INMARKETS LIMITED

Compliance E-Learning Courses

Skillcast offers cloud-based compliance e-learning with over 480 up-to-date courses, covering topics such as Cybersecurity, Data Protection, Financial Crime, H&S, and DEI. The platform supports public sector L&D admins, compliance, and training leaders, providing tracking, reporting, customisable content, and award-winning customer support for cost-effective learning delivery.

Features

• Engaging, interactive courses that simplify complex compliance topics effectively.
• Mobile‑friendly design enabling learning anytime, anywhere on any device.
• Customisable content tailored to specific organisational policies and risks.
• Micro-video Learning bites delivering short, focused learning nuggets
• Real‑time reporting dashboards for tracking learner progress at question level.
• Scenario‑based training improving decision‑making through realistic simulations.
• Accessible formats meeting WCAG standards for inclusive learning experiences.
• Automated reminders ensuring timely course completion and regulatory compliance.
• Seamless LMS integration for unified learning administration and tracking.
• Certification and audit trails supporting regulatory inspections and evidence.

Benefits

• Improves understanding and retention of essential compliance requirements quickly.
• Increases learner flexibility and boosts overall course completion rates.
• Ensures training aligns with organisational needs and regulatory expectations.
• Enables managers to monitor compliance gaps and act proactively.
• Saves time while reinforcing key compliance messages effectively.
• Builds practical judgment through realistic, risk‑based decision scenarios.
• Supports diverse learners and meets mandatory accessibility obligations.
• Reduces non‑completion risk and strengthens regulatory compliance readiness.
• Streamlines administration and eliminates manual tracking inefficiencies.
• Provides verifiable evidence for audits, inspections, and compliance reporting.

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at solutions@skillcast.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

411096670149964

Contact

Sofia Chaqiri
0207 929 5000
solutions@skillcast.com

About your service

• Service categories:

  Applications

  Content workflow and management

  • Capture
  • Document
  • Creative

  Content services

  • Enterprise Content Management Applications
  • Content Sharing and Collaboration Applications

  Enterprise portals and digital workspaces

  • Multi-Audience Portals
  • Integrated Employee Workspaces
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Skillcast Portal extends HR systems, learning management platforms, governance, risk and compliance tools, identity management, and policy management software. It complements intranets, onboarding platforms, and audit solutions by centralising compliance training, policy acknowledgement, reporting, and evidence management, while integrating seamlessly with existing enterprise systems to strengthen organisational risk management capabilities.
• Cloud deployment model: Public cloud
• Service constraints: No Constraints
• System requirements: An an up-to-date browser MS Edge, Chrome, Safari or Firefox

