Bromcom Computers Plc

Bromcom MAT Enterprise (MIS and Finance)

Bromcom is a cloud-based MAT MIS that provides a powerful suite of administration, analysis and communication tools for all phases and types of school. In addition to the essentials, Bromcom includes a parent portal, clubs/trips management and student/parent/teacher apps. It answers all your Multi-Academy Trust needs in one intuitive interface.

Features

• Intuitive Analytics dashboards include Custom, Lesson, Attendance, Behaviour and Insight
• Record both summative and formative assessments, then analyse performance
• Efficient attendance registration via any device, including mobiles and tablets
• The Parent Portal provides a wide range of real-time information
• Collect, monitor and analyse behavioural events with automated outcomes
• Financial Management and budget planning
• Extensive built-in reports alongside a powerful ad-hoc report writer
• Automate reports, behaviour procedures, group assignment and much more
• Direct links to Power BI, design and present custom dashboards
• Google, Microsoft and third-party integration via our secure API

Benefits

• Get a clear picture of school performance with powerful analytics
• Easily identify trends and act before they become an issue
• Save money by reducing your reliance on third-party bolt-ons
• Access and record information from anywhere on any device
• Flexible assessment allows you to track how you see fit
• Engage with parents by providing real-time feedback and notifications
• Our intuitive interface helps to reduce training overheads
• Bring all functionality into one place, with one simple interface
• Save hours by administrating clubs, trips and wraparound care online
• Say goodbye to technical issues with a 24/7 Cloud-Based MIS

£20,000 a licence a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@bromcom.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

551563725811971

Contact

Sales Office
020 8290 7171
tenders@bromcom.com

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
• Service constraints: The service is subject to planned maintenance, which is scheduled outside of normal UK school operational hours. Users are always given advance noticed of planned maintenance.
• System requirements:
  • Web browser: Chrome, Internet Explorer, Edge and Safari supported.
  • Microsoft Word (or compatible) for web merge reporting
  • Microsoft Excel subject to Excel integration requirements
  • Microsoft Power Bi account subject to BI integration requirements

