Skip to main content

Help us improve the Digital Marketplace - send your feedback

FireServiceRota

FireServiceRota: Firefighter Availability Planning, Rostering, Alerting and Payroll

Firefighter alerting software. On-call firefighter availability management. Fire station readiness. Wholetime firefighter rostering. Planning for RDS and WDS. Efficient shift planning. Overtime planning. Leave planning. Firefighter Payroll. Attendance and payment claims. Command and control system Integration. Firefighter alerting, attendance confirmation. Smartphone alerting. Pager alerting.

Features

  • On-call firefighter planning, On-call firefighter forecasting, RDS firefighter planning
  • Wholetime firefighter rostering, WDS firefighter rostering, Firefighter shift management
  • Firefighter alerting, Confirm attendance, Smartphone alerting, Pager alerting, Firefighter alerts
  • Payroll reporting, Payroll integration, Firefighter Attendance, Firefighter Payment claims
  • Command & Control Centre system integration, CAD integration, Appliance status
  • Leave management, Overtime management, Working time directive, Firefighter Contracts management
  • Smart pager alerting, Two-way alerting, Online software, Smartphone app
  • Crew exchange, On-call integration, Wholetime integration, Firefighter Resource management
  • Performance analysis, Business Intelligence reports, Operational dashboards, API integrations
  • Geofencing, appliance degradation model, shift requests, shift exchanges, shift transfers

Benefits

  • Planning flexibility On-call firefighter availability Flexible work patterns, Appliance availability
  • Improve firefighter retention, Improve station efficiency, Reduce overtime cost
  • Ensure station readiness, Keep fire engines on the run
  • Optimise shift planning, Improve planning efficiency , Reduce overtime cost
  • Incident attendance confirmation, Resilient alerting, Tailored training videos, On-site training
  • Virtual training, Workforce planning, Competency planning, Business Intelligence Analytics
  • Automated firefighter compensation, Audited compensation process, Crewing deficiency resolution
  • Crewing deficiency prevention, Employee contractual compliance, Legislative compliance
  • Working Time Directive, IT cost reduction, Increased reliability
  • Reliable firefighter coverage, Shift planning optimisation, Firefighter retention

Pricing

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@fireservicerota.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

3 6 6 6 9 1 7 0 7 0 1 4 4 2 4

Contact

FireServiceRota Cor Klaasse Bos
Telephone: +31613056675
Email: info@fireservicerota.com

About the service

Service categories
  • Application Development and Deployment
    • Analytics and business intelligence
      • Business Intelligence
        • Business Intelligence
Multi cloud support
Yes

Service scope

Software add-on or extension
No
Cloud deployment model
Public cloud
Service constraints
The software may not work reliably on computers, smartphones and internet browser versions older than 4 years. In these cases, testing the software is recommended.
Slow internet connections may affect the usability of the software.
Services may be unavailable during planned maintenance windows, communicated 2 weeks in advance.
Critical alerting on smartphones depends on the phone hardware and operating supporting (critical) push notifications, and the user allowing it.
System requirements
  • Browser : Microsoft Edge / Google Chrome
  • IOS: minimum version is 11, we recommend version 16.
  • Android: minimum version is 8.0 Oreo, we recommend 13 Tiramisu.
  • Alerting module requires Command & Control Centre system integration
  • Display Resolution: 1920 x 1200 / 1080 recommended
  • Access to high speed and reliable Internet

User support

Email or online ticketing support
Yes
Support response times
Response times defined against service level agreement with associated incident priorities as below. Business critical 365@24/7 support available at an extra cost.

P1 High: Total system outage, data corruption, reputation damage or privacy breach.
P2 Medium: issue impacts minority of users, partial interruption of processes
P3 Low: non-critical processes impacted, workaround available, reconfiguration
4) None: feature requests, clarifications

P1 has response time of 30 minutes and a resolution time of 4 hours.
P2 has response time of 4 hours and a resolution time of 24 hours.
P3 has response time of 8 hours and a resolution time of 2 weeks.
User can manage status and priority of support tickets
No
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
FireServiceRota provides support as per our Service Level Agreement.
The first line of support provided through built-in manuals, FAQ articles, user manuals. End-users supported by local super-users who received additional training as part of our rollout process.
Our helpdesk is accessed through the Feedback button in the software, or sending an email. We apply the following ticket priorities:
P1 High: Total system outage, data corruption, reputation damage or privacy breach.
P2 Medium: issue impacts minority of users, partial interruption of processes
P3 Low: non-critical processes impacted, workaround available, reconfiguration
4) None: feature requests, clarifications

P1 has response time of 30 minutes and a resolution time of 8 hours.
P2 has response time of 1 hour and a resolution time of 24 hours.
P3 has response time of 1 business day and a resolution time of 2 weeks.

