XUNLOCKED LIMITED

Data Unlocked

Data Unlocked empowers organisations to build critical data and generative AI capabilities enterprise-wide through expert-led, on-demand video platforms. Focusing on Data & AI it delivers targetted training. Supported by in-house specialists, Data Unlocked ensures training is precisely curated and targeted to meet specific strategic goals and learner needs.

Features

• On-demand Data & AI Training: Expert-led video building digital literacy
• On-demand Compliance Training: Expert-led video learning covering regulatory standards
• Bite-sized data and generative AI video training
• Curation Services: In-house experts tailor content to specific organisational needs
• xUnlocked Studios: bespoke video production tailored to your needs
• AI-enabled ‘Ask the Expert’: Real-time tutoring for immediate, expert-led support.
• Real-time Analytics dashboard: tracking team progress and engagement metrics
• Seamless Technical Integration: SCORM, SSO, and API connections
• Automated CPD Tracking: Monitor progress by modules, hours, or credits

Benefits

• Build data literacy at scale through on-demand video learning.
• Accelerate strategic decision-making using current, expert-led industry insights
• Streamline professional development with automated CPD and credit tracking
• Reduce training administrative overhead through seamless LMS technical integrations
• Onboard new employees faster with structured, role-specific learning pathways
• Ensure regulatory compliance with frequently updated, specialist-led video content
• Personalise learner journeys using expert-curated content for specific roles
• Drive capability initiatives by building enterprise-wide data literacy.
• Access expert guidance instantly via the AI-enabled tutoring feature
• Monitor team performance live with real-time data and engagement analytics

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ben.laycock@xunlocked.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

218722403722251

Contact

Ben Laycock
07595982600
ben.laycock@xunlocked.com

About your service

• Service categories:

  Applications

  Enterprise resource management

  Human capital management

  • Talent Management Applications
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Data Unlocked integrates seamlessly with existing Learning Management Systems (LMS) and HRIS platforms via SCORM, xAPI, API, and SSO. This allows organisations to embed expert-led video content directly into their internal ecosystems, streamlining learner access and management.
• Cloud deployment model: Public cloud
• Service constraints: None
• System requirements:
  • Up-to-date modern web browser
  • Older unsupported legacy browsers (Internet Explorer)are not supported.

User support

• Email or online ticketing support: Yes
• Support response times: We respond to all inquiries sent to support@xunlocked.com within one working day (Monday–Friday), excluding UK bank holidays.
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.2 A
• Web chat accessibility testing: We currently support the latest versions of the following browsers:Chrome 30+,Firefox 27+,Microsoft Edge, Microsoft Internet Explorer 11+ with JAWS on Windows 7+ and Safari 9+ on Apple devices with VoiceOver on OSX+
• Onsite support: No
• Support levels: Our enterprise support model focuses on high-touch, pedagogically-driven guidance to ensure seamless adoption. This comprehensive level of service is fully included in your licensing cost, ensuring no hidden fees for strategic expertise.; ; We assign a dedicated Customer Success Manager (CSM) with a pedagogical background who orchestrates your entire technical journey.; ; Strategic Engagement; 1Your CSM ensures continuous alignment through a structured communication cadence:; 2. Bi-weekly calls or monthly meetings to track immediate progress.; 3. Quarterly Business Reviews (QBRs) to evaluate long-term strategy.; 4. Business Impact Surveys to measure tangible ROI.; ; Technical Support Structure; Your CSM acts as a single point of contact, bringing in the following specialised resources:; 1.Integration Specialists: For integration support ; 2. Content Curation Specialists: To design learning pathways suited to your skill requirements; 3. Video Production Specialists: To produce bespoke videos tailored to your organisation; 4. Specialised Pedagogical Support: Your CSM utilises their educational expertise to deliver impactful learning interventions; ; As standard there is also Customer Support va Widget / Email.
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: Direct Access: Users log in at DataUnlocked.com using a unique organisational link provided to your team.; ; Single Sign-On (SSO): Provides a seamless login experience once the SSO integration is configured between Data Unlocked and your organisation.; ; SCORM / xAPI: Learners access content via your organisation’s own Learning Management System (LMS). This is enabled once the files have been successfully uploaded by your LMS administrator.
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: When the contract ends, users can extract their data via the web interface or API, and we can also provide CSV data extracts in required formats as part of the exit process.
• End-of-contract process: At the end of the contract, access to the service is terminated in line with the agreed notice period, and users can export their data via the web interface or API, with CSV extracts available on request as part of the exit process. The contract price includes access to the platform and standard support, while any bespoke services such as customised data extracts, additional reporting requirements, or non-standard onboarding/offboarding support may incur additional costs.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: There are no differences between the mobile and desktop services, and the website is fully optimised for mobile use.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: The service interface is a web-based platform accessed through a standard browser, enabling learners to complete assigned learning and managers to assign content and monitor progress and completion through reporting.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: We currently support the latest versions of the following browsers:Chrome 30+,Firefox 27+,Microsoft Edge, Microsoft Internet Explorer 11+ with JAWS on Windows 7+ and Safari 9+ on Apple devices with VoiceOver on OSX+
• API: Yes
• What users can and can't do using the API: The API is primarily designed to support integrations, reporting and analytics into a customer’s own systems (for example, an LMS, LXP, or BI tool). Users set up the service by obtaining API credentials and configuring their system to connect to the REST API endpoints to retrieve reporting data and analytics. Users cannot make changes to configurations, only request reports where parameters or filters are applied, and how frequently data is synchronised. The API is reporting-focused and does not act as an administrative interface for configuring the service itself.
• API documentation: Yes
• API documentation formats: HTML
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Content Control Administrators can restrict the content available to learners. This is managed in collaboration with the Data Unlocked support team via our back-end system.; ; Curation and Assigned Learning Customisation is typically achieved through specialised curation based on your organisation’s skill requirements. Using the ‘Assigned Learning’ functionality, admins can easily manage off-the-shelf content at a User, Team, or Organisational level. This includes assigning CPD credits, pathways, hours, and specific videos.; ; Bespoke Integration - you can also incorporate custom created content into the platform using our in-house design team, xUnlocked Studios. This material is hosted seamlessly alongside our existing library.; ; User Experience Learners can personalise their experience through their 'Home' dashboard, where they can manage their watchlist and navigate to relevant learning paths.; ; We offer the option to build a fully white-labelled, bespoke product tailored to your organisation. Please note that this sits outside our standard "out-of-the-box" service.