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Depending on the type and priority of the ticket our response targets are between one hour and 16 working days. Incidents (such as software bugs) are treated with a higher priority than service requests (such as queries about how the software works) and in turn have a faster response and resolution target.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.1 AA or EN 301 549
• Web chat accessibility testing: Bromcom uses a Microsoft product for our web chat service. This supports European accessibility standards and prioritises accessibility by design. Bromcom has also piloted the software with a range of users as part of the rollout and the evaluation criteria includes an accessibility review for assistive technology users.
• Onsite support: Yes, at extra cost
• Support levels: Costs are in the service pricing document, which shows the standard range of services offered. ; ; Typically, Bromcom provides a SupportDesk service covering 1st, 2nd and 3rd line support and these are included in the costs contained in the pricing document. Bromcom has a standard SLA to cover support service levels based on ticket type (incident or service request) and priority.; ; All staff working on Bromcom’s SupportDesk are both product and technically trained helpdesk engineers and our aim is to resolve the majority of calls on first contact. Bromcom can also adapt the support function if the customer wishes to take on aspects of the support themselves; Multi Academy Trusts may wish to take on the 1st line and 2nd line support for all or parts of the solution. Bromcom can provide specialist training and accreditation services to support third parties with this and can support the integration of the respective service desks to ensure efficient escalation channels.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: A Project Manager is appointed to manage the on-boarding process from start to finish in consultation with the school to make a smooth transition. Bromcom provides a comprehensive data migration service that is the best of its kind to ensure a simple and quick data transfer, with direct data extraction from SIMS, CMIS and RM Integris, with CTF and CSVs used from other systems. SIMS.net users can carry out their own migration with our bespoke software to further reduce cost. Training is provided using a test migration of the school's own data and the System Manager is guided on which aspects of the service can be configured to their school’s needs, although a fully usable default configuration applicable to the school phase/type is provided. Typically the process of migration and training from account creation to ‘Go Live’ takes between 5 days to two weeks. Bromcom also provides transitional support in the form of daily phone calls during the first two weeks after the go-live date.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Customers can export any data at any time using built in functions, and therefore can extract data prior to the contract end. ; ; At the end of the contract, the school’s SQL database is offered in its entirety to the User. The data will be placed on an encrypted backup set held on a portable medium [DVD or similar] and then made available for User collection from Bromcom HQ in Bromley, Kent, subject to 24 hours’ prior notice or uploaded to a secure location of the school's choosing. The password will be supplied separately.
• End-of-contract process: Customers can export any data at any time and therefore can export data manually prior to contract termination. Also, the school will be offered free of additional charge, a copy of their school’s SQL database, which will be placed on an encrypted backup set held on a portable medium [DVD or similar] and made available for collection from Bromcom's UK Headquarters. The school account is decommissioned on expiry of the contract and no further access is available. The MIS data including any saved documents will be securely deleted from the cloud service no later than 30 days following the expiry of the contract or sooner at the customer’s request. Data backups taken before the contract expiry will continue to hold a copy of the school’s data until 30 days have passed, at which point a data backup copy will no longer be available. Should a database restoration be requested after contract termination (only possible within the 30 day limit), an additional charge will be made to cover costs.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Certain web pages render according to screen size and having a touch interface or a keyboard.; ; HTML5 utilised by the application.
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: Bromcom MIS and MAT Finance have a modular structure, with modules accessed via a menu system, a global search function, and favourite links. In addition, our online help, knowledge base, and "walk throughs" guides step users through accessing key features. Each module has a consistent, visual layout, showing the available processes, maintenance, and reporting options. ; ; In the event of incident reporting, registered users can log and monitor tickets via our user website.
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: We test the service with web accessibility evaluation tools to help assistive technologies.; ; The service does not need a mouse and is accessible using a keyboard.; ; The service is compatible with the range of accessibility tools including magnify, zoom, high contrast, text to speech as well as functioning with third party accessibility tools such as JAWS™ and Naturally Speaking by Dragon.; ; Accessibility features such as size re-rendering are routinely tested with each release.; ; The service does not use sound.; ; Clickable buttons change colour when they are hovered over; ; The service provides mouse-over tool tips that help understanding and navigation.; ; Greyscale colour does not obscure the display.; ; Favourites can be set up for ease of access.; ; Service web page URLs reflect the function being accessed as a visual aid and can be used as shortcuts outside of the service. Login security is maintained however the service is accessed - if a user links to a page and is not yet logged in, they first be required to log in before being taken to the specified page.
• API: Yes
• What users can and can't do using the API: Bromcom’s API is a secure web service that supports automatic data transfer with third party systems. This is a free to use option (for read access) with a free support programme for any third party wishing to integrate with the Bromcom MIS. The API scope covers all data items and is subject to access permission. Only successfully authenticated connections can retrieve data. These connection accounts are set up and administered by the buyer (school), permitting them to retain control over their data. All data transfers are encrypted using HTTPS connections. Read only access is standard. Users wishing to write back data should contact Bromcom for details.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Buyers (schools) can adjust the menu of options used, add the school logo, set the rules for user authentication, adjust report templates and where used, assessment tracking schemes and behaviour/reward schemes. Usable defaults are provided. These are adjusted by the administrator level user(s) of the buyer (school).; ; Users can further customise their dashboard, search tools, quick menu, favourite shortcuts and selections.; ; Customisation is carried out using the supplied service web pages to suitably authenticated users.

Scaling

• Independence of resources: The service is designed to provide the stated services under all normal load conditions, including peak loading. Various load monitors are running 24/7 to log service loading and alerts provide service administration and management staff with weekly notice of performance and immediate notice of any exceptions outside of defined boundaries. The service capacity is increased in steps according to the customer number increase, although additional dynamic resource allocation is being built to provide further on demand allocation. Load balancing is used to distribute the load.

