Recite Me Checker
Scan domains against latest version of the Web Content Accessibility Guidelines (WCAG) - specifically, those success criteria which can be scanned programmatically. Tool provides dashboards on findings falling into each rating with suggestions on what to fix for the biggest improvements with resource hub of related information and reporting tools.
Features
- Scan for issues against Web Content Accessibility Guidelines
- Pinpoint the nature and location of issues against WCAG
- Provide guidance on how to fix WCAG issues
- Provide reporting over time to track improvement
- Provide rating (%) against WCAG
Benefits
- Help to meet WCAG (Web Content Accessibility Guidelines)
- Help to meet European Accessibility Act requirements
- Help to meet Public Sector Bodies Accessibility Regulations (2018)
Pricing
- Education pricing available
- Free trial available
Service documents
Request an accessible format
Framework
G-Cloud 15
Service ID
2 5 0 2 7 7 9 6 1 0 8 3 8 2 5
Contact
RECITE ME LIMITED
Sales Team
Telephone: 01914328092
Email: info@reciteme.com
About your service
- Service categories
-
Applications
Customer relationship management
- Digital commerce
- Customer service
- Multi cloud support
- Yes
Service scope
- Software add-on or extension
- No
- Cloud deployment model
- Private cloud
- Service constraints
- None
- System requirements
- None
User support
- Email or online ticketing support
- Yes
- Support response times
- Initial response in 4 working hours
- User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Onsite support
- No
- Support levels
-
The Recite Me Checker service includes access to our support team FOC with a subscription.
They will assist with any system or access issues.
We provide dedicated Customer Success Manager(s) who co-ordinate with our support function on behalf of clients. - Support available to third parties
- Yes
Onboarding and offboarding
- Getting started
- Recite Me provides detailed implementation guides, along with up to 0/5 days of implementation support via our onboarding team.
- Service documentation
- Yes
- Documentation formats
-
- HTML
- End-of-contract data extraction
- Users are able to export WCAG test results for the duration of their contract (CSV). Upon contract expiry access to the system is removed.
- End-of-contract process
- The buyer no longer has access to the Checker service. No additional costs
- Documentation accessibility standard
- WCAG 2.2 AA
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Opera
- Other
- Application to install
- No
- Designed for use on mobile devices
- No
- Service interface
- No
- User support accessibility
- WCAG 2.2 AA
- API
- Yes
- What users can and can't do using the API
- The system allows for API connections to 3rd party ticketing tools such as Jira and Devops - allowing clients to move WCAG issues through to internal and external teams via their preferred ticketing system.
- API documentation
- No
- API sandbox or test environment
- No
- Customisation available
- No
Scaling
- Independence of resources
- Pro-active monitoring with capacity increased as needed.
Analytics
- Service usage metrics
- Yes
- Metrics types
- System admins are able to see last login information for their users.
- Resource tagging
- No
- FOCUS resource tagging
- No
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Developed Vetting (DV)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
-
- United Kingdom
- European Economic Area (EEA)
- Other locations
- User control over data storage and processing locations
- Yes
- Datacentre security standards
- Managed by a third party
- Penetration testing frequency
- At least once a year
- Penetration testing approach
- ‘IT Health Check’ performed by a CREST-approved service provider
- Protecting data at rest
- Encryption of all physical media
- Data sanitisation process
- Yes
- Equipment disposal approach
- A third-party destruction service
- Data sanitisation type
- Deleted data can’t be directly accessed / Cryptographic Erasure
Data importing and exporting
- Data export approach
- The checker allows for exporting of WCAg scan results through the duration of the contract.
- Data export formats
- CSV
- Data import formats
- Other
- Other data import formats
- N/A
Data-in-transit protection
- Data protection between buyer and supplier networks
- TLS (version 1.2 or above)
- Data protection within supplier network
- TLS (version 1.2 or above)
Availability and resilience
- Guaranteed availability
-
99.9% guaranteed uptime.
SLAs describe how we treat the severity of issues, including timescales.
Service credits provided should levels of availability not be met. - Approach to resilience
- Available on request
- Outage reporting
-
From a practical standpoint any user would be able to see the service wasn't working as it would not launch.
From a company perspective, we would communicate to clients through their preferred method - usually email to a specific named contact.
Identity and authentication
- User authentication needed
- Yes
- User authentication
- Multi-Factor Authentication (MFA)
- Access restrictions in management interfaces and support channels
-
Client Admins can add or remove users as needed.
We as the supplier can add users and admins to client accounts. - Access restriction testing frequency
- At least once a year
- Management access authentication
- Multi-Factor Authentication (MFA)
Audit information for users
- Access to user activity audit information
- No audit information available
- Access to supplier activity audit information
- No audit information available
- How long system logs are stored for
- At least 12 months
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
- Other
- Other security governance standards
- Cyber Essentials Plus
- Information security policies and processes
- We have aligned our to ISO27001 framework. Policies and procedures are signed off by the CEO and include clear roles, responsibilities and reporting lines. Happy to provide copies given word count limitation here. Ensuring policies are followed includes measure such as internal audits, regular mandatory staff training on information security and mandatory induction training.
- Software Security Code of Practice
- Yes
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
- We have a documented change management policy that ensures any changes are reviewed for security impact and approved by authorised senior team manager(s).
- Vulnerability management type
- Supplier-defined controls
- Vulnerability management approach
- We have vulnerability management scans on end-user devices and external scanners of our network. Scans run on set schedules throughout the year, in addition to annual penetration testing. We have endpoint management software to deploy any patches.
- Protective monitoring type
- Supplier-defined controls
- Protective monitoring approach
- Endpoint protection software to detect compromises across our environment, alongside an enterprise firewall with IDS and IPS enabled. Documented Information Security Incident Management Procedure sets out our responses to any incidents. Clients are notified within 24 hours of any incident that may affect them. Happy to provide as needed, as constrained here by word count limit.
- Incident management type
- Supplier-defined controls
- Incident management approach
- Our information security incident management procedure defines our detection methodologies, including user reports or technical alerts. We then have containment, eradication and recovery stages. Incident reports are provided as part of our post-incident activity, which includes lessons learned. All affected clients are notified within 24 hours of the incident.
- Post-quantum cryptography secure
- No
Secure development
- Approach to secure software development best practice
- Conforms to a recognised standard, but self-assessed
Public sector networks
- Connection to public sector networks
- No
Pricing
- Discount for educational organisations
- Yes
- Free trial available
- Yes
- Description of free trial
- Trial periods permitted on non-live environments
Discount percentage by annual call-off contract value (excluding VAT)
- Less than £250,000
- 0%
- Between £250,000 and £500,000
- 5%
- Between £500,001 and £1,000,000
- 10%
- Between £1,000,001 and £2,500,000
- 20%
- Between £2,500,001 and £5,000,000
- 25%
- Over £5,000,001
- 25%
Non-mandatory Standards and certifications
- ISO/IEC 27001 certification
- No
- ISO 28000:2022 certification
- No
- ISO 9001 certification
- No
- Quality management systems (QMS)
- Yes
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Please provide your Cyber Essentials Certificate Number
- Fda1bee2-5c4b-4cfa-9c23-07f60fe21b57
- Cyber essentials plus
- Yes
- Please provide your Cyber Essentials Plus Certificate Number
- Cd2ea6cd-ba59-4bfe-919e-fc70696743c5
- Other security certifications
- No
Social value
- Section B - Commitment for Future: Delivery
-
-
Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 6: Employment and training: For those who face barriers to employment
- Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
-