Ernst & Young LLP (EY)

Global VAT Reporting Tool (GVRT)

GVRT is a cloud-hosted, global Value Added Tax (VAT) and Goods and Services Tax (GST) reporting solution, that redefines and globally standardises the preparation, production, and reporting process of the business. EY GVRT is designed to simplify, digitise, and automate your indirect tax compliance, helping future proof your organisation.

Features

• Multiple accounting and finance systems supported for transactional data loading
• Quickly load data via “drag and drop” functionality
• Extensive tax technical testing using pre-defined or customised tests
• Automatic anomaly detection with review and edit functionality
• Generate returns with audit trails and digital reporting compliance
• Powerful indirect tax analytics, metrics, trends, liabilities, and status reports
• Built-in obligation and deadline tracking via management dashboards
• Track changes and repost schedules

Benefits

• Automate your compliance process to help you stay in control
• Reduce compliance process time with automated data consolidation and manipulation
• Enhanced controls and governance with cash saving opportunities identified
• Manage overall indirect tax risk with improved visibility and identification
• Helps improve data accuracy and insight to company data
• Global compliance compatibility including UK MTD, SII and SAF-
• Automated indirect tax returns production with your transactional data

£8,000 a licence a year

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at EYTenders@uk.ey.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

489594162251869

Contact

EY Tenders
+44 (0) 20 7951 2000
EYTenders@uk.ey.com

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: ERP / Core Financial Systems, for example, SAP, Oracle, D365 and other ERP solutions
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: EY is a regulated provider of audit services. In the event of conflict with regulatory provisions, EY may not be able to provide services. We will work with you during the proposal stage to identify any such constraints.
• System requirements:
  • Web browser (e.g., Microsoft Edge & Google Chrome)
  • Internet connection
  • Microsoft Windows

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: EY will provide general support services for the Application at the Support Levels (e.g., Critical issue takes 30 mins and low priority issues takes up to 4 days). Target response times relate to the time it will take to acknowledge queries or issues, where such queries or issues are raised to the service desk by telephone or email (relevant contact details of the service desk will be provided as part of Client onboarding, and displayed on the Application).
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: EY will provide general support services for the application at the support levels. Target response times relate to the time it will take to acknowledge queries or issues, where such queries or issues are raised to the service desk by telephone or email (relevant contact details of the service desk will be provided as part of Client onboarding, and displayed on the application).; ; Severity; ; 1. Critical: Errors that render the Application unusable (30 mins); ; 2. High Priority: Errors that have a serious and material impact on functionality and usability of the Application (2 hours); ; 3. Moderate Priority: Errors having no material effects on functionality and usability of the Application. The use of the Application is not impaired or only to an insignificant or immaterial degree (2 days); ; 4. Low Priority: Errors having no effects on functionality and usability of the Application. Use of the Application not impaired (4 days)
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Standard user training, super user training, and standard user documentation.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Download straight from the application.
• End-of-contract process: Notice period for user to download their data for 60 days.; Access to software is then removed.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Chrome
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: None
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: Application user interface to interact with this service
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: Standard quality and assurance testing and user acceptance testing performed before every release.
• API: Yes
• What users can and can't do using the API: Ingest data into application, retrieve user information roles and permission, retrieve filings status and workflow milestones.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Create your own additional dashboards and analytics; Add bespoke tax technical tests specific to your business

Scaling

• Independence of resources: Auto-scaling of resource implemented in application infrastructure.

Analytics

• Service usage metrics: Yes
• Metrics types: Full system audit trail on user login and activity.
• Reporting types: Regular reports

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest: Physical access control, complying with SSAE-16 / ISAE 3402
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: API, Excel and PDF.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: Private network or public sector network
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Available 24/7 unless there are system issues/maintenance updates and the user will be notified ahead of time.
• Approach to resilience: Available on request.
• Outage reporting: Email alerts.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: Users must be setup within MyEY to access GVRT. In addition to this, the user must also be setup within GVRT to assign the correct GVRT role which will enable the relevant permissions to that user. Both of these steps must be completed for GVRT to be accessed.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI
• ISO/IEC 27001 accreditation date: 28-03-2023
• What the ISO/IEC 27001 doesn’t cover: Covers ISMS that covers systems, assets and processes related to all client data that is stored, processed and transferred to EY.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications: SOC 2 Report

