INTERWORKS EUROPE LIMITED

InterWorks Curator

InterWorks Curator lets you seamlessly integrate your analytics into one platform for a better data & end user experience. Curator is designed to take your UX/UI capabilities to the next level by building beautiful content to increase user adoption & engagement.

Features

• Single integration & reporting layer across multiple BI technologies
• Full UX/UI beautification & customisation
• User journey organisation & planning
• Content curation & best practice management
• Custom filtering & enterprise analytics experience

Benefits

• Single source of truth across multiple technologies
• Unlock the potential of UX/UI using Curator as the vehicle
• Create a managed user experience throughout your existing content
• Enable core content to be easily identified & used
• Increase end user adoption
• Create a seamless single portal for all your reporting needs

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at patrick.quarmby@interworks.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

304492737013312

Contact

Patrick Quarmby
07435629806
patrick.quarmby@interworks.co.uk

About the service

• Service categories:
  • Applications
    • Engineering
      • Other engineering
        • Building Information Modelling Applications
        • Electronic Design Automation Applications
        • Engineering Support Applications
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Tableau; Power Bi; ThoughtSpot; ; Most other BI Vendors accessible via API
• Cloud deployment model: Private cloud
• Service constraints: Unless agreed otherwise, clients will be responsible for delivering their own upgrades with InterWorks Supporting.
• System requirements:
  • Linux or Windows - Curator requires its own standalone server
  • At least 4 CPU
  • Ports open for web traffic (80 and 443)
  • A disaster recovery plan
  • If connecting with Tableau enable REST & MetaData API's
  • 8GB of RAM
  • 20GB of disk space

User support

• Email or online ticketing support: Yes
• Support response times: Within 4 hours Mon - Fri 9am - 5pm 24/7 service is available on request at an additional cost depending on size of environment
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes
• Support levels: We provide office hours support desk service via email, phone and video conference. Support is provided free of charge for anything to do with ensuring that the software is working as it should. Support is only charged for work which would classify as consulting assistance - this is usually separately agreed with clients in advance. All accounts have an assigned account manager.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We aim to make Curator as easy to use as possible. This means you can easily install on your own - but we’re here to help if you need our assistance. We’ll schedule an overview call to highlight the latest-and-greatest features, but throughout your Curator journey, our whole team is just one email away.; ; Our team of experts are here to support at each step of the process:; • Curator software installation and setup analytics connections such as Tableau; • SSO configuration and sample content setup; • Design review and style guidance; • Training and handoff
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Via the Curator website
• End-of-contract data extraction: No data is hosted in the solution directly only presented, that would be stored in the underlying solutions such as Tableau or Power BI.
• End-of-contract process: Should you wish to not continue with Curator then the software licence will expire and the service will no longer be available. In the rare scenario this happens we will have a call to discuss off-boarding.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Linux or Unix
  • MacOS
  • Windows
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: What users can and can't do using the API; ; Sign In / Out Create, Query, Update, Delete Site(s) Query Views for Site Create, Query, Update, Delete Project Publish Workbook Add Tags to Workbook Query Views for Site, Workbook Query View Image Query View Preview Image Query Workbook and connections Get Workbook Revisions Query Workbook Preview Image Query Workbooks for Site, User Download Workbook, Revision Update Workbook and Connection Delete Workbook Remove Workbook Revision Delete Tag from Workbook Publish, Query Datasource Query Datasource Connections Get Datasource Revisions Download Datasource and Revisions Update Datasource and Connection Delete Datasource Remove Datasource Revision Create Group Add User to Group, Site Get Users in Group, Site Query Groups Query User On Site Update Group, User Remove User from Group, Site Delete Group Get Datasource, Workbook Revisions Download Datasource, Workbook Revision Remove Datasource, Workbook Revision Add Datasource Permissions Add Project, Default, Workbook Permissions Query Datasource, Project, Default, Workbook Permissions Delete Datasource Permission Delete Project, Default, Workbook Permission Query Job Create, Query, Update, Delete Schedule Query Extract Refresh Tasks Create, Query, Update, Delete Subscription Add Datasource to Favorites Add View, Workbook to Favorites Delete Datasource, View, Workbook from Favorites Get Favorites for User Publish Datasource, Workbook Update
• API documentation: Yes
• API documentation formats:
  • HTML
  • Other
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Description of customisation; ; At an individual dashboard level, users can (subject to permissions) edit existing dashboards and publish their own versions of previously created content. Users can also filter existing content and save that custom view as their own. Users can subscribe to specific views on a schedule of their choosing. Overall look and feel: clients can code their own wrapper in which to embed their analytics applying their own imagery, CSS etc (admin level) Functionality: clients can use the APIs to create additional bespoke functionality that Tableau does not deliver natively (admin level) Custom portals: we have developed custom portals that do both of the above out of the box, providing a rapid, affordable way of providing a look and feel that is consistent with that of the organisation as well as a range of often-requested additional functions with the flexibility to add more relatively easily. (admin level)

