AZEUS UK LIMITED

Presgo UK ESG

PRESGO allows you to simplify your ESG reporting by providing a platform to collect data, track progress, align with frameworks and produce reports. Our end-to-end approach automates much of this process, making it as easy as possible. This way, your organisation can focus on the bigger sustainability picture.

Features

• Centralise ESG data collection across your organisation
• Support for manual, file import and API based data collection
• Publish your ESG report to global and local reporting standards
• Measure performance against your ESG goals and targets
• AI-Drafted reports automate the creation of disclosures and narratives.
• Presgo provides lookup values supporting custom data entries

Benefits

• Ensures global and local ESG reporting compliance
• Improve data ownership, historical data analysis and retention
• Uses AI to evaluate ESG reports against standards and peers
• Publish ESG reports that are both regulator-ready and stakeholder-friendly
• Track KPIs over time, visualise trends and identify underperformance
• Reuse your collected ESG data for other reporting requirements

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ukpresales@azeus.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

418527971339179

Contact

Azeus UK
020 3743 2515
ukpresales@azeus.com

About the service

• Service categories:
  • Applications
    • Content workflow and management
      • Content services
        • Enterprise Content Management Applications
        • Content Sharing and Collaboration Applications
      • Capture
        • Capture
      • Document
        • Document
      • Enterprise portals and digital workspaces
        • Multi-Audience Portals
        • Integrated Employee Workspaces
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
• Service constraints: N/A
• System requirements:
  • Web browser: Google Chrome Version 135 or higher
  • Web browser: MS Edge Version 135 or higher
  • Web browser: Mozilla Firefox Version 137 or higher
  • Web browser: Safari Version 15 or higher

User support

• Email or online ticketing support: Yes
• Support response times: Support Case Target Response Times by Priority: ; High: 1 hour.; Medium: 2 hours. ; Low: 8 hours.; Support is 24/7/365, response times do not vary on week-ends.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Support services are provided through the Presgo Help Desk with support staff attending to any usage enquiries, request for assistance and reported problems with the applications and technical aspects of the Service.; ; Support Case Priority Levels – Reported issues will be prioritised according to their nature and impact on business operations. ; ; The priority definitions are: ; ; High: Service is unusable.; Medium: Service is usable but affects day-to-day operations. Service is usable but has minor issue(s).; Low: Ad-hoc queries by end users.; ; Support Case Target Response Times by Priority:; High: 1 hour; Medium: 2 hours; Low: 8 hours
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Upon contract execution, the Presgo onboarding team will conduct a comprehensive assessment of the client’s requirements to develop a tailored onboarding and support strategy. ; ; During onboarding, the team will conduct user interview sessions to gather requirements. Functional specifications will then be produced to ensure that all customisation and integration details, if any, are aligned with business needs. Development work will commence thereafter. Please note that any customisations or integrations beyond the agreed project scope will be quoted and charged separately.; ; Presgo provides training services tailored to different types of users. We ensure that clients receive the most suitable training plan, regardless of their prior sustainability knowledge. The application is designed to be simple and intuitive; in our experience, clients require minimal training before realising its benefits.; ; As part of onboarding, we will work with clients to assess the training needs of each user group. The assigned Project Manager will coordinate with you to establish a training plan aligned with the roll-out of the application to end users.
• Service documentation: Yes
• Documentation formats: PDF
• Documentation accessibility standard: WCAG 2.2 AA
• End-of-contract data extraction: Users can export data in multiple structured formats, including .xlsx, .csv, .json, and .xml. Upon contract termination, Presgo facilitates a final data extraction window. Users must inform the Presgo team within 30 days after contract termination if they require assistance with a final export.; ; Following this window, the platform ensures data security through cryptographic deletion, where both the encrypted data and the corresponding encryption keys are deleted to prevent any possibility of decryption or recovery.
• End-of-contract process: At the end of the contract, the subscription of the services shall automatically renew for successive Renewal Terms as indicated in the Order Form unless either Party delivers written notice of termination of this Contract to the other Party at least thirty (30) days prior to the; applicable termination date (with such termination date being the last day of the Initial or then-current Renewal Term), in which case the Contract and all underlying Services shall terminate on the last day of such Initial or Renewal Term.; ; Presgo provides comprehensive tools for data portability, ensuring that users can extract their sustainability data at any time during their subscription or upon the conclusion of a contract. The platform supports self-service downloads of raw data, consolidated indicators, narratives, and visualisations to prevent vendor lock-in and support audit readiness.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • MacOS
  • Windows
  • ChromeOS
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: WCAG 2.2 AA
• API: Yes
• What users can and can't do using the API: All of the ESG data and narrative data points, including carbon-related data, are available through an inherent API layer using the OData Protocol. Ingestion of data through API is possible with CSV, XML, and JSON formats. Please note API is subject to availability and further costs.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Many elements of Presgo can be customised by administrators, such as including a brand logo and changing what dashboard or widgets appears on the home page. Please refer to our service definition for more detail.

