ABYASA LIMITED

Abyasa Centralised Placement Management System

We provide flexible, tailored software for institutions delivering Initial Teacher Education and managing student placements for school‑based training and work‑experience programmes. Our solution supports the entire placement lifecycle, enhances visibility, coordination and efficiency for all participants. It includes an integrated, template‑driven e‑portfolio for students and training modules for school‑based staff.

Features

• Tailored to match the institution’s placement structure and reporting needs
• Provides data required when reviewing, assigning placements with automation
• Ability to attach participants to support trainees with multiple roles
• Mentors and trainees collaboratively set goals and review progress
• Hours and Attendance Tracking with automated alerts on absence patterns
• Portal for Placement Providers to Manage offers and Job advertisements
• Email and intelligent notification tools to keep all stakeholders informed
• Customisable training modules with certification and reporting of hours undertaken
• Single place platform to track cohort progress and manage payments
• Supports integration with Student Record System with customisable APIs

Benefits

• Single stop solution to mange placements and trainee development
• Access to friendly and skilled customer support team
• Ease of placing frees admin users to prioritise quality placements
• Multiple reporting options enable compliance to regulators requirements
• The time spent tracking the progress of trainees is minimised
• Easily customise the pathway of students requiring additional support
• Quick Links allow users to easily navigate around the application
• Placement providers can easily see and manage their offers
• Communication between all participants is quick and easy
• Users and participants are reminded of key tasks with notifications

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at support@abyasa.net. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

381650702263538

Contact

Shashidhar Shetty
01590479190
support@abyasa.net

About your service

• Service categories:

  Applications

  Production and operations

  Service industry and public sector operations

  • Education
  • Other
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: None
• System requirements:
  • Network connectivity to required service endpoints.
  • Web browsers Chrome 142.0.7444+,Edge 142.0.7444+,Firefox 144.0.2+,Safari 18.6+
  • Windows 10+, macOS 15+, Android 14+, iOS 18+

User support

• Email or online ticketing support: Yes
• Support response times: Week Day; - For showstopper issues, we respond within 60 minutes.; - For High priority issues, we respond within 120 minutes.; - Normal priority issues, we respond within 1 business day.; - Low priority issues, we respond within 2 business day.; ; Week End; - For showstopper issues, we respond within 120 minutes.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: The support levels range from low to critical. Users can access support through the following options:; - Email: Available from Monday to Friday between 8:00 AM and 5:00 PM.; - Phone: Available from Monday to Friday between 8:00 AM and 1:00 PM.; - Emergency Contact: A dedicated 24-hour hotline for urgent support needs.; There will be a team of support staff who will address each query with a tracking number and an assignee.; Once a query is raised by the admin users from the customer end, it is assessed by our customer support and escalated based on criticality and urgency.; ; We provide a dedicated member of the team who tracks all development tasks and customer support queries on a daily basis. We also provide a technical account manager who has an excellent track record of cloud support.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: We will hold online training sessions once or twice a week for the lead users and the target audience. The additional sessions will cover specific areas that have been requested by the client.; ; The model of training provided is that we will train up lead named users and provide help and support sheets and videos. We hold webinars for groups of individuals and cover topics chosen by the audience. ; ; -Our support team will provide unlimited shared desktop support for named users. This usually focusses on the current task that the user is undertaking at that particular time.; -Each session is followed up with a brief summary of what was covered and any help notes that are appropriate.; -We have extensive banks of help notes and we are developing a bank of videos which can be sent to users on request.; -We encourage new users to join our monthly webinars where they can ask questions to other users and let others share their advice on achieving the task.; -We can arrange for other universities using our software to host sessions to demonstrate how they use our software.; -Training can be either online or onsite.
