DYNAMIC VISUAL TECHNOLOGIES LIMITED

Full Stack Software Development

DVT specializes in software development on Azure using .Net core. Our Agile approach combines UX design, software development, and fast delivery. We have expertise in JavaScript, HTML, CSS, Python, Java, C#, Scala, C++, C, PHP, and Ruby. Our consultants use advanced programming languages and agile techniques to develop software solutions.

Features

• Cloud-based software development using IaaS/PaaS platforms.
• Open source solutions and test-driven development (TDD) incorporation.
• User-driven design and testing approach for business and user needs.
• Adherence to Government Design Principles for software development.
• Providing responsive websites, native apps, cross-platform, and progressive web apps.
• Agile methodologies for skill gap analysis and enterprise software development.
• Flexible resource mobilization and full development life-cycle capabilities.
• Fully automated software build, test, and deploy for continuous delivery.
• Automated testing for code quality, security, performance, and user experience.
• High-quality software delivery measured against ISO standards.

Benefits

• High-quality dev solutions, reduce support and bugs.
• UK, Romania, South Africa team, Azure, .NET Core, mobile-first software.
• Inclusive dev cycles, regular progress reviews.
• Cloud solutions, industry standards, best practices.
• Focus on quality assurance, testing, maximize ROI.
• Expertise in architecture, development, test, data, business analysis.
• Help with client systems knowledge and assets retention.
• Agile management platform for communication and collaboration.
• Solutions designed to achieve business goals efficiently.
• Committed to delivering best service to clients.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at DvtBidManagementOffice@dvtsoftware.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

279242395947098

Contact

Jason Bramsden
020 3422 3400
DvtBidManagementOffice@dvtsoftware.com

About the service

• Service categories:
  • Application Development and Deployment
    • Application development
      • Development languages, environments and tools
        • Development languages, environments and tools
      • Software construction components
        • Software construction components
      • Business rules management
        • Business rules management
      • Modelling and architecture
        • Object Modelling Tools
        • Business Process Modelling Tools
        • Enterprise Architecture Tools
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: Services outlined in this section are delivered through cloud platforms like AWS and Azure, or via hybrid solutions. DVT imposes no service constraints on the products described here, aside from the limitations specified in the Service Level Agreements (SLAs) and the software or hardware requirements of each provider.
• System requirements: Tool licensing is governed by the respective provider's terms

User support

• Email or online ticketing support: Yes
• Support response times: We offer SLA- and KPI-backed support solutions for cloud hosting and software services. Our approach combines agile and traditional practices to meet clients' needs optimally.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AAA
• Phone support: No
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Basic Support: Provides essential assistance during business hours. Includes access to documentation and community forums. Ideal for clients seeking self-help resources or general inquiries. Standard Support: Faster response times and extended coverage (often 24/7). Includes phone and email support. Helps with critical incidents and bug fixes. Premium Support: Dedicated technical account managers (TAMs) provide personalized assistance. Proactive monitoring and priority handling for critical issues. Suited for large enterprises or mission-critical projects. Enterprise Support: Custom SLAs, on-site assistance, and strategic guidance. Direct access to senior engineers and architects. Tailored for Fortune 500 companies or unique project requirements.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Online training, and user documentation
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
  • Other
• Other documentation formats: Markdown file format
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Once a subscription with a cloud provider ends, typically there is a set window in which users can extract their data. The exact terms will be specified by each client.
• End-of-contract data extraction: Once a subscription with a cloud provider ends, typically there is a set window in which users can extract their data. The exact terms will be specified by each client.
• End-of-contract process: Cloud Provider End-of Contract: Access Termination: When a cloud provider contract ends, access to services may cease. Data Retrieval: Data must be retrieved from the cloud environment. Renewal or Transition: Negotiate renewal or explore other providers. DVT's End-of Contract: Service Handover: Ensure a smooth transition of services, and relevant documentation. Knowledge Retention: Retain critical knowledge gained during the engagement. Contractual Obligations: Settle outstanding payments or fees.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: There are no differences, as everything is designed to be cross platform
• Service interface: No
• User support accessibility: WCAG 2.2 AAA
• API: Yes
• What users can and can't do using the API: Subject to the providers licensing and Api requirements
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Tailored to the customer's requirements within the limitations of the service provider.

