FireServiceRota: Firefighter Availability Planning, Rostering, Alerting and Payroll
Firefighter alerting software. On-call firefighter availability management. Fire station readiness. Wholetime firefighter rostering. Planning for RDS and WDS. Efficient shift planning. Overtime planning. Leave planning. Firefighter Payroll. Attendance and payment claims. Command and control system Integration. Firefighter alerting, attendance confirmation. Smartphone alerting. Pager alerting.
Features
- On-call firefighter planning, On-call firefighter forecasting, RDS firefighter planning
- Wholetime firefighter rostering, WDS firefighter rostering, Firefighter shift management
- Firefighter alerting, Confirm attendance, Smartphone alerting, Pager alerting, Firefighter alerts
- Payroll reporting, Payroll integration, Firefighter Attendance, Firefighter Payment claims
- Command & Control Centre system integration, CAD integration, Appliance status
- Leave management, Overtime management, Working time directive, Firefighter Contracts management
- Smart pager alerting, Two-way alerting, Online software, Smartphone app
- Crew exchange, On-call integration, Wholetime integration, Firefighter Resource management
- Performance analysis, Business Intelligence reports, Operational dashboards, API integrations
- Geofencing, appliance degradation model, shift requests, shift exchanges, shift transfers
Benefits
- Planning flexibility On-call firefighter availability Flexible work patterns, Appliance availability
- Improve firefighter retention, Improve station efficiency, Reduce overtime cost
- Ensure station readiness, Keep fire engines on the run
- Optimise shift planning, Improve planning efficiency , Reduce overtime cost
- Incident attendance confirmation, Resilient alerting, Tailored training videos, On-site training
- Virtual training, Workforce planning, Competency planning, Business Intelligence Analytics
- Automated firefighter compensation, Audited compensation process, Crewing deficiency resolution
- Crewing deficiency prevention, Employee contractual compliance, Legislative compliance
- Working Time Directive, IT cost reduction, Increased reliability
- Reliable firefighter coverage, Shift planning optimisation, Firefighter retention
Pricing
Service documents
Request an accessible format
Framework
G-Cloud 15
Service ID
3 6 6 6 9 1 7 0 7 0 1 4 4 2 4
Contact
FireServiceRota
Cor Klaasse Bos
Telephone: +31613056675
Email: info@fireservicerota.com
About the service
- Service categories
-
- Application Development and Deployment
- Analytics and business intelligence
- Business Intelligence
- Business Intelligence
- Business Intelligence
- Analytics and business intelligence
- Application Development and Deployment
- Multi cloud support
- Yes
Service scope
- Software add-on or extension
- No
- Cloud deployment model
- Public cloud
- Service constraints
-
The software may not work reliably on computers, smartphones and internet browser versions older than 4 years. In these cases, testing the software is recommended.
Slow internet connections may affect the usability of the software.
Services may be unavailable during planned maintenance windows, communicated 2 weeks in advance.
Critical alerting on smartphones depends on the phone hardware and operating supporting (critical) push notifications, and the user allowing it. - System requirements
-
- Browser : Microsoft Edge / Google Chrome
- IOS: minimum version is 11, we recommend version 16.
- Android: minimum version is 8.0 Oreo, we recommend 13 Tiramisu.
- Alerting module requires Command & Control Centre system integration
- Display Resolution: 1920 x 1200 / 1080 recommended
- Access to high speed and reliable Internet
User support
- Email or online ticketing support
- Yes
- Support response times
-
Response times defined against service level agreement with associated incident priorities as below. Business critical 365@24/7 support available at an extra cost.
P1 High: Total system outage, data corruption, reputation damage or privacy breach.
P2 Medium: issue impacts minority of users, partial interruption of processes
P3 Low: non-critical processes impacted, workaround available, reconfiguration
4) None: feature requests, clarifications
P1 has response time of 30 minutes and a resolution time of 4 hours.
P2 has response time of 4 hours and a resolution time of 24 hours.
