Horsefly

Horsefly

With over one trillion data points, Horsefly’s talent analytics platform delivers real-time labour market insights from global employment services, social media, recruitment portals and government sources. Its intuitive interface enables instant analysis of skills, locations, supply and demand, compensation, diversity and workforce trends using rigorously cleaned, reliable data.

Features

• Real time supply and demand analytics and employer competitor data.
• Longitudinal data view trends and identify events that impact forecasting.
• Career path projections to see potential and likely job transitions
• Diversity data includes ethnicity breakdown and gender gap data
• Cost of Living to help define optimal talent hiring locations
• Compensation reports including average salary for any role and location
• Contractor day rates for any given role, skills and location
• Identify top universities for graduate or emerging talent markets
• Natively translated job titles and keywords for optimised attraction strategies
• Heat-maps and visualisations of candidate data and density by location

Benefits

• Widest global data reach covering more countries than any other
• Most diverse data sources integrated for an accurate view
• User friendly interface designed to pull powerful insights, instantly
• Data is refreshed and validated daily for up-to-date market analysis
• Real-time labour market data from more than 60 countries
• Access to 170,000+ towns/cities and millions of job postings
• Data to accurately identify skill gaps, ensuring optimal workforce planning
• Identify sources of top talent to create a winning strategy
• Compilation of millions of job postings provides an accurate picture
• See which universities are producing future leaders for your organisation

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at billing@horseflyanalytics.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

540967217216951

Contact

Steve Bebbington
0207 193 0220
billing@horseflyanalytics.com

About your service

• Service categories:

  Application Development and Deployment

  Analytics and business intelligence

  • Business Intelligence
  • Advanced and predictive analytics
  • Location and geospatial data management and analytics
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: The service is subject to planned maintenance to ensure ongoing performance, security, and reliability. Where maintenance is required, users are provided with advance notice and activities are scheduled to minimise disruption. No specific hardware or client-side configuration is required beyond access to a supported web browser.
• System requirements:
  • Modern web browser (Chrome, Edge, Firefox, or Safari)
  • Internet connection suitable for web-based applications
  • JavaScript enabled in the web browser
  • Cookies enabled for authentication and session management
  • Screen resolution sufficient to display web dashboards
  • Secure network access permitting HTTPS traffic
  • User account credentials provided by Horsefly Analytics
  • No local software installation required
  • No specific hardware requirements beyond standard computing devices
  • No specialist licences required beyond the Horsefly service subscription

User support

• Email or online ticketing support: Yes
• Support response times: We provide email and online ticketing support as standard. During UK business hours (9am–5pm, Monday to Friday) we aim to respond to support queries within 1 hour. Outside of these hours, including weekends and public holidays, queries are monitored and responded to within 24 hours.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), 7 days a week
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: We have not conducted interface testing with users of assistive technology.
• Onsite support: Yes, at extra cost
• Support levels: We provide a tiered range of support options from our UK-based customer support centre. All inbound calls are answered promptly and managed through a structured case management process. First-line support is provided by our customer service centre, which receives all inbound emails and support tickets and aims to resolve most issues within one hour.; ; Where issues cannot be resolved at first line, they are escalated to second-line support for further investigation and diagnosis. Second-line support personnel have access to specialist engineering support where required. If an issue cannot be resolved at this stage, it is escalated for root cause analysis and permanent resolution. Customers are kept informed throughout by email, telephone, and/or web conference, as appropriate.; ; Standard support is included within the service subscription at no additional cost. Where enhanced support arrangements are required, these are agreed with the customer on a case-by-case basis. A dedicated technical account manager or cloud support engineer is not provided as standard but can be made available by agreement.
• Support available to third parties: No
• AI chatbot: No

