Chevin Fleet Solutions Limited

Fleet Management Software

Chevin's Fleet management solution, is only provided on a SaaS basis. The solution is accessed via Web interface or Mobile App and is installed on the Microsoft Azure Cloud.
As part of our product offering, we offer three options: FleetWave Lite, Core and Advanced.

Features

• An easy to use web-based application.
• The complete lifecycle of vehicles and assets can be managed.
• Hierarchy of access, to reflect the profile of your users.
• Real-time visibility.
• All activity is date and time stamped, providing audit trails.
• Clever alerts and reminders for key events.
• Consolidates data into a centralised system.

Benefits

• Create, view analytics, and generate graphical reports in real-time.
• Dashboards that can be tailored to individual users.
• Stay organised, efficient, compliant with dashboard reminders at every step.
• Keep everyone connected and informed on their phones, laptops, tablets.
• Monitor drivers, vehicles, workshops and more from one place.
• Keep virtual paperwork in order.
• Grant secure access to colleagues when you need to.
• Keeps up regardless how large your organisation grows.
• Works with an ever growing directory of third-party apps.
• Real-time KPI tracking and analysis.

£5 to £7 a licence

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bidmanagement@chevinfleet.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

333707146740461

Contact

Gareth Roulston
+44 (0)1773 821992
bidmanagement@chevinfleet.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: Microsoft Azures availability is guaranteed at 99.9%. Any maintenance windows or planned outage are advertised through Chevin's support desk customer service routine.; No other constraints exist as FleetWave is a web based system that can be accessed anywhere. FleetWave runs on a constant deployment method, therefore limits any downtime.
• System requirements:
  • Internet Information Services should be installed on the application server.
  • Enable ASP on Windows Server 2008/2012/2016.
  • .NetFramework4.7.2
  • URL Rewrite Module

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Chevin Fleet Solutions, provides support to Customer's Users on weekdays (excluding holidays), during business hours between 9:00am - 5:30pm GMT. Users can submit cases over the Web via the Chevin Fleet Solutions Support Help Centre .; A Chevin Fleet Solutions Support Representative will use commercially reasonable efforts to call or email the User within 1 hour for a Critical business impact, within 4 hours for a High business impact, and within 12 hours for all other tickets, and will use commercially reasonable efforts to promptly resolve each ticket, in line with the SLAs (Standard and Premier).
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: Standard support. This is included in the subscription costs provided in the pricing sheet. ; ; Customers are provided with a Customer Success Manager.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: At Chevin, we advocate a ‘Train the Trainer’ approach to all new customers. This enables new customers to have a product champion within their organisation from the start of the project.; Training can be delivered to both the clients product champions and all system users.; Ongoing support is available from our dedicated helpdesk teams. Additional training is available if/when required based on the clients needs.; Our online training and user guides will be available during user acceptance testing prior to go-live.; Online help guides and video tutorials are available on every screen in FleetWave.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: The exit plan with be manifested depending upon customer requirements that are discussed during the initial meetings.; This plan highlights the agreed responsibilities of both parties at the end of the contract. End users have constant access to their data
• End-of-contract process: There are no additional costs for ending a contract.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The FleetWave mobile app (Driver app) offers a very cost-effective solution for field workers to collect and transfer data back to a central system quickly and securely, without the need for a continuous mobile signal or internet connection. Streamlined for remote data collection and transfer, completed forms are saved on the device and submitted automatically once the device regains connectivity.
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: The API is setup and configured via administrative access using the Fleetwave configuration options.; The endpoints handle both read & write operations.; The access rights set against the FleetWave user are honored in the API. Endpoints can also be restricted from within FleetWave.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Chevin's FleetWave has the ability to provide limit customisation to its clients. The expectation though, is that this follows the customisation rather than configuration route. The SaaS based product is intended to offer a powerful out of the box solution, requiring minimum amount of configuration to produce the results an end user needs.; ; Our team of inhouse product developers can work with clients on any specific requirements. All of this would be captured in an accurate SOW and also guidance would be offered as to the best way to achieve what is required in an attempt to avoid heavy customisation/configuration of the system.

