ORCA SCAN LIMITED

Inventory Management

Quickly build and implement an inventory management system and visualise the location of all your assets and inventory in real-time, including an audit trail of an item’s entire journey. Add fields, synchronize data, configure hundreds of devices remotely using any web browser, create a bespoke solution without any coding

Features

• Using variables can automatically extracts data from barcodes
• Simple Integrations - Excel, Google, Zapier, PowerBI, DataStudio, Tableau
• Generates and print barcodes labels - Avery, Rollo, Dymo
• Ability to create custom workflows
• History log see who changed what, when and from where
• Works on any scanning device and smartphones - interoperability
• GS1 UK Approved
• Cloud Access - full visibility from anywhere in the world
• Simple transparent pricing plans and free trials
• No complicated APIs , no coding required

Benefits

• Quickly implement an inventory management system, with no code
• Realtime visibility of all your assets across multiple sites
• Futureproof, grows with you, smartphone, tablets, Enterprise Scanners
• Peace of mind, trusted by 50,000 organisations, 165 countries
• 24/7 Dedicated Support, free trials available
• Quickly find recalled or expired products
• Audit trail of an item’s entire journey.
• Search inventory and scan items into/out-of stock from any device.
• Saves time, reduces errors, improves efficiency, increases visibility
• Simple to set up, build barcode-system without coding

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at hello@orcascan.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

334793532300636

Contact

Tim Hill
07713919197
hello@orcascan.com

About your service

• Service categories:

  Applications

  Supply chain management

  • Logistics and transportation management
  • Supply chain planning
  • Warehousing and inventory management
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Barcode tracking of other assets e.g. Medical Devices
• Cloud deployment model: Public cloud
• Service constraints: No constraints, Orca Scan is interoperable.
• System requirements:
  • Andorid 6+
  • IOS 11+
  • Modern Web Browser (Chrome, Edge, Firefox)

User support

• Email or online ticketing support: Yes
• Support response times: Support is provided 24 hours per day, 7 days per week, but response time may fluctuate outside weekdays and regular work hours of Greenwich Mean Time (GMT +1).; User can manage status and priority of support tickets
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), 7 days a week
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: We have a dedicated User Experience team that are constantly optimising to ensure accessibility across our application
• Web chat accessibility testing: Chat widget on website powered by Intercom.; Web chat accessibility testing
• Onsite support: Yes
• Support levels: Typically we will offer an online implementation call (e.g. Teams) to understand the challenge, current workflows and create a prototype for the user to test and develop. If required we can do a site visit to see firsthand, experience, and really understand the issues and provide implementation assistance. We will also offer a free trial of Business Level package where needed.
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: Our job is simple: to work closely with our users to make barcode technology accessible to everyone, regardless of technical skill or budget. Our website contains all the online Guides and documentation to get you started and if needed users can book free of charge implementation calls with one of our Customer Success Managers. https://orcascan.com/guides
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: We are pragmatic about this and offer a 30 day grace period after contract ends to allow data to be exported. Users can also put a request into the team. Customers may retain and use internal copies of all reports exported from any Service before and after termination.
• End-of-contract process: There are no hidden fees or cancellation fees, and customers can terminate their subscription at any time. Customers may retain and use internal copies of all reports exported from Orca Scan before termination. Upon any expiration or termination of the contract, The customer will immediately cease any and all access to all services. Orca Scan will retain customer data for 30 days upon termination. After this period, data will be securely deleted. The customer will have the option to renew, and custom agreements can be honoured upon request.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: It is all available on our website - https://orcascan.com/guides

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The desktop service is a centralised configurator and management platform allowing users to develop barcoding solutions and deploy them within their organisation. The desktop service is used to add users to a sheet (including setting permissions), import data and access integrations, triggers and history logs. The mobile app is used to quickly get a custom barcode scanner up and running in the workplace on any mobile device or Android-based hardware scanners, capturing data to sit alongside scanned barcodes, such as photos, GPS locations, date and time stamps, and many more!
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Website - www.orcascan.com
• Accessibility standards: None or don’t know
• Description of accessibility: We have adjustable text size and display colors
• Accessibility testing: Our User Experience team conduct frequent testing to ensure our compliance with assistive technologies
• API: Yes
• What users can and can't do using the API: Connect internal or external systems to Orca Scan Add barcode tracking to your systems Connect Zebra, Honeywell or Datalogic device to your system Build tools to enrich Orca Scan data, such as analyse images
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
  • Other
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: All fields are completely customisable allowing users to capture additional data when a barcode is scanned (e.g. photos, GPS location or quantity scanned). To do this, users simply add additional fields and name them using the Orca Scan web or mobile app. Users can do this based on permissions. We also have customised branding allowing users to create a barcode app with their company logo and branding in minutes. This creates a seamless brand experience by incorporating your logo, colour palette, and other visual elements.