We have infrastructure monitoring and alerting in place, our engineers take action before our customers notify us of the issues.

Urgent and mission critical 365/24/7 support can be purchased as per Pricing Document, providing access to a critical support telephone number, and entitlement to immediate issue follow-up.

On-site or online support and training can be provided against the rates as per Pricing Document.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Both online and onsite training are available for new customers, as costed in the Pricing Document. We advocate for the "train-the-trainer" approach. Additionally, we can provide online documentation that supports specific customers set-up. Within our system, there are also guided tours available and a self-help tool that allows users to find the information needed to get started.
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
Documentation accessibility standard
WCAG 2.2 AA
End-of-contract data extraction
User data can be extracted through our API which is provided as part of our standard services. Documented here:
https://www.fireservicerota.co.uk/apidocs/.
Additionally, specific reports can be run and exported to CSV.
End-of-contract process
At the end of the contract, all data is readily available in a machine-readable format through our well-documented APIs that is free to use. If additional technical support is needed, this can be provided at an hourly rate as specified in the contract or SLA. After data extraction, or upon confirmation of the customer, a data removal or archiving approach is agreed and executed. More detailed exit plans can be agreed and executed at an hourly rate as specified in the contract or SLA.

Using the service

Web browser interface
Yes
Supported browsers
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
Application to install
Yes
Compatible operating systems
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
The desktop service provides full functionality and access.
The smartphone app offers the most frequently used functionality, including: alerting, incident response status confirmation, appliance availability overview, personal availability planning, shift overview, leave requests, shift exchanges, messages, and announcements.
Service interface
Yes
Description of service interface
Our software user interface is accessible through a web browser and/or using our iOS or Android smartphone app.
We also provide an API as part of our standard services, documented here: https://www.fireservicerota.co.uk/apidocs/
Integration end-points available for the following entities: authentication, users, devices, notifications, incidents, activity reports, tasks, groups, memberships, ranks, skills, certifications, availability codes, duties, crewing levels, announcements, polls, messages, shift exchanges, absence requests, duty requests, transfers, contracts, activity types, dashboards, and pagers.
Accessibility standards
None or don’t know
Description of accessibility
The solution adheres to many of the principles of WCAG 2.1A sections:
1.3 Adaptable,
1.4 Distinguishable,
2.3 Seizures and Physical Reactions,
2.4 Navigable,
3.1.1 Language of Page,
3.2 Predictable,
3.3 Input Assistance,
Accessibility testing
None
User support accessibility
None or don’t know
API
Yes
What users can and can't do using the API
We publish a set of over 100 application interfaces (API) to all customers.
Our API documentation is publicly available here: https://www.fireservicerota.co.uk/apidocs/
This API allows requesting and updating information regarding: authentication, users, devices, notifications, incidents, activity reports, tasks, groups, memberships, ranks, skills, certifications, availability codes, duties, crewing levels, announcements, polls, messages, shift exchanges, absence requests, duty requests, transfers, contracts, activity types, dashboards, and pagers.
The API applies pagination and is rate-limited based on a fair-usage policy.
API documentation
Yes
API documentation formats
  • Open API (also known as Swagger)
  • HTML
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
FireServiceRota's functionality is configurable and adaptable to the different needs and ways of working Fire and Rescue Services have. It is possible to set-up specific business rules and workflows within a F&R service and even for different stations to allow a comprehensive overview and collaboration within or between duty systems (on-call, wholetime, flexi, etc). Examples of parameters services can customise are:
- Skillsets and crew requirements for appliances
- Alerting policies (response expiration, fairness)
- Duty and availability patterns
- Booking codes, contracts and payroll rules
Non-sensitive settings can be updated by managers with sufficient system privileges. Critical configuration (related to alerting, crewing levels, etc) is performed by or with the help of the FSR Team.
Throughout the duration of contract, specialised support can be made available to help with configuration and/or major updates in business rules.

Scaling

Independence of resources
Given the criticality of our systems, it is our policy to have overcapacity at the cost of a higher infrastructure bill. This includes having redundant infrastructure which can be scaled up in minutes to take over workload from other parts of the infrastructure.
We use automated monitoring and 24/7 alerting systems to track capacity related metrics, and be alerted when these metrics exceed set parameters.
These metrics allow us to ascertain whether extra capacity is needed. We have set up conservative reactive alerts (e.g. at 70% of capacity) so our team can react well before any critical issues occur.

