NUTRITICS LIMITED

Nutritics

Nutritics provides software solutions to all sectors of the hospitality industry around the globe. Our best-in-breed recipe and menu management, dietary and meal planning, and carbon footprint scoring tools empower accurate, relevant and actionable food choices for our customers whilst conforming to food legislation.

Features

• Cloud hosted fully managed service
• Remote access with user permission configuration
• Real time visibility of supply chain product data
• Modular approach - only adopt what is needed
• In depth reporting across all food data points
• Intuitive user interface to support all personnel skillsets
• API integrations with suppliers and third parties
• Extensive reporting and analytical tools configured to business needs
• Centralised database supporting a single point of truth
• Up to date via regular system releases and upgrades

Benefits

• Cost Reduction via operational and data insights
• Operational efficiency tools that simplify administration and maintain data consistency
• Easily comply with legal requirements to mitigate critical incidents
• Customer / Patient Experience improvements when viewing menus
• Communication tools that drive compliance, safety and efficiency
• Revenue Growth via analytical tools which measure customer behaviour
• Multi device compatibility across PC, Tablet, and Mobile
• Enhance sustainability agenda with a carbon footprint scoring system
• Simplify workflows managing all foodservice operations in one system

£650.00 a licence a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at stephen@nutritics.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

540623806093448

Contact

Stephen Nolan
02030372659
stephen@nutritics.com

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Nutritics has been designed to to form part of wider business solutions, for example, integrating with supply chain ERP technology, EPoS, and other third party software systems, apps and programmes. This is achieved via inbound and outbound API.
• Cloud deployment model: Private cloud
• Service constraints: Nutritics maintains a minimum server uptime of 99.99%.; Software upgrades and patches occur monthly, typically at the end of each month. As the software is cloud based, there is no installation process required or disruption to the service when or after these updates go live. ; Scheduled downtime (for maintenance) will be indicated with a notification banner within the Nutritics application, via the Website, and in email communications five working days in advance. Maintenance is scheduled at low usage times, e.g. 3-5am GMT on a Saturday night.
• System requirements:
  • Access to the internet
  • Recommended browser is Chrome, but all browsers are supported
  • Applicable software licences must be purchased to access the system

