Mendel Verlag

MendelOnline Web API

MendelOnline is a foreign trade internet portal which provides and links country information on tariff (including taxation) and non-tariff measures (procedures and formalities). It contains data on 150+ third countries and the EU. Operators can easily access global information in English language supporting their business transactions and supply chain design.

Features

• Global trade measures information in one platform.
• Single source of tariff, internal taxation and import procedures information.
• Complemented by product-specific rules of origin for dedicated FTAs.
• Covers 150+ third countries and the EU Member States.
• Harmonised format of all information for all destination countries.
• Unique in the combination of data coverage and data quality.
• Continuous updates for topicality and reliability of the data.
• Predefined queries accessible in form of REST web services.

Benefits

• Quick access to applied global measures in foreign trade.
• Clear format of tariff, internal taxation and import formality information.
• Allows for comparison of the situation in different countries.
• Supports classification of products in different nomenclatures.
• Easy understandable due to overall presentation in the English language.
• Reliable information because of data topicality.
• Check list of necessary documents at importation in destinations.
• Supports use of preferential rates by product-related rules of origin.
• Possibility of individual questions through user support.
• Can be integrated with third-party solutions.

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at mendel@mendel-verlag.de. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

380231334336169

Contact

Kolja Mendel
00492302202930
mendel@mendel-verlag.de

About your service

• Service categories:

  Applications

  Supply chain management

  • Supply chain planning
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: No particular constraints because of web service. The licence arrangement however is for a concrete geographical area (United Kingdom) and thus correspondingly limits access to the service. In contrast to the service MendelContent (separately offered service) the service MendelOnline API does not comprise (download of) the complete data.
• System requirements: REST client.

User support

• Email or online ticketing support: Yes
• Support response times: Answers are usually provided on the same or the next working day.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: Support levels are L1 to L3.; Regular support is contained in the licence fees.; Support is rendered by a support team consisting of both content and technical specialists.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: API documentation is available.; ; A 'train the trainers' training may be offered to contracting authority which might assist in subject-matter specific questions.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: There is no user data within the API approach (in contrast to MendelOnline as a web portal, if registration is chosen as a prerequisite for the service use).
• End-of-contract process: When the contract ends the service is simply terminated.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: The documentation will be made available in electronic format and can be shared by different means including e-mail.

Using the service

• Web browser interface: No
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Standard JSON-based REST API via HTTPS.
• Accessibility standards: None or don’t know
• Description of accessibility: Not applicable (machine to machine interface).
• Accessibility testing: Not applicable (machine to machine interface).
• API: Yes
• What users can and can't do using the API: Buyers may use predefined tariff and non-tariff information queries to obtain data for both display within their web resources as well as for analytic purposes.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Dedicated new queries may be defined. The customisation is done by Mendel in alignment with the contracting authority.

Scaling

• Independence of resources: The system is horizontally scalable and allows for multiple sessions at the same time.

Analytics

• Service usage metrics: Yes
• Metrics types: Number of requests made by the users.; Concrete requests made by users.
• Reporting types: Regular reports
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: Yes
• Equipment disposal approach: In-house destruction process
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: The service is intended to look up specialised information on the web, so there is no need for data export or import as such.
• Data export formats: Other
• Other data export formats: REST web services with JSON
• Data import formats: Other
• Other data import formats: REST web services with JSON (no import)

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The service is available at least at 99.5%. There have been no exemptions in the last 10 years and thus no refund policy had to be established.
• Approach to resilience: The information is available on request.
• Outage reporting: E-mail alerts.

Identity and authentication

• User authentication needed: Yes
• User authentication: Other
• Other user authentication: API key.
• Access restrictions in management interfaces and support channels: Not applicable.
• Access restriction testing frequency: At least once a year
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users receive audit information on a regular basis
• How long user audit data is stored for: Between 6 months and 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: Between 6 months and 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Supplier-defined policies and processes compliant to the delivery of foreign trade information and data services.
• Information security policies and processes: Supplier-defined policies and processes compliant to the delivery of foreign trade information and data services.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Supplier-defined approach and processes compliant to the delivery of foreign trade information and data.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Supplier-defined process compliant to the delivery of foreign trade information and data.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Supplier-defined processes compliant to the delivery of foreign trade information and data.
• Incident management type: Supplier-defined controls
• Incident management approach: Supplier-defined processes compliant to the delivery of foreign trade information and data.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Buyers may be granted limited access to the solution or its customisations for other government agencies.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: None of the criteria
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at mendel@mendel-verlag.de. Tell them what format you need. It will help if you say what assistive technology you use.