Scaling

• Independence of resources: Data is separated in multiple tables within a relational database in MS Azure. Each customer has their own independent version of the FleetWave database, which is logically secured. Utilising the Azure cloud, the scalability is effectively limitless and can be scaled at will to compensate for unusual circumstances.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Other
• Other data at rest protection approach: All client communications are based on internet standards. HTTP and HTTPS (preferred) are available, using standard internet communication protocols. For Chevin hosted applications, HTTPS will be standard. SSL is supported for information transport encryption. All VPN connections are locked down using strong IPSEC protocols if and when applied. Disks are encrypted at rest as per standard Cloud storage. SQL Server transparent data is enabled as standard.
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Chevin will provide standard data loaders.; The client will be responsible for extracting and normalising data and populating the data loaders provided. Chevin will act as a consultant to determine appropriate tables and fields for data elements and assist with any questions or issues during data load.
• Data export formats:
  • CSV
  • Other
• Other data export formats: Microsoft Excel
• Data import formats:
  • CSV
  • Other
• Other data import formats: Microsoft Excel

Data-in-transit protection

• Data protection between buyer and supplier networks: Other
• Other protection between networks: All client server communications are based on internet standards. HTTP and HTTPS (preferred) are available, using standard internet communication protocols. For Chevin hosted applications HTTPS will be standard.; A Chevin hosted FleetWave solution uses a range of typical internet-based protocols over a secure connection, e.g. FTP / HTTP / HTTP.
• Data protection within supplier network: Other
• Other protection within supplier network: All client server communications are based on internet standards. HTTP and HTTPS (preferred) are available, using standard internet communication protocols. For Chevin hosted applications HTTPS will be standard. SSL is supported for information transport encryption. All VPN connections are locked down using strong IPSEC protocols if and when applied.

Availability and resilience

• Guaranteed availability: Microsoft Azures availability is guaranteed at 99.9%.
• Approach to resilience: All of Chevin's hosted systems are SaaS based and the Microsoft Azure Cloud. This provides the strongest security, resiliency, and availability to Chevin customers worldwide.
• Outage reporting: Microsoft Azure documentation

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Username or password
  • Other
• Other user authentication: With configuration, FleetWave supports single sign on with SAML 2.0 Protocol, its SSO supports OpenID and it can integrate with active directory. FleetWave is hosted on the Microsoft Azure platform.; N.B. Any bespoke configuration carried out is offered as a chargeable service and will be documented in the Statement of Works (SoW).
• Access restrictions in management interfaces and support channels: Only trained users who are designated by the customer are added to our support register which gives them authorisation to log tickets.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Username or password
  • Other
• Description of management access authentication: Single sign on

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Alcumus ISOQAR
• ISO/IEC 27001 accreditation date: 17/01/2023
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications: ISO 9001:2015