Analytics

• Service usage metrics: Yes
• Metrics types: We provide users with the following metrics via our support site:; ; Service uptime status,; Number calls raised, opened, and closed,; ; We can supply reports that provide you with the following information:; % of calls responded to within the SLA,; % of calls resolved within the SLA,; A call break-down by product and priority.; ; Automated reports can also be setup and e-mailed; an example being calls raised this week and outstanding calls.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Aside from school MIS specific exports such as census and examination entries, the Bromcom MIS provides functionality to export data at the core of the service. All the provided reports utilise a standard toolbar that enables users to export any report. In addition, the included ad-hoc report designer also uses the standard toolbar and therefore enables users to select any data items from the system to export. A number of other facilities built into the system provide export data functions. An Excel add-in also enables live data to be securely and efficiently extracted from the MIS.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • Excel 97-2003
  • Excel Worksheet
  • Powerpoint Presentation
  • RTF
  • Web Archive
  • Word Document
  • XPS Document
  • TIFF file
  • XML
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • XML
  • EDI

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: We aim to provide customers with 99.95% availability between core schools hours, 8am to 5pm and 98% at off peak times. These figures do not include downtime for planned maintenance and upgrades. Customers are informed 5 days in advance of any planned work. In the event of a serious service failure we provide service credits.
• Approach to resilience: The service is hosted by Microsoft Azure on a Tier III platform with Tier IV physical infrastructure that offers 99.95% uptime service levels. Further information about the physical security of the data centres, geo-redundancy and other aspects of our resilience planning are available on request.
• Outage reporting: We provide a service status dashboard, which is available through our support site along with e-mail notifications to customers.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password
  • Other
• Other user authentication: This can be configured to request in addition to password, random characters from a user entered memorable word. Password and random character rules are defined by the school's MIS administrator. IP and time restrictions can also be associated to user accounts.
• Access restrictions in management interfaces and support channels: Only successfully authenticated users have access to management interfaces and online support channels. Telephone support channels also require the successful completion of a verbal authentication procedure before support will be given.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: PEERS QUALITY ASSURANCE
• ISO/IEC 27001 accreditation date: 09/05/2026
• What the ISO/IEC 27001 doesn’t cover: Nothing, it covers all areas of the service.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: WORLD PAY
• PCI DSS accreditation date: 07/06/23
• What the PCI DSS doesn’t cover: Our PCI DSS scope is the support domain which is where all support to clients is conducted and all client information is held and accessed. This domain has extremely stringent security controls applied to it.
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications: Cyber Essentials

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Data Security Policy,; Personal Data Security Policy,; Safe guarding Policy,; Data Protection Policy,; Business Continuity Management,; Computer and e-mail acceptable use policy,; Internet acceptable use policy,; Password protection policy,; Clean desk policy,; Physical security practices policy (e.g. building).

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Policies are in place to regulate the creation, testing, implementation and retirement of each component of the service. Beta environments are used in which tests are carried out on the internal performance of new components and their interaction with the main service. ; Multiple stakeholders are involved in the change process as users generate requests and they are considered from the perspective of utility, feasibility and security. The purpose, scope and responsible engineer of each change is logged, so an audit trail is available. After beta testing a separate risk analysis is conducted to consider any unforeseen impact on the service.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: To maintain a secure network patches are reviewed within four hours of release then classified as emergency, critical, non-critical or non-applicable. Emergency patches are deployed within eight hours, while other applicable patches are applied within five days. The IT Manager undertakes a continuing process of vulnerability monitoring, identifying threats through daily scans of the network for known attacks and vulnerabilities and review of external sites, including ncsc.gov.uk and those of all vendors whose software operates within the network. All networked devices have current anti-virus software and vulnerability through human action/error is minimised by data security training for all staff.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Security at the border of the network is maintained through account locking at the third unsuccessful login attempt and the (optional) restriction of acceptable IP addresses for roles or users. Users with appropriate access can schedule an activity log to be generated to identify unusual patterns of access or activity. When data breaches are identified a defined process is followed and the incident is tagged as a breach for purposes of audit so that system integrity can be restored as quickly as possible. Data Breach Incidents are of critical priority and are resolved within three days.
• Incident management type: Supplier-defined controls
• Incident management approach: All incidents are logged and strictly dealt with following pre-defined processes. Faults are identified, quickly isolated and a potential work around determined. If no workaround is possible, or the incident is deemed to have too great an impact on system operation then the recovery phase of the Change management processes returns the system to its prior state within SLA timeframes. In the event that a work around is available, this will be distributed to all system users and work on a permanent solution will be undertaken via Problem Management. Customers have online access to review the status of their incidents.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Other
• Other public sector networks: London Grid for Learning (Atomwide)

