OMNIPLEX (GROUP) LIMITED

CYPHER Learning - Learning Management System (LMS) from Omniplex Learning

CYPHER Learning is an AI‑powered learning platform for organisations and educators to create, deliver, and scale engaging training. Build courses quickly, personalise learning paths, automate administration, and track results with powerful analytics—supporting self‑paced, blended, and instructor‑led learning on any device.

Features

• AI-powered recommendations personalise learning paths for every learner.
• Skill-based learning paths align training with real-world competency requirements today.
• ntegrated authoring tools enable rapid creation of interactive learning content.
• Advanced analytics dashboards track learner progress, engagement, and performance trends.
• Gamification features include badges, points, leaderboards, and achievement systems rewards.
• Mobile learning support ensures seamless access across devices and platforms.
• Automated assessments evaluate knowledge, skills, and competency mastery efficiently online.
• E‑commerce tools to monetize courses and training programs
• CYPHER Agent will get you learning content in seconds
• Custom branding options allow fully white-labelled learning environments for organizations.

Benefits

• AI-driven personalization adapts learning paths to individual skills and goals.
• Gamified experiences increase engagement, motivation, and learner retention.
• Robust analytics provide actionable insights into performance and progress.
• Scales seamlessly for enterprises, education providers, and global organizations.
• Supports diverse content formats including videos, assessments, and projects.
• Mobile-friendly platform enables learning anytime, anywhere, on any device.
• Automated assessments and feedback accelerate skill mastery and improvement.
• Social learning tools encourage collaboration, discussion, and peer knowledge-sharing.
• Custom branding reinforces organizational identity and consistent learner experience.
• Secure, cloud-based infrastructure ensures reliability, compliance, and data protecti

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at help@omniplexlearning.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

533868748577591

Contact

Andrei Grayson
08000 850550
help@omniplexlearning.com

About your service

• Service categories:

  Applications

  Content workflow and management

  • Creative

  Content services

  • Content Sharing and Collaboration Applications

  Enterprise portals and digital workspaces

  • Integrated Employee Workspaces
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: While CYPHER Learning is a mature, enterprise‑ready SaaS platform, there are some operational and architectural constraints buyers should be aware of—most of them typical of a public‑cloud, multi‑tenant SaaS solution rather than unique risks.; ; Deployment-Public cloud SaaS only (AWS); Maintenance - Scheduled, platform‑managed downtime; Hardware - No support for customer hardware stacks; Integrations - Some advanced integrations require custom work; Control - No on‑prem or private‑cloud option
• System requirements:
  • Operating Systems: Windows 8+ and macOS
  • Processor: Intel or AMD Processor
  • RAM: Your PC must have at least 2GB of RAM
  • HDD: 5GB Free Disk Space

