GATHER IT LIMITED

Gather

Gather provides a range of survey, audit and inspection services to collect and report all your data through our dedicated mobile and web applications.

Features

• Quick and easy data collection
• Using multiple data collection methods and channels
• Such as mobile apps, online, phone, email and SMS
• Real time reporting through detailed, customisable dashboards
• In-depth analysis with SPC charts and automated reports
• Reports can be exported into Word, Excel and Powerpoint
• Action planning and task management

Benefits

• Reduce the time and cost of data capture and reporting
• Provide instant detailed reports that are tailored for each user
• Action plans and outcomes are automatically created and monitored

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at hello@gatherit.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

422832989414447

Contact

Get in touch:
01212818020
hello@gatherit.co.uk

About the service

• Service categories:
  • Applications
    • Content workflow and management
      • Capture
        • Capture
      • Persuasive content management
        • Website Software
        • Digital Asset Management Applications
        • Product Content Management Applications
      • Enterprise portals and digital workspaces
        • Multi-Audience Portals
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
• Service constraints: Our cloud service is accessible by any internet connected device.
• System requirements: Internet connection

User support

• Email or online ticketing support: Yes
• Support response times: Response times are based on the status of the ticket:; ; Critical - 30 minutes; Urgent - 4 hours; Normal - 3 business days; Information only - 3 business days
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AAA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• AI chatbot: No
• Web chat support accessibility standard: WCAG 2.2 AAA
• Web chat accessibility testing: We've ensured that the chat application meets key accessibility standards.
• Onsite support: Yes
• Support levels: Basic support - online only; Advanced support - online, phone, webchat and SMS; Enhanced support - online, phone, webchat, SMS and on-site
• Support available to third parties: No

Onboarding and offboarding

• Getting started: We co-create an implementation plan and process that tailors the system to your needs, and creates all the assets you require.; This is then supported by a range of onsite and online training, online user guides and tutorials that are built into the system. ; We provide a detailed communications strategy, templates and email alerts to support implementation, engagement and advocacy.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• Documentation accessibility standard: WCAG 2.2 AA
• End-of-contract data extraction: Data can be extracted through the frontend or via API at any time.; We provide offboarding support at contract end if there are any additional needs.
• End-of-contract process: All service and support for contract end if provided and included. ; At the end of the contract, we will extract and then delete all client-owned data.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: None - the desktop and mobile applications are identical, and resize to fit the screen they are on.
• Service interface: Yes
• Description of service interface: Web and mobile user interface to manage the application. Uses role-based permissions to determine what functions each user has access to.
• Accessibility standards: None or don’t know
• Description of accessibility: Due to the complexity of some charts, dashboards and data visualisations, currently only the main functions of the system are WCAG complaint.
• Accessibility testing: We have used automated tests for accessibility, and include support for screen readers, large font sizes and readable colour contrasts.
• User support accessibility: WCAG 2.2 A
• API: Yes
• What users can and can't do using the API: User accounts with the correct privileges can generate API credentials to access their data via our API endpoints. ; Our API focuses on making it quick and easy to either submit or extract data from Gather.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Users can customise the appearance and functionality of the service.; For example, you can set up a project, audit or survey; This can then be shared through multiple channels (private or public); You can set customised triggers based on interaction with your project; You can create your own dashboard to monitor all aspects of the project; We also accept new feature requests and build new functionality based on user feedback.

Scaling

• Independence of resources: We use our pricing model to scale our services to ensure there is enough capacity to serve all your requirements.

Analytics

• Service usage metrics: Yes
• Metrics types: Usage metrics are available for all business objects in the service.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Data can be extracted through the user interface or via API.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • JSON
  • XML
  • DOCX
  • XLSX
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • XLSX
  • JSON