P3 has response time of 8 hours and a resolution time of 2 weeks. - User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Onsite support
- Yes, at extra cost
- Support levels
-
FireServiceRota provides support as per our Service Level Agreement.
The first line of support provided through built-in manuals, FAQ articles, user manuals. End-users supported by local super-users who received additional training as part of our rollout process.
Our helpdesk is accessed through the Feedback button in the software, or sending an email. We apply the following ticket priorities:
P1 High: Total system outage, data corruption, reputation damage or privacy breach.
P2 Medium: issue impacts minority of users, partial interruption of processes
P3 Low: non-critical processes impacted, workaround available, reconfiguration
4) None: feature requests, clarifications
P1 has response time of 30 minutes and a resolution time of 8 hours.
P2 has response time of 1 hour and a resolution time of 24 hours.
P3 has response time of 1 business day and a resolution time of 2 weeks.
We have infrastructure monitoring and alerting in place, our engineers take action before our customers notify us of the issues.
Urgent and mission critical 365/24/7 support can be purchased as per Pricing Document, providing access to a critical support telephone number, and entitlement to immediate issue follow-up.
On-site or online support and training can be provided against the rates as per Pricing Document. - Support available to third parties
- Yes
Onboarding and offboarding
- Getting started
- Both online and onsite training are available for new customers, as costed in the Pricing Document. We advocate for the "train-the-trainer" approach. Additionally, we can provide online documentation that supports specific customers set-up. Within our system, there are also guided tours available and a self-help tool that allows users to find the information needed to get started.
- Service documentation
- Yes
- Documentation formats
-
- HTML
- Documentation accessibility standard
- WCAG 2.2 AA
- End-of-contract data extraction
-
User data can be extracted through our API which is provided as part of our standard services. Documented here:
https://www.fireservicerota.co.uk/apidocs/.
Additionally, specific reports can be run and exported to CSV. - End-of-contract process
- At the end of the contract, all data is readily available in a machine-readable format through our well-documented APIs that is free to use. If additional technical support is needed, this can be provided at an hourly rate as specified in the contract or SLA. After data extraction, or upon confirmation of the customer, a data removal or archiving approach is agreed and executed. More detailed exit plans can be agreed and executed at an hourly rate as specified in the contract or SLA.
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Opera
- Application to install
- Yes
- Compatible operating systems
-
- Android
- IOS
- Linux or Unix
- MacOS
- Windows
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
-
The desktop service provides full functionality and access.
The smartphone app offers the most frequently used functionality, including: alerting, incident response status confirmation, appliance availability overview, personal availability planning, shift overview, leave requests, shift exchanges, messages, and announcements. - Service interface
- Yes
- Description of service interface
-
Our software user interface is accessible through a web browser and/or using our iOS or Android smartphone app.
We also provide an API as part of our standard services, documented here: https://www.fireservicerota.co.uk/apidocs/
Integration end-points available for the following entities: authentication, users, devices, notifications, incidents, activity reports, tasks, groups, memberships, ranks, skills, certifications, availability codes, duties, crewing levels, announcements, polls, messages, shift exchanges, absence requests, duty requests, transfers, contracts, activity types, dashboards, and pagers. - Accessibility standards
- None or don’t know
- Description of accessibility
-
The solution adheres to many of the principles of WCAG 2.1A sections:
1.3 Adaptable,
1.4 Distinguishable,
2.3 Seizures and Physical Reactions,
2.4 Navigable,
3.1.1 Language of Page,
3.2 Predictable,
3.3 Input Assistance, - Accessibility testing
- None
- User support accessibility
- None or don’t know
- API
- Yes
- What users can and can't do using the API
-
We publish a set of over 100 application interfaces (API) to all customers.
Our API documentation is publicly available here: https://www.fireservicerota.co.uk/apidocs/
This API allows requesting and updating information regarding: authentication, users, devices, notifications, incidents, activity reports, tasks, groups, memberships, ranks, skills, certifications, availability codes, duties, crewing levels, announcements, polls, messages, shift exchanges, absence requests, duty requests, transfers, contracts, activity types, dashboards, and pagers.