Scaling

• Independence of resources: We use automated scaling on our cloud infrastructure to add capacity as demand increases, and we continuously monitor performance so traffic spikes from one set of users do not degrade service availability or response times for others.

Analytics

• Service usage metrics: Yes
• Metrics types: We provide comprehensive metrics at an Organisation, Team, and User level, available through both ‘Manager’ and ‘Learner’ views. Data is tracked from the start of the engagement to the present day and includes:; ; Learning Hours: Total time spent training.; ; Modules Completed: Number of finished video modules.; ; Learning Sessions: Frequency of platform engagement.; ; Learning Profiles: Analysis of specific skills and categories accessed.; ; CPD Credits: Total professional development points earned.; ; For a more gamified experience, Leaderboards are also available to encourage healthy competition and engagement.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type: Data Erasure

Data importing and exporting

• Data export approach: Users can export their data through the web interface or by retrieving it via the API.
• Data export formats:
  • CSV
  • Other
• Other data export formats: JSON
• Data import formats:
  • CSV
  • Other
• Other data import formats: JSON

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: We guarantee 99.9% uptime (24/7/365 availability). If uptime falls below a 99% threshold within a monthly measurement period, service credits are issued as a percentage of the annual subscription fee for the measurement period in question:; ; 98% – 99%: 5% credit; ; <98%: 10% credit (capped); ; Credits are issued via credit note within 30 days of notification.
• Approach to resilience: Our platform is served on a serverless architecture and will scale automatically based on demand.
• Outage reporting: Service Level Reports are available on https://status.sustainabilityunlocked.com/

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces is restricted through role-based permissions and authenticated user accounts, ensuring only authorised users can administer the service. Access to support channels is restricted to approved customer contacts and controlled through verified communication methods, ensuring only authorised users can raise requests or receive account-specific support.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: SYSTEM AND ORGANIZATION CONTROLS (SOC) 2 TYPE 2
• Information security policies and processes: We follow formal, documented information security policies and processes aligned to recognised industry standards, and these controls are independently assessed through SOC 2 and Cyber Essentials Plus certification and audit.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We follow an agile configuration and change management process where service components (application code, infrastructure, and configuration) are version-controlled and tracked throughout their lifecycle using documented environments, repositories, and deployment pipelines. Changes are requested, reviewed, tested, and deployed through controlled CI/CD workflows with traceability (tickets, pull requests, approvals, and release history). Security impact is assessed as part of the change process using peer review, secure coding standards, automated checks (including dependency and vulnerability scanning), and segregation of environments to validate changes before production release. Higher-risk changes follow enhanced review and testing to ensure security and stability are maintained.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: We operate a formal vulnerability management process to identify, assess, prioritise, and remediate security risks across our services. Potential threats are assessed through continuous monitoring of our infrastructure and applications, regular vulnerability scanning and penetration testing, and risk-based triage considering severity, exploitability, and business impact. Patches are deployed using controlled CI/CD release processes, with critical security patches prioritised for rapid deployment and lower-risk updates scheduled into regular maintenance cycles. Threat intelligence and vulnerability information is sourced from vendor security advisories, CVE/NVD databases, cloud provider security bulletins, automated dependency scanning tools, and findings from external security testing providers.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: We operate protective monitoring to detect and respond to suspicious activity across our services. Potential compromises are identified through continuous monitoring of logs, security alerts, and system health metrics, including authentication events, unusual access patterns, and abnormal traffic or configuration changes. When a potential compromise is detected, alerts are triaged, impacted systems are investigated and contained as required, and remediation actions are taken in line with our incident response process, including evidence collection and post-incident review. Incidents are responded to based on severity, with high-severity security alerts prioritised for immediate investigation and rapid containment.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: We follow a documented incident management process covering detection, triage, containment, remediation, and post-incident review. Pre-defined response procedures are in place for common security and service events, including escalation paths and severity-based prioritisation. Users can report incidents through approved support channels (for example email or ticketing), which are monitored and routed to the appropriate teams. Where an incident impacts users or their data, we provide timely updates and an incident report after resolution, including summary, impact, root cause, remediation, and preventative measures.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: We offer a 10-day free trial of Data Unlocked.com and its sub-products for initial evaluation. For deeper assessment, we provide structured 10–15 person pilots. These follow a formal consultation to ensure alignment with your organization’s business case and specific strategic goals.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 6665b57b-5929-46c8-b713-baf7b1c30c19
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 0023378b-06a9-44b9-bb84-1a348bb7bc0b
• Other security certifications: Yes
• Any other security certifications: SYSTEM AND ORGANIZATION CONTROLS (SOC) 2 TYPE 2

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ben.laycock@xunlocked.com. Tell them what format you need. It will help if you say what assistive technology you use.