• Service documentation: Yes
• Documentation formats:
  • PDF
  • Other
• Other documentation formats: Word
• End-of-contract data extraction: A detailed and documented process will be established for the secure sharing of data with the customer upon the termination of the agreement. This process will ensure data is returned in a format suitable to the Customer's needs, with steps clearly outlined for both parties to facilitate a smooth and secure data transfer. We will also implement strict procedures for the permanent destruction or sanitisation of any data remaining within our environments after the return. ; ; The process begins with the Customer assigning a project lead to manage the exit strategy. Exit goals would be established between Abyasa and the Customer, then we would agree an optimal exit point including proposed transition dates. This is the date we would turn switch off the service and data returned (if applicable). During a series of meetings, we would cover any outstanding contract issues, risk management and a communication plan. Ultimately, we would work closely with the Customer to ensure all exit plan requirements have been met.
• End-of-contract process: At the end of the contract, we cover any outstanding contract issues, risk management and a communication plan. Ultimately, we would work closely with the customer to ensure all exit plan requirements have been met including outstanding invoice or additional cost, if involved. ; ; For outside the contractual obligation or requests made by the customer on how they want to extract the data which is not supported by us by default, Abyasa would assist but professional charges may apply (pro rata basis).
• Documentation accessibility standard: WCAG 2.2 AAA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Our web-based user interface is designed to be responsive across various devices without requiring any additional configuration from the user. It adapts seamlessly to different screen sizes, including PCs, tablets, and mobile phones. Our support extends to operating systems such as Windows, Apple, and Android.; The only exception is the admin application which is designed as the standalone windows desktop application. Though it can be accessed through any modern browsers, accessibilities with features are limited.
• Service interface: No
• User support accessibility: WCAG 2.2 AAA
• API: Yes
• What users can and can't do using the API: The API is documented using the OpenAPI 3.0 specification, providing a comprehensive list of all available endpoints and methods.; Users can refer to the documentation to understand request/response formats, parameters, and supported operations.; To use the API, users must request an access key/token.; The access key/token is required for authentication and service setup.; The API supports standard HTTP methods (e.g., GET, POST, PUT, DELETE) for performing operations.; Users can make changes or retrieve data by sending requests to the documented endpoints.; Access to the API is rate-limited to ensure fair usage and system stability.; Specific rate limits will be communicated in the documentation or during onboarding.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: What can be customised?; - Automated alerts and notifications.; - Web accessibility settings and preferences.; - Emails, Forms, and Reports.; - Logo, Branding, and Colour Theme.; - Role Based Access Permissions.; - Webpage panels and texts.; - Ability to turn features on or off.; ; How users can customise?; - Users can request through support ticket for changes related to colour, theme and branding.; - Users can use the application to make customisation in some areas including, reports, emails, forms, web page panels, and text.; - A dedicated settings or configuration window lets the user make changes to accessibility settings, access permissions and turn on or off the features.; ; Who can customise?; - All admin users and roles with configuration permissions can make the customisation.; - Some customisation should be carried out by the support staff upon request.; - All logged users can use accessibility settings and web page preferences.