Security governance

• Named board-level person responsible for service security: No
• Security governance certified: Yes
• Security governance standards:
  • CSA CCM version 3.0
  • ISO/IEC 27001
• Information security policies and processes: Industry standards available on request.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: Once EY have completed the implementation we will start the hand over process to our clients of GVRT so that they are able to use GVRT on a day-to-day basis and also be able to make any implementation changes like adding a new user with GVRT or setting up a new tax code.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: EY follows best practice and industry standards. Further information can be provided upon request.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: EY follows best practice and industry standards. Further information can be provided upon request.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: EY follows best practice and industry standards. Further information can be provided upon request.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  EY is committed to fighting climate change. Our ethos is to go beyond ‘just working sustainably’ – we continuously work with governments and businesses towards a more sustainable future. We are part of the United Nations Global Compact (UNGC) and our environmental strategy is aligned with the UNGC environmental principles. We will implement the following for G-Cloud 14: ; ; • Carbon neutral projects: We pledge to deliver each G-Cloud 14 project as carbon neutral. To do this, we will use our engagement carbon calculator tool. This enables us to monitor and reduce different impacts, e.g. travel emissions. The data from the tool also supports employee training and awareness raising on sustainable behaviours.; ; • Reducing our carbon footprint: In January 2020, EY announced a global commitment to become carbon neutral. We achieved this in December 2020. We became carbon negative in 2021 and we are forecast to reach net zero in FY25. We are reducing emissions and ; offsetting or removing more than the remaining amount annually. We are forecast to reduce emissions by 40% by FY25, against a FY19 baseline, consistent with our 1.5°C Science Based Target.; ; • Purchasing renewable energy: We confirm all work delivered for G-Cloud 14 from an EY office will be powered by 100% renewable energy. We have purchased zero-carbon electricity since 2009 and reduced global consumption by 5.5%. In December 2020, we ; signed a 10-year power purchase agreement with Lightsource to provide us with solar energy.; ; • Sustainability volunteering: In proportion to the length and size of each framework contract, we will allocate staff volunteering days to support local environmental projects. These could include litter picking and general upkeep of nature reserves and Sites of Special Scientific Interest and free advisory sessions for small community organisations caring for the environment.

  Covid-19 recovery

  EY is committed to helping our people and communities to recover from the impact of COVID-19. In response to the pandemic, we moved to a remote working model for over 17,000 UK-based staff, ; increased special leave and provided meaningful mental health support. ; ; People in the 18-24 age group were disproportionately affected by COVID-19 and EY has worked with an independent charity, the EY Foundation (EYF), to improve opportunities for this group. In ; response to travel restrictions all EYF activities were converted to a virtual platform. In 2023, EYF supported over 2,500 young people. ; Examples of existing EYF programmes to support COVID-19 recovery are shown below. We will extend these programmes for contracts awarded to us via G-Cloud 14 in proportion to the scale and ; scope of each contract.; ; • Smart Futures: A 10-month programme for young people eligible for free school meals or a college bursary. The programme develops employability skills and offers a paid, two week work experience placement. Students achieve a Chartered Management Institute (CMI) Level 2 Qualification and receive 10 months of mentoring support.; ; • Our Future: A six month programme for young people, qualifying for free school meals, who face barriers entering the labour market. Students develop transferable skills, receive paid work experience, gain a CMI Level 2 adult qualification and six months mentoring support. The students also take part in an ‘Entrepreneurship Day’, for example, they have designed mobile apps looking at solving social issues such as ‘tackling isolation and loneliness in the community’.; ; • Support via the Neuro-Diverse Centre of Excellence (NCoE). Through EY’s UK NCoE and our external ecosystem of organisations, we are supporting a team of neurodivergent staff with additional adjustments, above and beyond our existing support, to promote psychological safety in the office and whilst working at home.