User support

• Email or online ticketing support: Yes
• Support response times: 2 business hours Customers can raise tickets directly in the application outside of UK business hours.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: Omniplex Learning provides to the Customer certain Helpdesk Services as specified the Terms and Conditions Document. ; Omniplex Learning will manage 1st and 2nd line support and will involve CYPHER Learning Inc. helpdesk for 3rd escalation level. The standard details and response times for all enquiries are set forth below.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Administrators are given access to a suite of onboarding eLearning that teaches them how to build and configure their system. Additionally, Omniplex Learning delivers a number of private training sessions to show and talk through the various components of the system. All training and the onboarding journey is focused around the agreed deliverables for the platform as stated in the Statement of Works.
• Service documentation: No
• End-of-contract data extraction: Users can extract their User data by creating custom reports and exporting the data in CSV, PDF or HTML formats.
• End-of-contract process: Customer is given a set date by which they can extract their data to agreed timescales. Or they can pay for us to extract their data.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Fully responsive design so can be used on any device.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: CYPHER Learning is multi‑modal, designed to support both users and external systems. ; ; Service Interface for CYPHER Learning; 1. Web‑Based User Interface (Primary Interface); CYPHER Learning is primarily accessed through a browser‑based web interface.; ; Fully hosted SaaS application; Role‑based UI for learners, instructors, administrators, and managers; No client installation required beyond a modern web browser; Supports customization, dashboards, reporting, and administration; ; This is the main service interface for daily learning, administration, and content authoring.
• Accessibility standards: WCAG 2.2 A
• Accessibility testing: CYPHER Learning publicly confirms WCAG 2.2 Level AA conformance and assistive‑technology compatibility, but does not publicly disclose detailed results of formal user testing conducted with assistive‑technology users (e.g., named screen readers, test scripts, or VPAT reporting).
• API: Yes
• What users can and can't do using the API: API characteristics:; ; REST‑based; OpenAPI 3.0 compliant; Stateless operations; JSON payloads; Secure authentication (OAuth 2.0 / tokens); ; Common use cases:; ; User provisioning and deprovisioning; Enrollment management; Course and content administration; Reporting and analytics integration; Custom integrations with HRIS, CRM, ERP systems
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: CYPHER Learning provides extensive configuration to align the platform with organisational, operational, and learner requirements without custom code.; Branding & UI:; The platform supports white‑labelling, including custom logos, colour themes, fonts, login pages, email templates, and optional custom domains. Home pages are widget‑based and can be tailored by role (learner, instructor, administrator).; Roles, Access & Structure:; Administrators can define granular roles and permissions, organisational hierarchies, groups, and multi‑audience environments (e.g., employees, partners, customers), supporting extended‑enterprise use cases.; Learning Experience:; Customisation includes course templates, learning paths, skills and competency frameworks, assessments, grading rules, certificates, and gamification (points, badges, leaderboards). Learning delivery can be adapted by role, performance, or compliance requirement.; Automation & Workflows:; Configurable triggers automate enrolment, notifications, reminders, adaptive learning paths, and compliance expirations, reducing administrative overhead.; Analytics & Reporting:; Dashboards and reports are configurable by role, with filters, exports, and competency‑based insights.; Integrations & Identity:; CYPHER supports SSO, REST APIs, webhooks, and standards such as SCORM, xAPI, and LTI, enabling integration with HR, CRM, content libraries, conferencing, and payment systems.; Localisation & Accessibility:; The platform supports multiple languages, regional settings, and accessibility features aligned with WCAG 2.2 A.

Scaling

• Independence of resources: CYPHER Learning uses its cloud‑native, multi‑tenant SaaS architecture hosted on AWS. The platform uses elastic, auto‑scaling infrastructure so compute and storage resources expand automatically during usage spikes, preventing performance degradation for tenants. Logical tenant isolation separates customer data and workloads at the application level, ensuring one organisation’s activity cannot interfere with another’s. Load balancing and traffic management distribute requests across multiple instances to avoid bottlenecks, while regional deployments route traffic to appropriate AWS regions to reduce latency. Continuous monitoring and proactive capacity management enable the platform to scale ahead of demand, supporting high availability and consistent performance for all customers.

Analytics

• Service usage metrics: Yes
• Metrics types: CYPHER Learning provides a wide range of training metrics including system usage, completion data, time spent, courses opened, course progression and number other reports.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: CYPHER Learning

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with CSA CCM v4.0
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Users can export their data either in summarised dashboards or by custom reports that show individual training metrics. API and also automated data exports can be used to export data in customers data lakes.
• Data export formats:
  • CSV
  • ODF
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • API
  • SCORM
  • AICC
  • XAPI
  • HTML
  • MP4

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Our sites have had 99.99% uptime and no data loss since we launched in 2009. ; ; In addition, customers with a preference can choose either Amazon Web Services or Microsoft Azure as the service hosting their instance.
• Approach to resilience: CYPHER Learning delivers resilience through a cloud‑native, highly available architecture hosted on AWS, using load balancing, autoscaling, and redundant servers to maintain service continuity even during traffic spikes or component failures. Traffic is automatically rerouted to healthy instances, ensuring minimal disruption.; ; The platform maintains a formal Disaster Recovery (DR) process, including daily encrypted backups, offsite AWS redundancy, and support for 35‑day point‑in‑time recovery. Its DR commitments include an RTO of 12 hours and RPO of 24 hours, safeguarding data and restoring services rapidly after incidents. ; ; Resilience is reinforced by strong security controls, including SOC 2 Type 2 certification, GDPR/CCPA alignment, RBAC/ABAC access controls, MFA, IP whitelisting, and DDoS protection via AWS Shield, WAF, and GuardDuty. These measures reduce the likelihood of outages caused by security threats. ; ; A mature Incident Response Plan, aligned to NIST and ISO 27035, supports fast detection, containment, and communication. CYPHER conducts regular incident‑response drills and notifies customers within 72 hours of confirmed breaches. ; ; Finally, global resilience is supported by AWS CloudFront CDN, providing edge caching for fast, reliable content delivery worldwide.
• Outage reporting: Public dashboards

