SYNECTICS SOLUTIONS LIMITED

SIRA

SIRA is a fully hosted fraud prevention and risk decisioning service that uses multi-sector adverse data, machine learning and configurable rules to detect and prevent fraud. It supports sophisticated workflow management and automated decisioning to reduce losses while enhancing legitimate customer journeys.

Features

• Multi-sector adverse data integration
• Configurable rules-based decision engine
• Machine learning fraud detection models
• Sophisticated workflow management
• Real-time risk assessment
• Secure cloud-hosted platform
• Web-based user interface
• API integration for system connectivity
• Audit logging and traceability

Benefits

• Reduce fraud losses across multiple channels
• Improve decision accuracy using adverse data
• Enhance customer journeys for low-risk users
• Automate fraud decisioning processes
• Prioritise high-risk activity efficiently
• Reduce manual review effort
• Support consistent, auditable decisions
• Scale fraud prevention operations
• Integrate seamlessly with existing systems

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsectorservices@synectics-solutions.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

563561688877318

Contact

Louise Williams
0333 234 3409
publicsectorservices@synectics-solutions.com

About your service

• Service categories:

  Applications

  Enterprise resource management

  Financial

  • Treasury and Risk Management Applications
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: SIRA is delivered as a cloud-hosted SaaS service and requires network connectivity and supported browsers or system integrations. Service effectiveness depends on the availability and quality of customer-provided data. Planned maintenance is performed during scheduled maintenance windows. Bespoke functionality beyond configuration may require additional professional services.
• System requirements:
  • Modern, standards-compliant web browser
  • Secure internet connectivity
  • HTTPS access enabled
  • Supported desktop or laptop device
  • API connectivity for integrations
  • Secure data transfer capability
  • Data feed from the user to conform to Schema provided.

User support

• Email or online ticketing support: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Synectics Solutions provides structured support for the SIRA service in line with agreed service level agreements. SIRA is available 24 hours a day, 7 days a week, including Bank Holidays. Standard support is provided for 12 hours per day, with 24-hour support available at additional cost.; ; Support is delivered via telephone and email by a dedicated Business Operations function. This includes an Application Support Team responsible for incident management, operational monitoring, issue tracking and resolution, supported by a second-line support channel. A Problem Management Team investigates underlying issues and works to reduce the risk of incident recurrence.; ; Application Support and Service Desk hours are 07:00–19:00 GMT, Monday to Friday, excluding public holidays in England and Wales. Severity 1 and 2 incidents may be reported outside core hours, including early mornings, evenings, weekends and public holidays, within defined escalation windows.; ; Standard support is included in the service price. Extended hours or 24/7 support options are available at additional cost, priced on a case-by-case basis. Dedicated technical account management or cloud support engineer support can also be provided as part of enhanced support arrangements, subject to agreement.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Synectics Solutions supports users in getting started with SIRA through a structured onboarding approach. New and existing customers have access to a dedicated help desk that provides training and guidance. A full suite of user guides is provided to support independent use of the service. Training can be delivered through hosted online sessions or on-site where required. Customers are supported by a dedicated service manager who oversees onboarding and ensures users are able to use the service effectively.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: When the contract ends, Synectics Solutions works with the customer to support data extraction in line with the termination policies defined in the contract. Data is provided in agreed formats and transferred securely prior to service termination to ensure a controlled and compliant exit process.
• End-of-contract process: At the end of the contract, Synectics Solutions works with the customer to agree the service exit process, including data extraction, service disablement and data deletion, in line with contractual terms. Once termination is confirmed, the service is disabled and fully decommissioned, and customer data is securely deleted following agreed processes.; ; Standard end-of-contract activities, including coordination of service shutdown, data extraction in agreed formats and confirmation of decommissioning, are included in the contract price. Any additional or non-standard activities, such as extended access periods, bespoke data handling or additional support, may be provided at additional cost subject to agreement.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Onboarding and offboarding documentation for SIRA is provided in standard digital formats that can be accessed using commonly available devices and software. Where required, Synectics Solutions can provide alternative formats or additional guidance to support users with specific accessibility needs.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Other
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: SIRA is accessed through a secure, browser-based web interface that enables authorised users to manage and review risk and fraud decisions. The interface supports case investigation, decision review, workflow management, configuration of rules and thresholds, reporting, and audit activity, subject to role-based access controls. In addition, SIRA provides secure APIs that allow customer systems to submit data for assessment and retrieve decision outcomes, enabling integration with existing operational and case management systems.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: Accessibility of the SIRA service interface has been informed by usability testing and internal quality assurance activities, including testing with common assistive technologies. Where required, feedback from customer users informs further accessibility refinements and reasonable adjustments.
• API: Yes
• What users can and can't do using the API: SIRA provides APIs to support the secure supply of data into the service for fraud assessment and decisioning. Users can submit data via the API in line with agreed formats and integration configurations tailored to their operational needs.; ; The service is not set up through the API. Initial onboarding, configuration of rules, workflows and decision logic are managed by Synectics Solutions. Changes to API integrations are agreed with the client and implemented through controlled change processes rather than directly through the API.; ; The API cannot be used to modify service configuration, rules, workflows or machine learning models. Its use is limited to data ingestion only and does not provide administrative or configuration capabilities. This ensures consistent service behaviour, security and governance while supporting flexible data integration.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Users can customise SIRA to meet their specific business and operational needs through modular configuration.; ; Customers can pick and choose from a range of SIRA modules to tailor functionality, optimising fraud prevention, risk assessment and workflow capabilities to suit their requirements.; ; Customisation is agreed during onboarding or through formal change requests. Selected modules and configurations are enabled within the service without requiring code changes, ensuring rapid and controlled tailoring of the solution.; ; Customisation is requested by authorised customer representatives, such as service managers or administrators. Synectics Solutions implements and governs module configuration to ensure service integrity, performance and security.