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Helpdesk Operatives provide same day support and can be contacted via Phone, Email, WhatsApp (between hours of 8am-6pm), Web Chat (between hours of 8am-6pm), and Ticketing methods. ; ; Typical SLAs are as follows:; ; *Priority 1 - Critical: Response within one working hour - Target Resolution within four hours; *Priority 2 - Urgent: Response within four working hours - Target Resolution within 12 hours; *Priority 3 - Priority: Response within 24 hours - Target Resolution within three days; *Priority 4 - Feedback: Resolution (if approved) during next release of the software.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: The web chat service is accessible via the Nutritics website and is a Nutritics in-house chat solution (not third party); users are asked to agree to GDPR protocols and can then type out a message. Operator availability will be clearly displayed real-time and if an operator is not available users are either provided with alternative contact methods or can continue to leave a message via the Chat so the next available operator can respond when able.
• Web chat accessibility testing: N/a
• Onsite support: Yes, at extra cost
• Support levels: Typical SLAs are as follows: ; ; Priority 1 - Critical: Response within one working hour - Target Resolution within four hours ; ; Priority 2 - Urgent: Response within four working hours - Target Resolution within 12 hours ; ; Priority 3 - Priority: Response within 24 hours - Target Resolution within three days ; ; Priority 4 - Feedback: Resolution (if approved) during next release of the software.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Contract agreements via DocuSign will include all commercial quotations and proposal requirements, once in place your dedicated Key Account Manager will lead on the solution delivery, supported by your Business Development Director and an expert team of Professionals at Nutritics. ; ; A formulated mobilisation plan will be initiated to ensure the successful rollout of the system solution to each location; this plan will be broken down into clear work streams comprising of key roles between Nutritics and Client.; ; Key stages of implementation will fall into the following brackets:; 1) System configuration; 2) Supplier onboarding; 3) User Training; 4) Recipe and Menu creation ; 5) Rollout - recommended that this is managed in incremental stages; 6) Project stage sign off by both parties; 7) BAU - continued support from Nutritics with quarterly reviews to ensure delivery of benefits is being realised.; ; Workstream Leads will control all activities within each stage and this method ensures key issues and risks are identified early so they can be mitigated to protect against project creep. Change management will be strictly adhered to so overall implementation slippage can be prevented.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
  • Other
• Other documentation formats:
  • MS Word
  • MS Excel
  • MS PowerPoint
  • Website guides, live webinars, and recorded support videos
  • YouTube video
  • LinkedIn guidance posts
• End-of-contract data extraction: Nutritics shall, in relation to any personal data processed in connection with the performance by Nutritics of its obligations under the agreement at the written direction of the Customer, delete or return personal data and copies thereof to the Customer on termination of the agreement unless required by Applicable Law to store the personal data. Nutritics may destroy or otherwise dispose of any of the Customer Data in its possession unless they receive, no later than ten days after the effective date of the termination of the agreement, a written request for the delivery to the Customer of the then most recent back-up of the Customer Data. Nutritics shall use reasonable commercial endeavours to deliver the back-up to the Customer within 60 days of its receipt of such a written request, provided that the Customer has, at that time, paid all fees and charges outstanding at and resulting from termination (whether or not due at the date of termination). The Customer shall pay all reasonable expenses incurred by the Supplier in returning or disposing of Customer Data.
• End-of-contract process: On termination of the contract for any reason: ; (a) all licences granted under the contract shall immediately terminate; ; (b) each party shall return and make no further use of any equipment, property, materials and other items (and all copies of them) belonging to the other party;; (c) Nutritics may destroy or otherwise dispose of any of the Customer Data in its possession unless it receives, no later than ten days after the effective date of the termination of this agreement, a written request for the delivery to the Customer of the then most recent back-up of the Customer Data. ; (d) any rights, remedies, obligations or liabilities of the parties that have accrued up to the date of termination, including the right to claim damages in respect of any breach of the agreement which existed at or before the date of termination shall not be affected or prejudiced.; At the end of the contract all user access will be revoked.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Whilst all aspects of the solution work on mobile and desktop, desktop is recommended as a device when carrying out ore "head office" duties such as reviewing supplier data, analysing reports etc as the large screen makes the interface more user friendly. Mobile is efficient for users who wish to build and review recipes and menus, and is also the preferred interface for customers / patients when viewing and ordering from menus.
• Service interface: Yes
• User support accessibility: WCAG 2.1 A
• Description of service interface: Nutritics is accessed from any modern web browser. The interface is designed to be intuitive and user friendly, comprising a navigation bar on the left and a workspace on the right. All core functions are accessed from the 'Start' button. All inputs save automatically with each mouse click / keystroke.
• Accessibility standards: None or don’t know
• Description of accessibility: Nutritics is accessed from any modern web browser using a 2-factor authentication log-in portal.
• Accessibility testing: Nutritics software was tested using assistive technology JAWS 2020, Microsoft Windows accessibility features, and keyboard only control. Testing was performed with this assistive technology on Chrome on Windows 10. A VPAT document is available upon request.
• API: Yes
• What users can and can't do using the API: Nutritics API allows you to leverage the power of our solution in your own app, program or website. Integration requires you to either be or to hire a developer. The API can be accessed from any programming language which can connect to the internet.; ; Most common uses for our API are:; Search our vast international databases; Analyse recipes from your own app or platform; Analyse a diet from your own app or platform; Generate a meal plan from your own app or platform; Control Nutritics user data.; ; Working with the API is very straight forward. All requests are made via HTTPS URLs. Each URL contains a set of parameters which specify the data you wish to retrieve. The data is always returned in JSON format.; ; You can use our powerful API explorer to build and test your requests before deploying them. The explorer will automatically generate a basic connection script in the most common coding languages to get you up and running quickly.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Nutritics has been purposefully designed to be an off the shelf solution that can be adopted quickly and effectively by users to immediate benefit can be brought to their business. It is however immediately customised by Nutritics personnel during onboarding to ensure that relevant governance and compliance requirements for each customer is met.; ; Additionally customer branding (typically logos, fonts, and colours) can be added to the customers own application and be utilised within reports, recipes, menus and all guest facing platforms. Nutritics will work with each customer during onboarding to fully establish and consult on initial branding requirements on and then train the key business users on how to maintain into the future for reporting. Ongoing project management support for branding requirements within guest facing modules (such as web pages for menus, paper menus, labels etc) will be provided.; ; Data fields in reports can also be customised depending on the business need alongside the off the shelf reporting tools available.

