uCheck

uCheck - Background Screening Checks

uCheck offer an easy to use online platform that allows users to submit a variety of employment screening checks. uCheck's system enable access to all levels of DBS check as well as, Disclosure Scotland Adverse Credit and Right to Work Checks. You can utilise our Digital Identity Verification Technology.

Features

• Online Platform (PC, Mobile, Tablet)
• DBS Enhanced, Standard & Basic Checks Available
• Right to Work Checks, Adverse Credit Checks, Identity Checks
• Digital Identity Verification
• Disclosure Scotland Basic & Protecting Vulnerable Groups Checks
• Automated Processes
• Multiple Payment Options (Card, Direct Debit, Wallet)
• Integrations Available (API)
• Instant Support via Livechat
• Client White Labelling / Branding Available

Benefits

• Reduce Time to Hire
• Make Safer Hiring Decisions
• Quick Turnaround (65% of checks returned within 48 hours)
• User Friendly
• Comprehensive Checks
• Cost Effective
• Instant Reporting
• Streamlined Process via API Integrations
• Innovative and Intuitive Platform
• Instant Support

£3.17 to £13.08 a unit

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jack.lander@ucheck.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

326459070531378

Contact

Jack Lander
0300 140 0022
jack.lander@ucheck.co.uk

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: N/A
• System requirements: Access to a modern web browser

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: UCheck respond to queries within 24 hours.
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.1 AA or EN 301 549
• Web chat accessibility testing: N/A
• Onsite support: No
• Support levels: UCheck provide online support via a chat function that is available to all users and applicants from within uCheck's platform. uCheck's platform also provides helpful information within the platform via a knowledge base. Some customers are also allocated an Account Manager who would conduct regular reviews. uCheck's support team are available Monday - Friday between the hours of 0830 - 1730 to support with operational queries.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: UCheck's team will work alongside customers to ensure that we gather all information from customers to ensure that we deliver a solution that fits those needs. uCheck provide product demonstration, online training and training videos to ensure that customers have a positive introduction to uCheck.
• Service documentation: Yes
• Documentation formats:
  • PDF
  • Other
• Other documentation formats: Video Documentation
• End-of-contract data extraction: Customers are able to extract their data upon request.
• End-of-contract process: When a contract is due to expire and is not renewed uCheck will either delete, archive or put customer data beyond use in line with our data retention policy.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: N/A
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: UCheck's API will allow users to easily integrate uCheck into a third party software. The uCheck team will assist the customer through the API onboarding process to ensure that the integration is set up correctly. uCheck's API has multiple levels and can be used to complete some or all of the application process.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: UCheck's online platforms can be customised in line with requirements. All parts of the process can be customised and this can be completed upon request and would require additional bespoke development. uCheck are able to white label their systems to allow users to add their company colours and logos to the uCheck platform.

Scaling

• Independence of resources: UCheck's system distributes its load among multiple virtual servers within a cloud environment (Amazon Web Services) and can automatically increase its capacity if the load exceeds a predefined threshold.

Analytics

• Service usage metrics: Yes
• Metrics types: UCheck provide customers with access to instant reporting from within our platform. Customers can use our reporting suite to instantly report on applications using a time frame and are instantly exported via a CSV file. ; ; uCheck do conduct annual / quarterly reviews with customers which are dependent on the contract in place.
• Reporting types:
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: In-house destruction process

Data importing and exporting

• Data export approach: If required, users are able to export data from within the platform via a CSV file. We can also manage bulk data exports via request.
• Data export formats: CSV
• Data import formats: Other

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Other
• Other protection between networks: UCheck utilise a Web Application Firewall to protect against incomplete transmission, misrouting, unauthorised message alteration, ; unauthorised disclosure, unauthorised message duplication or replay. The system manages the connections between uCheck systems ; and direct users to ensure full protection of transactions. ; All traffic between the site and end users is encrypted using the highest possible standards that the browsers / OS will allow. These ; standards are regularly checked as part of the SSL/PCI scanning. All data passes through the Web Application Firewall to check for ; malicious attempts. We use AES 256-bit encryption for all personal data to ensure that it remains secure.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: UCheck conforms to a cryptographic usage and key management policy. ; ; All access to data is strictly controlled through active directory authentication. ; ; Customer data is segregated in a shared account by account ID; ; External network perimeters are hardened and configured to prevent unauthorised traffic. ; ; Inbound and outbound points are protected by firewalls. ; ; Access to company systems are restricted to fixed IP address at head office to ensure no unauthorised remote access to systems. ; ; Employees working remotely access a fixed IP via a secure VPN.

