SYNECTICS SOLUTIONS LIMITED

ReCheck

ReCheck which includes mortality screening and premium council tax single persons matching service offers a flexible and cost-effective services that allows you to upload data to manage and monitor ongoing customer relationship to detect and prevent fraud

Features

• Speed Up Approvals & Improve Customer Experience
• Reduce Fraud & Error Within Your Organisation
• Cost-Effective and Value for Money
• Easy to Deploy
• Prioritise investigative resources
• Improve customer onboarding

Benefits

• Increases Fraud Savings
• Reduction of Financial loss
• Resource optimisation
• Improve customer retention

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsectorservices@synectics-solutions.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

463641796755241

Contact

Louise Williams
0333 234 3409
publicsectorservices@synectics-solutions.com

About your service

• Service categories:

  Applications

  Enterprise resource management

  Financial

  • Treasury and Risk Management Applications
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: ReCheck is a stand alone service but can be used alongside AppCheck or the NFI mandated exercise run by the Public Sector Fraud Authority
• Cloud deployment model: Private cloud
• Service constraints: No
• System requirements: Access to the Internet with a supported web browser

User support

• Email or online ticketing support: Yes
• Support response times: We have a dedicated email address to support users with any issues they may have whilst using the product this is open from 8.00am till 5.30pm Monday to Friday. All correspondence is dealt with in line with the Public Sector Fraud Authorities published support levels.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: We have a dedicated support via a helpdesk facility and 2 product business support staff who provide day to day support plus on going training of users as and when required. This support is included in the cost of the application. Within the web application we also provide detailed user guides and training videos.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: To ensure every new customer gets the most out of ReCheck from day one, we provide a comprehensive 3-month nursery program that offers enhanced onboarding and hands-on support. This includes:; ; Dedicated Early-Stage Support; ; Online training sessions to help users understand key features and workflows; ; User setup assistance, ensuring teams are configured correctly from the start; ; Helpdesk query support with rapid responses to common questions; ; A dedicated Business Manager, available to guide your onboarding and success journey; ; Onboarding Resources; ; New users also gain access to a suite of helpful materials, including:; ; A detailed User Guide; ; Real-world Case Studies; ; A library of Training Videos; ; Guided First Data Upload; ; We personally assist with your first data file upload, walking you through the process step-by-step to help you interpret results quickly and confidently.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Data extraction and deletion when a contract ends meets the requirements set by the Public Sector Fraud Authority. This is published https://assets.publishing.service.gov.uk/media/6792303ae982ca138427fc03/2025-01-22_NFI_Data_Deletion_Schedule_25-26_v2.docx.pdf.
• End-of-contract process: The end user will be contracted 2 months before the contract end date, and asked if they would like to renew. If the client decides not to purchase the product again an end date will be confirmed and the user will no longer be able to submit data for matching. All previous matches will remain within the system for a period of time as published by the National Fraud Initiative data deletion schedule
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Documents are either emailed to users when needed or can be downloaded via the web application portal.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Users need to have an approved account on the National Fraud Initiative web portal. nfi.gov.uk. ReCheck is one of a number of fraud prevention and detections solutions held on the portal. Access to the portal and services contained within it, is controlled and approved by the Public Sector Fraud Authority
• Accessibility standards: None or don’t know
• Description of accessibility: Our services align to the accessibility standard WCAG2.2A
• Accessibility testing: The Public Sector Fraud Authority Team who operate the National Fraud Initiative, hold regular sessions to improve and test the service interface. We also have a sandbox test environment where any developments are initially launched and tested
• API: No
• Customisation available: No

Scaling

• Independence of resources: Synectics is the owner-operator of three UK based data centres which service our Public Sector products. All web applications are load balanced and constantly monitored for load and performance. VM hosts operate N+1 redundancy allowing scaling of infrastructure as required. APIs and high demand services operate rate limiting in accordance with agreed SLAs.