Scaling

• Independence of resources: We provide a separate database specifically for the Customer within our multi-tenanted platform. This dedicated database ensures complete data isolation, offering enhanced privacy and security by segregating Customer's data from other tenants. We provide a dedicated file storage space to store the files and attachments through our applications. ; A minimum system requirements will be configured and shared with the customer that guarantees their day-to-day work is not disrupted.; If there are specific days that require additional resource allocation, we encourage our customers to inform us of the situation in advance.

Analytics

• Service usage metrics: Yes
• Metrics types: We provide a detailed report on both technical and feature wise metrics which will be shared with the Customer when requested.; The technical service metrics include:; - Performance usage.; - Memory and Disk Space usage.; - Peak hours usage.; ; The feature service metrics include:; - Features that are being highly used and least used.; - Recommended alternatives.
• Reporting types: Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: NCSC approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure

Data importing and exporting

• Data export approach: All data that users see within the application can be reported and exported. The export format include excel, pdf, and xml.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • XML
  • SQL View
  • Excel
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Excel
  • API

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: We guarantee high availability of our SaaS solution, supported by defined Service Level Agreements (SLAs). Our service operates during UK business hours (8:00 AM – 5:00 PM, excluding weekends and bank holidays) with proactive fault management and escalation procedures.; ; For critical outages (P1), we respond within 60 minutes and aim to restore service within 6 business hours, providing hourly status updates. High-priority issues (P2) are addressed within 120 minutes and resolved within 3 business days. Lower-priority faults (P3 and P4) have response times of 1–2 business days and fix times of 15–60 business days or as mutually agreed. Outside business hours, P1 faults are responded to within 120 minutes and fixed within 12 business hours.; ; If we fail to meet guaranteed availability or SLA commitments, customers are entitled to service credits or refunds as outlined in the agreement. All incidents are logged, monitored, and escalated to senior management if resolution exceeds agreed timelines, ensuring accountability and transparency. ; ; The service levels, fault reporting and response times are described in detail in the Service Definition Document.
• Approach to resilience: Our software service runs on Microsoft Azure. Our commitment is to ensure continuous availability, providing 24/7 access to our software, except during planned maintenance. ; ; The database backups will be taken frequently and copied to a disaster recovery region automatically. Recovery from Physical incidents such as earthquakes and flooding are covered in detail in our Disaster recovery plan which can be shared upon request.
• Outage reporting: During our annual application upgrades and other planned maintenance, we follow a detailed documentation plan that includes notifying the Customer at least 30 days in advance, taking database backups, applying upgrades to the test environment for testing, and minimizing downtime for users. Our dedicated support team is available to address any queries or concerns during the upgrade process.; ; All other unplanned outages will be communicated with customers through email alerts. Additionally, real time status on performance, security and availability can be requested by emailing our customer support. We can set up an API or Dashboard to make this information available to customers, however, this will require additional project support and additional cost.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
• Other user authentication: OAuth, SAML 2.0 can be used to authenticate users.
• Access restrictions in management interfaces and support channels: The cloud management interfaces require MFA based authentication to access the resources. We use Role based access control to restrict management roles to users. We keep track of all the users with management level access to the resources in the cloud. The application management resources also use Role based access control to restrict management roles. Above restrictions also apply to support channels. We maintain UpToDate inventory of users with management-level access. All the access events are recorded in a log.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: Between 6 months and 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: Between 6 months and 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Our security governance aligns with recognized standards, with a focus on practical implementation rather than full-scale frameworks. We have achieved Cyber Essentials Plus certification. This includes measures such as secure configuration, boundary firewalls, access control, patch management, and malware protection. Regular internal checks and external audits ensure continued compliance with the Cyber Essentials Plus requirements. We are progressively mapping our security controls to key ISO clauses to track compliance, identify gaps, and improve security processes systematically. Key clauses include risk assessment, information security policies, incident management, and supplier security. Our operational security practices follow relevant NCSC guidance.
• Information security policies and processes: Our organization is committed to safeguarding information assets through robust security policies and processes. All access to cloud and application management interfaces require Multi-Factor Authentication (MFA) to ensure strong identity verification. Role-Based Access Control (RBAC) is enforced across all systems, granting permissions based on job responsibilities and adhering to the principle of least privilege.; We maintain an accurate inventory of users with management-level access and conduct regular reviews to prevent unauthorized privileges. Sensitive data is classified, encrypted at rest and in transit, and backed up securely. Network security measures include firewalls, intrusion detection systems, and secure Bastions for remote access.; Incident response procedures define clear escalation paths, supported by periodic drills to ensure readiness. Logging and monitoring are centralized, with retention policies aligned to compliance requirements. Vendors and third-party providers undergo security assessments and contractual obligations to meet organizational standards.; Security awareness training is mandatory for all employees, supplemented by phishing simulations and specialized sessions for privileged users. Policies are reviewed annually or after significant changes to infrastructure or regulations. Compliance audits ensure adherence to ISO 27001 and other relevant frameworks.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We maintain secure baseline configurations across all systems and enforce strict change control procedures. Automated tools help enforce compliance, minimizing the risk of unauthorized or incorrect configuration changes.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: We conduct regular vulnerability scans and implement a structured patch management process to address risks promptly, prioritizing high-severity issues. Risk assessments are used to focus remediation efforts where they are needed most. Our 24/7 monitoring systems, including intrusion detection and log aggregation, continuously track for suspicious activity. Anomaly detection ensures early identification of potential threats, enabling rapid response and mitigation. We deploy patches as soon as they are available from the vendor.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: We conduct regular vulnerability scans and implement a structured patch management process to address risks promptly, prioritizing high-severity issues. Risk assessments are used to focus remediation efforts where they are needed most. Our 24/7 monitoring systems, including intrusion detection and log aggregation, continuously track for suspicious activity. Anomaly detection ensures early identification of potential threats, enabling rapid response and mitigation. A defined incident response plan is in place for swift identification, containment and resolution of security incidents. Detection tools help identify issues in real-time and post-incident reviews ensure continuous improvement.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: We do have a pre-defined processes for common events, The events are categorised based on their impact. Users report incidents via email. We provide a Post Incident Review (PIR) report when available from our cloud provider to end users/system owners.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 2%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 10%
• Between £1,000,001 and £2,500,000: 15%
• Between £2,500,001 and £5,000,000: 20%
• Over £5,000,001: 25%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 764c896e-98f8-4003-967d-22d7556f272e
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 4822e1e5-abd3-4951-b354-7ee4ef2b2fe8
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at support@abyasa.net. Tell them what format you need. It will help if you say what assistive technology you use.