Connectivity, Visibility and Actionable Insights Solution - Partnerlinq
PartnerLinQ was purpose-built to transform supply chains, ensuring the highest level of process and data integrity while reducing partner onboarding time and mitigating supply chain uncertainty.
Features
- Both EDI and non-EDI transactions are supported
- End to end visibility
- Control
- Partners can be configured by buyers themselves
- Connectivity
- Integration
- Specialise in various industries
Benefits
- Short time to market
- limitless flexibility
Pricing
Service documents
Request an accessible format
Framework
G-Cloud 15
Service ID
4 5 2 9 1 1 6 0 3 5 2 9 5 3 0
Contact
VISIONET EMEA LIMITED
Jawad A Khan
Telephone: +447721235694
Email: jawad.a.khan@visionet.com
About your service
- Service categories
-
Applications
Supply chain management
- Supply chain planning
- Multi cloud support
- Yes
Service scope
- Software add-on or extension
- No
- Cloud deployment model
- Hybrid cloud
- Service constraints
- PartnerLinQ notifies customers and releases updates monthly and because PartnerLinQ is a cloud-native high-performance B2B connectivity solution there are no service or operating constraints during update cycles.
- System requirements
- PartnerlinQ has no system requirements, beyond a web browser.
User support
- Email or online ticketing support
- Yes, at extra cost
- Support response times
- Ticketing is built in to the platform, typically response times average 15 minutes for PRODUCTION environments and 30-40 minutes for Non- PRODUCTION environments
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- None or don’t know
- Phone support
- Yes
- Phone support availability
- 24 hours, 7 days a week
- Web chat support
- Yes, at an extra cost
- Web chat support availability
- 24 hours, 7 days a week
- Web chat support accessibility standard
- None or don’t know
- How the web chat support is accessible
-
Web chat support is delivered through a standard web-based chat interface that is accessible via modern desktop and mobile web browsers. Users can interact with support agents using keyboard and mouse input, and the chat interface supports adjustable browser-level zoom and text sizing features.
The service does not currently provide formal certification against specific accessibility standards, and accessibility features are dependent on the capabilities of the underlying web browser and operating system used by the customer.
Where users are unable to use web chat, alternative support channels are available, including email and ticket-based support, to ensure users can still access assistance. - Web chat accessibility testing
-
The web chat functionality has not undergone formal testing with assistive technology users. No structured usability or accessibility testing has been conducted using assistive technologies such as screen readers, voice recognition software, or alternative input devices.
Accessibility is currently dependent on the capabilities of the customer’s web browser, operating system, and any assistive technologies they choose to use. Where users experience difficulties using web chat, alternative support channels such as email and ticket-based support are available. - Onsite support
- Yes, at extra cost
- Support levels
- PartnerLinQ provides options of Ticket based Support, Pool support and dedicated support. The support model covers L1, L2 and L3 support. Technical account manager is associated with each account.
- Support available to third parties
- Yes
- AI chatbot
- Yes
Onboarding and offboarding
- Getting started
- Nothing is left to chance with PartnerLinQ from Case Studies to Online Demos, built in manuals and product documentation, Hypercare post-deployment support which extends for 2 weeks following ‘go live’ followed by Flexible and Customised Professional Support Services which is optional, 30% of our clients self-support to some extent within one year of deployment.
- Service documentation
- Yes
- Documentation formats
-
- HTML
- Other
- Other documentation formats
-
- TXT
- XLS
- XSD
- End-of-contract data extraction
- All files and zip folders, db backups are extracted and shared with buyer via the requested medium.
- End-of-contract process
- SOW dependant
- Documentation accessibility standard
- None or don’t know
- How the documentation is accessible
-
Onboarding and offboarding documentation is provided in multiple digital formats, including HTML, PDF, and plain text, allowing users to access content using standard web browsers and common document readers. Documentation can be viewed on desktop and mobile devices and supports browser-level accessibility features such as zoom, text resizing, and contrast adjustments.
Technical documentation, including configuration files and data specifications, is also provided in structured formats such as TXT, XLS, and XSD to support different user needs and tooling preferences. The documentation has not been formally certified against specific accessibility standards, and accessibility is dependent on the capabilities of the user’s device, operating system, and any assistive technologies in use.
Where required, additional support is available to assist users with onboarding and offboarding activities through managed support channels.
