Optigo

Movit

Movit is a platform for managing home-to-school transportation that ensures efficiency in planning and managing transport for both mainstream and SEN students. Its features include route optimisation, passenger management, integration with taxi companies for real-time updates on all ongoing trips, driver applications, reporting capabilities, and more.

Features

• Route Optimisation
• Route Management
• Integration transport providers for real-time route updates
• Parent Portal Allows parents to manage, cancel trips
• School Portal Allows schools to manage passenger profiles
• Mass SMS sending - Send mass messages EG snow days
• Two-way SMS between parents and the transport team
• Driver app - for internal fleets - If required
• BI Reports

Benefits

• Integration removes need to contact transport provider with trip changes
• Parent Portal gives parents a real-time view of ongoing trips
• SMS Communications reduces the number calls to the transport team

£23,000 a licence

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ciaran.kelly@optigo.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

188008273612398

Contact

Ciaran Kelly
07340532931
ciaran.kelly@optigo.co.uk

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: When using Movit, there are very few limitations or factors to bear in mind. All maintenance tasks are performed outside of business hours. Prior notice is always given to users before any work is undertaken, so they are unlikely to encounter any restrictions. Additionally, platform updates occur every two weeks, also scheduled outside of business hours.
• System requirements: All licenses etc. are included in the price

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Tickets will be processed during business our hours Monday to Friday. Critical support EG system down will be dealt with via an out of hours phone call which is 24/7 365
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AAA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Critical support (system down etc) is a 24/7 365 service via an support phone number. ; Standard support is provided via an Email and Ticketing system which will be processed Monday to Friday 9-5; Onsite support comes at an extra charge
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Once our customers join us, they will be allocated a project manager who will communicate with the customer project team and create a project plan. Training is conducted in a hybrid manner. Typically, simpler modules are delivered online via Teams, while more complex features, such as route optimisation configuration, are discussed in person. Training manuals are supplied, and access to our knowledge base in Zendesk is also provided.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Utilising our BI Tool, Metabase, allows for data extraction. Alternatively, our data team can directly extract data from the database and deliver it to the customer in their preferred format.
• End-of-contract process: If our customers choose to terminate the contract, we will agree upon a termination date and establish a plan for discontinuing services and extracting and providing data to the user. After completing this process, all data will be removed from our platform, unless there is a requirement to retain it for an extended period, which may incur a nominal fee.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: WCAG 2.1 AAA
• Description of service interface: We provide web interfaces to our customers to access our system. We also have an API interface that allows for 3rd party systems to connect to ours
• Accessibility standards: None or don’t know
• Description of accessibility: Testing in the future
• Accessibility testing: Not carried our as of yet
• API: Yes
• What users can and can't do using the API: Trips can be created, modified and cancelled via the API also it is possible to import passengers, cars, drivers and accounts and manage updates via the API
• API documentation: No
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: We are a SAAS company and are continually developing features and modules to meet the demands of our customers.

Scaling

• Independence of resources: Our service is spec'd at the outset of the contract and instances are created with higher resources than required.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: No
• Equipment disposal approach: In-house destruction process

Data importing and exporting

• Data export approach: Data be extracted via our BI tool Metabase using SQL or alternatively our data team can extra any data on demand.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: We guarantee that the service will be available and operational for approximately 99.9% of the total time within a given period, typically measured over a month or a year. This translates to a downtime of approximately 8.76 hours per year, or around 43.2 minutes per month. While we aim to maintain consistent uptime, occasional maintenance and unforeseen issues may result in temporary interruptions to the service. However, we commit to promptly addressing any such issues to minimise downtime and ensure reliable access to the system for our users.
• Approach to resilience: Available on request
• Outage reporting: API and Email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: Role based permissions for management interfaces and digital invites to our support channels
• Access restriction testing frequency: At least once a year
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: We are in the process of getting iso27001 via Microsoft Cyberday
• Information security policies and processes: We follow the practices set out in Microsoft cyberday

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We use several tool to assess threats in our software. These tools include static code analysis to find code level security threats. We use automation tools to identify potential weaknesses in 3rd party packages.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Automation tools to assess our code for weaknesses, a weekly new code review meeting that includes security threat analysis. ; Code deployment depends on the situation, High threat cases are deployed immediately and lower case instances are deployed in our biweekly update cycle. ; We have extensive monitoring of potential threats and we also use Microsoft Azure recommendations and tools
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We identify potential compromises using Microsoft Azure Tools and recommendations. ; Analyse the threat level and decide if patch needs to be rolled out immediately or should it be part of the software rollout cycle. ; We have 24/7 manned support should there be an instance that requires immediate action.
• Incident management type: Supplier-defined controls
• Incident management approach: We follow Azure and Cyberday processes for common events; Incident are reported by the users via ticketing system or by phone on 24/7 hotline, ; A full report is provided after the incident via email. The report contents will include the incident, what actions were taken and the potential impact to the customer.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Fighting climate change

  Fighting climate change

  Our Route Optimisation Engine enables the consolidation of trips, resulting in a reduced requirement for vehicles, fewer miles travelled, and a decrease in the CO2 emissions necessary to fulfil school contracts.

Pricing

• Price: £23,000 a licence
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Full end to end system for trial period

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ciaran.kelly@optigo.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.