Ayup Digital

Ayup Connect

Ayup Connect is a customisable directory and website platform that helps residents and professionals find local services, support and information. It can be a single directory (e.g. Family Information Service, SEND Local Offer, Public Health, Adult Social Care, Social Prescribing etc) or can bring together multiple directories into one place.

Features

• Directory of services: User-friendly hub for accessing support and information
• Powerful search: Customisable algorithm and filters for better results
• Admin area: Easy for partner organisations to maintain service data
• Flexible permissions: Control content with approval steps and access levels
• Traffic light notifications: Easily track data freshness with clear indicators
• Open API: Interoperability with third-party platforms and data feeds
• Light touch referrals: Frictionless in-platform or external service referrals
• Landing pages: create theme or directorate-specific areas of the platform
• Accessibility: WCAG2.2 compliant, localised design and mobile device responsive
• Host multiple directories in one place

Benefits

• Consolidate data: single source of truth for service, support, I&G
• Quality service data: Up-to-date, quality approved information for residents
• Fulfilling obligations: Host statutory guidance including FIS and SEND
• Devolved responsibility: co-design and collaborative platform
• Reduce number of websites: Host multiple directories on one platform
• Collaborative community: Exchange ideas and update within our community
• Stakeholder engagement: Community input and collaboration for better service
• Accessibility: WCAG 2.1 compliant for high accessibility
• Interoperable data: for sharing with other platforms and neighbouring authorities

£25,000 to £70,000 a licence

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@ayup.agency. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

545101888330196

Contact

Steven Taylor
01138591020
info@ayup.agency

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
• Service constraints: No
• System requirements:
  • A modern web browser
  • An internet connected device

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Response time varies from 1 hour (critical) to 24 hours (minor)
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Tiered hosting, support and account management packages, details available on request.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Our deployment service delivers a localised instance of the Ayup Connect platform within a locality. We work closely with our clients to co-design a version of the platform that stands the best chances of local adoption from stakeholders and residents. Our recommended deployment process goes through six main stages:; ; 1. PMO; 2. Discovery & co-design; 3. Localisation of platform; 4. Technical configuration, deployment and data migration; 5. Training; 6. Support and maintenance; ; Our delivery team will work closely with you to define a project plan that will support the process.
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: Direct API connection,CSV export or encrypted MySQL data dump.
• End-of-contract process: * Date for termination is agreed; * A full encrypted data backup is taken; * Infrastructure is decommissioned; * Any third-party services are decommissioned / cancelled; * Any remaining elements or accounts, such as domain names are transferred to the client

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: None
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: The interface is accessed via a web browser
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: Third party testing, customer testing, internal testing
• API: Yes
• What users can and can't do using the API: Our Open API allows any authenticated user to Create, Read, Update or Delete (CRUD) any entity to which they have access to. This includes but is not limited to updating service listing, making referrals and performing searches.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Each deployment can have their own "look and feel" design and include custom branding, name and logo. Our platform is built with design tokens can we can tweak colours, typography, spacing, illustration and more per locality.; ; Configuration options on the backend to allow for custom categories, taxonomies, filtering and full control over user accounts and all content within the platform - including organisations, services, locations, events and information pages.

Scaling

• Independence of resources: Managed instances are hosted within AWS and make use of auto-scaling technology. We have proactive monitoring on infrastructure to identify demand.

Analytics

• Service usage metrics: Yes
• Metrics types: * All activity is audit logged and searchable; * Built in reporting for basic; * More advanced reporting available via our Ayup Insight product (inc search data, unmet need, greater data quality reporting, etc); * Stale data management; * Referral metrics; * Integration with web analytic providers such as Google Analytics; ; Any specific reporting requirements can be discussed and catered for.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: Never
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: API Connection, CSV export or via our Ayup Insight dashboard
• Data export formats:
  • CSV
  • Other
• Other data export formats: JSON
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: We offer a base uptime guarantee of 99.5% measured by industry standard monitoring systems.
• Approach to resilience: Cloud hosted in AWS. Redundancy across application tiers and our application is spread across multiple regions.
• Outage reporting: Outage is reported via emails direct to relevant team members. We also maintain a public status dashboard and uptime monitoring system.

Identity and authentication

• User authentication needed: No
• Access restrictions in management interfaces and support channels: Management access to the platform is restricted and authenticated via username, password and 2FA. Role based permissions are used and all actions are audit logged.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Cyber Essentials
• Information security policies and processes: We are Cyber Essentials certified. Platforms are hosted in a cloud-based infrastructure, and our cloud partner is ISO 27001 certified. We are aiming to be ISO 27001 certified and follow and implement information security standards and processes.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We employ a change management process, ensuring planned changes are implemented with the minimum of risk and disruption. We work with clients who have internal change control processes and can follow any specific workflows.; ; Development work on the product is version controlled using Git, peer reviewed and subject to automated and manual QA process.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: All components within our stack (including third-party components) are continuously tested for vulnerabilities using automated tools. We are alerted of any detected vulnerabilities and take action to resolve.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Our stack is monitored continuously via automated tooling, which sends alert to the support team. They will assess any issues flagged and resolve according to the severity threat level.
• Incident management type: Supplier-defined controls
• Incident management approach: Managed through our support desk, via email or phone. We log, managed and review all issues to inform and improve our procedures and product. Post mortems are carried out where necessary and reports communicated to clients.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Wellbeing

  Wellbeing

  At Ayup Digital our mission is "Connecting people to the support they need to live their best lives." ; ; Our platform Ayup Connect is rooted in improving the wellbeing of residents of the boroughs we work in. Our work with local government and the communities they serve involves engaging and celebrating the VCSE community. ; ; Our platform is designed to support health and wellbeing initiatives , including physical and mental health, in the communities we work in by making access to services and support as easy as possible.; ; Our deployment approach is based on collaboration with users and communities who we engage in codesign and are crucial to the delivery of the contract in supporting strong, healthy and connected communities.

Pricing

• Price: £25,000 to £70,000 a licence
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@ayup.agency. Tell them what format you need. It will help if you say what assistive technology you use.