Analytics

• Service usage metrics: Yes
• Metrics types: We provide a range of metric options, including real-time dashboards that can be personalised based on the user’s role and access level. These dashboards are available within a dedicated, secure area of the web application and can be fully customised to meet individual user needs. Reports can be exported in PDF, Excel, or graphical formats.
• Reporting types:
  • Real-time dashboards
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: Yes data can be exported from the ReCheck service, if the users holds explicit permission granted by the purchasing organisation
• Data export formats:
  • CSV
  • Other
• Other data export formats: Excel formats
• Data import formats:
  • CSV
  • Other
• Other data import formats: Microsoft excel formats

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The Service is guaranteed to be available from 08:00 - 17:30, Monday to Friday. Outside of these ours, the service is still available, but not guaranteed. Any compensation for failure to provide the service should be discussed with the business support manager.
• Approach to resilience: Available on request
• Outage reporting: Email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication: Multi-Factor Authentication (MFA)
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is strictly governed by the principle of least privilege and rigorous segregation of duties. All access requires managerial authorisation based on a valid business need and is fully logged. Cloud-hosted systems require Two-Factor Authentication. Access to sensitive Public Sector environments is often restricted to SC-cleared staff or those supervised by SC-cleared staff. For support, Application Support staff are pre-authorised to self-generate temporary accounts for out-of-hours issue resolution. Additionally, the installation and use of privileged utility programs are restricted and strictly temporary
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users receive audit information on a regular basis
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Synectics Solutions operates an Information Security Management System (ISMS) that conforms to ISO27001:2022, which provides the framework for its information security objectives and overall policy direction. The core security policy structure includes the primary Information Security Policy, supported by a suite of dedicated sub-policies (23 in total). These policies are owned by the Board of Directors and revisions are approved by the Security Board on behalf of the Board of Directors. Synectics employs a robust set of governance, monitoring, auditing, training, and disciplinary measures to ensure policies are followed. The Chief Information Security Officer (CISO) is accountable for maintaining Information Security, while all managers are directly responsible for ensuring the Information Security Policy is fully implemented within their business areas.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: All configuration and change requests are managed in a CRM system (JIRA) which enables end to end traceability of a request. Risk and security impacts are assessed as part of the change request with non-standard changes requiring an additional level of authorisation. Our CI/CD process blocks unapproved changes or changes that have failed security testing.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Vulnerabilities are managed in accordance with our Authorised Software, Vulnerability & Patch Management Policy. Defender SIEM system is used to continuously monitor the security posture of the organisation. Softcat (an MSSP) has been engaged to provide 24/7 MXDR service & monitoring supported by additional tools and protective monitoring processes provided by the in-house Cyber Security Team. Ongoing threat and vulnerability monitoring processes continuously update the system which includes reviewing alerts from various threat alert organisations, review of vulnerabilities and applying of patches in line with severity and regular Qualys scans of the Public Sector environment to monitor the vulnerability status
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Synectics protective monitoring processes are governed by a policy aiming to provide 24/7 Situational Awareness and user accountability. Potential compromises are identified via continuous SIEM and EDR log analysis, which track boundary activity, configuration changes, and internal network suspicious behaviour. Monitoring systems are configured to alert on these events. The response to a potential compromise is initiated in line with Security Response Targets. Critical events are triaged 24/7 by an external CREST-accredited MDR/SOC service. The fastest response target for a critical incident is less than 30 minutes for the first response and investigation initiated within four hours.
• Incident management type: Supplier-defined controls
• Incident management approach: Synectics’ incident management minimizes business impact and aligns with ISO27001:2022. All personnel are responsible for reporting security events (including policy breaches, access violations, or anomalous behaviour) without delay to the relevant security teams (cyber or physical). The process involves initial recording, assessment, response, recovery, and learning lessons. The Cyber Security team develops "Playbooks" as part of the Planning phase to define procedures. Confirmed incidents are logged in STREAM by Legal & Compliance for reporting purposes. Incident communications, including notifying clients (within 24 hours or per contract), are dictated by the incident’s classification and severity
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI Assurance UK Ltd
• ISO/IEC 27001 accreditation date: Sunday 14 December 2025
• What the ISO/IEC 27001 doesn’t cover: There are no exclusions, it covers the entire organisation
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 5481ad36-f8b8-4fbf-a885-0fc0b874aed6
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 45d04f71-6b83-45f8-a067-3157e440a657
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
    • How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsectorservices@synectics-solutions.com. Tell them what format you need. It will help if you say what assistive technology you use.