IconSystem
IconSystem has two modules that control building design and construction standards, and provides a secure, collaborative data solution. Assets can be specified to individual item level of performance-based specifications, creating a complete baseline for the build. Building, property and project data is held in a secure, collaborative solution delivering efficiency.
Features
- Create and manage all design standards and specifications
- Specification datasheets & schedules
- Hold all supplier details
- Concept management
- Specification change history and notifications
- Collaborative file data exchange & repository
- Access, maintain and share your project / property data
- Full audit trail available with full Project & Property history
- Database driven design standards and specifications system
- Embedded 3D viewer
Benefits
- Instant access to all specifications, standards and documentation
- Access policies or specifications related to any project or property
- Control item specifications and roll out new initiatives
- Provides single source of truth for design specifications and standards
- Integrated 3D model viewer allows models to be viewed online
- Configurable permissions structure protects confidential information
- Complete control over brand identity and specifications
- Create project teams for projects and link to associated properties
- Track user activity with tasks, document and download history
- Reporting capabilities based on real time data
Pricing
£3,000 to £170,000 an instance a year
- Education pricing available
- Free trial available
Service documents
Request an accessible format
Framework
G-Cloud 14
Service ID
5 0 8 8 3 5 7 0 4 4 0 8 2 5 6
Contact
Elecosoft UK Ltd
Elecosoft Sales
Telephone: 0345 646 1735
Email: sales@elecosoft.com
Service scope
- Software add-on or extension
- No
- Cloud deployment model
- Private cloud
- Service constraints
- Patching and planned maintenance windows are scheduled monthly overnight. The schedule is planned to create minimal disruption to client systems. During the out of hours window, some disruption may occur.
- System requirements
-
- Internet access required
- Web browser required
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
- All technical queries are acknowledged within 1-hour and resolved within 8-hours.
- User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Onsite support
- Yes, at extra cost
- Support levels
- Support is included in the IconSystem annual licence fee and is provided via the IconSystem Helpdesk and is available Monday-Friday between 08:00 & 17:30 - excluding weekends and public holidays. A dedicated Customer Relationship Manager is allocated to each customer account.
- Support available to third parties
- Yes
Onboarding and offboarding
- Getting started
- A dedicated Project Manager is assigned to all new implementations and will work with each customer to plan a schedule of workshops to allow them to understand the full navigation of IconSystem Specs & Standards. Bespoke training plans are created for each customer depending on the level of assistance necessary. Training plans will include face-to-face training, online training and user documentation and access to the online LMS (Learning Management System)
- Service documentation
- Yes
- Documentation formats
-
- HTML
- End-of-contract data extraction
- A detailed requirements plan will be created to ensure the data is exported for the customer in a suitable and accessible format. Data extraction services are charged in addition to subscription fees.
- End-of-contract process
- It is encouraged that prior to the end of the contract to engage with Elecosoft to understand the status and requirements of data extraction. The contract price does not include data extraction as each client system holds complex data and discussions will be required prior to onboarding processes for end of contract requirements.
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Opera
- Application to install
- No
- Designed for use on mobile devices
- No
- Service interface
- No
- User support accessibility
- None or don’t know
- API
- Yes
- What users can and can't do using the API
- With your data securely stored in IconSystem, we recognise the potential business benefits of linking with external software systems and therefore provide a RESTful API to enable such communication if required.
- API documentation
- Yes
- API documentation formats
- Open API (also known as Swagger)
- API sandbox or test environment
- Yes
- Customisation available
- Yes
- Description of customisation
- A detailed discussion of customisation can be held with each customer. Each system is created to be customer specific in terms of look and feel; there are also a set of unique customisation features that can be discussed in detail.
Scaling
- Independence of resources
- Each customer has their own website and database which are independent from other customer sites, this means there is no pollution from other systems. Customer data is logically segregated from that of other systems. Our infrastructure provider allows quick and flexible scaling of requirements.
Analytics
- Service usage metrics
- Yes
- Metrics types
- Simple metrics are available via the application itself, customised metrics are also available from the Helpdesk at the customer request.
- Reporting types
-
- Real-time dashboards
- Regular reports
- Reports on request
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Staff screening not performed
- Government security clearance
- Up to Security Clearance (SC)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
- United Kingdom
- User control over data storage and processing locations
- Yes
- Datacentre security standards
- Complies with a recognised standard (for example CSA CCM version 3.0)
- Penetration testing frequency
- At least once a year
- Penetration testing approach
- Another external penetration testing organisation
- Protecting data at rest
-
- Physical access control, complying with CSA CCM v3.0
- Physical access control, complying with another standard
- Encryption of all physical media
- Data sanitisation process
- Yes
- Data sanitisation type
-
- Explicit overwriting of storage before reallocation
- Deleted data can’t be directly accessed
- Equipment disposal approach
- Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001
Data importing and exporting
- Data export approach
- Data can be exported in a number of ways by the client. Users are able to export and create reports to Excel, .csv, PDF and CAD files.
- Data export formats
-
- CSV
- Other
- Other data export formats
-
- CAD
- Data import formats
-
- CSV
- Other
Data-in-transit protection
- Data protection between buyer and supplier networks
- TLS (version 1.2 or above)
- Data protection within supplier network
- TLS (version 1.2 or above)
Availability and resilience
- Guaranteed availability
- 99.9% availability. Service credits for any performance below agreed standard.
