ZUTEC INC. (UK) LIMITED

Construction and property management software

Zutec is a provider of cloud-based construction and property management software with over two decades experience in supporting contractors, housebuilders, developers, and asset owners manage building data. One platform provides solutions for document management, quality management, handover management and asset management, digitally connecting information across the building lifecycle.

Features

• Cloud-based remote access
• Single Sign On (SSO) & 2 Factor Authentication (2FA)
• Search Engine
• Folder Tree & Data Register
• Workflow & Forms
• Data Exports - PDF, XML, Excel
• Real-time Reporting, Dashbaords, Image Viewing and Mark Ups
• Mobile Field App with Offline Mode
• BIM application
• View 3D Models Linked to Cloud Data

Benefits

• Digitise multiple processes across the building lifecycle
• Quickly manage information in the field or in the office
• Centralised compliance platform for the Building Safety Act
• Enables Part L Photographic Evidence Compliance
• Single Source of Truth for construction and building data
• Easily share documents with all stakeholders including assessors and regulators
• Fill out inspections and forms from any device
• One audit trail of building information across life of asset

£1,000 to £20,000 a unit a month

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at maria.hudson@zutec.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

198026744339215

Contact

Maria Hudson
07967813429
maria.hudson@zutec.com

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Data Migration – We can migrate existing buildings data into the Zutec platform.; ; Digital Handover – We can support Handover with our Digital Handover Success Team
• Cloud deployment model:
  • Public cloud
  • Private cloud
• Service constraints: None
• System requirements:
  • Modern web browsers
  • Mobile Phones with current supporting operating systems.
  • BIM requires 25G free disk space 8 GB of RAM.

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Within 24 hours Monday to Friday.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: No
• Web chat support: No
• Onsite support: No
• Support levels: Zutec clients submit support tickets either via email (support@zutec.com) or via the support portal. Where clients use the portal they can track their tickets more easily.; ; Portal: Clients will have the ability to create either of the following; ; - Technical Support ; - Request a New Feature ; ; Email: When a client submits their request via email we have no ability to control the ticket. ; ; Support is categorised into the following:; ; P1: Critical: Interruption making a critical functionality inaccessible or a complete network interruption causing a severe impact on the software platform’s availability. Highest priority request. ; ; P2: Important: Critical functionality or network access interrupted, degraded or unusable, having a severe impact on the software platform’s availability. High Priority Request with strict deadline.; ; P3: Normal: Non-critical functionality is unusable or hard to use having an operational impact. ; ; P4: Low: Application or procedure unusable, or information request with no urgency.; ; P5: Very Low: Application of procedure is unusable, where a workaround is available.; ; For those that purchase it, Technical Account Management (TAM) hours can be provided but this is costed on an account by account basis, based on which solutions purchased, at what level (project or enterprise) and hours required.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Zutec has an implementation and onboarding team, which provides online training and user documentation. ; ; Super users are trained within each customer, who will then go on to train other users within the business. We find this works well at Zutec, as this allows there to be points of contacts within the customers, and means we can ensure training is focused on a few key users. ; ; The training team provide a thorough training programme to get the right people up to speed and fully engaged in the solution to ensure ongoing user adoption.
• Service documentation: Yes
• Documentation formats:
  • PDF
  • Other
• Other documentation formats:
  • Video
  • PowerPoint
• End-of-contract data extraction: If and when a contract ends, users can extract their data through a snapshot export, excel file or XML export.; ; User simply click export and choose excel to extract data. ; ; Users can also request a snapshot from the Zutec support team.
• End-of-contract process: At th end of the contract, platform access is removed and a snapshot can be requested.; ; Data should be exported within contract timeline at no extra costs.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Designed for mobile and and desktop, the mobile version is suitable for recent iOS and Android devices, and can be used in the field or on site to complete forms, checklists, and inspections, as well as capture evidence of work done or building maintenance, such as photographic evidence, as an example. ; ; The desktop version provides dashboards, which can be used for tracking project progress, managing subcontractors and suppliers, reporting and analytics, accessing an audit trail of building information or construction data, supporting decision-making, identifying gaps in data and understanding compliance.
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: APIs can be enabled by our Implementation team. At a high level our APIs allow push and pull of data and files and are in JSON format.
• API documentation: No
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Customisation is handled by the Zutec implementation and product teams, and applies to forms, workflow, as well as a features and new capabilities hen requested.; ; Users can request platform customisations, which are reviewed, scoped and prioritised based on the customisation and requirements to deliver the customisation. Customisations will be priced based on customisation request and effort on the team.; ; The Zutec platform itself provides standard templates, howeverr it is also highly configurable, and when implementation is scoped, configuration can be discussed, reviewed and priced to ensure the best solution is delivered for each customer.