Scaling

• Independence of resources: Presgo is highly scalable and can accommodate large volumes of users in one environment. We have customers with as few as 5 licences all the way up to larger customers who have thousands of users. Presgo's cloud infrastructure is hosted by Amazon Web Services (AWS), and we take advantage of the massive infrastructure capacity, low-latency internal networks, and virtually limitless storage capacity, allowing our solution to scale up as the size of the workload increases while retaining high levels of performance and availability. Presgo is also designed to support many concurrent users without issues.

Analytics

• Service usage metrics: Yes
• Metrics types: Presgo provides comprehensive tracking of system utilisation through dedicated usage reports, progress dashboards, and audit trails. These tools allow administrators to monitor platform engagement, identify reporting bottlenecks, and ensure data collection activities align with established schedules
• Reporting types:
  • Real-time dashboards
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: Less than once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest: Physical access control, complying with SSAE-18 / ISAE 3402
• Data sanitisation process: Yes
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Data that is held on the platform can also be downloaded in XLS at no cost.; ; Data can also be exported via API's at an additional cost.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • XLSX
  • Word
  • XML
  • XBRL
• Data import formats:
  • CSV
  • Other
• Other data import formats: XLSX

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: For our Cloud-Hosted Service, the availability SLA for Presgo software service is 99% monthly uptime. ; ; The Presgo availability of a month is calculated as: Total number of hours the system was up in the month / (Total number of hours in the month – Scheduled system downtime in the month). ; ; Unavailability means substantial loss of software service where users’ business operations have been severely disrupted.
• Approach to resilience: We employ backup processes and other measures that ensure rapid restoration of business-critical systems as and when necessary. Daily automated backups are done during off-peak hours to ensure data integrity and have a retention of 7 days. Unused or obsolete archives are destroyed and replaced to prevent unauthorised retrieval.; AWS provides multiple data centres (known as Availability Zones) for each region. Each availability zone is built and configured to be highly resilient, but in case one entire Availability Zone goes down during a disaster, Presgo can be easily recovered in another Availability Zone in the same region.
• Outage reporting: The monitoring framework in Presgo is built on open-source and managed services, including Prometheus for time-series metrics and Grafana Loki for log management. When the system detects a threshold breach (such as a server outage or high latency), it triggers the Alertmanager, which routes notifications based on the severity of the incident. For critical outages, real-time alerts are sent via PagerDuty (SMS, voice calls, and push notifications) and email alerts are dispatched to Microsoft Teams channels via AWS Simple Email Service (SES). Following any significant incident, Presgo provides customers with a security incident report detailing the cause, impact, and actions taken.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: The platform utilises a centralised Admin Features module to manage user identities, roles, and granular permissions. Access to management interfaces is restricted by assigning users to specific roles (e.g., CSO, User Admin, Collaborator) and limiting their visibility to assigned Business Units (BUs) or data topics. ; ; For support channels, Presgo policy prohibits employees from accessing raw user data; support staff typically access only the system/application layer for troubleshooting, and their activities are tracked via a comprehensive audit trail.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: Between 1 month and 6 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: The Presgo application is designed, developed, and tested to prevent the vulnerabilities under the OWASP (Open Web Application Security Project) Top 10. In addition, the Convene system is regularly scanned for vulnerabilities against the OWASP Top 10 and the CVE (Common Vulnerabilities and Exposures). Changes to the application will follow established Change Control procedures. The application will undergo several stages of testing, including security testing,; before it is released to customers.

