Unity Five Limited

Zatpark

Zatpark by Unity5 revolutionises parking enforcement for Customers, reducing operational costs and enhancing efficiency. With complete control over the enforcement lifecycle, seamless integration, and real-time monitoring, Zatpark simplifies parking management with automated processes and tailored solutions, freeing up resources to focus on improving customer service.

Features

• Lifecycle Automation: Automated ticketing, appeals, payments, legal, and debt resolution.
• Cloud-First Platform: Cloud-hosted system for 99.97% uptime.Permit management
• Zatpark Node Flow: Visualises ticket progression for quick insights.
• Third-Party Integration: Seamlessly integrates with existing systems.
• Scalability: Tailored solutions for operations of any size.
• Easy Integration: Works with existing hardware and software.
• Real-Time Monitoring: Provides control and visibility in real-time.
• User-Friendly Interface: Simplifies operations with a single dashboard.
• Advanced Reporting: Detailed reports for informed decision-making.
• Cost-Effective: Reduces operational costs while enhancing efficiency.

Benefits

• Cost Reduction: Zatpark automation lowers operational costs for Customers
• Enhanced Efficiency: Streamlining processes improve efficiency in parking management.
• Complete Control: Zatpark offers full lifecycle control of parking contraventions.
• Service Focused: Automation frees up teams, improving customer service.
• Cloud-Based: Simplifies enforcement with a cloud-first platform.
• Visual Progression: Zatpark Node-Flow provides visual insight into ticket status.
• Seamless Integration: Third-party system integration ensures smooth operations.
• Tailored Solutions: Flexibility to suit operations of any size.
• Non-Proprietary: Easy integration without proprietary hardware or software.
• Real-Time Monitoring: Detailed reports enable informed decision-making.

£1,750 an instance a month

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Tenders@Zatpark.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

278273572967671

Contact

Sales
0333 344 0834
Tenders@Zatpark.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: No
• System requirements: Modern web browser

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Our support team have four levels of severity with specific SLAs to be met. Service credits are available for underperformance. ; P1 - Critical Incidents - Response within 1 hour ; P2 - Major Incidents - Response within 2 hours. ; P3 - Moderate Incidents - Response within 8 hours ; P4 - Minor Incidents - Response within 16 hours.; Out of hours support is provided for P1 - P2 cases, with the online portal monitored between 8 a.m. to 10 p.m. 7 days a week.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Our support offering is fully inclusive as part of our service. ; We provide a robust escalation process and communicate updates at regular intervals to our customers. A point person is designated on our side as the point of contact for the customer. In most cases, this will be the Technical Account Manager, with access to a cloud support engineer. This escalation process operates within our core working hours, however, should an incident escalation process be activated outside of core hours, we have on-call staff at different levels of escalation who will manage this process. This is part of our business continuity plan. ; In case resolution is delayed or the severity increases, incidents will be escalated to the Team Leader for expedited attention.; ; Initial point of escalation: Customer Support Manager; Secondary point of escalation: Director of Implementation; Tieriary point of escalation: Chief Commercial Officer ; ; Where applicable, escalations are made to the Heads of Department for resolution, for example, should there be a need to escalate a technical issue, this would be raised to the Director of Engineering.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Unity5 provides a fully supported implementation service, following our DRIVE methodology:; Define: In this introduction phase, the scope of the project is fully confirmed and a project plan created with the target dates for the project.; Refine: This stage Includes all workshops to agree the configuration of the system and any integration requirements for build. A specification document is created and signed off to continue to the next stage.; Implement: Unity5 configures the system according to the specification and provides project team training, enabling customers to become experts in the system. Unity5 fully tests set-up before releasing it to the customer for review.; Verify: Unity5 supports the customer testing process to sign off on configuration and help make any changes to fit any final processes.; Execute: After sign-off for launch, Unity5 delivers end-user training to all system users. Training can be onsite, remote, or a combination of both depending on customer needs, and we have a knowledgebase of content for all users to access for reference.; Our experienced implementation team ensures customers are fully supported and self-sufficient before transferring them to the support team post-go live.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Firstly, we require the new provider to provide a Google account, leveraging Google Cloud Storage (GCS) for secure and high-performing data transfer. This ensures seamless migration while upholding data integrity and confidentiality.; We will then provide a complete database backup and start a periodic synchronisation of “flat files” to a shared GCS bucket. These flat files, include crucial data, such as images, documents, and video.; On the agreed last date of system use, we finalise the off-boarding process. We deliver the final database backup, ensuring no loss of critical information. Additionally, we perform the last synchronisation of flat files to guarantee that all essential data is seamlessly transferred to the new provider.
• End-of-contract process: The Unity5 off-boarding process prioritises security, efficiency, and transparency. Firstly, we require the new provider to provide a Google account, leveraging Google Cloud Storage (GCS) for secure and high-performing data transfer. This ensures seamless migration while upholding data integrity and confidentiality.; We will then provide a complete database backup and start a periodic synchronisation of “flat files” to a shared GCS bucket. These flat files, include crucial data, such as images, documents, and video.; On the agreed last date of system use, we finalise the off-boarding process. We deliver the final database backup, ensuring no loss of critical information. Additionally, we perform the last synchronisation of flat files to guarantee that all essential data is seamlessly transferred to the new provider.; Moreover, we maintain accessibility to data for a grace period of 30 days post-transition. This allows ample time for any unforeseen circumstances or data retrieval needs. Our commitment extends beyond the transition phase, ensuring our customers’ peace of mind and continuity of operations.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The Zatmobile handheld application is used to provide input into the Zatpark back-office system which is accessible via a desktop with a modern web browser. ; The Zatpermit portal is accessible from any device with a modern web browser and the information provided can be accessed on the Zatpermit back-office system to review / decline / or approve permit applications. The Zatmobile application also receives session information on permits through virtual allow-lists. ; The motorist portal can be accessed via any device with a modern web browser and provides information that is sent to the Zatpark back office for appeals processing.
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: Provision of our SaaS solution is accessed via a sophisticated best practice guided user interface. This interface facilitates the actions required for their parking management operation including oversight of the automatic case progression, responding to customer queries or appeals, and generating or accessing reports.
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: UX / UI design is incorporated into all new development planning and testing. Design planning includes accessibility assessments for assistive technologies.
• API: Yes
• What users can and can't do using the API: - Users generate a key within the system and integrate our API specification.; ; - Users can make a subset of actions through the API, representing the set of common functionality across frequently used business objects, including tickets and sessions. ; ; - There are limitations on how users can set up or make changes through the API, controlled by a sophisticated, customisable permission model.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • PDF
  • Other
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: All Zatpark platforms including parking management system and permits are fully configurable giving users the flexibility to make customised changes themselves. Although, our support team are also available to enable changes to be made to the system to meet your requirements.; The system will be configured to your needs during the implementation set up stages of the contract. All application portals can be branded and delivered in line with the customers corporate style guidelines, reflecting the customers branding.

