TECHNOIVITY LIMITED

Data Analytics and Business Intelligence

Our data analytics and intelligence service leverages Microsoft Fabric and Power BI to unify, host, and interrogate your corporate data. We deliver secure, scalable analytics environments that transform raw information into actionable insight, enabling faster decisions, richer reporting, and a single, trusted source of truth across your organisation.

Features

• Unified Data
• Automated Data Pipelines
• Advanced Analytics Modules
• Interactive Dashboards
• Role-Based Data Security
• AI Powered Insights
• Self-Service Reporting
• Predictive and Scenario Modelling
• Data Compliance and Governance
• Trend analysis

Benefits

• Single, Trusted Source of Data
• Faster, Data Driven Decision Making
• Automated Reporting and Time Savings
• Improved Workforce Planning
• Greater Organisational Transparency
• Ability to identify and fix data quality issues
• Scalable for Future Growth
• Improved Auditability

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at enquiries@technoivity.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

421968786756775

Contact

Matt McGuire
07908181788
enquiries@technoivity.com

About the service

• Service categories:
  • Application Development and Deployment
    • Analytics and business intelligence
      • Business Intelligence
        • Business Intelligence
      • Advanced and predictive analytics
        • Advanced and predictive analytics
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Data Pipeline customisation to connect to various databases and systems, to hold data in our standard lakehouse, or tailored unified data hub.
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: Our service operates within certain constraints that buyers should be aware of. Integration capabilities are dependent on the technical limitations and API availability of third-party platforms. This may restrict data availability or limit automation depending on the external system’s configuration. Support is provided during standard UK business hours (Monday to Friday), with no weekend or out-of-hours response unless contractually agreed. Planned maintenance is scheduled outside peak hours and communicated in advance. Where integrations involve secure or proprietary environments, additional configuration, access permissions, or security reviews may be required to ensure compatibility and compliance.
• System requirements:
  • Internet access required for cloud-based integration functionality.
  • Compatible with modern browsers (Chrome, Edge, Firefox, Safari).
  • API access enabled on connected third-party platforms.
  • Users must have a Microsoft Entra managed identity.

User support

• Email or online ticketing support: Yes
• Support response times: We aim to respond to all queries within 4 business hours (Monday to Friday, 9am–5pm UK time). Queries received outside these hours, including weekends, will be responded to on the next working day.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: We offer flexible support levels tailored to each buyer’s needs. While most issues are handled remotely via email, we can provide on-site support at an additional cost.; Support scope and response times are defined collaboratively during onboarding. Pricing varies based on the complexity of the deployment, SLA expectations, and whether enhanced support (e.g. out-of-hours or on-site) is required.; Due to the bespoke nature of support delivery, fixed pricing is not listed quotes are provided on request.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Onboarding a client to our Power BI service begins with understanding their data landscape and mapping all required sources. We then design and build pipelines in Microsoft Fabric to ingest, transform, and consolidate data. Once in Fabric, the data is cleansed, validated, and modelled to ensure accuracy and consistency. We develop tailored Power BI dashboards that visualise key insights aligned to business goals. Finally, we deliver user training sessions covering dashboard navigation, self‑service analytics, and data‑driven decision‑making to ensure the client is confident and fully enabled to use and evolve their Power BI solution.
• Service documentation: Yes
• Documentation formats: PDF
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Each client's needs are met by a tailored solution, with onboarding the custom lakehouse and dashboards are documented for the client.
• End-of-contract data extraction: During the contract, clients can extract their data from visuals or reports directly to excel. If they wish to have a full extract of all tables in the lakehouse, this can be done and provided in either xml or csv format at an additional cost.
• End-of-contract process: At the end of the contract clients access to data will be terminated when the service ends, data will be kept for 90 days before being deleted. If a full extract of the data in the lakehouse is needed, this can be provided in xml or csv format for an additional fee, dependant on the quantity of tables held.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: PowerBI supports Mobile use via the Microsoft app, though clients may prefer to use the desktop (browser based) portal for full functionality.
• Service interface: Yes
• Description of service interface: The service interface is web-based, accessible through standard browsers, and designed with simplicity in mind. It provides users with intuitive dashboards, configuration panels, and role-based access to key features. Admin users can manage integrations, user permissions, and workflows, while standard users can interact with designated service modules.
• Accessibility standards: EN 301 549
• Accessibility testing: Microsoft PowerBI meets WCAG 2.1 and EN 301 549 standards, as verified by Microsoft.
• User support accessibility: None or don’t know
• API: No
• Customisation available: Yes
• Description of customisation: Users can customise Power BI dashboards by adjusting visuals, applying filters, and personalising layouts to highlight the insights they need. They can change chart types, add or remove data fields, create custom themes, and build interactive views, ensuring dashboards reflect their goals and deliver meaningful, role‑specific analytics.

Scaling

• Independence of resources: We guarantee service independence by isolating each client environment into its own Microsoft Fabric Workspace, with Microsoft Azure's capabilities and capacity leveraged to ensure high performance.