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Opera
- Other
- Application to install
- No
- Designed for use on mobile devices
- No
- Service interface
- Yes
- User support accessibility
- None or don’t know
- Description of service interface
-
PartnerLinQ is GUI based solution that provides users the ease to use the platform through the following studios:
1. Monitoring Studio: For transaction tracking
2. Digital Configuration Studio: Configure connections, Partnerships and Alerts
3. Design Studio: Design Business rules, Process flow actions, reference schema and artifact migration
4. Reporting Studio: Generate insights with analytical reports - Accessibility standards
- None or don’t know
- Description of accessibility
-
The service interface is delivered through a web-based user interface accessible via modern desktop and mobile web browsers. Users can navigate the interface using standard keyboard and mouse controls, and can apply browser-level accessibility features such as zoom, text resizing, and contrast settings.
The service does not currently provide formal certification against specific accessibility standards, and accessibility support is dependent on the capabilities of the user’s browser, operating system, and any assistive technologies in use. - Accessibility testing
- Assistive technology testing has not been completed.
- API
- No
- Customisation available
- Yes
- Description of customisation
-
•Customers can deploy their own custom utilities on their PartnerLinQ environment
•PartnerLinQ can add custom features that meet the clients’ requirements
•Custom Integrations with buyers' vendors and private networks are also supported
Scaling
- Independence of resources
- Dedicated environments for each client.
Analytics
- Service usage metrics
- Yes
- Metrics types
- Service metrics typically include usage, for example, the number of transactions inbound and outbound, success and failures, API and VAN transaction counts and so forth.
- Reporting types
-
- Regular reports
- Reports on request
- Resource tagging
- Yes
- FOCUS resource tagging
- No
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Baseline Personnel Security Standard (BPSS)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
-
- United Kingdom
- European Economic Area (EEA)
- Other locations
- User control over data storage and processing locations
- Yes
- Datacentre security standards
- Managed by a third party
- Penetration testing frequency
- At least every 6 months
- Penetration testing approach
- In-house
- Protecting data at rest
- Other
- Other data at rest protection approach
- All data written to the Azure storage platform is encrypted through 256-bit AES encryption and is FIPS 140-2 compliant.
- Data sanitisation process
- Yes
- Equipment disposal approach
- Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
- Data sanitisation type
- Deleted data can’t be directly accessed / Cryptographic Erasure
Data importing and exporting
- Data export approach
- Files can be viewed and downloaded from PartnerLinQ portal and can even be emailed in human readable formats.
- Data export formats
-
- CSV
- Other
- Other data export formats
-
- VDA
- UCS
- VICS
- EDI ANSI ASC X12
- ODETTE
- UN/EDIFACT
- CIDX
- FCB2B
- EASI
- Data import formats
-
- CSV
- Other
- Other data import formats
-
- EDI ANSI ASC X12
- UN/EDIFACT
- VDA
- UCS
- VICS
- RosettaNet
- CIDX
- EASI
- FCB2B
Data-in-transit protection
- Data protection between buyer and supplier networks
-
- Private network or public sector network
- TLS (version 1.2 or above)
- IPsec or TLS VPN gateway
- Other
- Other protection between networks
- Via encrypted channels like https, as2, sftp, vpn tunnels
- Data protection within supplier network
-
- TLS (version 1.2 or above)
- Other
- Other protection within supplier network
- All communication is over Azure backbone and all resources have public internet access blocked. All data written to the Azure storage platform which is encrypted through 256-bit AES encryption and is FIPS 140-2 compliant. Bring your own encryption keys can be used to encrypt over technique from a range of options.
Availability and resilience
- Guaranteed availability
- 99.99% uptime guaranteed for all services. Microservices ensure core functionality stays operational despite few services going down.
- Approach to resilience
- Zone redundancy within an Azure region along with a secondary cold region in case of complete Azure region failure.
- Outage reporting
- Dashboard and email alerts.
Identity and authentication
- User authentication needed
- Yes
- User authentication
-
- Multi-Factor Authentication (MFA)
- Username or password
- Access restrictions in management interfaces and support channels
- PartnerLinQ have implemented secure authentication methods to verify the identity via Microsoft, Octa, Google accounts identity providers.