Scaling

• Independence of resources: We leverage cloud based managed services where possible for all operations in order to assure scalability, resilience, redundancy and security. This ensures that we are able to scale with user demand and growth over time.

Analytics

• Service usage metrics: Yes
• Metrics types: We log and audit the state of all data moving through the system and use this as these metrics as a basis for business intelligence and financial reconciliation
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Users can export data by system provided .CSV or PDF exports, and via available API.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • Word
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • API (XML JSON)
  • PDF

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: 99.99% is our standard offering for availability, and we negotiate any refunds for users if we do not meet these guaranteed levels on a case-by-case basis.
• Approach to resilience: - No single point of failure; - All services are fully redundant, with at least two instances of each database on separate servers and/or zones.; -Use of managed services where possible, e.g. cloud storage
• Outage reporting: A public dashboard and email alerts are provided, and we also have a service availability status page which provides updates on service availability ( https://status.zatpark.com/ ). A comprehensive process is in place for informing customers of any outages, interruptions or service degradations.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Users can shutdown support access to their account. By default all accounts are restricted. There are user permission levels which dictate whether management interfaces are visible to users.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Standards Institute
• ISO/IEC 27001 accreditation date: 11/03/2024
• What the ISO/IEC 27001 doesn’t cover: The ISMS applies to the Unity Five premises. This includes our internal IT infrastructure, including implemented open source software and internally developed tools or software relating to internal non-product infrastructure and the operational support for the delivery of technology solutions for business and industry. This also includes the physical environment and people supporting these business functions.; The scope covers Unity Five offices as well as internal cloud based servers. It also applies to any remote working location where employees can access business data and assets. This does not cover the Zatsuite of products.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: PCI Security Standards Council
• PCI DSS accreditation date: 15/01/2024
• What the PCI DSS doesn’t cover: Our PCI DSS certification only covers our payment gateway offering
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: We use industry standard policies and procedures.
• Information security policies and processes: We have a set of policies, including:; - GDPR Data Security Breach Policy; - GDPR Data Retention Policy; - GDPR Data Protection Policy; ; Our Compliance Officer is responsible for the implementation and monitoring of all Unity5 policies and data security practices and maintains a detailed reporting structure.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: - Requirements gathering; - Product approval estimation and entry to the product backlog; - Prioritisation and detailed design; - Entry to the agile software development lifecycle (SDLC) with special attention given to security and treatment of PII ; - QA process and deployment; - Business release
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: - Daily scanning of system; - Patch management for all production resources is scheduled and requires no downtime. Any zero-day patching requirements identified by either the penetration testing or other security notification method are acted upon immediately.; - Email alerts if a threat is detected
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: - We use server monitoring, from both Google Cloud Platform and an external monitoring service.; - provider metics are complimented by those derived from our own data and business intelligence as to provide commentary on the internal workings of the system and identify any unusual behaviour .; -Any identified issues are dealt with in line with their severity and our business continuity and disaster recovery process.
• Incident management type: Supplier-defined controls
• Incident management approach: - Yes we have pre-defined processes for common events ; - Users report incidents through the Unity5 Helpdesk Support Line; - We provide regular reports to our customers which include incident reports