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Azeus UK tracks a range of system configuration settings (e.g. application, server, network, firewall, etc). During initial setup, we apply our standard configuration process (which includes server hardening) prior to release for customer use. Subsequent changes are then tracked and undergo our internal change management processes which includes impact analysis to system security and stability. Changes are first tested in an identical test environment before being rolled out to the production environment. Azeus UK manages only the server-side configuration which includes OS security patches and server-side anti-virus updates. We expect the customer to maintain the configuration of all client-side devices.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Presgo manages vulnerabilities through a dedicated Security Team using SAST/DAST testing and manual penetration testing against OWASP Top 10 standards. We source threat intelligence from specialised security news feeds and automated AWS services like GuardDuty and WAF. Stabilisation patches are deployed monthly, while confirmed critical incidents are prioritised for immediate resolution, with customer notification provided within 48 hours of confirmation
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: In conjunction with our hosting provider (who applies the Cloud Security Principles) our monitoring strategy embraces the NCSC's 10 Steps to Cyber Security. This strategy includes both technical and transactional monitoring, as appropriate, informed by previous security incidents and our remedial actions. Our incident response plan comprises 1. Make an initial assessment, 2. Communicate the incident, 3. Contain the damage and minimize the risk, 4. Identify the type and severity of the compromise and protect the evidence, 5. Notify external agencies and recover systems, 6. Document the incident. Response times will be dependent upon the severity and its impact.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Post-quantum cryptography secure: No
• Incident management approach: Azeus UK uses JIRA (our online tracking system) to communicate, manage and report on all incidents. We provide authorised customer representatives access to our JIRA system in order to promote transparency and they can engage in the workflow from initial logging to resolution. Feedback on all incidents is available here. Incidents are classified as critical, high, medium or low and are responded to within our response time commitment and resolution timeframes. Critical and High incidents will usually be followed by an internal Causal Analysis meeting and the appropriate updating of documentation and/or process.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 5%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 5%
• Between £2,500,001 and £5,000,000: 5%
• Over £5,000,001: 5%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: British Assessment Bureau
• ISO/IEC 27001 accreditation date: Tuesday 22 July 2025
• What the ISO/IEC 27001 doesn’t cover: Development by offshore team is not covered by ISO/IEC 27001 (but is covered by our SOC 2 Type II)
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• ISO 9001 certification accredited by: BSI
• ISO 9001 accreditation date: Tuesday 18 March 2025
• What the ISO 9001 doesn’t cover: Development by offshore team is not covered by ISO 9001 (but is covered by our CMMI Level 5)
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 7e2eb556-1ca6-435d-88c7-0e879ec2136c
• Cyber essentials plus: Yes
• Cyber Essentials Plus Certificate Number: Ceff8632-596c-454d-94bd-fb7ee0b963ab
• Other security certifications: Yes
• Any other security certifications: SOC 2 Type II

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • Ensuring new workers are informed of their right to join a trade union
  • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
  • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
  • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

  Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

  Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

  • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
• Mission: Make Britain a clean energy superpower:

  To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

  Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
  • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
• Mission: Break down barriers to opportunity:

  By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

  Policy Outcome 6: Employment and training: For those who face barriers to employment

  • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
  • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

  • Understanding of issues relating to entering the contract workforce
• Mission: Build an NHS fit for the future:

  That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

  Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

  • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
  • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ukpresales@azeus.com. Tell them what format you need. It will help if you say what assistive technology you use.