Scaling

• Independence of resources: Heavy operations are processed on a separate dedicated servers (eg. API requests and batch export / import processing). Our application servers (dedicated private cloud) are typically at 7-8% of their capacity, and work with load balancers. An Azure server will also be implemented in summer 2022.

Analytics

• Service usage metrics: Yes
• Metrics types: User metrics are available within the Nutritics auditing analytical tool
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Scale, obfuscating techniques, or data storage sharding
  • Other
• Other data at rest protection approach: Encryption of PII sensitive data in situ
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Report data from a number of reports can be exported directly from the application to Microsoft Excel, CSV, and PDF; • Defined Data Extracts can be provided by bespoke arrangement and the database can be exported to a designated location or secure access provided to the clients’ backup instance.; • API can be leveraged to export data objects into apps, programmes, or websites.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Excel
  • PDF
  • SQL
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Excel
  • SQL

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Nutritics maintains a minimum server uptime of 99.99%, so non- scheduled downtime is not an issue.
• Approach to resilience: We have a robust Disaster Recovery Plan (available upon request) which is reviewed and tested annually by our CEO, CTO and MD. The maximum tolerable downtime is 2hours and is unlikely to take this long as the two backup servers will take over immediately. Any data will be recovered from our backup servers with urgent priority wherever possible. The DR plan includes an Incident Response plan to ensure any issue or data breach is escalated and remediated according to best practices.
• Outage reporting: Should unplanned outages occur all clients will be informed by:; (1) Email Alerts: The Nutritics Support Team will email the designated customer contact(s). ; (2) Via the Nutritics log-in portal; (3) Phone calls to key clients will be made if agreed in individual SLA processes.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: Access to all of Nutritics interface and support channels is enabled via user name and password login which is associated to a configured user profile managed by the client super user(s), with the option for 2-Factor authentication.; Password Profile – user defined complexity, number of tries and validity period; Permissions are assigned to users to control functionality relevant to their role within their business.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Certification Europe (TM)
• ISO/IEC 27001 accreditation date: 11th September 2011
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications:
  • Security Scorecard Grade A 94%
  • All staff are Cyber Security Certified
  • Independent security reviews / reports (no formal certificate applicable)

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Nutritics IT and security policy is led by our CTO and reviewed at least bi-annually. The Nutritics security framework comprises five core operational practices: Identification; Protection; Detection; Respond; and; Recover. All processes are reviewed annually by a third party and remedial / improvement actions scheduled on a priority basis.; ; We are Cyber Essentials certified and all staff are required to complete GDPR and Cyber Security certifications.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Nutritics Change Management process ensures that all changes are considered and planned, and appropriate, and that there is a clear audit trail of all changes.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Nutritics has vulnerability management processes in place for ISO27001.; These processes are externally audited on a six-monthly basis to ensure continued compliance.; For external vulnerability scanning, Nutritics employs the services of an external approved provider to perform a penetration test and hardening report.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Nutritics use Zabbix monitoring services and a strict firewall. Vulnerabilities identified (by us or 3rd party auditors) are prioritised on a severity basis by our CTO. We aim to resolve high priority issues within 5 days of detection, and medium priority issues within 4 weeks of detection.
• Incident management type: Supplier-defined controls
• Incident management approach: Nutritics have developed an Incident Management process under ISO9001 standard which details both the Incident and Service Request Management processes (available upon request).; Nutritics Helpdesk Service Operatives manage end user Service Requests, Incidents, and Change Requests which can be logged by e-mail, telephone, web chat, and ticketing.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  Nutritics participates in cycle to work schemes and public transport subsidies, to promote greener travel methods both in and outside of work travel / commuting.; ; We are developing a carbon tracking tool within Nutritics, that will allow customers to better understand the carbon footprint of their recipes, menus and supply chain. ; ; Nutritics offers carbon neutral delivery on all shipments and subsidises the option with customers, incentivising the uptake of this service.
• Covid-19 recovery:

  Covid-19 recovery

  Nutritics Ltd has undergone significant growth throughout the pandemic, which will be continued further by the attainment of this contract, has seen headcount growth of over 50%, supporting local communities and diverse demographics in returning to work throughout, which is a commitment we will progress with for the foreseeable future.; ; Nutritics Ltd has provided external counselling services and mental first aid both to its employees and of suppliers employees where needed during the pandemic and remains fully committed to supporting the all primary and secondary members of its workforce during this time.; ; Where possible to do so and/or if required to shield, employees continue to work effectively and in a supported method from home. Where this is not possible, thorough measures are taken on site to reduce the risk of transmission including social distancing, regular LFT testing, virtual meetings as opposed to in person, banning of visitors to site, screened desks and a rota system to reduce foot traffic.; ; All employees have an ongoing option to work from home, regardless of personal/professional situation which we are committed to uphold going forward and beyond the pandemic.; ; During the pandemic, Nutritics supported in conjunction with the European Food Information Regulatory Service (EuroFIR), the Hospitality industry by providing free resources and materials supporting them in adherence to Natasha’s Law, during a time that their own ability to digest an implement new working practices was highly diminished.
• Tackling economic inequality:

  Tackling economic inequality

  Nutritics has hired junior and senior roles from numerous unrelated industries, allowing those in greater affected sectors (eg Travel/Tourism & Hospitality) to retrain and upskill in this high growth sector.; ; We continue to take multiple University interns each year, providing real world work experience and ongoing work opportunities, the attainment of this contract will allow us to work with an increased number in 2022.; ; Nutritics supplies heavily reduced subscriptions to our services for those in Education, reducing the barriers to entry in clinical fields and supporting those in deprived communities ability to gain access to professional fields.; ; Nutritics sponsors multiple awards in the educational sector, which supports higher education facilities in their delivery of world class teaching and students ability to gain employment on completion of their studies.; ; As an SME organisation ourselves, Nutritics is committed to investment in UK prosperity and a weighted proposal analysis method is adopted in the procurement process to ensure this consideration is an intrinsic part of our processes.
• Equal opportunity:

  Equal opportunity

  Nutritics is a committed equal opportunities employer, where all recruitment and ongoing employment is conducted inline with our Equal Opportunities Policy.; ; Nutritics strives to be an inclusive employer and have put measures in place to support parents returning to the workplace, by instating a 100% payment for up to 12 months for Maternity leave and 100% for 8 weeks of Paternity leave.
• Wellbeing:

  Wellbeing

  Nutritics supports the emotional, mental & physical needs of our employees. As a result, we aim to develop and run a range of health promotion initiatives designed to raise awareness of health and lifestyle issues affecting mental health and wellbeing. These programmes are evaluated to determine their effectiveness. Some examples include: ; ; -wellness benefit to be used towards gym membership or any other reasonable health/fitness service; -an employee assistance programme;; -special leave arrangements;; -Mental Health Workshops;; -stress management;; -disability awareness; support for workers with disabilities; and dignity at work Policy; -handling violence and traumatic incidents at work;; -physical activity and fitness;; -a mental health first-aid programme;; -opportunities for flexible working;

Pricing

• Price: £650.00 a licence a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Free trial accounts provide access to the Nutritics platform allowing users to test ALL functional areas of the system based on their individual requirements. Nutritics will activate the relevant features within a trial based on individuals requirements.
• Link to free trial: https://www.nutritics.com/lp/claimaccount

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at stephen@nutritics.com. Tell them what format you need. It will help if you say what assistive technology you use.