Scaling

• Independence of resources: Synectics Solutions ensures users are not adversely affected by demand from other users through a resilient and scalable service architecture. Capacity and performance are regularly tested to confirm sufficient headroom. Load balancing is used to distribute demand efficiently, supported by multiple internet connections and redundant components to provide resilience and consistent service performance across users.

Analytics

• Service usage metrics: Yes
• Metrics types: SIRA provides service-level metrics to support operational oversight and service management. These include transaction and assessment volumes, case and alert counts, decision outcomes, user activity levels, and processing times. Metrics are presented through dashboards and reports within the service interface, enabling authorised users to monitor usage, performance and trends over time. Metrics support audit, capacity planning and continuous service improvement.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: Data at rest is protected by hardened server builds, AD and SQL server security and Network segregation.
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: SQL Web Tool Module; Bespoke MI Requests/ exports
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Excel
  • .Txt
• Data import formats:
  • CSV
  • Other
• Other data import formats: .Txt

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Synectics Solutions guarantees 98% service availability, measured in accordance with the customer’s agreed service level agreement. Planned development, upgrades and maintenance are performed within scheduled maintenance windows and executed outside normal operating hours to minimise impact.; ; Availability targets, measurement criteria and exclusions are defined in the SLA. Where guaranteed availability levels are not met, compensation or service credits are discussed and agreed with the customer through the Client Success Manager, in line with the contractual SLA terms.
• Approach to resilience: SIRA is designed with resilience built into both the application and infrastructure layers to protect assets and maintain availability. The service is load balanced across multiple virtual machines, enabling continued operation if individual components fail and allowing workloads to be migrated to new physical hardware when required. Systems are engineered to be highly fault tolerant, using dual power supplies and redundant network connections.; ; The service is hosted in highly resilient data centres equipped with uninterruptible power supplies, backup generators and FM200 fire suppression systems. Data centres are served by multiple internet service provider connections to ensure network resilience. A dedicated Business Continuity Management department oversees continuity planning, testing and response. Further details of the resilience architecture are available on request.
• Outage reporting: Service outages are reported directly to customers in line with contractual arrangements. Where an outage exceeds the customer’s contractual targets, Synectics Solutions notifies the client with details of the issue, estimated resolution times and proposed remediation. Notifications are provided through direct communication such as email or telephone. The service does not provide a public status dashboard or an outage reporting API.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is tightly controlled. SIRA users can only access the service from allow-listed IP addresses. Each client accesses a dedicated service instance identified by a unique domain. All users authenticate using unique user IDs verified by the application, with role-based access controls enforced. Client administrator accounts are provided to manage user provisioning, permissions and access levels within their organisation.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users receive audit information on a regular basis
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cyber Essentials,; Specified Ant-Fraud Organisation (SAFO) Status
