Zengenti Limited

Insytful - The digital accessibility, website improvement and governance platform

Insytful is an accessible website improvement platform that provides a single place to evaluate how searchable, accessible and performant your website is. Insytful enables improved user experience by frequently scanning for WCAG accessibility, misspellings, SEO, page speed, broken links, PDF scanning, quality assurance, content governance and other content quality issues.

Features

• A website and digital content quality assurance checking tool
• Intuitive, user-friendly interface that makes identifying issues easy
• Find and fix web issues with CMS deeplink integrations
• Website speed, SEO, performance, broken links and content quality testing
• Automated accessibility auditing using WCAG standards A, AA, AAA
• Misspellings, spellcheck and readability scoring for your web content
• PDF accessibility scanning for tagging and alt text
• CMS integration for QA workflow checks before publishing content
• Manage multiple dictionaries for multilingual content
• Create custom reports based on keywords, HTML snippets and more

Benefits

• Gain frequent website insights and improve digital content quality
• Comply with WCAG standards, create an inclusive, accessible web experience
• Get started immediately, no training or technical expertise is required
• Fix issues in your CMS immediately with deep-linking integrations
• Improve technical SEO, check crawlability issues and error messages
• Automated checks provide periodic scoring with clear and actionable recommendations
• Optimise content, improve web speed and performance to maximise conversions
• Multi-language spell check and custom brand dictionary support
• Scan and audit PDFs to become accessible
• 100 web pages can be scanned for free

£0 to £1,600 a unit a month

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@zengenti.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

395582881784104

Contact

Stef Robinson / Ola Andersson
01584 824202
tenders@zengenti.com

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Insytful is a standalone product, but it also deep links with the Contensis Content Management System (CMS) as well as other popular CMS systems.
• Cloud deployment model: Private cloud
• Service constraints: Any planned maintenance on the Insytful platform is carried out by our engineers outside working hours and should not directly affect our customers.
• System requirements:
  • Users need one of the following browsers to access Insytful:
  • Google Chrome (latest)
  • Safari (latest)
  • Firefox (latest)
  • Microsoft Edge (latest)

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Insytful is not considered a business critical service and support is available Monday - Friday, between 9am and 5pm (GMT). Any issues affecting the availability of the service can expect a response within 1 hour and resolution within 8 hours. The typical response time for non-critical issues is 8 business hours from the point of ticket submission, with an expected resolution within 3 working days.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: We provide unlimited support for any technical issues with Insytful via our help desk portal, via email and our dedicated Slack channel. Insytful is not considered a business critical service. However, any issues affecting the availability of the service can expect a response within 1 hour and resolution within 8 hours. The typical response time for non-critical issues is 8 business hours from the point of ticket submission, with an expected resolution within 3 working days. Support for Insytful is available Monday - Friday, between 9 am and 5 pm (GMT). Where necessary, we can also work with customers who require any additional help on an ad-hoc basis.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Insytful has an intuitive and easy-to-use interface designed and tested to make onboarding easy for anyone, regardless of their technical background. The user interface (UI) is free from clutter and is visually appealing, so new users should find it intuitive to navigate. Snapshots of website scans and audits are available in the dashboard, which provides at-a-glance scores for both current and previous scans. Other valuable data surfaced in the dashboard includes worst-performing pages, pages most affected by accessibility issues, SEO, performance and content quality, and progress over time scores. Detailed user guides and documentation are also available, with our support team on hand to help with any questions.
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: Clients can request their historical scan data to be exported by our engineers in JSON format.
• End-of-contract process: When a contract ends, clients are downgraded to the free plan and will continue to have access to Insytful within the limits of the free plan.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: WCAG 2.1 AAA
• Description of service interface: The Insytful user interface allows users to manage their website scans, see an overview of the quality, accessibility, SEO and performance of their websites and content, and interact with the features that we provide. The scanning technologies we use can support single or multiple websites. The service performs periodic scans in the background at a frequency of your choosing.
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: The user interface of Insytful is accessible by design. Accessible design elements, including colour contrast and keyboard navigation, have been built into Insytful, making it accessible to all users of the software. We regularly review user journeys and interactions with accessibility in mind and the needs of users of different assistive technologies. We manually test all user interfaces using assistive technology, including JAWS, NVDA and VoiceOver.
• API: Yes
• What users can and can't do using the API: Insytful has its own API. It is not currently available to users, but it will be available in the near future. We can work with a customer to make the API available to allow them to act and use most features available in Insytful. The most common use cases would be to provide scan data and results so customers can surface this data in their own reporting tools, such as Microsoft Power BI, and initiate single-page scans to integrate Insytful scans with their tools and CMS systems. We use industry-standard REST API architecture and can work with clients to surface the data they need through our service.
• API documentation: No
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Users can customise their dictionary in Insytful, which is used for spell checking. Specific terminology, product names, or acronyms for your organisation can be added. Creating a custom dictionary is an ideal way to capture any words that would otherwise get flagged as spelling mistakes. We provide organisation-wide dictionaries that can be set up for all sites under one organisation and more specific site and language dictionaries as well, catering to those organisations that have multilingual content. Users can also use the policy section to create reports based on different criteria, such as certain words being used in your content. Users can also customise their scanning schedules and frequency, specifying the time and day the website scans occur.