Scaling

• Independence of resources: To ensure a positive user experience, cloud services implement strategies such as scalability, load balancing, and resource isolation. Scalability allows services to handle increased demand without performance degradation. Load balancing distributes requests across servers, preventing overload. Resource isolation allocates separate pools for different users, avoiding interference. Rate limiting and quotas prevent abuse, while caching and CDNs optimize content delivery. Clear SLAs and service guarantees maintain reliability, and monitoring with auto-scaling adapts to changing demands

Analytics

• Service usage metrics: Yes
• Metrics types: https://learn.microsoft.com/en-us/azure/azure-monitor/essentials/analyze-metrics
• Reporting types: Real-time dashboards
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Reseller (no extras)
• Organisation whose services are being resold: Microsoft, AWS

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: Less than once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
• Data sanitisation process: Yes
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Users with the relevant permissions: When exporting data from cloud providers like Azure and AWS, users can use services like Azure Import/Export or AWS Data Exports. These services allow secure data transfer by shipping physical disk drives to the cloud provider’s datacenter. It’s like mailing your data for upload, especially useful when internet transfer is slow or costly
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Avro
  • Excel
  • Binary
  • JSON
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Avro
  • Excel
  • Binary
  • JSON
  • ORC
  • Parquet
  • XML

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection between networks: To protect data between the buyer’s network and the service provider’s network, robust security measures are essential. These include encryption for secure data transmission, authentication to verify identities, and firewalls to filter traffic. Regular audits and monitoring help detect vulnerabilities. By implementing these safeguards, both parties can ensure data privacy and prevent unauthorized access during communication.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: To protect data within a network, organizations employ robust security measures. These include end-to-end encryption for secure data transmission, firewalls to filter traffic, and network segmentation to isolate critical zones. Regular monitoring, access controls, and employee training enhance security. By combining technical controls and user awareness, data remains confidential and safeguarded within the network.