Onboarding and offboarding

• Getting started: Users are supported in getting started through a combination of onboarding assistance, training, and documentation. Full on-site and online training is available where required. Users are provided with access to service documentation to support day-to-day use of the platform. Initial guidance is offered to help users understand core features, navigation, and reporting functionality, enabling them to begin using the service effectively following onboarding.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: At the end of the contract, users can request extraction of their service data. A report is issued by the Customer Success Team containing relevant customer data held within the service at contract termination. Data is provided in an agreed format suitable for customer use. Access to the service is removed in line with contract terms following data extraction. Requests for data extraction are managed through standard support channels to ensure an orderly and controlled exit.
• End-of-contract process: Access to the platform is provided on a revolving subscription basis for the duration of the contract. Upon expiry, access is removed in accordance with contractual terms and final user statistics/usage information can be supplied as part of the standard offboarding process. Standard end-of-contract activities, including access removal and provision of final reports, are included within the contract price. Any additional services requested at contract end, such as bespoke reporting or extended support, may be subject to additional cost by agreement.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Onboarding and offboarding documentation is provided in PDF format and can be accessed using standard PDF readers. Users can adjust zoom levels and use built-in accessibility features provided by their device or software. Documentation is primarily text-based and does not rely on audio or video content.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: None. The mobile and desktop services offer the same functionality, with the interface responsively adapting to screen size.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: The service is accessed via a secure, browser-based web interface. Users can search, filter and analyse labour market data using interactive dashboards, charts and reports. The interface is responsive and designed to be intuitive for non-technical users.
• Accessibility standards: None or don’t know
• Description of accessibility: The service is browser-based and responsive, allowing users to adjust browser zoom and use built-in accessibility features where supported by their device or browser. Non-text content is used for visualisation purposes. The interface adapts to different screen sizes but has not been formally assessed against accessibility standards.
• Accessibility testing: We have not conducted interface testing with users of assistive technology.
• API: Yes
• What users can and can't do using the API: The Horsefly platform includes an API to support integration and automation use cases. API access is only available to customers purchasing the Public Sector Enterprise tier. Buyers on Base or Professional tiers do not receive API access.; Where enabled, the API provides read-only access to defined analytics data sets via authenticated API keys. The API does not allow users to modify platform configuration or underlying data.; API usage is subject to defined usage limits, fair use controls, and the applicable API terms and documentation.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: No
• Customisation available: No

Scaling

• Independence of resources: The service is hosted on a cloud platform designed to support multi-tenant use without customers impacting one another. Resource utilisation is monitored to ensure consistent service performance, and capacity is managed to accommodate variations in demand. Controls are in place to prevent individual user activity from adversely affecting other users. Where required, service capacity is reviewed and adjusted to maintain performance and availability in line with contractual expectations.

Analytics

• Service usage metrics: Yes
• Metrics types: We provide service usage metrics relating to user activity, including search usage and interaction with the platform, to help customers understand how the service is being used.
• Reporting types:
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Users can export service data by requesting an export through Horsefly Analytics’ support or Customer Success channels. Exports are provided in an agreed open format (for example CSV or ODF) suitable for customer use. Requests are managed through standard support processes to ensure appropriate access control and an auditable export trail.
• Data export formats:
  • CSV
  • ODF
• Data import formats:
  • CSV
  • ODF

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: Data within the service is protected through network segmentation, role-based access controls, and monitored access to production environments. Administrative access is restricted to authorised personnel only, with logging and monitoring in place to support detection of unauthorised activity.