Scaling

• Independence of resources: The Insytful service operates on an elastic infrastructure that is highly specified and capable of sustaining website scanning traffic of at least 30% beyond normal demand. Users benefit from our hosting platform, which provides automatic scaling for Insytful’s scanning technology to manage any spikes in demand with no noticeable impact on business operations.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Clients can request their historical scan data to be exported by our engineers in JSON format.
• Data export formats: Other
• Other data export formats: JSON
• Data import formats: Other
• Other data import formats: JSON

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Insytful is not considered a business critical service. However, users can expect uptime availability in excess of 99.9%, measured on a monthly basis, which includes planned maintenance. Service credits are calculated on the basis of the difference between the actual availability achieved for the month and the SLA. Typical support service expectations for users are 8 business hours for a response from the point of submission with the expected resolution of 3 working days.
• Approach to resilience: The service operates from multiple tier 3 data centres, and multiple tier 1 carriers, with multiple entry points into each data centre. We’re not reliant on a single supplier or location to deliver the Insytful service. We also have our own resources at our headquarters in Ludlow. The service also has over 400 monitored data points, which gives early warnings and deep insights about any issues before they impact the service and our customers.
• Outage reporting: We will notify our customers of any service outage via email, our dedicated Slack channel, and a publicly accessible dashboard. The status of all of Zengenti’s cloud services is displayed here. If an issue affects multiple clients, we will send an incident report to explain the issue, what actions we have taken to resolve it, and how we plan to prevent any further recurrence.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Anyone wanting to self-register for the help desk or Insytful requires a valid client email address. Once registered, the software can only be accessed by registered users who authenticate.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Less than 1 month
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Less than 1 month
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: NQA
• ISO/IEC 27001 accreditation date: 11 July 2022
• What the ISO/IEC 27001 doesn’t cover: Our ISO27001 certification covers all company operations, including our data centres.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Zengenti has an Information Security Management System of related policies and procedures based on ISO27001, with regular internal and external audits to ensure compliance. All Zengenti staff take security and data protection very seriously and have formal training under our ISO27001 system to aid with this. New staff are put on information security and data protection training as part of their induction, and refresher courses are delivered annually to all staff. All our staff also undergo baseline security screening and background checks to meet the BS7858:2019 standard.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: The platform is entirely managed using configuration management, so all operations are entirely automated, with no human time required to deploy and configure infrastructure. Any changes related to underlying shared infrastructure are managed according to Zengenti’s change control processes.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: The platform has many levels of security that provide a barrier to intrusions. These include firewalls, monitoring for DDoS attacks and regular infrastructure patching with security updates. We use internal and external monitoring, and perform vulnerability scans on our central infrastructure and have regular penetration tests too. We assess potential vulnerabilities through proactive monitoring of logs and via security advisories from the security sector. Whenever a vulnerability is recognised, we make an immediate decision about the potential consequences and how it should be addressed. If a patch were critical, we would apply this immediately.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: The platform has over 400 monitored data points, which gives early warnings and deep insights about any issues before they have any impact on client environments. We use enterprise network monitoring tools, both internally and externally, and have systems in place to monitor for any increase in website and network traffic over specified thresholds, including DDoS attacks or similar. We proactively monitor logs for any unexpected events too. Any potential compromise would trigger our incident management processes.
• Incident management type: Supplier-defined controls
• Incident management approach: The majority of incidents are handled through our help desk, helping to streamline incident management, tracking and resolution. For critical issues, we have a comprehensive incident management process used for security incidents, vulnerabilities and outages. The process ensures our clients are regularly notified of what is happening and keeps everyone in the loop. Our incident managers are responsible for client communications, updating our cloud status page, and ensuring the team is following the agreed procedures. As with all our policies and procedures, our incident management process is regularly reviewed and assessed by our ISO27001 auditors.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Zengenti has invested in wood chip/pellets from sustainable sources to run our heating and hot water systems. Our biomass boiler helps to reduce energy loss during energy generation and distribution and the heating and hot water for our headquarters are completely supplied via this method. All the electricity that we consume as a company is 100% renewable. Both our data centres run using 100% renewable energy. All the electricity for our headquarters is also 100% renewable. We are currently planning the installation of a solar panel array in the grounds of our headquarters to further reduce the need for electricity from the grid. We have invested in the use of free air cooling in our own data centre at our headquarters, keeping systems cool in a more environmentally friendly way and reducing our power consumption by becoming less reliant on air conditioning units as a primary cooling source. Our staff continue to mainly work from home, which reduces the need to commute into the office, greatly reducing CO2 emissions and any unnecessary travel. The majority of our staff now typically come into the office a few days a month rather than every day.