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Fighting climate change; Here's a breakdown of Bromcom's key principles to fight climate change: Continuous Improvement: Bromcom pledges to constantly enhance its environmental performance by minimising resource consumption, waste generation, and maximising sustainability. Resource Efficiency: We strive to use fewer resources while ensuring optimal utilisation, minimising waste. Carbon Footprint Reduction: Recognising the urgency of climate change, Bromcom commits to measuring and mitigating its carbon footprint by setting annual goals for environmental performance. Waste Management: Bromcom follows a "reduce, reuse, recycle" approach to manage waste, minimising its environmental impact. Pollution Prevention: Bromcom actively manages operations to prevent pollution, showcasing their dedication to environmental preservation. Sustainable Building and Procurement: We consider environmental factors in infrastructure decisions and align supply chains with sustainability goals. Legal Compliance: Bromcom adheres to all applicable environmental legislation to meet or exceed regulatory standards. Carbon Offset Strategies: In addition to the principles mentioned above, Bromcom has implemented a Carbon Reduction Strategy with these elements: Renewable Energy: All our services are transitioning to renewable energy sources to power operations, reducing reliance on fossil fuels and carbon emissions. Carbon Offset Credits: By investing in carbon offset credits and environmental projects, Bromcom aims to counteract operational emissions. Green Transportation and Flexible Work Arrangements: We encourage eco-friendly commuting, flexible work hours, and telecommuting to minimise emissions caused by commuting. Partnership with Microsoft Azure: This partnership amplifies Bromcom's environmental commitment by leveraging Microsoft Azure's focus on renewable energy, water positivity, zero-waste certification, and net-zero deforestation. Eco-friendly Practices: Bromcom actively promotes additional eco-friendly practices: Video Conferencing: Reducing the need for travel. Paperless Office: Minimising paper usage. Removal of printers. Recycling Initiatives: Encouraging proper waste disposal. Reduction of Single-Use Plastics: Lowering environmental impact. Bromcom has a strong commitment to environmental sustainability through these actions, partnerships, and a corporate culture that values sustainability.

  Covid-19 recovery

  Covid-19 recovery; To support schools in their recovery following the Covid-19 pandemic, Bromcom utilises an agile approach to development, demonstrating a commitment to meeting the evolving needs of schools, Trusts, and Local Authorities. This agile methodology enables Bromcom to swiftly adapt its products and services to the dynamic landscape of education post-pandemic. By prioritising feedback and requests from its extensive customer base, which contributes to a high percentage of suggested developments, Bromcom ensures that its system remains finely tuned to the requirements of schools. This responsive and flexible approach not only addresses current challenges but also establishes a framework for future resilience. Should similar crises arise in the future, Bromcom's agility will empower it to respond promptly and effectively, ensuring uninterrupted operational functionality for its users.