• Information security policies and processes: Synectics Solutions operates a formal Information Security Management System (ISMS) certified to **ISO/IEC 27001:2013**, supported by fully documented security policies and procedures.; ; Overall responsibility for information security rests with the **Chief Information Security Officer (CISO)**, who reports to the **Legal & Compliance Director**. An **ISMS Review Committee**, including at least one Director, meets twice annually to review security posture, risk and compliance. A **Security Strategy Group** meets fortnightly to oversee ongoing security governance. A dedicated **IT Security team** manages operational security, while **physical security** is the responsibility of the Facilities team.; ; Synectics adheres to **Cyber Essentials**, established **Security Operating Procedures (SyOPS)**, and **protective monitoring controls** selected from **GPG13**, informed by **IS1 risk assessments**. Monitoring is designed to protect **OFFICIAL** information. An assessment against **GPG43 (RSDOPS)** has been completed, systems have been continuously accredited since 2009, and all **14 government cloud security principles** are met in the secure delivery of services.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Configuration and change management processes are operated in line with ITIL V3.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Synectics Solutions operates a structured vulnerability management process aligned with its ISO/IEC 27001–certified ISMS. Potential threats are assessed through annual penetration and vulnerability testing, continuous monitoring and risk-based analysis. Where significant risks are identified, the Business Continuity Plan is invoked to manage remediation. Patch deployment follows a defined patching policy, prioritised by risk and severity. The IT Security team monitors multiple threat intelligence sources, including NCSC guidance, vendor advisories, AlienVault Open Threat Exchange and industry feeds, and participates in the NCSC Cyber Security Information Sharing Partnership (CiSP).
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Synectics Solutions operates protective monitoring in line with documented security policies and accredited RMADS. Potential compromises are identified through continuous monitoring using intrusion prevention and detection systems (IPS/IDS) and a Security Information and Event Management (SIEM) solution, providing oversight, assurance and user accountability. Annual penetration and vulnerability testing further supports identification of weaknesses.; ; When a potential compromise is identified, incidents are assessed, contained and investigated in accordance with the Information Security Incident Management policy. Response actions are prioritised by severity, with prompt escalation and remediation to minimise impact and reduce the risk of recurrence.
• Incident management type: Supplier-defined controls
• Incident management approach: Synectics Solutions operates a formal incident management process aligned with NCSC guidance, industry best practice and ISO/IEC 27035. Pre-defined processes are in place for common security and service incidents, supported by documented escalation and response procedures. Users report incidents through dedicated helpdesk facilities via telephone or email. Incidents are assessed and managed in line with the Security Incident Management Policy, with remediation actions supported by relevant departmental Business Continuity Plans. Incident reports are provided to customers, detailing impact, actions taken and outcomes, and can be reviewed during onsite visits or secure video conferences.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: SIRA does not provide a free production version. A time-limited proof of concept can be offered to demonstrate the uplift and value delivered when applied to existing processes. The proof of concept is scoped with the customer and excludes full production functionality and ongoing operational use.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI Assurance UK Ltd
• ISO/IEC 27001 accreditation date: Sunday 14 December 2025
• What the ISO/IEC 27001 doesn’t cover: There are no exclusions, it covers the entire organisation
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 5481ad36-f8b8-4fbf-a885-0fc0b874aed6
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 45d04f71-6b83-45f8-a067-3157e440a657
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
    • How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsectorservices@synectics-solutions.com. Tell them what format you need. It will help if you say what assistive technology you use.