  Covid-19 recovery

  As a company, our staff continue to mainly work remotely with around 5-10% of the team working from our offices at any one time. We have created more communal areas and casual meeting spaces to support this newer way of working. Supporting our teams to continue to work flexibly and remotely has greatly reduced travel and has reduced the demand on health services, as our teams are far less likely to come into contact with others who may have had COVID-19. We continue to ensure our teams are given the flexibility that they need to help others who might be shielding or who are at high risk from COVID-19. We have offered those who do need to work from the office paid leave if they need to stay away from the office due to illness, which is also helping to reduce the risk of others who are working from the office. Throughout the pandemic and beyond we have always tried to help our team with their mental health. We have a regular section in our weekly staff newsletter on mental health, offer quarterly mental health webinars, access to a paid subscription to the Calm app, and we also have trained mental health first-aiders who are available in the event that someone needs some help. Since the pandemic, we have embraced opportunities to get our teams together, and where we have been able to do so in a safe manner, such as outdoor walks for example. These activities have all been aimed at helping people to get together and encourage people to talk and share experiences.

  Tackling economic inequality

  As a company, we have created many training and development opportunities for young people. This starts with us supporting work experience and often ends with people from the local community joining our team, where we train them from the ground up in the latest technologies. We are one of the very few technology companies in the area, and we have given lots of opportunities to local people, which has helped to develop and diversify the local economy, which otherwise is very agricultural. We donate to charities and initiatives in our community, including sponsoring children with disabilities and low-income families to attend a circus event that they might otherwise not get the opportunity to participate in. We also regularly support our local food bank with donations. In terms of our own supply chain, this is very small and focuses almost entirely on three or four companies that provide our infrastructure services. Outside of these companies, who need scale to provide their services, we do largely use SMEs to deliver our other business requirements. This includes air conditioning engineers for our data centre through to local sole traders helping us deliver lunch for our teams. Working with business startups is something that we have always been willing and excited to do, ensuring that any risks are low enough not to impact any of our existing customers if something goes wrong.

  Equal opportunity

  Zengenti is an equal opportunities employer and has an equal-opportunity policy. The aim of this policy is to ensure that no job applicant or employee receives less favourable treatment on the grounds of gender, race, disability, colour, nationality, ethnic or national origin, marital status, sexuality, dependants responsibility, religion, trade union activity and age (up to 65). Selection criteria and procedures will be kept under review to ensure that individuals are selected, promoted and treated on the basis of their relevant merits and abilities. All employees will be given equal opportunity within the company’s service and will be encouraged to progress within the organisation. To ensure that direct or indirect discrimination is not occurring, recruitment and other employment decisions will be regularly monitored in conjunction with ethnic records of job applicants and existing employees. The company is committed to a programme of action to make this policy fully effective.

  Wellbeing

  We hold regular events as a team to look after our wellbeing and also raise money for charity. Previous events have included bake sales, organised treks, and a week of activities to support Mental Health Awareness Week which included yoga, pilates and running/cycling challenges. We have trained a number of our staff under the MIND courses on mental health awareness and first response, with an aim to help us spot any first signs and issues and offer any help to our teams. We have a #wellbeing channel in Slack for all employees to send uplifting messages, news or share advice. There is also a section in our internal newsletter on mental health and all our teams get involved in order to produce this, helping to raise general awareness as well as delivering advice and suggestions aimed at helping anyone who might be struggling with their mental health. Prior to the COVID-19 pandemic when we were all working in the office, we ensured that we made adjustments to the office space to accommodate team members who struggled with physical issues such as noisy spaces. We continue to ensure we offer wellbeing support in how people work wherever possible. We are planning in the future to support local primary schools with their mental health activities too, by providing access to activities such as yoga and meditation.

Pricing

• Price: £0 to £1,600 a unit a month
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: The free plan scans up to 100 pages of a single website and is not time-limited. Premium features are not available in this tier, for example multiple site scans, multi-language dictionary, additional users, section switcher and PDF accessibility.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@zengenti.com. Tell them what format you need. It will help if you say what assistive technology you use.