Pop Pop Studio Ltd

Care Leavers App

The Care Leavers App supports young people transitioning from care by providing 24/7 access to local information, advice, and services. Features a customisable interface tailored to local branding. Allows for real-time updates, secure messaging, and digital surveys, fostering engagement. Empowers care leavers and enhances local authority support.

Features

• Digital Local Offer: 24/7 access to information, advice, and support.
• Events Calendar: Promotes local events to reduce isolation.
• Services Directory: Searchable local and national support services with maps.
• Regional Apprenticeships Feed: Automated updates of apprenticeship opportunities.
• Discounts and Offers: Promotion of business discounts, council tax exemptions.
• Mental Health Hub: 24/7 access to mental wellbeing advice.
• Digital Surveys and Polls: Unlimited surveys with notifications and results.
• Secure Messaging: Encrypted messaging between authorities and young people.

Benefits

• Empowers Young People: Co-designed content reflecting user needs.
• Reduces Social Isolation: Promotes events and activities.
• Enhances Awareness of Support: Centralises information on services.
• Improves Mental Wellbeing: 24/7 access to mental health resources.
• Increases Engagement: Surveys, messaging, and discussion groups.
• Saves Time and Costs: Automates updates, reducing workload.
• Accessibility and Inclusivity: WCAG 2.2 AA compliant.
• Data Security and Privacy: GDPR-compliant encryption.
• Comprehensive Support: Onboarding, training, and ongoing assistance.
• Scalability: Supports future feature additions.

• Free trial available

Service documents

• Pricing document

  ODT

• Service definition document

  ODT

• Terms and conditions

  ODT

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jonny@poppop.studio. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

425929963244573

Contact

Jonny Holden
01619871909
jonny@poppop.studio

About the service

• Service categories:
  • Applications
    • Content workflow and management
      • Content services
        • Content Sharing and Collaboration Applications
      • Document
        • Document
      • Enterprise portals and digital workspaces
        • Multi-Audience Portals
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: Planned upgrades to Drupal and LocalGov Drupal versions.
• System requirements:
  • Modern Browser
  • Up to date Operating system

User support

• Email or online ticketing support: Yes
• Support response times: 1 day during school term times, Monday to Friday. Up to 1 week during school holidays. Critical server availability prioritised and dealt with urgently 365 days a year.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Support is what makes us different. Email answered within one working day, all year, and a UK phone number in working hours. A booked video call with the person who built the service, on Teams, whenever a question needs talking through. Customers have a regular meeting with us, weekly while a site is being built and set up, then as often as they want. Support is included in the yearly fee, with no tiers.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We work with the local authority's Specialist Inclusion Team and SENCOs to develop the look and feel. ; We can support with creating the content, or moving the content from existing PDFs or Word docs. ; Online training is available, and there is a knowledge base.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • Other
• Other documentation formats:
  • Video
  • Screenshots
• Documentation accessibility standard: WCAG 2.2 AA
• End-of-contract data extraction: As the directory and audit is built in Drupal, at the end of the contract we can transfer ownership of the site. ; Code base can be made available through a version control system.; Data can be exported as a database dump or requested extracts as CSV, JSON, XML. ; ; We will then cease any hosting or support.
• End-of-contract process: Pop Pop Studio will either delete the app or create a copy of the whole site on a version control system, to be passed on to the client.; ; If users require a download of content in any other format, Pop Pop Studio will charge for the time taken.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The usual responsive Menu and Layout changes are applied to make sure the app is WCAG Robust.
• Service interface: Yes
• Description of service interface: Generic Drupal back end allows users to edit content and configure the functions as needed.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: Sites are built to WCAG 2.2 AA. Automated checks are run, but hand checks are carried out using assistive technology. Findings are fixed before release and the accessibility statement is kept current.
• User support accessibility: WCAG 2.2 AA
• API: No
• Customisation available: Yes
• Description of customisation: The "look and feel" of the front end can be collaboratively designed with care leavers. ; ; A range of modules can be added to support local needs.

Scaling

• Independence of resources: Each site it hosted in a separate hosting service that allows scaling, the specification of which can be increased as needed, without extra charge.

Analytics

• Service usage metrics: Yes
• Metrics types: We use Plausible.io, an open-source, privacy friendly analytics service.
• Reporting types: Real-time dashboards
• Resource tagging: Yes
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: Never
• Protecting data at rest: Other
• Other data at rest protection approach: Security controls fall inside of ISO 27001:2022, through our hosting partners
• Data sanitisation process: Yes
• Data sanitisation type:
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Option to extract data within one of the usual data formats (CSV, XLS, XML, JSON)
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • XML
  • XLS
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: 99.99% uptime expected, with infrastructure monitors alerting hosting engineers.
• Approach to resilience: Our hosting partner holds ISO 27001:2022.
• Outage reporting: Hosting partner email alerts and support.

Identity and authentication

• User authentication needed: No
• Access restrictions in management interfaces and support channels: Management access to the platform is restricted and authenticated via username, password. Role based permissions are used and all actions are audit logged.; Support channels are email based for clients, and MFA restricted for our staff.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: Between 1 month and 6 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: No
• Security governance approach: Working directly with our hosting partners, our developers, and client tech teams (where required) we use the Software Security Code of Practice to guide our best practice at POP POP STUDIO
• Information security policies and processes: All developers report directly to the company Director. ; With each new deployment information security policies and processes are followed.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: All development work is version controlled. ; Internal QA testing in staging environments. ; UAT testing as required.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: As we use Drupal and LocalGov Drupal, we are notified of threats and patches directly from these organisations. Security patches are deployed as soon as possible, within 24 hours.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Drupal and LGD report on potential compromises and we act on these as soon as possible. ; All security patches are installed and updated in line with their instructions.
• Incident management type: Supplier-defined controls
• Post-quantum cryptography secure: No
• Incident management approach: Any incidents or suspected incidents should be reported directly to Pop Pop Studio, and they will be reviewed by our technical team. Resolutions will be reported back to the client.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Yes. A demo built from your own ordinarily available provision or graduated approach document, or your current local offer content, free, no obligation, in about a week.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 10%
• Over £5,000,001: 15%

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: Provided
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Mission: Make Britain a clean energy superpower:

  To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

  Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
  • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
• Mission: Break down barriers to opportunity:

  By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

  Policy Outcome 6: Employment and training: For those who face barriers to employment

  • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
  • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Working conditions which promote an inclusive working environment and promote retention and progression

  Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

  • Understanding of the issues affecting the development of new skills by target cohort
  • Creation of outreach activities to create a pipeline of employees for the future contract delivery

Service documents

• Pricing document

  ODT

• Service definition document

  ODT

• Terms and conditions

  ODT

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jonny@poppop.studio. Tell them what format you need. It will help if you say what assistive technology you use.