  Tackling economic inequality

  Through our work with EYF, we have developed an in-depth understanding of the challenges experienced by those who face barriers to employment and training and/or who are in deprived ; areas. We are already providing new learning and employment opportunities to these populations via EYF programmes; we will extend these to G-Cloud 14 contracts in proportion with the scale and scope of each contract. Examples of these are:; ; • EY Ripples is our global Corporate Responsibility programme that helps our people use their skills, knowledge and experience to positively impact the lives of 1 billion people by 2030. The focus areas of Ripples are to 'accelerate environmental sustainability', 'support the next generation workforce' and 'work with impact entrepreneurs’. Our staff currently get two days a year each to provide skilled volunteering on EY Ripples activities. ; ; • EY Ripples also provides support to small businesses. For example, our Digital Boost programme matches a small business with an IT mentor who guides them to adopt new technology. ; ; • EY Accelerate helps social enterprises to grow and thrive, increasing their impact on local economies and creating social change. It provides in-depth business support and mentoring, ; with access to skills and training from business coaches, workshops, networking opportunities and 35 hours of pro-bono support.; ; • Employability Workshops provide Year 10/11 students the opportunity to build knowledge of careers and develop soft skills within a business environment. Each workshop introduces 25-35 young people to a range of careers, employability skills training, and employer connections. ; ; • Driving recruitment and employment via the NCoE. The Neurodivergent community can be underrepresented in the workforce, with only 29% of autistic adults in employment according ; to the ONS. We are advising clients on new strategies to retain neurodiverse talent.

  Equal opportunity

  EY is committed to creating a diverse and inclusive working environment in which all people have equal and equitable opportunities to succeed. We continually collect, analyse and review diversity monitoring data (diversity characteristics, not limited to the protected ones in the Equality Act) across the employee lifecycle, to create initiatives and understand which ones are working. As a firm, in support of equal opportunities, we:; ; • Voluntarily exceed statutory reporting obligations. Our annual UK&I Pay Gap Report has reported on gender, ethnicity, sexual orientation and disability pay gaps since 2017. ; ; • Use skills-based recruitment for graduates to eliminate minimum degree/A-Level requirements thus remove barriers to entry. ; ; • Run award-winning sponsorship programmes to build our leadership pipeline, helping our women and ethnic minority population progress. ; ; • Offer Inclusion & Belonging learning/training to develop staff skills to establish inclusive, open, and safe environments.; ; For contracts awarded under G-Cloud 14 we will:; ; • Provide equal access to project opportunities, using technology to ‘blindly’ match individuals to roles based solely on skills, experience, and availability. ; ; • Use the National Equality Standards (NES), which EY helped to create, a set of standards by which businesses can measure their equality and diversity policies and performance. The NES provides a list of standards and competencies which organisations can follow and embed to promote diversity and act as standard bearers for a more inclusive working world.; ; • Use our NCoE to ramp up recruitment of people who identify with cognitive differences and who may have had challenges gaining employment. The NCoE environment provides additional adjustments for those with cognitive differences such as autism, ADHD, Dyslexia, and others and fuels technology innovation through creative diverse thinking.

  Wellbeing

  EY is committed to enabling our staff to be healthy. We have a long-established programme called HealthEY, which looks to understand and provide practical support for employees’ mental, physical, ; financial and social wellbeing. Our offering is comprehensive and aspects such as our domestic abuse support, health knowledge programme and financial wellness offerings are considered market ; leading. We support wellbeing for our people, clients, and communities in the following ways, and we will extend these initiatives to any G-Cloud 14 contracts that we are awarded as appropriate:; ; • Health knowledge and prevention: Enhancing understanding so staff can be at their best, for example: a monthly webinar programme, eLibrary, newsletters and WellPoint kiosks (to ; regularly help staff self-assess their own health metrics). Staff also get an annual wellbeing allowance, as part of their reward package, which can be spent on health and wellbeing interventions, e.g. gym memberships.; ; • Health sessions: We run regular exercise and yoga sessions for staff, along with regular webinars on subjects such as mental health, work/life balance and childcare.; ; • Mental health support: Our approach called ‘Thinking Differently’ aims to educate and build awareness of mental health and wellness, including stories/videos, a specific psychological care pathway (plus psychiatric fast track treatment through Aviva), mental health first aid, employee counselling, and Mental Health Network.; ; • Supporting neuro-diverse requirements: Though the NCoE, we are creating psychologically safe working environments for existing employees, new recruits, clients, and where possible, our local communities. For example, we have introduced an adapted four step recruitment process culminating in a four day ‘superweek’ work simulation which provides the opportunity to experience a working day and EY culture. This allows us to understand candidates’ needs ; and inform on adjustments that we may need to make to help them thrive at EY.

Pricing

• Price: £8,000 a licence a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at EYTenders@uk.ey.com. Tell them what format you need. It will help if you say what assistive technology you use.