Availability and resilience

• Guaranteed availability: Tailored to the customers requirement. Microservices architecture aims to ensure resiliency and high availability. Key strategies include redundancy (deploying multiple instances of each microservice), health monitoring, circuit breakers, retries with exponential backoff, and graceful degradation. Cloud-based systems must handle failures gracefully, and database choices play a crucial role. Achieving high availability requires a combination of architectural decisions and proactive handling of failures.
• Approach to resilience: Tailored to the customers requirement. Microservices applications are intentionally designed to be resilient by following specific architectural principles and practices. Key strategies include decomposition into smaller services, redundancy, health monitoring, circuit breakers, graceful degradation, retries with exponential backoff, distributed tracing, database resilience, chaos engineering, and automated testing and deployment. Achieving resilience involves ongoing efforts to handle failures gracefully, adapt to changing conditions, and recover swiftly.
• Outage reporting: 1. Azure: Azure Status Page: Azure maintains a dedicated status page that provides real-time information about service health and any ongoing incidents. Users can visit this page to check the current status of Azure services, including any reported outages or disruptions. Azure Service Health: Azure Service Health is a comprehensive dashboard that displays the health of Azure services in your specific region. It includes information about incidents, planned maintenance, and historical data. Application Insights: If you’re using Azure Application Insights for monitoring your applications, you can access the SLA workbook template within Application Insights. 2. AWS: AWS Status Page: AWS maintains a similar status page where users can check the current status of AWS services. It provides real-time updates on incidents, outages, and planned maintenance. Third-Party Monitoring Tools: Websites like Downdetector track user-reported issues and outages for various cloud providers, including AWS. Service Health Dashboard: Within the AWS Management Console, you can access the Service Health Dashboard. It provides information about the operational status of AWS services in different regions.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
  • Other
• Other user authentication: Authentication is the process of verifying the identity of a user or system before granting access to a service. Common methods include username and password, OAuth2 and OpenID Connect (OIDC) for single sign-on, API keys for programmatic access, biometrics (like retina scans or fingerprints), and certificates (such as TLS certificates for secure communication). Remember that authorization complements authentication by defining access policies for specific resources within the service.
• Access restrictions in management interfaces and support channels: When securing management interfaces and support channels on Azure and AWS, follow these best practices: Azure: Use Role-Based Access Control (RBAC) to manage access based on roles. Configure Network Security Groups (NSGs) to restrict traffic. Deploy Azure Firewall and Application Gateway for additional security. AWS: Utilize Identity and Access Management (IAM) to control access. Set resource-based policies for specific resources. Implement Security Groups (similar to NSGs) for EC2 instances.
• Access restriction testing frequency: Less than once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: Between 1 month and 6 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: DVT adheres to stringent Information Security policies and processes that safeguard our data and operations.; We are certified with ISO/IEC 27001: 2013 and are currently working towards implementing the ISO/ IEC 27001:2022 standard.; We are also certified with Cyber Essentials, reflecting our commitment to robust security practices.; ; We maintain our Information Management Security System (SMS) with regular reviews, updates, and improvements to address security threats and changes within our environment. These are reviewed monthly at CAB (Change Advisory Board).; ; Our Information Security Office, who is also our MD, is responsible for overseeing the implementation and management if our policies and processes. Our MD reports to our CEO.; ; Training and awareness is done in phases at regular intervals, ensuring all employees are aware of all information security policies and processes in place, helping them understand their role and responsibilities within the ISMS. The ISMS is monitored and reviewed on a continuous basis, with internal audits performed by our infosec team, as well as external audits performed annually by an external body to ensure compliance. We have incident reporting in place, to handle any security breaches or policy violations, with logs and reports produced for review at CAB and by our auditors.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: In Agile and Scrum methodologies, configuration management involves version control, artifact repositories, and Infrastructure as Code (IaC). Change management includes user stories, backlog refinement, sprint planning, daily standups, sprint reviews, and retrospectives. For deployment on Azure and AWS, use Azure DevOps or AWS CodePipeline for CI/CD. Azure offers Azure Resource Manager (ARM) and App Service, while AWS provides CloudFormation, Elastic Beanstalk, ECS/EKS, and Lambda. Prioritize automated testing, monitoring, and rollback strategies for resilience.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Azure Vulnerability Management: Automated vulnerability scanning tools identify security weaknesses in Azure resources. Regular patch management keeps systems up-to-date. Third-party software patches are also addressed promptly. AWS Vulnerability Management: AWS employs an incident response team and centralizes security tools like Amazon GuardDuty and AWS Security Hub. AWS Config tracks assets, and Amazon Inspector identifies vulnerabilities. Incident response and remediation follow predefined actions. Both Azure and AWS rely on security advisories, threat intelligence feeds, and community resources for information on potential threats. Continuous monitoring and staying informed are crucial for maintaining a secure cloud environment.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Azure offers comprehensive protective monitoring processes: Azure Monitor collects telemetry from VMs across Azure, AWS, and GCP. Azure Arc-enabled Kubernetes ensures consistent monitoring for AKS and Kubernetes clusters in AWS EKS or GCP GKE instances. Application Insights extends monitoring to applications hosted outside Azure. For AWS: Microsoft Defender for Cloud automates deployment of Azure Arc agents to AWS EC2 and GCP VM instances. File Integrity Monitoring maintains file integrity on VMs. Vulnerability Assessment and OS Hardening secures VMs.
• Incident management type: Supplier-defined controls
• Post-quantum cryptography secure: Yes
• Incident management approach: Azure Incident Management: Pre-defined Processes: Azure recommends creating an incident response guide, prioritization procedures, and testing security response procedures. User Reporting: Users can report incidents through Azure Monitor alerts or directly to the IT team. Incident Reports: Azure services like Microsoft Defender for Cloud and Sentinel automate incident response. AWS Incident Management: Pre-defined Processes: AWS provides an overview of responding to security incidents within a customer’s AWS Cloud environment. User Reporting: Users can report incidents via AWS support or directly to their IT teams. Incident Reports: AWS IQ experts guide customers through security incident responses.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 3%
• Between £500,001 and £1,000,000: 6%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 12%
• Over £5,000,001: 15%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: QAS Internaitonal
• ISO/IEC 27001 accreditation date: Friday 27 June 2025
• What the ISO/IEC 27001 doesn’t cover: No problem at all.; ; The ISO exclusions relate to controls that are not applicable to the organisation’s current scope of operations. Specifically, exclusions arise where there are no customer-facing application services, no processing of customer data on behalf of third parties, and no reliance on outsourced service providers. In addition, certain controls are excluded because there are no contractual, regulatory, or legal obligations requiring their implementation, or because the organisation does not perform activities such as software development for external customers, operational service delivery, or complex supply chain management. These exclusions are based on the nature, size, and risk profile of the organisation and do not impact its ability to meet the overall intent of the ISO standard within the defined scope of certification.
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: A6994481-87e0-4061-81bd-ecc6c20b5f54
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
  • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
  • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
  • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
  • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
  • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
  • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain

  Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
  • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

  • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
  • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
  • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
  • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
  • Plans for positive actions with community groups.
  • Collaborating with anchor institutions and community groups to make facilities available for education, training or community events
• Mission: Make Britain a clean energy superpower:

  To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

  Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
  • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
  • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
  • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it
• Mission: Break down barriers to opportunity:

  By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

  Policy Outcome 6: Employment and training: For those who face barriers to employment

  • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
  • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Introducing transparency to pay and reward processes
  • Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain
  • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
  • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

  • Understanding of the issues affecting the development of new skills by target cohort
  • Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
  • Understanding of issues relating to entering the contract workforce
• Mission: Build an NHS fit for the future:

  That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

  Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

  • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
  • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
  • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at DvtBidManagementOffice@dvtsoftware.com. Tell them what format you need. It will help if you say what assistive technology you use.