Inpulse

Employee Engagement Survey Platform

Inpulse is an employee engagement and experience platform designed to help organisations understand how their people feel and why, so leaders can take targeted, timely action that drives meaningful cultural and performance outcomes, supported by powerful emotional insights that reveal what truly motivates and impacts employees.

Features

• Real time reporting with instant access to survey results
• Emotional insights and automated theme analysis powered by AI
• Flexible survey engine supporting engagement, pulse, lifecycle, 360s and more
• Customisable dashboards with team level filtering and heatmaps
• Mobile friendly, WCAG compliant survey experience for all users
• API & SFTP connectivity for system integrations
• Self service report exports in multiple formats

Benefits

• Understand employee feelings and drivers through clear emotional insights
• Launch surveys quickly with flexible, lifecycle friendly templates
• Access results instantly for fast, informed decision making
• Identify priorities quickly using automated theme and sentiment analysis
• Compare performance easily with live, in platform benchmarking
• Generate team specific reports instantly to reduce admin time
• Boost participation using automated reminders and tracking
• Improve decisions with clear, data driven action suggestions
• Receive expert guidance from a dedicated CSM and Insights team
• Build a consistent listening rhythm that reveals issues early

• Education pricing available

Service documents

• Pricing document

  ODS

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at alastair.walters@inpulse.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

547943239588256

Contact

Alastair Walters
07585183611
alastair.walters@inpulse.com

About your service

• Service categories:

  Applications

  Enterprise resource management

  • Enterprise performance management

  Human capital management

  • Core Human Resources Applications
  • Talent Management Applications
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: None
• System requirements:
  • A modern web browser (Chrome, Edge, Safari or Firefox)
  • A stable internet connection.

User support

• Email or online ticketing support: Yes
• Support response times: Inpulse provides structured support response times as defined in our SLA. High priority issues receive a response within 24 hours during normal business hours, medium priority issues within 48 hours, and low priority issues within 5 business days. Support operates Monday to Friday, 9:00 to 17:00. Requests received outside these hours, including weekends, are logged and actioned on the next business day. All incidents are triaged by our support team with clear escalation paths to ensure timely resolution.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes
• Support levels: Support is delivered through two dedicated teams. Your Customer Success Consultant acts as your primary point of contact, guiding you through the customer journey, leading weekly project calls, and providing ad hoc support (booked 24 hours in advance). Alongside this, you have direct access to our dedicated technical support team for all platform-related queries and issue resolution.; ; Our UK-based teams are available during business hours (9am to 5pm, Monday to Friday, excluding bank holidays), and you can contact them directly by email or phone, with no generic ticketing systems or anonymous helplines.; ; Support requests are triaged by priority. High-priority issues such as critical system failure are addressed within 24 hours. Medium-priority issues such as partial loss of functionality are addressed within 48 hours. Low-priority issues such as text or configuration changes are addressed within 5 business days. All remote assistance is delivered within these timescales.; ; All support, including technical assistance, consultancy, and strategic activation, is included within the licence cost. There are no additional fees for different support tiers. The Customer Success Consultant and the technical support team together provide the equivalent of a Technical Account Manager function throughout your contract.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: A comprehensive onboarding process is provided to help users start using the service. This includes:; ; Strategy Activation Workshop: Delivered either in person or online, this workshop introduces the platform’s approach, explores your organisation’s priorities, and defines your engagement strategy.; ; Platform Training Session: Administrators receive a dedicated training session (recorded for future reference) on how to set up and manage surveys.; ; Project Management Support: A Customer Success Consultant guides you through a step-by-step project plan via weekly calls to ensure a successful survey launch.; ; Training Materials: Access to video tutorials, PDFs, guides, and templates is provided for ongoing reference and to support new users.; ; Manager Training and Action Sessions: Managers receive training on analysing results and running effective team conversations post-survey.; ; Ongoing Support: Continued access to best practice guidance, resources, and support from the Customer Success team.; ; This blended approach ensures users are fully supported through onsite and online training, as well as comprehensive user documentation.
• Service documentation: No
• End-of-contract data extraction: At the end of the contract, users can extract all data directly from the platform using the available export tools. Administrators can download survey results, comments, heatmaps, dashboards, and historical data in standard formats such as CSV, Excel, or PDF. ; ; If required, we can also provide a full data export upon request to support migration to another system. Data extraction is completed before account deactivation to ensure the buyer retains full ownership and access to all information.
• End-of-contract process: At the end of the contract, the buyer retains full ownership of all data. Administrators can export their data directly from the platform using built-in export tools, and a full data extract can be provided on request. Once all data has been retrieved, access to the platform is closed and the account is deactivated. Any outstanding consultancy or reporting work already included in the agreement will be completed, but no new surveys or projects will be initiated after the contract end date.; ; The contract price includes access to the platform, all standard features, unlimited surveys, technical support, customer success support, strategic consultancy sessions, onboarding, and training. Additional costs only apply for items outside the agreed scope, such as optional on-site visits, bespoke development requests, or any additional services explicitly requested by the buyer that fall outside the standard licence.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The platform is intuitive, easy to use, and highly secure across all device types, ensuring a consistent user experience whether accessed on mobile or desktop.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: Users access the platform through a web-based interface, which provides dashboards, survey management tools, results visualisation, and action planning features. The interface is designed to be intuitive and user-friendly, supporting both desktop and mobile access for a seamless experience.
• Accessibility standards: WCAG 2.2 A
• Accessibility testing: We have tested our interface with users of assistive technology, including a client who uses screen-reader software. Testing focused on key user journeys to ensure that navigation, form inputs, and survey completion are accessible when using assistive technologies.; ; The platform is designed and maintained in line with WCAG 2.1 AA standards. Accessibility is reviewed as part of our design and QA processes, including checks for semantic structure, keyboard navigation, colour contrast, and screen-reader compatibility.
• API: Yes
• What users can and can't do using the API: The API is used to integrate the platform with a customer’s HR or people system. Initial API setup is handled by our technical team in collaboration with a technical contact on the customer side to configure authentication using OAuth. Customers do not need to build or manage the API integration themselves.; ; Setting up the service through the API; Once authentication is established, the API is used to automatically provision and maintain employee and organisational data, including users, teams, hierarchies, and segmentation attributes.; ; Making changes through the API; Changes are made in the customer’s source system (for example, their HRIS). These updates are pushed automatically to the platform via the API, ensuring that employee data remains up to date without manual intervention.; ; Limitations; The API operates on a push-only basis from the source system to the platform. It does not support pulling data back into customer systems, nor does it support configuration of surveys, reporting, analytics, permissions, or other platform settings, which are managed through the user interface.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: What can be customised; Customers can customise the visual branding of surveys and reports, including PowerPoint and PDF exports. This includes elements such as logos, colours, fonts, and layout to align with their organisational branding.; ; How users can customise; Customers can provide brand guidelines, logos, or example reports that reflect their desired look and feel. Our team then applies this branding by configuring and implementing it within the platform so that it is consistently used across surveys and report outputs.; ; Who can customise; Customisation is carried out by our team following input from authorised customer contacts. End users do not need to make technical changes themselves, and no coding is required from the customer side.

