deciles 1-3 and/or those reaching the target groups including BAME, LoSEG and disabled communities. All projects receive the range of support available, including one to one coaching from our expert sports coach to get over any barriers, and build confidence through the approach. As a result, the average award value is higher in more deprived communities.
• Equal opportunity:

  Equal opportunity

  Internal: Crowdfunder is fully committed to providing equality in the workplace and all opportunities for, and during employment, will be afforded to individuals fairly and irrespective of age, disability, gender, gender reassignment, marital or civil partnership status, pregnancy or maternity, race including colour, ethnic or national origins and nationality, religion or belief or sexual orientation. We aim to create a working environment that is free from discrimination and harassment in any form, in which all staff are treated with dignity and respect. External By design, Crowdfunder works with local authorities and other funders to encourage communities and not-for-profit organisations to be actively involved in developing projects that improve local areas, outcomes for local people, and which contribute to addressing inequalities for their residents, workers and visitors.

Pricing

• Price: £28,000 to £95,000 a licence a year
• Discount for educational organisations: Yes
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jason@crowdfunder.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.