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: CYPHER Learning restricts access through strict least‑privilege, role‑based access control (RBAC), allowing granular permissions across platform, course, group, and API functions. Administrators can create custom roles and scope them to organisations or departments for delegated but controlled management. Access to management interfaces is further protected by multi‑factor authentication, strong password policies, and the ability to quickly revoke sessions or disable accounts during security events. Support interactions are safeguarded through identity verification measures and logged actions, with permission changes and access events stored for audit and review
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: CYPHER Learning maintains a comprehensive, management‑approved set of information security policies covering technical, administrative, and organisational safeguards. Its program includes Access Control, enforcing least‑privilege permissions, role‑based access, and strict management of system access. ; ; The company upholds robust Asset Management, tracking and protecting all information assets and prohibiting sensitive data storage on removable media. ; ; A formal Business Continuity and Disaster Recovery Plan ensures resilience against outages and disasters, supported by tested recovery procedures and risk assessment cycles. ; ; CYPHER maintains a detailed Cryptography Policy, applying industry‑standard encryption for data in transit and at rest, while preventing sensitive credentials such as API keys from being stored in source code. ; ; Our Incident Response Plan defines procedures for detecting, responding to, mitigating, and reporting security incidents, supported by continuous audit logging and monitoring of system activity. ; ; Annual risk assessments identify and evaluate organisational threats, with documented outputs used to drive continuous improvement. ; ; Additionally, CYPHER enforces controls such as logical data segregation, role‑based access, password policies, and regular testing of security measures to ensure confidentiality, integrity, availability, and resilience of its systems and customer data.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: CYPHER Learning follows formal change management procedures designed to test, approve, and monitor all material changes to its technology and information assets. These processes ensure controlled updates, with tracking mechanisms that validate changes before deployment. Configuration activities—such as asset setup, system controls, and security measures—are governed by defined organisational policies and reviewed through regular audits and risk assessments to maintain compliance and operational integrity. Continuous monitoring, logging, and documented approval workflows ensure that changes are secure, traceable, and aligned with the platform’s security program
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: CYPHER Learning operates a structured vulnerability management program incorporating continuous threat monitoring and automated scanning via Amazon Inspector, Amazon GuardDuty, and Microsoft Defender for Cloud. Identified vulnerabilities are assessed, prioritised, and remediated through internal security workflows. Regular penetration testing validates platform security, supported by a security vulnerability bounty program encouraging responsible disclosure with proof‑of‑concept requirements. Malware scanning, secure source‑code practices, and SOC 2‑aligned controls strengthen overall protection. All findings feed into incident response procedures ensuring timely mitigation and continuous improvement of the security posture.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: CYPHER Learning employs continuous protective monitoring across its infrastructure using multiple layers of tooling. Real‑time system and security monitoring is delivered through AWS CloudWatch, New Relic Infrastructure, New Relic APM, and New Relic Logs, providing visibility into performance, errors, and anomalous behaviour. Threat detection is strengthened through Amazon GuardDuty, Amazon Inspector, and Microsoft Defender for Cloud, which alert on suspicious activity, vulnerabilities, and configuration risks. Infrastructure and application logs are continuously collected and reviewed to support incident detection, forensic analysis, and compliance requirements.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: CYPHER Learning follows a formal Incident Response Plan (IRP) aligned with NIST and ISO 27035, covering detection, classification, containment, mitigation, communication, remediation, and post‑incident review. Security events are monitored continuously, with procedures enabling rapid investigation, response, and notification. Infrastructure monitoring tools (e.g., AWS GuardDuty, Inspector, CloudWatch, Microsoft Defender) support early threat identification. Incidents involving customer data follow GDPR‑aligned breach processes, ensuring timely reporting and coordinated response. All incidents are logged, reviewed, and used to enhance future controls, ensuring continuous improvement of the security posture.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Free fully functional time limited demo site available.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau Ltd
• ISO/IEC 27001 accreditation date: Friday 19 September 2025
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 53ab0fea-01f2-482b-8742-5a47c61d2476
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 3d59562c-b54e-48e3-97ba-4426723f9f21
• Other security certifications: Yes
• Any other security certifications: Docebo, Articulate, Vyond all hold SOC2

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Volunteering opportunities for staff

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at help@omniplexlearning.com. Tell them what format you need. It will help if you say what assistive technology you use.