Analytics

• Service usage metrics: Yes
• Metrics types: We provide core service usage metrics including activity for report and dashboard usage over the last 30 days.
• Reporting types: Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Physical Destruction / Hardware containing data is completely destroyed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Users can export data from visualisations and reports into Excel or csv format using standard functions in PowerBI.
• Data export formats:
  • CSV
  • Other
• Other data export formats: Xlsx
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • API Pipeline Connector
  • Xlsx
  • Xml

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: We guarantee a 99.5% service availability rate during standard operating hours (Monday to Friday, 09:00–17:00 GMT), excluding planned maintenance windows, which are communicated in advance. Our infrastructure is built with redundancy and high availability to minimise service disruption.
• Approach to resilience: Our service is designed with resilience in mind to ensure continuity, reliability, and data protection for all users. We operate on cloud infrastructure hosted by Microsoft Azure that maintain high availability zones with geographically separated datacentres. This allows for automated failover in the event of hardware failure or service disruption. Key systems are replicated across environments, and regular backups are performed to safeguard customer data. Network redundancy, load balancing, and system monitoring are built into our architecture to proactively detect and mitigate potential failures. Access controls, disaster recovery plans, and testing routines are in place to ensure rapid restoration in the event of disruption.
• Outage reporting: Outages are reported to clients via direct email alerts, ensuring that stakeholders are informed immediately of any disruption. Post-incident reviews are available upon request. Where applicable, we also work directly with Microsoft to relay updates on upstream outages that may affect service performance.

Identity and authentication

• User authentication needed: Yes
• User authentication: Multi-Factor Authentication (MFA)
• Access restrictions in management interfaces and support channels: We enforce strict role-based access control (RBAC) across all management interfaces and support channels. Only authorised personnel with appropriate clearance can access sensitive configurations or client data. Access is granted on a need-to-know basis, with multi-factor authentication and activity logging enabled. Support interactions are monitored, and permissions are regularly reviewed.
• Access restriction testing frequency: At least once a year
• Management access authentication: Multi-Factor Authentication (MFA)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: We hold the following certification: https://www.ncsc.gov.uk/cyberessentials/overview; ; Our data centres are provided by Microsoft in their Azure cloud services and are physically secured by them.
• Information security policies and processes: At Technoivity, we adhere to a comprehensive set of information security policies and procedures aligned with ISO/IEC 27001 standards. These policies cover key areas such as access control, data protection, risk management, and incident response. All policies are reviewed on a quarterly basis and formally approved by senior leadership. Compliance is enforced through a clear reporting structure, any suspected incidents are escalated from staff to the Security Officer, then to the Compliance Lead, and ultimately reviewed by executive management. All team members complete mandatory security awareness training during onboarding and at regular intervals thereafter. System usage is monitored to detect policy breaches, and access is role-restricted and audited. Policy updates are communicated centrally, tracked for staff acknowledgment, and reinforced through monthly operational reviews. This governance structure ensures that information security remains a priority across all areas of our service delivery.

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Our configuration and change management process follows Employment Hero’s structured release cycle for core system updates, paired with Technoivity’s client-side governance. All configuration changes—such as workflows, integrations, or policy rules—are logged, tested in sandbox environments, and approved before deployment. We maintain a full audit trail of changes, including timestamps and user actions. Security impact is assessed during planning stages, with rollback protocols in place for critical updates. Clients are notified of significant platform changes in advance, and bespoke configurations are version-controlled to ensure continuity and traceability across updates.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Our vulnerability management process follows ISO/IEC 27001 standards. We continuously assess potential threats through automated scans and regular third-party audits. Information is sourced from CVE databases, vendor alerts, and threat intelligence feeds. Patches for critical vulnerabilities are typically deployed within 24–72 hours, depending on severity, following internal validation and change control processes.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Our protective monitoring processes are designed to ensure rapid detection, investigation, and resolution of potential threats. We use automated monitoring tools to identify anomalies, unauthorized access attempts, or suspicious activity across systems. If a potential compromise is detected, it’s immediately escalated to our incident response team, which follows a structured triage and investigation process.; ; We respond to verified incidents within hours, isolating the risk and taking corrective action while maintaining full audit trails. Our approach is aligned with ISO/IEC 27001 standards and supported by up-to-date threat intelligence feeds. This enables us to safeguard client data with speed, precision, and accountability.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Post-quantum cryptography secure: No
• Incident management approach: Our incident management process follows a structured framework with predefined protocols for common scenarios such as data breaches, service interruptions, or access control failures. Users can report incidents via email, ticketing system, or phone, depending on severity. Each incident is logged, triaged, and assigned a response priority. Detailed incident reports are provided upon resolution, including root cause analysis, corrective actions, and future prevention measures. Incident data is reviewed regularly to identify trends and improve response procedures. All incidents are handled in alignment with ISO/IEC 27001 standards, ensuring traceability and accountability across all service areas.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 608a94e9-8081-41b4-b22d-d1073bd64b07
• Cyber essentials plus: Yes
• Cyber Essentials Plus Certificate Number: 5216efb2-1ca8-42bd-8d19-f07c09fe5bc2
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

  • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
  • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at enquiries@technoivity.com. Tell them what format you need. It will help if you say what assistive technology you use.