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: 4.37.1 An information security incident is any incident, potential incident or weakness which may impact upon the security of information under Chevin's Control; 4.37.2 All staff are responsible for reporting such incidents or weaknesses. Contractors and visitors may also report security incidents or weaknesses to any of our staff, and staff are then responsible for reporting them on their behalf. In the event of doubt about whether the incident or weakness constitutes an information security incident, report it anyway.; 4.37.3 Any other actual or security events shall be reported immediately to the Managing Director, either face to face, by phone or email. In the absence of the Managing Director, a line manager shall be contacted.; 4.37.4 The Managing Director or Line Manager shall evaluate whether the event needs to be raised formally as an information security incident, and the Senior Management Team may also be consulted where considered appropriate.; 4.37.5 Information security incidents and subsequent actions taken shall be recorded on the WINCAS System in accordance with P102 Performance Evaluation and Improvement.; 4.37.6 Where the incident involves a customer data or systems, the Managing Director will ensure that details; of the incident are submitted to the customer within 24 hours.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: Chevin typically provides at a minimum a single annual product upgrade that reflects the latest developments and enhancements. As FleetWave is an extremely stable platform, the application only requires an update if an issue is uncovered that requires a major release to be corrected. As the application is continually being extended and enhanced by a full-time team of software developers, upgrades are available on a quarterly basis. However, most clients prefer to receive a single annual product upgrade that reflects the latest developments and enhancements.
• Vulnerability management type: Undisclosed
• Vulnerability management approach: Vulnerability scans are conducted via Bulletproof, on a monthly basis.; The remediation timeframe on discovered vulnerabilities is dependent on the vulnerability status.; As part of on-boarding, clients can choose deployment schedules via Chevin's support function.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Every month, Chevin has an Information Security meeting to discuss any security issues. These are then raised and dealt with at the time.; Chevin also has a Security Policy in place. Chevin has communicated its ‘Information Security Talkbox - TBT 003 Information Security’ which summarises the key action we all need to take to ensure that Chevin meets the requirements of BS EN ISO 27001:2013 Information Security Management, an intentionally recognised standard. This toolbox notifies Chevin staff every two months via the HR CRM system to review Information Security Policies as part of our audit compliance.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Chevin use Zendesk for submitting and tracking service incidents.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Chevin has been part of the fleet industry for over 30 years, and in that time has witnessed a lot of change. In particular, an increase in awareness on the impact the industry is having on the environment.; As an organisation, we believe that creating a more sustainable world is essential for future generations to thrive and will continue to carry out initiatives that are environmentally responsible.; We don’t just want to do our bit, we want to do our best!; That’s why last year (2021) we began a data collection process working with Carbon Footprint to calculate our carbon emissions.; We received our final report which outlined our annual carbon emissions with a detailed breakdown highlighting the most significant emission sources and recommendations on how we can reduce our greenhouse gas emissions and take actions to get closer to carbon neutrality.; The data from our carbon footprint appraisal was used to develop a carbon reduction strategy in collaboration with More Trees, a carbon offsetting organisation who work with tree planting partners across the world and local communities to restore healthy forests and reduce extreme poverty.; By planting trees we will be reducing our CO2 emissions whilst providing co-benefits such as water filtration, shelter, food sources, poverty alleviation and biodiversity.

  Covid-19 recovery

  Chevin has a corporate policy regarding COVID 19 that provides an update on its current position. We continue to monitor the situation closely across all regions and our policy regarding flexible working remains unchanged, until we notify otherwise. As the rules and regulations begin to ease, we will continue to review our policy and intend to introduce a partial return to work on a team basis, whilst aiming to continue to offer flexibility to staff about their location of work.

  Tackling economic inequality

  Chevin partakes in multiple apprenticeship schemes and work with local universities to grant placements, work assistance and we have an ongoing commitment to diversity in the workplace.

  Equal opportunity

  Chevin is committed to providing equal opportunities in employment and to avoiding unlawful discrimination in employment and against customers.; ; Its Equal Opportunities Policy is intended to assist Chevin to put this commitment into practice. Compliance with this policy should also ensure that employees do not commit unlawful acts of discrimination.; ; Striving to ensure that the work environment is free of harassment and bullying and that everyone is treated with dignity and respect is an important aspect of ensuring equal opportunities in employment. Chevin has a separate dignity at work policy, which deals with these issues.

  Wellbeing

  Chevin offers Health Insurance to its employees who get access to various wellbeing programmes. Chevin’s Health Insurance offers each of the five categories to its employees including well-being, physical, values, personal development, emotional and work/organisation.; Chevin also supports Mental Health Awareness Week which is an annual event when there is an opportunity for the whole of the UK to focus on achieving good mental health.

Pricing

• Price: £5 to £7 a licence
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Please refer to Chevin's Master Subscription Agreement (MSA) which sets out the terms with regards to Free Services, in section 2.5.; “Free Services” means Services that Chevin makes available to Customer free of charge. Free Services exclude Services offered as a free trial and Purchased Services.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bidmanagement@chevinfleet.com. Tell them what format you need. It will help if you say what assistive technology you use.