Torchbox Ltd

Wagtail GOV.UK Accelerator Kit

Fast-track your implementation of Wagtail with our Wagtail accelerator kit incorporating robustly tested, high-qulaity and accessible components from the GOV.UK Design System. We’ve combined learnings from 50+ Wagtail projects for public sector and nonprofits to create a solid foundation, reducing costs and development time.

Features

• Based on GOV.UK Design System’s components, patterns and styles
• Robustly tested components, including full compliance with WCAG 2.2AA
• Starting point to extend to your needs and brand guidelines
• Speed up projects by up to 10 weeks
• LDAP authentication
• Fast, predictive search
• A simple, effective taxonomy
• Ready for continuous integration with cloud hosting services
• Comprehensive documentation
• Get first-hand experience of Wagtail's content management tools

Benefits

• Ensure best practice, including quality, consistency, usability and accessibility
• Ensure your templates are accessible and work with assistive technologies
• Use pre-built page types to customise your templates and look-and-feel
• Save time and money without starting from scratch
• Enhance security and streamline user management across your organisation
• Supporting full-text search behaviour, including stemming, ranking and fuzzy search
• Organise content to improve navigation and user experience
• Streamline deployment to your infrastructure
• Ensure high-quality and quick onboarding
• Explore Wagtail’s admin UI and editor functionality

£10,000 a unit

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at business@torchbox.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

327716793343887

Contact

Paul Vetch
07976297092
business@torchbox.com

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Wagtail CMS Developer Support and Wagtail staff augmentation
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: The Wagtail kit includes common apps needed on most sites (news, events, information pages etc), Gitlab CI piline configuration and a robust front end setup to easily build on. The Wagtail kit uses Docker for local hosting, Poetry for dependency management and mkdocs for documentation. The kit is configured to use Heroku for hosting with AWS for media, although this is easily changed.
• System requirements:
  • A hosting service to host the kit
  • A media storage service (such as AWS)

User support

• Email or online ticketing support: No
• Phone support: No
• Web chat support: No
• Onsite support: No
• Support levels: We provide 1 day of support to get the kit running on your infrastructure - this is provided within UK office hours.; ; Further support is available via our Wagtail developer support service.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: We provide 1-day of consultancy to help get the kit setup on your hosting infrastructure. Further support is available via our Wagtail developer support service.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Users can either delete the database or the host of the Wagtail kit will be able to extract user data from the database.
• End-of-contract process: The service covers access to the Wagtail kit code + 1 day of consultancy to get the kit setup on your infrastructure. This is charged as a one-off fee per organisation, so you could re-use the kit for multiple builds.; ; Further support is available via our Wagtail developer support service.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Linux or Unix
  • MacOS
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The kit includes front end optimisations for mobile
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: The service interface provides the same authoring experience as the open source Wagtail CMS edit interface (the CMS used by NHS Digital for NHS.UK)
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: Please see Wagtail's accessibility statement: https://wagtail.org/accessibility/
• API: Yes
• What users can and can't do using the API: By default, Wagtail kit includes the Wagtail Pages API to enable users to author content in Wagtail and publish to external services/sources (e.g. a headless front end); See the API documentation: https://docs.wagtail.org/en/stable/advanced_topics/api/index.html
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Developers can customise Django models in the front end and back end.; The kit can be used as a headless CMS.; Front end styling can be customised.

Scaling

• Independence of resources: The kit is built on Django's existing scalability so there are no restrictions in relation to demand

Analytics

• Service usage metrics: Yes
• Metrics types: The kit includes basic CMS metrics such as page counts and can be configured to integrate with Google Analytics.
• Reporting types:
  • Real-time dashboards
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: Never
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Users can either delete the database or the host of the Wagtail kit will be able to extract user data from the database.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: N/A; We can offer additional support via our G-Cloud 13 Wagtail developer support service
• Approach to resilience: This is dependent on your chosen hosting provider
• Outage reporting: Wagtail kit can be configured to log errors through an API (e.g. Sentry)