  Tackling economic inequality

  Tackling economic inequality; Bromcom's initiatives indirectly contribute to help level the playing field that will help tackle economic inequality. These initiatives are: Bridging the Skills Gap: Many lack relevant skills, hindering economic mobility. Bromcom's Work Placement Scheme addresses this by equipping young people with valuable work experience and industry knowledge, potentially leading to higher-paying jobs in the future. Breaking the Cycle: Economic inequality often disproportionately affects younger generations. By offering financial support for travel and a potential pathway to full-time employment, the scheme empowers young people from diverse backgrounds to gain a foothold in their careers, potentially disrupting cycles of economic disadvantage. Meritocracy and Inclusivity: Bromcom's focus on ability over educational background creates opportunities for those who excel in their roles, regardless of formal education. This levels the playing field for individuals from lower socio-economic backgrounds, promoting social mobility and financial security. Investing in the Future: Local School Work Placements. Bromcom's commitment to offering work placements to local schools fosters a valuable connection with the community's future workforce. This provides young people with early exposure to potential career paths, helps them develop relevant skills, and broadens their understanding of the professional world. By offering these placements to a diverse range of schools, Bromcom can ensure that young people from all backgrounds have the opportunity to participate, potentially sparking an interest in fields they might not have otherwise considered. This early exposure can empower young people to make informed decisions about their future education and career paths, ultimately contributing to a more equitable distribution of opportunities across society. By focusing on these areas, Bromcom aims to help tackle economic inequality and create a fairer future for all.

  Equal opportunity

  Equal opportunity; Bromcom demonstrates a commitment to fairness and inclusivity through several initiatives: Work Placement Scheme: This program offers valuable work experience to young people, potentially regardless of their background. This levels the playing field for those who might not have access to extensive networks or financial resources for internships. Meritocracy and Ability: Bromcom focuses on an individual's skills and performance, not just educational background. This opens doors for talented individuals who might lack formal qualifications. This is especially beneficial for those from underprivileged communities who may not have had equal access to quality education. Diversity as Strength: Building a diverse workforce with different perspectives and experiences benefits both Bromcom and society. By focusing on ability over background, the company fosters a more inclusive environment and creates opportunities for a wider range of talent. Unconscious Bias Training: Bromcom provides CPD training to staff, and guides hiring managers to ensure fair and unbiased assessments during their recruitment and promotion processes. Mentorship for All: Bromcom's expectation of supervisors and managers to mentor new staff reinforces their commitment to equal opportunities. This personalised guidance and support cater to each individual's specific needs, regardless of their background. By taking these steps, Bromcom solidifies its commitment to equal opportunities and creates a truly inclusive workplace that fosters the potential of all individuals, regardless of background.

  Wellbeing

  Wellbeing; Bromcom champions staff wellbeing by implementing various initiatives that create a positive and supportive work environment. The key approaches taken are: Work-Life Balance: Bromcom empowers employees to manage personal commitments and achieve a healthy work-life balance through flexible working arrangements like remote working and flexible hours. This approach reduces stress and promotes overall wellbeing. Supportive Culture: Bromcom's focus on inclusivity and mentorship fosters a sense of belonging and camaraderie amongst colleagues. This positive and supportive work environment is crucial for staff wellbeing. Professional Development: Bromcom's investment in training and development programmes provides opportunities for ongoing learning and skill development. This empowers staff to feel valued, advance their careers, and fosters a sense of accomplishment and job satisfaction – all contributing to overall wellbeing. Healthy Work Practices: This supportive environment, flexible to employees' needs, indirectly promotes healthy habits. Reduced stress and a positive work culture can lead to better sleep patterns, healthier eating choices, and increased physical activity, all contributing to overall wellbeing. Wellness Programmes: Bromcom has taken a significant step by introducing a mental health wellbeing programme, directly addressing a crucial aspect of employee wellbeing. Regular Feedback: Bromcom encourages open communication and provides opportunities for regular staff feedback, including anonymously if preferred. This empowers staff, demonstrates Bromcom's commitment to addressing their needs, and contributes significantly to their well-being. By implementing these initiatives, Bromcom demonstrates a strong commitment to fostering a healthy and supportive work environment that prioritises the wellbeing of its staff.

Pricing

• Price: £20,000 a licence a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Limited access trial accounts are available following service demonstration and a review of requirements with the MAT. Trial accounts are on a shared sample database and usually limited to one week of access, on a first come, first serve basis. Test migration option to trial service operating with familiar data.
• Link to free trial: https://cloudmis.bromcom.com

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@bromcom.com. Tell them what format you need. It will help if you say what assistive technology you use.