User support

• Email or online ticketing support: Yes
• Support response times: 24 hour response.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: N/A
• Onsite support: No
• Support levels: We have high-level support with a dedicated customer success manager and deployment teams from implementation to ongoing support.
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: Skillcast makes it easy for organisations to get started by providing structured onboarding and hands‑on support that helps clients quickly gain value from the platform. Organisations on Standard, Enhanced, or Premium Plans are assigned a dedicated Customer Success Manager who sets up, brands, and configures the portal, then trains and guides administrators through all stages of managing the LMS. This includes user management, course assignments, email communications, and using reporting tools and dashboards.; To support self‑sufficiency, Skillcast offers a comprehensive support hub with knowledge articles and tutorial videos that teach administrators how to operate the LMS and adapt or edit courses. Clients can upload their own SCORM‑compliant e‑learning modules or request bespoke course creation using the Skillcast editor under separate agreements.; Single sign‑on (SSO) enables seamless access, while integration options such as user provisioning and data feeds simplify authentication and reduce administrative effort. Once live, automated enrolments, reminders, and escalation workflows ensure learners complete mandatory training without manual intervention, freeing teams to focus on higher‑value compliance work.; Together, these onboarding services and automation features ensure a smooth transition, minimise disruption, and help organisations embed Skillcast into daily compliance operations for long‑term success.
• Service documentation: Yes
• Documentation formats:
  • PDF
  • Other
• Other documentation formats:
  • On-line guides
  • Videos on how to
• End-of-contract data extraction: At the end of the contract term for Skillcast services: Access to the relevant service (e.g., LMS, Policy Hub, Survey Tool, Declaration Tool, Register, Training 360, EMS, SMCR Core Registers) terminates immediately. ; Upon request and agreement in writing, Skillcast will provide access to Customer administrators to download User records for up to 30 days after the contract ends. ; - After this 30-day period, Skillcast will permanently delete all e-learning modules, content (courses, policies, surveys, as applicable), and User records related to the service.; The Customer is responsible for ensuring timely data download to avoid data loss.; This process applies across various Skillcast services as specified in the Service Specific Terms. Any outstanding invoices should be cleared but there are no additional costs for ending the contract process.
• End-of-contract process: At the end of the contract term for Skillcast services:; ; - Access to the relevant service (e.g., LMS, Policy Hub, Survey Tool, Declaration Tool, Register, Training 360, EMS, SMCR Core Registers) terminates immediately.; - The Customer must download all content and User records before the contract ends.; - Upon request and agreement in writing, Skillcast may provide access to Customer administrators to download User records and uploaded information for up to 30 days after the contract ends.; - After this 30-day period, Skillcast will permanently delete all e-learning modules, content (courses, policies, surveys, as applicable), and User records related to the service.; - The Customer is responsible for ensuring timely data download to avoid data loss.; This process applies across various Skillcast services as specified in the Service Specific Terms. Any outstanding invoices should be cleared but there are no additional costs for ending the contract process.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Our Compliance LMS and courses require only an up-to-date browser (MS Edge, Chrome, Safari or Firefox) on any device with any operating system (including iOS and Android)
• Service interface: Yes
• User support accessibility: WCAG 2.2 AAA
• Description of service interface: Web interface
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: Our accessible content is designed to conform to the Web Content Accessibility Guidelines (WCAG) 2.0 AA standards
• API: Yes
• What users can and can't do using the API: Users can access a range of services and functionality within the Skillcast platform through third‑party developer tools, including application programming interfaces (APIs), collectively referred to as Integration Services. These APIs are designed to facilitate secure, reliable, and efficient communication between Skillcast and external systems, enabling organisations to streamline operational processes and enhance the overall user experience.; Through Integration Services, organisations can automate the exchange of user data between their HR or identity management systems and the Skillcast platform. This automation supports consistent and accurate synchronisation of user records, significantly reducing manual effort and the risk of data discrepancies. API based data feeds can be configured to update user details, manage onboarding and offboarding activities, and maintain alignment with internal organisational structures.; In addition, Skillcast APIs enable seamless integration for single sign on (SSO) solutions, supporting centralised authentication and simplifying user access across platforms. By implementing SSO and automated data feeds, organisations benefit from improved security, reduced administrative workload, and a more cohesive digital ecosystem.; Overall, Integration Services provide a flexible and scalable framework that empowers organisations to connect Skillcast with their existing systems, optimise user management, and enhance operational efficiency."
• API documentation: Yes
• API documentation formats: HTML
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Off the shelf course content can be customised, either by your administrator in the authoring tool or by Skillcast (for a fee). Alternatively, Skillcast's bespoke services deliver fully tailored e-learning built from the ground up to match an organisation’s policies, processes, tone and culture. Our specialists work closely with clients to design custom content, scenarios, and branding, ensuring every course aligns with learner needs and delivers a highly relevant, engaging training experience.

Scaling

• Independence of resources: Skillcast guarantees stable performance for all users by operating a platform that supports 1.7 million+ users annually, including single deployments of 400,000 users without service degradation. We enforce strict role-based Access Control (RBAC) and the Principle of Least Privilege, with unique, non‑shareable accounts to prevent access conflicts. Our infrastructure is continuously monitored to maintain availability, with service credits issued if SLAs are not met. The service is delivered with due skill, care, and diligence, and we use the best endeavours to ensure it remains free from harmful components. These controls ensure that no user’s activity impacts another’s experience.