- Approach to resilience
- Available on request.
- Outage reporting
- We use tools to monitor the uptime of our sites, notifications are sent via email upon outage detection. This is customer specific.
Identity and authentication
- User authentication needed
- Yes
- User authentication
- Username or password
- Access restrictions in management interfaces and support channels
-
Following each application for access via the IconSystem registration process, Elecosoft will activate new users by assigning a user's permissions in line with the policy agreed with the customer and issuing the user's elected password.
Elecosoft will amend and remove such permissions in accordance with the customer's request. - Access restriction testing frequency
- At least every 6 months
- Management access authentication
- Username or password
Audit information for users
- Access to user activity audit information
- Users receive audit information on a regular basis
- How long user audit data is stored for
- User-defined
- Access to supplier activity audit information
- Users receive audit information on a regular basis
- How long supplier audit data is stored for
- User-defined
- How long system logs are stored for
- User-defined
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- NQA
- ISO/IEC 27001 accreditation date
- 1st June 2023
- What the ISO/IEC 27001 doesn’t cover
- We do not cover the datacentres used to host the service; these are separately certified by the datacentre's own ISO27001/2 and SOC2 certifications.
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- No
- Cyber essentials plus
- No
- Other security certifications
- No
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
- ISO/IEC 27001
- Information security policies and processes
- Our ISO27001 documentation framework (internally called Information Management System) includes a dedicated Information Security Policy, and detailed documentation on the roles and responsibilities of staff and management with regards to cyber security and data protection.
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
-
As part of ISO27001, we use asset tracking and logging.
Change Management and change requests are strictly enforced using a ticketing system which is used to provide an audit trail and logs for ISO27001 audit/logging purposes - Vulnerability management type
- Supplier-defined controls
- Vulnerability management approach
- We run weekly internal vulnerability tests on our web application. Any critical, high or medium findings are remediated immediately. We use Qualys as our source of potential threat information.
- Protective monitoring type
- Supplier-defined controls
- Protective monitoring approach
- We maintain application monitoring, server monitoring and site uptime monitoring. All critical servers that run client sites are part of a redundancy set up (either HA or Active/Passive), this means that if one server is taken offline, clients are automatically directed to working servers on standby.
- Incident management type
- Supplier-defined controls
- Incident management approach
-
All incidents and requests are to be directed to the Elecosoft IconSystem Helpdesk by telephone (telephone number on the Application Logon page and Homepage) or via the Application Feedback facility.
The IconSystem helpdesk operate a two tier level of support: initial assistance will be provided where Faults can be diagnosed and/or responded to by the first level and will be referred to the second tier for further investigation where required.
Secure development
- Approach to secure software development best practice
- Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)
Public sector networks
- Connection to public sector networks
- No
Social Value
- Social Value
-
Social Value
- Fighting climate change
- Covid-19 recovery
- Equal opportunity
- Wellbeing
Fighting climate change
We aim to continuously improve our environmental performance. Examples of how we support climate change initiatives include:
- Where possible we have eradicated the use of paper. Remaining usage is via recycled or ecologically friendly paper.
- Reduce our consumption of resources and improve the efficiency of those resources
- Manage waste generated from our business operations according to the principles of reduction, re-use and recycling.
- Comply as a minimum with all relevant environmental legislation as well as other environmental requirements.
Our carbon reduction plan is to achieve a net zero carbon footprint in our Scope 1 and 2 emissions by 2030. Our Environmental Policy will be regularly reviewed and updated as necessary. The management team endorses these policy statements and is fully committed to their implementation. As a group, our achievements to date are:
● 45% renewable energy supplies
● 19% electrified vehicle usage
● 18% reduction of CO2 production from 140 tonnes to 115.Covid-19 recovery
Elecosoft provide a fully hybrid work environment with all team members fully supported either at home or in the office.Equal opportunity
Elecosoft is committed to achieving a working environment which provides equality of opportunity and freedom from unlawful discrimination on the grounds of race, sex, pregnancy and maternity, marital or civil partnership status, gender reassignment, disability, religion or beliefs, age or sexual orientation. This Policy aims to remove unfair and discriminatory practices within the Company and to encourage full contribution from its diverse community. The Company is committed to actively opposing all forms of discrimination.
The Company also aims to provide a service that does not discriminate against its clients and customers in how they can access the services and goods supplied by the Company. The Company believes that all employees and clients are entitled to be treated with respect and dignity.
Any and all personal data used in connection with this Policy shall be collected, held, and processed in accordance with the Company’s Employee Data Protection Policy.Wellbeing
We are committed to ensuring the health, safety and wellbeing of our people and anyone affected by our business activities, and to providing a safe and suitable environment for all those attending our premises.
We recognise the importance of identifying and tackling the causes of work-related stress. We also recognise that personal stress, while unrelated to the workplace, can adversely affect the wellbeing of our people at work.
We offer a wellness confidential helpline for all employees. Our Wellbeing policy covers all employees, officers, consultants, contractors, volunteers, interns, casual workers and agency workers.
In 2023 and 2024 we achieved the "Great Place to Work" accreditation
Pricing
- Price
- £3,000 to £170,000 an instance a year
- Discount for educational organisations
- Yes
- Free trial available
- Yes
- Description of free trial
- Elecosoft are able to create a trial instance for customers if necessary. Each trial is configured based on bespoke requirements of the customer and is available for 30 days once live.