Scaling

• Independence of resources: We have a dedicated enterprise solution that allows you to run an instance of our service isolated from the rest of the users on the network. Orca Scan is a cloud native application. We do not own any servers, instead, we rely on the secure and reliable hosting capabilities of Amazon AWS, Google Cloud Platform and Digital Ocean. Their data centres are equipped with advanced security measures, such as 24x7 monitoring, biometric scanning, and video surveillance, to ensure the protection of customer data.

Analytics

• Service usage metrics: Yes
• Metrics types: We provide an extensive audit log of all changes made in the application, showing what, when, where and who changed it. For example the History log enables users to track the entire life-cycle of an asset - end to end traceability.
• Reporting types:
  • API access
  • Real-time dashboards
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: In-house destruction process
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Users can export their data in formats such as CSV, JSON, HTML, PDF, and more by clicking export anytime from within the application. We also have a REST API and integrations to allow for automatic real-time exports. Integrations and custom export methods can be considered upon request.
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats:
  • HTML
  • JSON
  • Microsoft Excel
  • XML
  • ACCEO Retail-1
• Data import formats:
  • CSV
  • Other
• Other data import formats: Microsoft Excel

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Other
• Other protection between networks: Orca Scan uses industry-standard encryption protocols to keep customer data secure. We use TLS encryption to protect data when it’s being transmitted between your device and our platform and AES-256-bit encryption to secure your data when it’s stored on our servers.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
  • Other
• Other protection within supplier network: We encrypt in transit and at rest. Our data processing agreement on our website covers this in much more detail.

Availability and resilience

• Guaranteed availability: SLAs are provided on Enterprise Accounts - for an overview you can see this at https://status.orcascan.com/
• Approach to resilience: Data Encryption Orca Scan uses industry-standard encryption protocols to keep your data secure. We use TLS encryption to protect data when it’s being transmitted between your device and our platform and AES-256-bit encryption to secure your data when it’s stored on our servers. Secure, reliable infrastructure Orca Scan is a cloud native application. We do not own any servers, instead, we rely on the secure and reliable hosting capabilities of Amazon AWS, Google Cloud Platform and Digital Ocean. Their data centres are equipped with advanced security measures, such as 24x7 monitoring, biometric scanning, and video surveillance, to ensure the protection of your data. Access Controls Robust permission and user controls allow you to manage who can access your data. By assigning different roles and setting permissions, you can control who can view, edit, or delete certain information within your account. This helps you maintain the security and privacy of your data by ensuring that only authorised individuals have access to it.
• Outage reporting: We have a status page for customers to view the availability of our services at https://status.orcascan.com/

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
• Access restrictions in management interfaces and support channels: We adopt the Least Privilege Principle: Access rights are granted based on the principle of least privilege, ensuring employees receive only the access necessary to perform their job functions. We review access levels every 90 days and have procedures in place for new starters and leavers.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: We have been Cyber Essentials Plus Accredited (2024/5). Currently being re-assessed for Cyber Essentials Plus. Our COO, Owen Doherty is lead on this supported by a Cyber Security expert who provides ongoing support and advice in this area.
• Information security policies and processes: We have a comprehensive set of security policies and procedures as part of our commitment to customers and Cyber Essentials Plus Accreditation. These policies and procedures are embedded into our culture. Our COO is the lead on this.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Configuration and change management processes are designed to ensure that the system remains robust, secure, and adaptable to changes while minimising disruptions. These processes involve tracking the lifecycle of components, assessing changes for potential security impacts, and ensuring that any modifications align with overall system integrity and security objectives.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Through our Cyber Security Policies and Procedures we have implemented a company-wide process of identifying, evaluating, treating, and reporting on security vulnerabilities in systems and the software that runs on them. For more information on the following: ; How we assess potential threats to our services ; How quickly we deploy patches to our services ; Where we get our information about potential threats from ; Please reach out to our team.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Through our Cyber Security Policies and Procedures we have implemented a company-wide process of identifying and responding to compromises. We respond immediately and notify affected users.
• Incident management type: Supplier-defined controls
• Incident management approach: Staff screening performed but doesn’t conform with BS7858:2019
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Perfect for exploring Orca Scan without any commitment. 1 user, 50 rows, 1 sheet, 2 week revision history Unlimited period
• Link to free trial: https://orcascan.com/pricing

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 10%
• Between £250,000 and £500,000: 10%
• Between £500,001 and £1,000,000: 10%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 10%
• Over £5,000,001: 10%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at hello@orcascan.com. Tell them what format you need. It will help if you say what assistive technology you use.