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: We maintain a historical uptime track record of 99.9% across our platform. We utilise industry-standard infrastructure with automated failover to ensure consistent service delivery.; ; We are happy to structure specific Service Level Agreements (SLAs) for clients requiring contractually guaranteed uptime.; ; For customers with an active SLA, failure to meet guaranteed uptime thresholds is compensated via Service Credits applied to future invoices, scaled based on the duration of the outage.
• Approach to resilience: Our platform is configured for high availability and resilience.; ; We utilise a highly available architecture where critical services are distributed across multiple Availability Zones (physically separate data centres within the same region). This ensures that a failure in one facility does not result in service downtime.; ; Customer data is protected via automated, encrypted snapshots. We maintain a strict Backup & Disaster Recovery policy in the event of a critical incident.; ; Our infrastructure utilises automated health checks and auto-scaling groups to detect and replace failed instances automatically without human intervention.; ; We host our infrastructure with a Tier-1 UK-based Service Provider that adheres to the strictest physical security standards, with perimeter controls, 24/7 security staff, biometric access protocols, and video surveillance.; ; The data centres feature N+1 redundancy for power, networking, and cooling systems. This includes uninterruptible power supplies (UPS) and on-site backup generators to maintain operation during utility power failures.; ; Our underlying infrastructure provider holds ISO 27001, SOC 2 Type II, and Cyber Essentials Plus certifications.; ; In line with security best practices and to protect the integrity of our secure environment, specific details regarding our exact network topology, disaster recovery testing logs, and specific facility locations are not published in open catalogues.
• Outage reporting: We send email alerts to all contract leads and administrative users.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Role Based Access Control (RBAC) can be configured so personnel can only perform actions that are directly related to their role.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Cyber Essentials Plus; Data Security and Protection Toolkit
• Information security policies and processes: We maintain a robust Information Security Management System (ISMS) aligned with industry standards such as ISO 27001 and NIST. ; ; Our security function is led by a named Director. This structure ensures security governance operates independently of IT operations to avoid conflicts of interest.; ; We ensure adherence to policies through a multi-layered approach; Automation: We utilise continuous monitoring tools to detect configuration drifts and policy violations in real-time.; Training: All employees undergo mandatory security awareness training upon hire and annually thereafter.; ; All policies and procedures are reviewed annually.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We utilise a comprehensive Management Database to track all service components from acquisition through to decommissioning. This ensures complete visibility of the asset lifecycle.; ; Every change request undergoes a mandatory Security Impact Assessment to identify potential vulnerabilities.; ; Significant changes are reviewed by a Change Advisory Group, ensuring no modification is deployed without understanding its security implications.; ; This approach maintains the integrity of our environment and minimises any disruption.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We operate a continuous vulnerability management programme to safeguard our services.; ; We aggregate threat intelligence from trusted industry feeds, vendor notifications, and NCSC alerts to identify emerging risks.; ; Potential threats are assessed using CVSS scoring tailored to our environment. This allows us to distinguish between theoretical risks and those with a genuine impact on our infrastructure.; ; We adhere to strict Service Level Agreements (SLAs):; ; Critical Vulnerabilities: Patched within 24 hours.; Standard Updates: Deployed during scheduled weekly or monthly maintenance windows.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Our solution aggregates logs and analyses traffic patterns in real-time. We detect compromises using behavioural analytics and threat intelligence signatures to spot anomalies early.; ; Upon detecting an anomaly, we follow a strict protocol:; ; Triage: Critical alerts are investigated within 15 minutes.; ; Action: Validated threats trigger our Incident Response Plan, prioritising immediate containment and eradication.; ; Mitigation: We target containment of critical incidents within 1 hour to prevent data exfiltration or service interruption.
• Incident management type: Supplier-defined controls
• Post-quantum cryptography secure: Yes
• Incident management approach: We utilise specific guides for common events such as phishing attempts, malware infections, and lost equipment. This ensures a consistent, rapid response to minimise impact.; ; Users can report suspected incidents via a dedicated email support desk, or escalate via line management. We use an in-house incident management reporting and management framework. ; ; Following resolution, we provide a comprehensive Post-Incident Report (PIR). This details the root cause, timeline, and remediation actions, ensuring lessons are learned and controls are strengthened.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Following a meeting to review your needs, we'll create a dedicated workspace with full access to the Gather service for a limited time.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 5%
• Between £250,000 and £500,000: 10%
• Between £500,001 and £1,000,000: 12%
• Between £1,000,001 and £2,500,000: 15%
• Between £2,500,001 and £5,000,000: 18%
• Over £5,000,001: 20%

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: Db68d9ed-269b-48a5-98e0-9c5d91206dc1
• Cyber essentials plus: Yes
• Cyber Essentials Plus Certificate Number: 7f3a6595-01a1-4877-8f8c-a0e4c09cf769
• Other security certifications: Yes
• Any other security certifications: All infrastructure is ISO 27001 certified

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
  • Plans to engage the contract workforce in deciding the most important workplace issues to address
  • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
  • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
  • Volunteering opportunities for staff
  • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
  • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
  • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
  • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain

  Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

  Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

  • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
• Mission: Make Britain a clean energy superpower:

  To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

  Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
  • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it
• Mission: Break down barriers to opportunity:

  By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

  Policy Outcome 6: Employment and training: For those who face barriers to employment

  • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
  • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

  • Understanding of the issues affecting the development of new skills by target cohort
  • Understanding of issues relating to entering the contract workforce
• Mission: Build an NHS fit for the future:

  That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

  Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

  • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at hello@gatherit.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.