Analytics

Service usage metrics
Yes
Metrics types
Number of active users and stations,
Alerting devices connected (for fleet management),
Communication metrics (SMS),
Alerting performance statistics,
Crew and Appliance availability statistics
Reporting types
  • API access
  • Real-time dashboards
  • Regular reports
Resource tagging
Yes
FOCUS resource tagging
Yes

Supplier type

Supplier type
Not a reseller

Staff security

Staff security clearance
Conforms to BS7858:2019
Government security clearance
Baseline Personnel Security Standard (BPSS)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
  • European Economic Area (EEA)
  • Other locations
User control over data storage and processing locations
No
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 4.0)
Penetration testing frequency
At least once a year
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
  • Physical access control, complying with CSA CCM v4.0
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
Data sanitisation process
Yes
Data sanitisation type
Explicit overwriting of storage before reallocation / Secure Erase
Equipment disposal approach
In-house destruction process

Data importing and exporting

Data export approach
To migrate data to a different system, we would recommend to:
use our documented API to extract data from FireServiceRota.
use an ETL tool to transform it,
and load it into the new system

All data held within FireServiceRota remains property of the customer, during and after the contract.

We have several mechanisms for data migration:
Our JSON API, exposing functions and data using the OpenAPI Specification. Documented here: https://www.fireservicerota.co.uk/apidocs/
A customisable CSV engine supporting many types of columns and formats.

Our specialists help you with the extraction of data and know our data structure and API in detail.
Data export formats
  • CSV
  • Other
Other data export formats
JSON
Data import formats
CSV

Data-in-transit protection

Data protection between buyer and supplier networks
TLS (version 1.2 or above)
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
We guarantee 99,9% service availability on an annual level, and strive for 99,99%, which was reached for any 3-month period average in the past year.
This is monitored by an external and independent monitoring tool.
Statistics are publicly available on a status website located at https://status.fireservicerota.com/
We do not offer refunds or Service Credits.
Approach to resilience
Given the criticality of our systems, we have a highly resilient infrastructure in place.
We have infrastructure overcapacity at the cost of a higher infrastructure bill. This includes having redundant infrastructure which can be scaled up in minutes to take over workload from other parts of the infrastructure.
To increase geographic and provider-specific resilience, our infrastructure is spread across three different data-centres, located in different cities and countries, operated by 3 different providers.
Our software update release process does not incur any downtime.
We operate a resilient tripple-redundant production database architecture, and run snapshot backups twice per day, continuous streaming backups, and keep a 2-hour lagging backup to respond to any data corruption issues.
We use automated monitoring and 24/7 alerting systems to notify on-duty DevOps and respond to infrastructure issues immediately.
Our Business Continuity Plan describes further details, and can be provided on request.
Outage reporting
Outages are reported through our public dashboard https://status.fireservicerota.com.
This external monitoring service supports subscribing to email alerts.
A system health API is available on https://www.fireservicerota.co.uk/api/v2/health

Identity and authentication

User authentication needed
Yes
User authentication
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
Access restrictions in management interfaces and support channels
Our access control process is performed in accordance with ISO 27001 A.9.
All users have named accounts. Their access is restricted by applying roles and access rights corresponding to their position and role in the customer organisation. The management and/or appointed administrators in the customer's organisation can be provided with the rights to allocate access rights to the users under their supervision.
We apply the following principles in our access provisioning:
“Deny-by-default”,
“Need-to-know”,
“Least privilege”,
Role-based Access Control (RBAC),
Information classification and the value of information assets
Access restriction testing frequency
At least once a year
Management access authentication
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
At least 12 months
How long system logs are stored for
At least 12 months

Security governance

Named board-level person responsible for service security
Yes
Software Security Code of Practice
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
We follow the security policies as described and certified in our ISO 27001:2013 Information Security Management System.
Our Managing Director and CTO/CISO are in the ISMS Board. We commit that:

Information assets will be protected/controlled against unauthorised access or misuse.
Confidentiality of information assets will be assured.
Integrity of information assets will be maintained.
Planning processes will be maintained to secure information assets in the event of a business disruption.
Regulatory, contractual and legal requirements will be complied with.
Information security policy training will be provided to all employees.
Acceptable Use Policies will be issued and signed by all employees and other relevant personnel.
Information assets will be classified and protected as required.
Physical, logical, environmental and communications security will be maintained.
Operational procedures and responsibilities will be maintained.
Infringement of this Policy may result in immediate disciplinary action or criminal prosecution.
Business requirements for availability of information and information systems will be met.
The applicable requirements of the ISMS are satisfied and the ISMS is continually improved.
Awareness of the policies is created through the ISMS policy pack feature, through which all team members confirm their understanding of the clauses applicable.
Compliance ensured with internal and external audits.