The API applies pagination and is rate-limited based on a fair-usage policy. - API documentation
- Yes
- API documentation formats
-
- Open API (also known as Swagger)
- HTML
- API sandbox or test environment
- Yes
- Customisation available
- Yes
- Description of customisation
-
FireServiceRota's functionality is configurable and adaptable to the different needs and ways of working Fire and Rescue Services have. It is possible to set-up specific business rules and workflows within a F&R service and even for different stations to allow a comprehensive overview and collaboration within or between duty systems (on-call, wholetime, flexi, etc). Examples of parameters services can customise are:
- Skillsets and crew requirements for appliances
- Alerting policies (response expiration, fairness)
- Duty and availability patterns
- Booking codes, contracts and payroll rules
Non-sensitive settings can be updated by managers with sufficient system privileges. Critical configuration (related to alerting, crewing levels, etc) is performed by or with the help of the FSR Team.
Throughout the duration of contract, specialised support can be made available to help with configuration and/or major updates in business rules.
Scaling
- Independence of resources
-
Given the criticality of our systems, it is our policy to have overcapacity at the cost of a higher infrastructure bill. This includes having redundant infrastructure which can be scaled up in minutes to take over workload from other parts of the infrastructure.
We use automated monitoring and 24/7 alerting systems to track capacity related metrics, and be alerted when these metrics exceed set parameters.
These metrics allow us to ascertain whether extra capacity is needed. We have set up conservative reactive alerts (e.g. at 70% of capacity) so our team can react well before any critical issues occur.
Analytics
- Service usage metrics
- Yes
- Metrics types
-
Number of active users and stations,
Alerting devices connected (for fleet management),
Communication metrics (SMS),
Alerting performance statistics,
Crew and Appliance availability statistics - Reporting types
-
- API access
- Real-time dashboards
- Regular reports
- Resource tagging
- Yes
- FOCUS resource tagging
- Yes
Supplier type
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Baseline Personnel Security Standard (BPSS)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
-
- European Economic Area (EEA)
- Other locations
- User control over data storage and processing locations
- No
- Datacentre security standards
- Complies with a recognised standard (for example CSA CCM version 4.0)
- Penetration testing frequency
- At least once a year
- Penetration testing approach
- Another external penetration testing organisation
- Protecting data at rest
-
- Physical access control, complying with CSA CCM v4.0
- Encryption of all physical media
- Scale, obfuscating techniques, or data storage sharding
- Data sanitisation process
- Yes
- Data sanitisation type
- Explicit overwriting of storage before reallocation / Secure Erase
- Equipment disposal approach
- In-house destruction process
Data importing and exporting
- Data export approach
-
To migrate data to a different system, we would recommend to:
use our documented API to extract data from FireServiceRota.
use an ETL tool to transform it,
and load it into the new system
All data held within FireServiceRota remains property of the customer, during and after the contract.
We have several mechanisms for data migration:
Our JSON API, exposing functions and data using the OpenAPI Specification. Documented here: https://www.fireservicerota.co.uk/apidocs/
A customisable CSV engine supporting many types of columns and formats.
Our specialists help you with the extraction of data and know our data structure and API in detail. - Data export formats
-
- CSV
- Other
- Other data export formats
- JSON
- Data import formats
- CSV
Data-in-transit protection
- Data protection between buyer and supplier networks
- TLS (version 1.2 or above)
- Data protection within supplier network
- TLS (version 1.2 or above)
Availability and resilience
- Guaranteed availability
-
We guarantee 99,9% service availability on an annual level, and strive for 99,99%, which was reached for any 3-month period average in the past year.
This is monitored by an external and independent monitoring tool.
Statistics are publicly available on a status website located at https://status.fireservicerota.com/
We do not offer refunds or Service Credits. - Approach to resilience
-
Given the criticality of our systems, we have a highly resilient infrastructure in place.
We have infrastructure overcapacity at the cost of a higher infrastructure bill. This includes having redundant infrastructure which can be scaled up in minutes to take over workload from other parts of the infrastructure.