Availability and resilience

• Guaranteed availability: The service is designed to achieve an availability level of 99.98% uptime, excluding scheduled and notified maintenance. Where maintenance is required, users are provided with advance notice and activities are planned to minimise disruption to service availability.; #Service availability is monitored to support ongoing performance and reliability. In the event that availability falls below the stated level, the supplier will review the incident and work with the customer to agree appropriate remedial actions in line with contractual terms. Any service credits or refunds associated with availability are handled in accordance with the agreed contract and pricing schedule.
• Approach to resilience: The service is designed to be resilient through its use of a cloud-hosted architecture that supports high availability and fault tolerance. The underlying hosting platform provides resilient datacentre infrastructure, including redundancy across core components to reduce the risk of single points of failure.; Service components are deployed in a manner that supports continued operation in the event of component failure, and availability is monitored to identify and respond to issues promptly. Planned maintenance activities are managed and scheduled to minimise disruption to users.; The datacentre set-up supporting the service is designed to provide physical and environmental resilience in line with recognised industry standards. Detailed information regarding the underlying datacentre architecture and resilience controls can be made available to customers upon request, subject to appropriate confidentiality arrangements.
• Outage reporting: Service availability and outages are monitored by the supplier to support timely identification and response. Where a service outage or significant service disruption occurs, affected users are notified via established support communication channels, including email.; The service does not provide a public service status dashboard or outage reporting API. Outage information, progress updates, and resolution details are communicated directly to users as appropriate, based on the nature and impact of the incident. Post-incident information can be provided to customers on request through the standard support process.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Management access to the service is authenticated using secure, role-based access controls. Access to management interfaces and support channels is restricted based on user role, organisational responsibility, and least-privilege principles. All management access and user activity is logged and monitored for audit and security purposes.
• Access restriction testing frequency: At least once a year
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Security governance is managed through documented internal policies and defined responsibilities for protecting customer data and service integrity. Security controls are reviewed regularly, including access management, vulnerability management and incident response. External penetration testing is carried out periodically, and security considerations are incorporated into operational and change management activities.
• Information security policies and processes: Horsefly Analytics maintains documented information security policies and supporting processes aligned to recognised industry standards. These policies are embedded across the organisation and apply to staff involved in the delivery and support of the service.; ; Responsibility for information security is defined within the organisation, with oversight provided through established management reporting structures. Compliance with security policies is supported through documented procedures and internal controls designed to promote consistent application.; ; Adherence to policies is monitored through routine operational checks and management review. Information security policies and processes are maintained under version control and are reviewed periodically to ensure they remain appropriate. Further detail can be provided to customers upon request, subject to confidentiality requirements.
• Software Security Code of Practice: No

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Horsefly Analytics is hosted on Amazon Web Services (AWS). Service components and configurations are documented and tracked throughout their lifecycle using version-controlled configuration records. New or updated service configurations are validated prior to live use to reduce the risk of misconfiguration. All configuration changes follow a defined change management process, including assessment of operational and security impact, appropriate approval, and documented rollback procedures to mitigate operational or security risk.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Our operational management team monitors and assesses potential threats to the service by keeping up to date with relevant security alerts and guidance from trusted sources, including the UK National Cyber Security Centre (NCSC), industry bodies, supplier notifications and the security community. Identified vulnerabilities are risk assessed for potential impact and urgency. Where remediation is required, patches or configuration changes are applied in a timely manner in line with defined change management procedures to maintain the security and integrity of the service.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: In line with our Cyber Essentials certification, we operate protective monitoring processes to identify potential security compromises affecting our service. Monitoring mechanisms and trained personnel are used to detect indicators of malicious activity or abnormal behaviour. Where a potential compromise is identified, incidents are assessed and responded to promptly to contain impact, restore service integrity, and prevent recurrence. Response actions are prioritised based on risk and severity, enabling timely investigation, remediation, and recovery in accordance with defined incident management procedures.
• Incident management type: Supplier-defined controls
• Incident management approach: Horsefly Analytics operates a defined incident management process with pre-defined steps for managing common security and service incidents. Our response follows a five-stage approach: (i) identification and initial assessment, (ii) containment and recovery, (iii) risk assessment, (iv) notification, and (v) evaluation and response. Users can report incidents via email, telephone, or web chat. Incident information and updates are provided to affected users as appropriate, including details of impact, actions taken, and resolution status.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 1%
• Between £500,001 and £1,000,000: 2%
• Between £1,000,001 and £2,500,000: 4%
• Between £2,500,001 and £5,000,000: 6%
• Over £5,000,001: 8%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 09af6e6c-2e38-4c49-a9da-b01664794838
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Volunteering opportunities for staff

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at billing@horseflyanalytics.com. Tell them what format you need. It will help if you say what assistive technology you use.