Scaling

• Independence of resources: Inpulse is delivered as a multi-tenant SaaS platform designed to ensure customers are not adversely affected by the activity or demand of other users. The service runs on scalable cloud infrastructure with logical tenant isolation, ensuring customer data and workloads are separated. Capacity is monitored continuously, and the platform is designed to scale horizontally to handle peaks in demand. Usage limits, monitoring, and alerting are in place to prevent any single tenant from impacting overall service performance.

Analytics

• Service usage metrics: Yes
• Metrics types: Yes. Inpulse provides service usage metrics via in-platform dashboards and reporting. This includes metrics such as survey participation rates, response volumes over time, engagement trends, and platform activity levels. Usage data can be filtered and exported to support monitoring, reporting, and continuous service improvement.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: In-house destruction process
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure

Data importing and exporting

• Data export approach: Users can easily export their data from the platform in widely accepted formats such as CSV, Excel, PDF, and PowerPoint. This is typically achieved with a simple click of a button, allowing for straightforward sharing and further analysis. Available exports include ready-made PowerPoint reports summarising survey results, PDF report exports, and raw survey data files.; ; Access to raw survey data exports is restricted to authorised users only and is subject to role-based permissions and approval settings to ensure appropriate data governance.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • XLSX
  • PNG
  • API
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • XLSX
  • CSV
  • API

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: All data stored on the platform is encrypted at rest using Amazon's managed encryption solution, which adheres to industry standards such as AES-256.