Analytics

• Service usage metrics: Yes
• Metrics types: The service metrics provided include: ; Course metrics available through a configurable dashboard for Regular and Max plan clients.; PDF and Excel report downloads directly from the dashboard.; Unified reporting across multiple third‑party LMS platforms via Skillcast Remote Services (SRS).; Advanced analytical reporting, including start/completion dates, test scores, re‑attempts, session duration, confidence levels, question‑level analysis, and pre‑assessment results.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: NCSC approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: Skillcast allows clients to export and download metrics and user data from the Skillcast Portal, particularly for clients on Regular and Max plans. ; Key features include a configurable dashboard for at‑a‑glance insights, downloadable PDF and Excel reports, and unified reporting across multiple third‑party LMS platforms via Skillcast Remote Services (SRS). Regular and Max plans also offer detailed analytical reporting with confidence level options. Max plans provide additional functionality such as surveys and the AI‑powered digital assistant, Aida. HR data integration, available on Max plans, supports automated data feeds into client LMS or HR systems, requiring client‑side configuration.
• Data export formats: CSV
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • XML (Extensible Markup Language)
  • JSON (JavaScript Object Notation)

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Skillcast platform availability SLA is 99%, measured monthly. Recovery time objective and recovery point objectives are 24 hours each.
• Approach to resilience: Geo-redundant Disaster Recovery data centre in place to ensure service continuity in case of a major outage in the primary MS Azure region. A robust geo-redundant backup solution is in place, with backups performed several times a day and replicated to the disaster recovery site. Test restores and failovers are done regularly.
• Outage reporting: Public dashboard and email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Username or password
• Access restrictions in management interfaces and support channels: As per our System access control policy, System access is assigned on the principle of need to know, and the principle of least privilege. We perform Quarterly Access Reviews to audit and validate accesses on our critical systems and assets. Remote access is conditional upon authentication, MFA, and encryption. In addition, privileged access to systems is conditionally restricted to trusted systems and devices only. Audit logs are maintained and reviewed.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Skillcast maintains, and annually updates below policies: - Acceptable Use Policy - Asset Management Policy - Backup Policy - Business Continuity Policy - Change Management Policy - Code of Conduct - Data Classification Policy - Data Retention Policy - Data Protection Policy - Disaster Recovery Plan - Encryption Policy - Incident Response Plan - Information Security Policy - Password Policy - Physical Security Policy - Responsible Disclosure Policy - Risk Assessment Policy - Software Development Lifecycle Policy - System Access Control Policy. Our policies, Audit reports, and certificates are available to download from our trust centre https://trust.skillcast.com.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Change management policy governs change management practices at Skillcast. Broadly, the policy defines a change governance structure, including a change advisory board (CAB).All changes go through a request and approval workflow with measures to roll back if needed.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Our vulnerability management policy outlines the requirements for (1) all product systems to be scanned for vulnerabilities at least annually, and (2) all vulnerability findings to be reported, tagged and tracked to resolution in accordance with the SLAs defined. We follow a risk-based approach for patching. Patching timelines and priorities depend on the vulnerability's Applicability, Impact rating, and Exploitability. Critical vulnerabilities with potential impact are generally targeted for patching within two weeks of the release of security updates or patches. High-impact patches are scheduled for application within a month, and low-impact patches may take up to three months
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Logs are collected and aggregated in a centralised location, with built-in intelligent queries that flag unusual activity. We typically use a combination of automated and manual log reviews, depending on the situation.; The cybersecurity team at Skillcast monitors logs and alerts for infrastructure components that host the customer-facing production application. EDR events on endpoints and servers are monitored by the SentinelOne Vigilance Managed Detection and Response (MDR) service 24x7x365 and escalated to the Skillcast cybersecurity team if needed.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Our incident response plan outlines the incident response team structure, roles and responsibilities, internal and external communications, and other modalities to execute an effective response.; we have necessary contracts with digital forensics providers and a cyber security insurance cover for £10 Million. We will notify our customers within 24 hours of a confirmed breach.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Yes, a free trial for our services is available for up to 30 days under the terms of the agreement. Trial access is for evaluation only, and any data or customisations made during this period may be deleted at its conclusion unless otherwise agreed in writing.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 40%
• Between £250,000 and £500,000: 50%
• Between £500,001 and £1,000,000: 55%
• Between £1,000,001 and £2,500,000: 60%
• Between £2,500,001 and £5,000,000: 65%
• Over £5,000,001: 69%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Citation ISO Certification Limited
• ISO/IEC 27001 accreditation date: Wednesday 24 July 2024
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: Citation ISO Certification Limited
• ISO 9001 accreditation date: Thursday 14 March 2024
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 0a55e581-0b55-4e8c-9822-2cf9a7d5b35e
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: E871d377-2b55-47e7-a51f-815547e87209
• Other security certifications: Yes
• Any other security certifications: Soc2 Type 2

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at solutions@skillcast.com. Tell them what format you need. It will help if you say what assistive technology you use.