Scaling

• Independence of resources: We have a fair usage policy, found here: https://zutec.com/fair-use-policy.; ; We also constantly monitor the service to ensure users are operating inside the remit of the fair usage policy. Any users that appear to be taking advantage of the system will be given a warning or service put on hold to ensure that all users are not impacted by the demand of other users.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Within the platform, users can click Export and Choose Excel to extract data.; ; Users can also request a snapshot from our support team.
• Data export formats: Other
• Other data export formats:
  • XML
  • Excel
  • HTML
  • PDF
• Data import formats: Other
• Other data import formats:
  • XML
  • Excel
  • PDF

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: An SLA is provided to enterprise customers, to support and sustain the Zutec Cloud Platform, and Field and BIM applications. ; The goal of the SLA is to obtain mutual agreement for software service provision between the Zutec and the Customer to:; - Provide clear reference to service ownership, accountability, roles and/or ; responsibilities.; - Present a clear, concise and measurable description of service provision to the ; customer.; - Match perceptions of expected service provision with actual service support & delivery.; ; As an example, the software platform will be operational and available to users 24/7 with an uptime SLA of 99.9% in any given month, not including scheduled downtime for maintenance.Where required, customers will be notified in advance of any planned unavailability.; ; All Zutec servers are located at secure hosting facilities within the UK and ; Ireland, unless another location has been requested in the contract. On-; premise installations are available if purchased and separate terms defined ; for these in the specific contract.; ; A backup of the Customer’s information including data held in the database is taken daily. Backups are stored in a mirrored hosting environment to allow for quick recovery.
• Approach to resilience: Our platform has dual, network, power redundancy.; ; All systems have redundant Disks with DR Servers running in standby mode; ; RTO: 6 Hours; RPO: 24 Hours
• Outage reporting: If there is an outage on the service we will report these via a public dashboard, and depending on the severity of the outage, we would also use email to communicate with customers.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: At Zutec, we have a strict onboarding / off boarding process and we test our systems access controls every month.; ; Our solutions also allow customers to restrict access to users, depending on the user type.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Public key authentication (including by TLS client certificate)
  • Limited access network (for example PSN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: Between 6 months and 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: NQA Global Certification Body
• ISO/IEC 27001 accreditation date: Issued: 3 Feb 2018: Reissued: 29 Jan 2024: Valid to : 31 Oct 2025
• What the ISO/IEC 27001 doesn’t cover: All aspects of the statement of applicability are in effect.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications:
  • BSI Kitemark in BIM Software
  • BSI security clause where security is audited every year.

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Fully applied ISO27001 with all clauses in effect.; ; Policies are defined by Security Officer. Information security statement is signed by the CEO and enacted by the senior management team down to all reporting lines.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: When changes are identified, they are then qualified by type and size and impact. Minor changes with low risk are implemented. Major Changes are risk assessed in accordance with ISO27001 risk methodologies. ; ; Changes are then approved and signed off and implemented.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: At Zutec we do regular vulnerability scans. If a vulnerability is detected, we have resolutions scoring... ; ; A priority 1 (P1) vulnerability = 24 Hour Resolution; A priority 2 (P2) vulnerability = 1 Week Resolution; A priority 3 (P3) vulnerability =3 Week Resolution; A priority 4 0r 5 (P3 or P 5) vulnerability = Within 1 Month; ; We receive vulnerability newsletters on the tech stack we use, these are reviewed daily.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: We run Firewalls with IDS & IPS; ; We also have a Gartner endorsed monitoring system running across our entire network which monitors problems on our Cloud infrastructure.; ; We respond to incidents as immediately, and the prioritise them to ensure quick resolution.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: We conform to ISO27001; ; The high level process at Zutec includes:; - Users report security issues to our support team; - They are escalated to Chief of Security; - Issue is classified and Investigated; - Issue is resolved.; - Users are kept in communication feedback with regular updates.; - Report is compiled and shared with customer.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Wellbeing

  Fighting climate change

  Providing solutions that support sustainability within the industry, we are committed to helping our customers fight climate change. ; ; As an example, our Part L Photographic Evidence solution enables housebuilders and developers to capture photo evidence and supplement with supporting documentation, to show that a house has been built to reduce carbon emissions as part of the uplifted Part L standard of Regulation 40. With evidence captured and documented throughout the build phase, evidence can be shared with SAP assessors for sign off and as-built BREL Report approval, to show EPC ratings and efficiencies. Our solution will be updated as the Future Homes Standard comes into force in 2025; ; Also, we can support our customers in documenting sustainability of buildings for ESG reporting and compliance, enabling user to provide evidence.

  Wellbeing

  By digitising building information, and the process of capturing building information, not only can Zutec support with delivering productivity and project efficiencies, but also help with the well-being of users such as our customers' employees.; ; Today manual and paper-driven processes are still used during the construction and maintenance of buildings, but by digitising forms, inspections, checklists and workflows, users can have a standard approach and process, which saves time, reduces human error and avoids rework or duplication of effort. All this supports in the well-being of employees, making task and inspection simpler and easier, ensuring they submit the right information first time, every time.

Pricing

• Price: £1,000 to £20,000 a unit a month
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at maria.hudson@zutec.com. Tell them what format you need. It will help if you say what assistive technology you use.