To increase geographic and provider-specific resilience, our infrastructure is spread across three different data-centres, located in different cities and countries, operated by 3 different providers.
Our software update release process does not incur any downtime.
We operate a resilient tripple-redundant production database architecture, and run snapshot backups twice per day, continuous streaming backups, and keep a 2-hour lagging backup to respond to any data corruption issues.
We use automated monitoring and 24/7 alerting systems to notify on-duty DevOps and respond to infrastructure issues immediately.
Our Business Continuity Plan describes further details, and can be provided on request. - Outage reporting
-
Outages are reported through our public dashboard https://status.fireservicerota.com.
This external monitoring service supports subscribing to email alerts.
A system health API is available on https://www.fireservicerota.co.uk/api/v2/health
Identity and authentication
- User authentication needed
- Yes
- User authentication
-
- Multi-Factor Authentication (MFA)
- Identity federation with existing provider (for example Google Apps)
- Username or password
- Access restrictions in management interfaces and support channels
-
Our access control process is performed in accordance with ISO 27001 A.9.
All users have named accounts. Their access is restricted by applying roles and access rights corresponding to their position and role in the customer organisation. The management and/or appointed administrators in the customer's organisation can be provided with the rights to allocate access rights to the users under their supervision.
We apply the following principles in our access provisioning:
“Deny-by-default”,
“Need-to-know”,
“Least privilege”,
Role-based Access Control (RBAC),
Information classification and the value of information assets - Access restriction testing frequency
- At least once a year
- Management access authentication
-
- Multi-Factor Authentication (MFA)
- Identity federation with existing provider (for example Google Apps)
Audit information for users
- Access to user activity audit information
- Users have access to real-time audit information
- How long user audit data is stored for
- At least 12 months
- Access to supplier activity audit information
- Users have access to real-time audit information
- How long supplier audit data is stored for
- At least 12 months
- How long system logs are stored for
- At least 12 months
Security governance
- Named board-level person responsible for service security
- Yes
- Software Security Code of Practice
- Yes
- Security governance certified
- Yes
- Security governance standards
- ISO/IEC 27001
- Information security policies and processes
-
We follow the security policies as described and certified in our ISO 27001:2013 Information Security Management System.
Our Managing Director and CTO/CISO are in the ISMS Board. We commit that:
Information assets will be protected/controlled against unauthorised access or misuse.
Confidentiality of information assets will be assured.
Integrity of information assets will be maintained.
Planning processes will be maintained to secure information assets in the event of a business disruption.
Regulatory, contractual and legal requirements will be complied with.
Information security policy training will be provided to all employees.
Acceptable Use Policies will be issued and signed by all employees and other relevant personnel.
Information assets will be classified and protected as required.
Physical, logical, environmental and communications security will be maintained.
Operational procedures and responsibilities will be maintained.
Infringement of this Policy may result in immediate disciplinary action or criminal prosecution.
Business requirements for availability of information and information systems will be met.
The applicable requirements of the ISMS are satisfied and the ISMS is continually improved.
Awareness of the policies is created through the ISMS policy pack feature, through which all team members confirm their understanding of the clauses applicable.
Compliance ensured with internal and external audits.
https://www.fireservicerota.com/information-security
Operational security
- Configuration and change management standard
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Configuration and change management approach
-
Our configuration and change management process is performed in accordance with ISO 27001 A.12.1.2, ensuring that changes to organisation, business processes, information processing facilities, and systems that affect information security are adequately controlled:
Identification and recording of significant changes
Planning and testing of changes
Assessment of the potential impacts, including information security impacts
Approval procedure for proposed changes
Verification that information security requirements have been met
Communication of change details
Fall-back procedures, including procedures for aborting and recovering from unsuccessful changes
Provision of an emergency change process to enable quick and controlled implementation of changes needed to resolve an incident - Vulnerability management type
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Vulnerability management approach
-
Our vulnerability management process is performed in accordance with ISO 27001 A.12.6, to ensure that vulnerabilities are identified and addressed in a timely/adequate fashion.