Availability and resilience

• Guaranteed availability: Inpulse targets 99.5% platform availability per month, calculated based on unscheduled downtime only. Availability is monitored continuously, and performance is measured in line with the Service Level Agreement. If availability falls below 95% for five consecutive weeks, customers may terminate the service without liability for further fees.; ; The service does not operate a service credit or refund model for availability; the primary contractual remedy is termination in the event of sustained underperformance.
• Approach to resilience: Inpulse is delivered as a cloud-native SaaS platform hosted on Amazon Web Services (AWS) in the EU (Ireland) region. The service is designed for resilience using AWS’s highly available and fault-tolerant infrastructure.; ; The platform is deployed across multiple AWS Availability Zones, providing protection against datacentre-level failures. Core services are designed with redundancy so that the failure of individual components does not result in loss of service.; ; AWS datacentres provide resilience through redundant power, cooling, and network connectivity, and are protected by robust physical security controls. These facilities are independently audited against recognised international security standards and are managed by AWS under the shared responsibility model.; ; At the service level, platform availability is continuously monitored, and the service is designed to scale to meet changes in demand without impacting users. Regular backup and recovery processes are in place to support service continuity.; ; This approach aligns with the NCSC Cloud Security Principles for asset protection and resilience.
• Outage reporting: Inpulse communicates service outages and service-impacting incidents directly to customers via email notifications. Customers are informed of known issues, progress updates, and resolution status as appropriate.; ; The service does not currently provide a public status dashboard or a dedicated status API. Availability is monitored internally on a continuous basis, and customers can contact support at any time to report issues or request updates.; ; This approach ensures customers receive timely and relevant information about service availability without requiring them to actively monitor a separate system.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces is restricted to authorised personnel using role-based access controls and the principle of least privilege. Administrative access is granted only where required and is reviewed regularly. Authentication controls are enforced to prevent unauthorised access.; ; Support channels are similarly restricted to authorised staff and verified customer contacts. Requests are logged and tracked, and sensitive actions require additional verification before being completed. Access to both management interfaces and support systems is monitored and audited to ensure compliance with security policies.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cyber Essentials Certified
• Information security policies and processes: Our information security policies and processes are aligned with ISO/IEC 27001, Cyber Essentials, and GDPR requirements. We maintain documented policies covering information security governance, access control, data protection, incident management, risk management, supplier security, and business continuity.; ; Security governance is owned at board level, with day-to-day responsibility delegated to senior operational roles. Policies and risks are reviewed at least annually, or following significant change, through a structured risk management and governance process.; ; Compliance with security policies is reinforced through mandatory annual information security and data protection training for all staff, supported by role-based access controls, secure configuration, monitoring, and defined incident response procedures. Third-party suppliers are assessed as part of due diligence, and cloud infrastructure security is managed under a shared responsibility model.; ; Ongoing assurance is provided through internal reviews and external audits associated with ISO 27001, Cyber Essentials, and GDPR compliance.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Configuration and change management are governed by supplier-defined controls aligned with ISO/IEC 27001 and the NCSC Cloud Security Principles. Service components, including application code and configuration, are tracked throughout their lifecycle using version control and documented environments.; ; All changes are assessed for potential security, availability, and data protection impact before implementation. Changes are reviewed and approved prior to deployment, with higher-risk changes subject to additional testing.; ; Updates are tested before release and deployed using controlled release processes to minimise disruption. Configuration baselines are reviewed periodically, and access to make changes is restricted to authorised personnel using role-based access controls.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Vulnerability management is governed by supplier-defined controls aligned with ISO/IEC 27001 and NCSC operational security principles. Potential threats are identified through automated code analysis, regular vulnerability scanning, and annual independent penetration testing, with risks prioritised using recognised scoring methods such as CVSS.; ; Security patches are deployed based on severity, with critical vulnerabilities addressed within one month and high or medium risks remediated within three months.; ; Information on emerging threats is obtained from automated dependency monitoring tools, penetration testing results, and recognised industry sources such as OWASP, supported by ongoing staff security training.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Protective monitoring is implemented using supplier-defined controls aligned with ISO/IEC 27001 and NCSC operational security principles. Potential compromises are identified through centralised logging, automated alerts, and cloud-native monitoring across the platform and infrastructure, including monitoring of authentication activity, network behaviour, and service availability.; ; Alerts and suspicious events are reviewed promptly to determine whether a security incident has occurred. Confirmed incidents are handled in line with documented incident response procedures, including containment, remediation, and recovery actions.; ; Incidents are prioritised based on severity, with higher-risk incidents investigated and mitigated immediately, and customers notified in line with contractual and regulatory requirements.
• Incident management type: Supplier-defined controls
• Incident management approach: Incident management is governed by documented, supplier-defined controls aligned with ISO/IEC 27001 and NCSC security principles. Pre-defined response procedures are in place for common events, including security, availability, and data protection incidents. Incidents are logged, assessed, and prioritised by severity, with investigation, remediation, and post-incident review carried out as required.; ; Users can report incidents via their designated Customer Success contact or by email, with incidents escalated internally in line with defined procedures.; ; Customers are notified promptly once the nature and impact of an incident are understood and are provided with updates and post-incident summaries outlining impact, resolution, and corrective actions.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 5%
• Between £250,000 and £500,000: 10%
• Between £500,001 and £1,000,000: 15%
• Between £1,000,001 and £2,500,000: 20%
• Between £2,500,001 and £5,000,000: 25%
• Over £5,000,001: 30%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau
• ISO/IEC 27001 accreditation date: Tuesday 29 April 2025
• What the ISO/IEC 27001 doesn’t cover: Our ISO 27001 certification covers all areas of our work
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 774da329-5c49-44bf-ba48-a8befe23d226
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract

Service documents

• Pricing document

  ODS

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at alastair.walters@inpulse.com. Tell them what format you need. It will help if you say what assistive technology you use.