Identity and authentication

• User authentication needed: No
• Access restrictions in management interfaces and support channels: Wagtail kit adopts Wagtail's permissions system which provides configurable access control system
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: QMS International Ltd
• ISO/IEC 27001 accreditation date: 18 October 2021
• What the ISO/IEC 27001 doesn’t cover: There are no exclusions in the Statement of Applicability
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: No
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Our policies adhere to ISO/IEC 27001.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Wagtail kit has a changelog where all changes to date are logged.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: We monitor the relevant security announcement channels for the core services and dependencies we rely on. We assess the severity of each release as it's made available to determine how quickly the update needs to be released.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: This is dependent on the hosting service selected.
• Incident management type: Undisclosed
• Incident management approach: Incident management is provided via our managed hosting service as part of a separate statement of work.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  As a BCorp we have to adhere to stringent rules and regulations that align our activities to benefit all people, communities and the environment. This way of thinking is baked into our approach, practices and general ways of working. In 2019 we became the first UK agency to transition ownership in full to its employees, and we base our decisions on what is best for our people, society and the planet. Our Impact Report details the ways in which we approach work, and the impact it has. We have joined the UN’s Race to Zero via the SME Climate Commitment, making a commitment to halve greenhouse gas emissions by 2030 and achieving Net-Zero emissions by 2050. We are in the process of creating a NetZero strategy that we intend to get verified by the SBTi. We’re actively taking proactive steps to reduce our carbon footprint, by reducing carbon generating activities that form part of our operations as well as with work we carry out with clients. We’ve invested in creating our own Digital Emissions Methodologies to ensure we effectively measure the carbon emissions of the websites we host and support. Alongside these reduction strategies, we’ve also committed to compensating for 52 tonnes of carbon with Klimate.co carbon removal programmes, the details of which can be viewed here: Torchbox Climate Projects. We have a set of Voice Groups that many of our team members are part of. Each group carries out different activities that support or impact a set of themes we value. We currently have groups based around the environment, our local communities, as well as inclusion and diversity. Activities have included doing team beach cleans, building sleeping pods for homeless people, sponsored bike rides and volunteering.

  Tackling economic inequality

  We are committed to tackling economic inequality by creating new employment opportunities and focusing on professional development for the whole team. We have recently launched the Torchbox Academy providing the opportunity for junior/entry-level people to join the team who might not usually have the opportunity to apply and with no specific qualifications required. We’re currently recruiting junior python developers and digital marketing executives who will contribute to live client projects with expert advice and guidance from our experienced mentors, leading to a full-time role at Torchbox: https://torchbox.com/blog/join-the-torchbox-academy/ Our developers contribute to Coders of Colour, Google Summer of Code, and Django Girls (which we also sponsor) to help underrepresented groups pursue a career in tech, which has led to some recent hires to our team. We also partnered with a Bristol-based social enterprise that supports under-represented young people in Bristol to find new career opportunities. We gave on-the-job training and have since taken an intern on as a permanent member of the team: https://torchbox.com/blog/jennys-experience-as-an-intern-at-torchbox/ Every team member has a professional development plan (PDP), which they develop with their manager. This plan helps to give clarity on the direction they're heading, work towards long and short-term career goals, provide a better understanding of areas to focus on improving, and plan potential development and training opportunities. This is supported by a training and conference budget, to help accelerate development. To increase supply chain resilience and capacity, in 2020/21, we successfully reviewed our supply chain management polices to ensure that our suppliers trade ethically, and manage their cyber security risk so we can comply with ISO 27001. We are constantly reviewing our supply chain and moving to the most environmentally efficient suppliers where possible in order for us to achieve our goals of hitting net zero.

  Equal opportunity

  Our diversity and inclusion voice group works alongside HR and our SMT to drive our diversity and inclusion mission. We want to learn, educate and make positive changes, which result in a diverse and inclusive environment for employees, clients and people in the tech industry. We monitor the make-up of the workforce regarding information such as age, sex, ethnic background, sexual orientation, religion or belief, and disability, encouraging equality, diversity and inclusion. To reduce the disability employment gap, we have: Delivered training to the team on topics ranging from neurodiversity to understanding gender identity and pronouns. Reviewed our processes - starting with recruitment - to identify ways to embed diversity and inclusion, for example trialling a ‘no CV’ hiring process. Created wellbeing rooms at our offices that people can use for things such as prayer, breastfeeding, or some quiet time out. To tackle workforce inequality we have: Adopted a transparent approach to pay and published pay bands for all roles at Torchbox. Published our diversity commitment on every job posting, welcoming applications from underrepresented groups and making it easy to access support in the application process for individuals who might need it. Published our Anti-Discrimination Policy on our staff directory. Published our modern slavery statement: https://torchbox.com/anti-slavery-and-human-trafficking-policy/

  Wellbeing

  Employee wellbeing has always been a priority but the Covid-19 pandemic has given even greater consideration for ways to boost wellbeing at Torchbox. We have a Wellbeing Voice Group that works on behalf of the whole Torchbox team, listens to their needs, wants and ideas, and advocates for improvements. We have: Encouraged and paid for multiple staff members to undertake external mental health first aider training. Arranged free access to Headspace for anyone at Torchbox that would like to use it, as well as sharing the benefits of the app and how to use it. Provided SAD lamps to employees who requested them. Given comprehensive guidance and support on things such as tips for working from home. Set up daily gentle reminders on our staff messaging platform to encourage everyone to log off and wind down at 6pm. Organised virtual meditation and yoga workshops for everyone to take part in. Worked with the Diversity and Inclusion group to set up wellbeing rooms in both offices. Encouraged staff to create and share a “working with me” manual to share communication preferences, strengths, and weaknesses with colleagues so that we can work better together and in a way that recognises individual need. Supported the recent Mental Health Awareness week campaign with a week of structured sharing of resources and tips

Pricing

• Price: £10,000 a unit
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at business@torchbox.com. Tell them what format you need. It will help if you say what assistive technology you use.