It is our Information Security Objective to have "No known Common Vulnerability and Exposures (CVE) on our dependencies", and merge any patches within one week.
We obtain information on relevant vulnerabilities through:
Contact with special interest groups
Annual penetration tests and vulnerability scans performed by an external certified party
- External security experts proactively making us aware of potential security issues
Any vulnerability is assessed by the CISO and TISO along with other key stakeholders. - Protective monitoring type
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Protective monitoring approach
-
Our protective monitoring process is performed in accordance with ISO 27001 A.12 and A.16. We have automated scanning and access blocking, alerting systems, logging and manual review processes in place to detect and respond to potential compromises.
Potential compromises are assessed and responded to in accordance with ISO 27001, including the collection of evidence, forensic analysis, escalation and communication with relevant parties (customers, data privacy authorities) and the addressing of the weakness. Depending on the severity of the security event or incident, our 24/7 support team can escalate to appropriate stakeholders and ensure a timely response, typically in one day. - Incident management type
- Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
- Post-quantum cryptography secure
- Yes
- Incident management approach
-
Our incident management process is performed in accordance with ISO 27001 A.16.
We have pre-defined processes for common events, captured in runbooks.
An information security event must be reported immediately either in person to the CISO or TISO or to security@fireservicerota.com.
Incidents related to Availability (outages) are reported through status.fireservicerota.com, including post-mortem reports for high-impact incidents.
Other security incident reports are shared on a need-to-know basis, for example with impacted customers' security officers.
Secure development
- Approach to secure software development best practice
- Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)
Public sector networks
- Connection to public sector networks
- No
Pricing
- Discount for educational organisations
- No
- Free trial available
- Yes
- Description of free trial
- A simplified version of our availability management or rostering software is available for a trial period of 3 months. Three hours of consultancy are provided free-of-charge to tailor the trial to the needs of the prospective customer. This excludes complex setup, integrations, contractual balances and payroll.
- Link to free trial
- https://www.fireservicerota.co.uk/start_your_free_trial
Discount percentage by annual call-off contract value (excluding VAT)
- Less than £250,000
- 1%
- Between £250,000 and £500,000
- 5%
- Between £500,001 and £1,000,000
- 10%
- Between £1,000,001 and £2,500,000
- 15%
- Between £2,500,001 and £5,000,000
- 20%
- Over £5,000,001
- 25%
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- ISO/IEC 27001 accredited by
- BSI
- ISO/IEC 27001 accreditation date
- Monday 26 September 2022
- What the ISO/IEC 27001 doesn’t cover
-
Our ISO 27001 certification is full scope. Our Statement of Applicability does exclude several controls in A.11 Physical and Environmental Security.
We do not have office buildings and we do not operate our own data centres.
The risks around physical security of our data centres is transferred to all data centre providers separately holding their own 27001:2013 certificate or other standards that are equal or better. - ISO 28000:2022 certification
- No
- ISO 9001 certification
- No
- Quality management systems (QMS)
- Yes
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber Essentials Certificate Number
- Provided
- Cyber essentials plus
- No
- Cyber Essentials Alternative
- In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
- Other security certifications
- No
Social value
- Mission: Kick start economic growth
-
To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority
- New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
- Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
- Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
- Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
- Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
- Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
- Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.
- Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises
- Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
- Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
- Measures for making facilities used in the delivery of the contract available for community groups, education or training
- Mission: Make Britain a clean energy superpower
-
To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero
Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.
- Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
- Mission: Break down barriers to opportunity
-
By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 6: Employment and training: For those who face barriers to employment
- Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
- Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
- Working conditions which promote an inclusive working environment and promote retention and progression
- Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain
- Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
- Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition
Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.
- Understanding of the issues affecting the development of new skills by target cohort
- Understanding of issues relating to entering the contract workforce
- Mission: Build an NHS fit for the future
-
That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.
Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.
- Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
- Actions to invest in the physical and mental health and wellbeing of the contract workforce