Availability and resilience

• Guaranteed availability: The platform will normally be available 24 hour per day, seven days a week.
• Approach to resilience: Available upon request
• Outage reporting: UCheck reports outages via a public dashboard that is available via our website.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: UCheck can restrict user access and can also enable wider user access. All users must access their account using unique log in credentials. Two Factor Authentication can also be enabled.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau
• ISO/IEC 27001 accreditation date: 12/07/2023
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cyber Essentials
• Information security policies and processes: UCheck maintain regular audits and senior management reviews to ensure that processes are being followed.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We follow industry best practice for software development. We track change requests, maintain code in a version controlled environment, require that changes pass tests and require code review before deployment.; ; We deploy changes to a development environment and assess these for potential security issues using vulnerability scanning tools.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: UCheck has encompassing policies in place designed to identify and remediate vulnerabilities accurately and within an appropriate timeframe. ; ; To ensure our security, we regularly carry out Business Impact Assessments, Penetration tests and other threat detection techniques. uCheck have a Managed Detection Response contract and have enabled alerting on all relevant systems and other external sources. In the event of a threat being identified, remediation is carried out as soon as possible.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We regularly carry out business impact assessments, penetration testing and other threat detection techniques. In the event of a threat being detected, remediation will be carried out as soon as possible.
• Incident management type: Supplier-defined controls
• Incident management approach: UCheck have a wide array of policies and procedures that cover all ranges of incidents. All colleagues and users have the ability to report incidents. Following incidents, we conduct reviews to understand incidents and will implement fixes to ensure they do not occur again.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  The Citation Group and its subsidiaries, including uCheck Limited, have committed to the Science Based Targets initiative (SBTi) and have an active commitment to set science-based targets. The Citation Group is in the final stages of establishing their emissions reduction targets in line with the SBTi’s criteria before presenting it to the SBTi for official validation. As part of this uCheck Limited does and will continue to measure and report on its scope 1, 2 and 3 Green House Gas Emissions. We have a commitment to achieving Net Zero by 2050 and initiatives in place to achieve this.

  Covid-19 recovery

  uCheck conducted varying promotions to assist customers with their background screening processes in the wake of the pandemic. uCheck took part in a DBS initiative which provided expedited and reduced-cost DBS checks for those who are working in roles that are directly fighting the covid19 response.

  Tackling economic inequality

  uCheck is committed to paying colleagues the National Living Wage at minimum. Where possible, uCheck offers flexible working arrangements to help enable a more inclusive approach to employement.

  Equal opportunity

  uCheck strives to encourage and has seen the benefits of having a diverse and inclusive workforce. Diversity and inclusion is not just about seen differences, it covers hidden and perceived differences across background, education, social differences, neuro diversity, age, gender, religion, ethnicity, beliefs and much more. Inclusion isn’t just a policy; it’s part of the fabric of our culture. We want to learn from diverse perspectives, drive innovation, grow together and create an environment where differences are embraced so everyone can thrive at work.; ; In the last 12 months >55% of colleagues have undertaken development above the requirements of their and our Women in Leadership Programme has helped us to accelerate the careers of high potential women.

  Wellbeing

  We want to be the business that colleagues want to work for and clients want to work with. That is why colleague engagement is at the heart of our business strategy. We are proud of culture and our colleagues, who have together created a greatplace to work – evidenced through our leading colleague engagement scores.; ; uCheck has a number of colleagues who are trained as Mental Health First Aiders and colleagues have access to an Employee Assistance Programme as part of their healthcare benefit.

Pricing

• Price: £3.17 to £13.08 a unit
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jack.lander@ucheck.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.