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Other
• Other public sector networks: TEC

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Unity5 is committed to minimising our impact on the environment and being ethical in our business choices. We are on our journey to support, enhance and safeguard our communities and environments. We also support our clients, stakeholders, and partners to achieve their own environmental protection and social responsibility targets.; We are committing to supporting the UK Government’s Net Zero decarbonisation strategy and aim to reduce our emissions by half by 2030 and meet the UK’s net zero target by 2050.; Unity5 achieved ISO 14001 in 2023 and as a business we set our yearly objectives which has a key focus on reducing our environmental footprint, this is spearheaded by our Sustainability Champion, Shannon Moody, who ensures we meet and exceed our targets. As a business we have already made great strides in reducing our carbon footprint and have introduced initiatives including hybrid working and cycle to work schemes to reduce our travel emissions. In addition, to continue to offset our carbon emissions, we have partnered with Treeapp who plant trees across the world.; We have also made the pledge to eliminate all single use plastic used within the business having become a Plastic Free Approved Status business. We aim to work with businesses who are environmentally friendly and have similar standards to ourselves. We partner with providers including Royal London and Vitality who have a comprehensive ESG strategy.; When tendering or working with councils, we endeavour to incorporate contributions to charitable causes that where applicable align to our above strategies, including items like beach cleans.

  Tackling economic inequality

  Unity5 recognises that economic inequality undermines social cohesion and restricts opportunity. In our commitment to address this challenge, we prioritise initiatives aimed at fostering economic empowerment and inclusivity within communities. Our approach encompasses:; Implementing fair and transparent recruitment processes that prioritise diversity and inclusivity, ensuring equal access to employment opportunities regardless of socio-economic background.; Collaborating with local training providers and educational institutions to offer skills development programs and apprenticeships, providing pathways to employment for individuals from marginalised or disadvantaged backgrounds.; Partnering with local businesses and social enterprises to create supply chain opportunities, promoting economic resilience and sustainability within the community.; Providing financial support or grants to grassroots initiatives that address the root causes of economic inequality, such as access to affordable housing, healthcare, and childcare services.; Advocating for policies and practices that promote fair wages, employee benefits, and opportunities for career advancement, thereby narrowing the gap between the wealthiest and the most economically vulnerable members of society.; Through these efforts, Unity5 aims to contribute to the creation of a more equitable and inclusive society where every individual has the opportunity to thrive and succeed.

  Equal opportunity

  At Unity5, we are dedicated to promoting equal opportunity for all individuals, irrespective of their background, identity, or circumstances. We believe that diversity enriches communities and fosters innovation and resilience. To uphold this principle, we are committed to:; Implementing proactive diversity and inclusion policies across our organisation, ensuring that all employees have equal access to opportunities for professional development, advancement, and recognition.; Partnering with community organisations and advocacy groups to support initiatives that promote equality and combat discrimination, including campaigns to raise awareness of unconscious bias and systemic barriers.; Providing mentorship and networking opportunities for underrepresented groups, empowering them to overcome obstacles and achieve their full potential.; Collaborating with local schools and educational institutions to promote STEM (Science, Technology, Engineering, and Mathematics) education among marginalised or underprivileged youth, opening doors to careers in high-growth industries.; Advocating for the removal of barriers to entry in the workforce, such as affordable childcare, flexible working arrangements, and accessible transportation options, to ensure that everyone has an equal chance to participate and succeed in the economy.; By championing equal opportunity, Unity5 seeks to create a more inclusive and equitable society where all individuals can thrive and contribute their unique talents and perspectives.

  Wellbeing

  Unity5 recognises that holistic wellbeing is essential for individuals and communities to flourish. In alignment with this principle, we are committed to promoting physical, mental, and emotional wellness through various initiatives, including:; Providing access to employee assistance programs and mental health resources to support the wellbeing of our staff, acknowledging that a healthy workforce is essential for sustainable business success.; Partnering with healthcare providers and wellness organisations to offer preventative health screenings, workshops, and educational events focused on nutrition, fitness, stress management, and work-life balance.; Investing in the creation and maintenance of green spaces and recreational facilities within communities, promoting physical activity, social interaction, and relaxation.; Supporting initiatives that address social isolation and loneliness among vulnerable populations, such as elderly residents or individuals with disabilities, through befriending schemes, community activities, and technology training.; Promoting mindfulness and resilience-building techniques, such as meditation and mindfulness-based stress reduction programs, to enhance coping skills and emotional resilience in times of adversity.; By prioritising wellbeing, Unity5 aims to contribute to the creation of thriving, resilient communities where individuals can lead fulfilling and meaningful lives.

Pricing

• Price: £1,750 an instance a month
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Tenders@Zatpark.com. Tell them what format you need. It will help if you say what assistive technology you use.