- Access restriction testing frequency
- At least every 6 months
- Management access authentication
-
- Multi-Factor Authentication (MFA)
- Dedicated link (for example VPN)
- Username or password
Audit information for users
- Access to user activity audit information
- Users contact the support team to get audit information
- How long user audit data is stored for
- Between 1 month and 6 months
- Access to supplier activity audit information
- Users contact the support team to get audit information
- How long supplier audit data is stored for
- Between 1 month and 6 months
- How long system logs are stored for
- Between 1 month and 6 months
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
-
- ISO/IEC 27001
- Other
- Other security governance standards
- Compliant with SOC 1 and 2, PCI-DSS, GDPR
- Information security policies and processes
-
All channels of communication are private with regular external penetration testing to ensure internal networks are safe.
• PartnerLinQ have implemented Role-based access control (RBAC) to ensure that only authorised individuals can access
• PartnerLinQ have implemented encryption for data at rest and in transit to protect sensitive information
• PartnerLinQ have implemented all software and systems are up-to-date to protect against vulnerabilities that could be exploited to alter information - Software Security Code of Practice
- Yes
Operational security
- Configuration and change management standard
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Configuration and change management approach
- PartnerLinQ have implemented detailed logs of system and data access and changes to track unauthorised modifications and enable accountability. All changes are first assessed for potential security impacts.
- Vulnerability management type
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Vulnerability management approach
- Designated team for data protection compliance including monitoring compliance, training staff, and conducting internal audits. Information about potential threats is received from multiple platforms like Azure Advisor, internal and external penetration testers, internal compliance checking tools.
- Protective monitoring type
- Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
- Protective monitoring approach
-
• Regular Security Audits and Assessments
• Access Control Mechanisms
• Data Encryption
• Monitoring of Network Traffic and System Logs
• Incident Response Procedures - Incident management type
- Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
- Incident management approach
-
• Incident Identification and Reporting
• Classification and Prioritisation
• Containment and Mitigation
• Investigation and Analysis
• Communication and Notification
• Resolution and Recovery - Post-quantum cryptography secure
- Yes
Secure development
- Approach to secure software development best practice
- Conforms to a recognised standard, but self-assessed
Public sector networks
- Connection to public sector networks
- No
Pricing
- Discount for educational organisations
- No
- Free trial available
- No
Discount percentage by annual call-off contract value (excluding VAT)
- Less than £250,000
- 0%
- Between £250,000 and £500,000
- 0%
- Between £500,001 and £1,000,000
- 1%
- Between £1,000,001 and £2,500,000
- 2%
- Between £2,500,001 and £5,000,000
- 3%
- Over £5,000,001
- 5%
Non-mandatory Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- GMS INTERCERT SERVICES
- ISO/IEC 27001 accreditation date
- Wednesday 23 June 2021
- What the ISO/IEC 27001 doesn’t cover
- Not Applicable
- ISO 28000:2022 certification
- No
- ISO 9001 certification
- Yes
- Who accredited the ISO 9001 certification
- GMS INTERCERT SERVICES
- ISO 9001 accreditation date
- Thursday 13 March 2025
- What the ISO 9001 doesn’t cover
- Not Applicable
- Quality management systems (QMS)
- Yes
- CSA STAR certification
- Yes
- CSA STAR accreditation date
- Friday 1 March 2024
- CSA STAR certification level
- Level 1: CSA STAR Self-Assessment
- What the CSA STAR doesn’t cover
- Not Applicable
- PCI certification
- Yes
- Who accredited the PCI DSS certification
- Sysnet Global Solutions
- PCI DSS accreditation date
- Tuesday 12 December 2023
- What the PCI DSS doesn’t cover
- Not Applicable
- Cyber essentials
- Yes
- Please provide your Cyber Essentials Certificate Number
- E7f12ebf-757f-4ba2-b918-a2e69c4308b5
- Cyber essentials plus
- Yes
- Please provide your Cyber Essentials Plus Certificate Number
- Dea421ad-56e2-44f5-ae1d-8208ca0ca92b
- Other security certifications
- Yes
- Any other security certifications
-
- SOC1 TYPE 2
- SOC2 TYPE 2
- ISO 27001:2022, 27701
- HIPPA Compliant
- GDPR
Social value
- Section B - Commitment for Future: Delivery
-
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority
- New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
- Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
- Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
- Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
- Activities to cascade good practice on fair working conditions throughout the supply chain
- Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
- Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
- Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
- Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
- Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Volunteering opportunities for staff
- Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
- Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
- Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
- How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
- How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
- How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
- Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract
-