Scaling

• Independence of resources: Local installation & dedicated RAM/Access

Analytics

• Service usage metrics: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Data Erasure
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Curator provides ability to make predictions (and explanations), results of which are then written to the database, or exported to flat file. Curator as a platform does not retain any user data.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • CSV
  • Other
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Excel
  • Google sheets

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: SLA are backed by and depend on the chosen public cloud provider, all three major cloud providers (AWS, Azure, GCP) guarangee at least 99.99% monthly uptime percentage, with service credit for any SLAs that are missed. For example if uptime drops to 99.00%
• Approach to resilience: Resilience is backed and provided by the underlying public cloud infrastructure (topology of which you manage in-house).
• Outage reporting: Alerting can be set up within individual cloud provider's environment, for example on AWS you are able to define alers through CloudWatch service, which can communicate outage in a any number of ways, including email, SMS, push etc depending on the cloud topology of your choice

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Other
• Other user authentication: SAML Kerberos Active Directory OpenID
• Access restrictions in management interfaces and support channels: Interfaces and support channels Management Interfaces and support channels are secured using roles applied to users to maintain the separation of ability of users. The system is designed to allow only specific and absolutely necessary users the ability to alter authentication and authorisation. Default permission for new users is always set to deny all access until it is specifically granted by and administrative account
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Data Security is taken very seriously, InterWorks as organisation are working toward SOC and ISO 27001 compliance and have an internal security governance policy, but this is not currently one that is accredited to an external standard. We have never had a security incident or breach.
• Information security policies and processes: We have a detailed IT Policy (Security and Internet) which we can make available on demand. The key points of which are: Roles and responsibilities - the policies are established, monitored and breaches investigated by the directors, but at a core level everyone has a responsibility for security. Monitoring - we reserve the right to monitor employee use of IT resources, tracking and remote wipe software is installed on all devices Damage and loss - defined actions in the event of damage or loss of equipment Misuse and vandalism Specific guidelines concerning encryption and security admin policies of portable devices, memory sticks, mobile phones, laptops, AV software, email attachments, commitments in emails, IM systems, licensing of software, and password policies.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: At platform level -- release notes for each major version of Curator will list major fixes and general changes to the system since last release. All jobs that Curator generates to orchestrate data movement from source system to target data warehouse are tracked server-side, with job versioning system built in (both in-house built system as well as open-source git integration available)
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: AWS (as well as other cloud providers eg GCP and Azure) have a built in vulnerability testing process which allows the on-demand testing of an VM instance (that we control / have access to).
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Amazon Web Services (as well as other major cloud providers) provide assurance that they take responsibility for identifying potential compromises and alert users on discovery. Response times for such incidents are managed by the underlying cloud provider's team.
• Incident management type: Supplier-defined controls
• Post-quantum cryptography secure: Yes
• Incident management approach: User reported incidents go to our support desk for triage. If the support desk cannot resolve it immediately it is escalated to the correct specialist within the team. Incidents discovered by our team would be notified directly to the client. Minor issues would usually be resolved then alerted. Major issues would be alerted first and then the focus would move on to resolution. Incidents are reported via email

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: https://curator.interworks.com/
• Link to free trial: https://curator.interworks.com/

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 7%
• Between £1,000,001 and £2,500,000: 7%
• Between £2,500,001 and £5,000,000: 7%
• Over £5,000,001: 10%

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 7b97c251-7e3e-4769-a40e-d1b006c7233f
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
  • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

  Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges

  Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

  • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
  • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
• Mission: Make Britain a clean energy superpower:

  To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

  Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
  • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
• Mission: Break down barriers to opportunity:

  By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

  Policy Outcome 6: Employment and training: For those who face barriers to employment

  • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at patrick.quarmby@interworks.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.