https://www.fireservicerota.com/information-security

Operational security

Configuration and change management standard
Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
Configuration and change management approach
Our configuration and change management process is performed in accordance with ISO 27001 A.12.1.2, ensuring that changes to organisation, business processes, information processing facilities, and systems that affect information security are adequately controlled:

Identification and recording of significant changes
Planning and testing of changes
Assessment of the potential impacts, including information security impacts
Approval procedure for proposed changes
Verification that information security requirements have been met
Communication of change details
Fall-back procedures, including procedures for aborting and recovering from unsuccessful changes
Provision of an emergency change process to enable quick and controlled implementation of changes needed to resolve an incident
Vulnerability management type
Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
Vulnerability management approach
Our vulnerability management process is performed in accordance with ISO 27001 A.12.6, to ensure that vulnerabilities are identified and addressed in a timely/adequate fashion.

It is our Information Security Objective to have "​​​​​​​​​​​​​​​​​​​​​​No known ​Common Vulnerability and Exposures (CVE) on our dependencies", and merge any patches within one week.

We obtain information on relevant vulnerabilities through:
Contact with special interest groups
Annual penetration tests and vulnerability scans performed by an external certified party
- External security experts proactively making us aware of potential security issues

Any vulnerability is assessed by the CISO and TISO along with other key stakeholders.
Protective monitoring type
Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
Protective monitoring approach
Our protective monitoring process is performed in accordance with ISO 27001 A.12 and A.16. We have automated scanning and access blocking, alerting systems, logging and manual review processes in place to detect and respond to potential compromises.
Potential compromises are assessed and responded to in accordance with ISO 27001, including the collection of evidence, forensic analysis, escalation and communication with relevant parties (customers, data privacy authorities) and the addressing of the weakness. Depending on the severity of the security event or incident, our 24/7 support team can escalate to appropriate stakeholders and ensure a timely response, typically in one day.
Incident management type
Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
Post-quantum cryptography secure
Yes
Incident management approach
Our incident management process is performed in accordance with ISO 27001 A.16.
We have pre-defined processes for common events, captured in runbooks.
An information security event must be reported immediately either in person to the CISO or TISO or to security@fireservicerota.com.
Incidents related to Availability (outages) are reported through status.fireservicerota.com, including post-mortem reports for high-impact incidents.
Other security incident reports are shared on a need-to-know basis, for example with impacted customers' security officers.

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

Connection to public sector networks
No

Pricing

Discount for educational organisations
No
Free trial available
Yes
Description of free trial
A simplified version of our availability management or rostering software is available for a trial period of 3 months. Three hours of consultancy are provided free-of-charge to tailor the trial to the needs of the prospective customer. This excludes complex setup, integrations, contractual balances and payroll.
Link to free trial
https://www.fireservicerota.co.uk/start_your_free_trial

Discount percentage by annual call-off contract value (excluding VAT)

Less than £250,000
1%
Between £250,000 and £500,000
5%
Between £500,001 and £1,000,000
10%
Between £1,000,001 and £2,500,000
15%
Between £2,500,001 and £5,000,000
20%
Over £5,000,001
25%

Standards and certifications

ISO/IEC 27001 certification
Yes
ISO/IEC 27001 accredited by
BSI
ISO/IEC 27001 accreditation date
Monday 26 September 2022
What the ISO/IEC 27001 doesn’t cover
Our ISO 27001 certification is full scope. Our Statement of Applicability does exclude several controls in A.11 Physical and Environmental Security.
We do not have office buildings and we do not operate our own data centres.
The risks around physical security of our data centres is transferred to all data centre providers separately holding their own 27001:2013 certificate or other standards that are equal or better.
ISO 28000:2022 certification
No
ISO 9001 certification
No
Quality management systems (QMS)
Yes
CSA STAR certification
No
PCI certification
No
Cyber essentials
Yes
Cyber Essentials Certificate Number
Provided
Cyber essentials plus
No
Cyber Essentials Alternative
In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
Other security certifications
No

Social value

Mission: Kick start economic growth

To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
  • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
  • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
  • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges

Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

  • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
  • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
  • Measures for making facilities used in the delivery of the contract available for community groups, education or training
Mission: Make Britain a clean energy superpower

To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
  • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
Mission: Break down barriers to opportunity

By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

Policy Outcome 6: Employment and training: For those who face barriers to employment

  • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
  • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Working conditions which promote an inclusive working environment and promote retention and progression
  • Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain
  • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
  • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

  • Understanding of the issues affecting the development of new skills by target cohort
  • Understanding of issues relating to entering the contract workforce
Mission: Build an NHS fit for the future

That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

  • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
  • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@fireservicerota.com. Tell them what format you need. It will help if you say what assistive technology you use.