LandTech

LandInsight

LandInsight is a Software as a Service platform that aggregates data to give you a unified view of opportunities and constraints on land. Available data includes environmental constraints and policy designations, planning applications and housing land assessment outcomes, information about existing buildings, and financial comparables.

Features

• Online GIS and data service for land sourcing and assessment
• Land and property development pipeline management
• Development funding brokerage
• Remote access
• Land and property development feasibility assessment
• Browser based interface

Benefits

• Save time through centralised site assessment data
• Awareness of any potential policy/planning red flags
• Build development pipeline and maintain visibility over your projects
• Access to off-market land deals
• Create automated appraisals in minutes
• Understand project funding options and get help accessing lenders
• Bespoke support from your customer success manager
• Receive invaluable data and reports specific to your region/s

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at neil@land.tech. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

456930083898129

Contact

Neil Druian
07900 016446
neil@land.tech

About the service

• Service categories:
  • Applications
    • Collaborative
      • Team collaboration
        • Team collaboration
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: N/a
• System requirements: No system requirements needed

User support

• Email or online ticketing support: Yes
• Support response times: During regular working hours we work to an average response time under 2 hours, (Monday to Friday 9am - 5pm) and within 24 hours at weekends. Contact would be through the buyers account manager(s) who would then answer any questions or escalate any issue(s) to the development/operations team.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• AI chatbot: Yes
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: All our HTML is written in accordance with best practices. Elements have proper attributes so they can be accessed with different devices – via touch, mouse, keyboard, and screen readers.
• Web chat accessibility testing: In development testing phases we not only test how the app works, but also how it is accessible with different devices and how it behaves in various circumstances, including different screen and font sizes, LTR and RTL support, contrast, and elements focusing as examples. Further details can be requested.
• Onsite support: No
• Support levels: Phone support, User support and user training is built into the cost of a licence agreement.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Onboarding a client involves several support elements at the beginning of a project including a kick-off meeting with key team members; assigning a dedicated Customer Success Manager expert in technical functionality to provide assistance for the duration of the project licence. The Customer Success Manager will also provide training on the relevant aspects of the platform's features and functionality in person, or virtually.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Users can access documentation through support knowledge base functionality in our application. We utilise best in class third party tools to provide this service.
• End-of-contract data extraction: At the point that users need to extract their data from LandInsight, site information is exportable in a .csv format.
• End-of-contract process: At the end of the contract, users will no longer be able to access the LandInight platform.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: User interface of our mobile service is adjusted to be more suitable for a smaller screen
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: Yes
• Description of customisation: Users can customise the information layers that they view in order to optimise their experience for their own needs

Scaling

• Independence of resources: All our systems are run on either our kubernetes cluster or through serverless infrastructure with auto scaling configured for both pods and servers that run the cluster. Additionally we have read replicas on our databases that we are also able to scale

Analytics

• Service usage metrics: Yes
• Metrics types: Customer Success Managers and/or Account Managers can provide information on the volume and frequency of use of the service, and of specific features, by each user
• Reporting types: Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Other
• Other data at rest protection approach: Service accounts with keys that are rotated regularly
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Users can customise and export their site data in spreadsheet format; they can also export customisable site reports
• Data export formats:
  • CSV
  • Other
• Other data export formats: Pdf
• Data import formats: Other
• Other data import formats: Importing data is reliant on support of our team

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: Other
• Other protection within supplier network: In transit, the data is protected by encryption under enforced HTTPS protocol.

Availability and resilience

• Guaranteed availability: N/a
• Approach to resilience: All our services are either redundant or cloud-native scalable ; The client-server communication is via REST API that is stateless so a potential failure on one request endpoint does not impact other endpoints; Our client applications are React SPAs (Single Page Applications) that load as static content. Consequently, a failure on a particular service/endpoint does not cause a system-wide failure (graceful performance degradation); Our applications (in particular the API server) are unit tested at every push to the code repository. We also have a CI/CD pipeline automation in place for automated test execution and application deployment. We also have a 3-stage (integration/staging/production) employment pipeline; Every release undergoes extensive manual testing.
• Outage reporting: We have a separately hosted static ; error page. Partial outages are also communicated via a status bar in the app. ; Our services are monitored via Datadog which alerts us of outages in the system. We also use kubernetes which will spin up a new pod if one dies. We also have autoscaling ability across servies and databases

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: We restrict access to management interfaces and support channels through three core controls:; ; Least Privilege: Access is granted based on job requirements only. All access requests require formal approval with business justification, recorded with timestamps. Annual access reviews ensure permissions remain appropriate.; ; Multi-Factor Authentication: All sensitive systems and employee access require MFA (user ID, password, and OTP/certificate) by default.; ; Audit Logging: All system components maintain comprehensive audit logs capturing user identity, event type, timestamps, and affected resources. Audit trail files are protected from unauthorised modification, with viewing restricted to those with job-related need.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: ISO 27001; CyberEssentials; GDPR

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Our configuration and change management processes are governed by our ISO 27001 certified Information Security Management System (ISMS). These processes align with the requirements of ISO/IEC 27001:2022 (Controls 8.9 and 8.32) and ensure that all changes to the production environment are documented, risk-assessed, and formally approved
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Our vulnerability management process is integrated into our ISO 27001 certified ISMS. We perform regular automated scanning and annual independent penetration testing, prioritising remediation based on CVSS scores
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Our protective monitoring approach is governed by our ISO 27001 certified ISMS (specifically aligning with Control 8.16)
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Post-quantum cryptography secure: Yes
• Incident management approach: We have a structured incident response procedure covering detection, assessment, containment, resolution, and communication, with three severity levels (High, Medium, Low) and defined response timelines. Pre-defined escalation paths involve our IT Team and management sponsors.; ; Users report incidents via Slack or email within 24 hours to their manager, who alerts IT. Reports must include description, date, time, location, discoverer, evidence, affected systems, and any data loss.; ; We maintain a formal incident log documenting severity, root cause, evidence, mitigations, status, and disclosures. We use a comprehensive Security Incident Report Template and conduct post-incident user notifications and training on lessons learned.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: We offer free trials of our service with a limited time period defined by the plan tier that is being used. Majority of functionality is included, with restrictions on bulk downloads

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 10%
• Between £500,001 and £1,000,000: 10%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 10%
• Over £5,000,001: 10%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: UKAS
• ISO/IEC 27001 accreditation date: Thursday 5 June 2025
• What the ISO/IEC 27001 doesn’t cover: N/a
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 5ac40971-12d9-4d79-81ce-1dd007a53f0b
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

  • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
  • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
  • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
  • Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at neil@land.tech. Tell them what format you need. It will help if you say what assistive technology you use.