INPLOI LIMITED

Careers sites

Cloud-based careers site software that enables organisations to design, publish and manage accessible, on-brand recruitment experiences. The service integrates with existing Applicant Tracking Systems to present jobs, guide candidates through applications, and provide insight into candidate behaviour before and during apply.

Features

• Job search and filtering
• Mobile-first design
• Accessibility features
• ATS integration
• Content management system
• Real-time reporting
• Mobile-first design
• Multi-language support
• ISO27001 certification

Benefits

• Improves access to jobs
• Reduces candidate drop-off
• Consumer grade candidate experience
• Application pre-qualification saves time
• Better qualify applications
• Roles filled more quickly for lower cost
• Enhanced employer brand equity
• Seamless ATS integrated experience
• Configurable in any language

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at dean@inploi.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

567069257394507

Contact

Dean Webb
07967142576
dean@inploi.com

About your service

• Service categories:

  Applications

  Content workflow and management

  • Capture
  • Creative

  Content services

  • Enterprise Content Management Applications

  Persuasive content management

  • Website Software

  Enterprise portals and digital workspaces

  • Multi-Audience Portals
  • Integrated Employee Workspaces
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes
• What software services is the service an extension to: Applicant Tracking Systems
• Cloud deployment model: Public cloud
• Service constraints: Requires internet access and integration access to an Applicant Tracking System to synchronise jobs and applications. Advanced customisation may require professional services.
• System requirements:
  • Modern web browser and internet connection
  • Installed applicant tracking system

User support

• Email or online ticketing support: Yes
• Support response times: SLA response times range from 3 hours for emergency issues to 72 hours for non-critical issues.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AAA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: We have two support packages: standard and advanced. ; ; Every account is assigned a customer success manager. ; ; £1k-£10k pa
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Comprehensive onboarding with dedicated customer onboarding team, including dedicated customer success manager.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Data extraction request. ; ; Most data is already within the ATS.
• End-of-contract process: At the end of the contract access to the service is terminated and integrations with the client ATS are switched off.
• Documentation accessibility standard: WCAG 2.2 AAA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: N/a
• Service interface: No
• User support accessibility: WCAG 2.2 AAA
• API: Yes
• What users can and can't do using the API: The service links to client Applicant Tracking Systems, with job vacancy data updated via API and candidate data (along with any screening data) delivered back into the ATS,
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Customisation via the inploi CMS, Studio.; ; All imagery, copy, user experience, site components, application flows. ; ; Customised by users or the dedicated customer success manager.

Scaling

• Independence of resources: The service uses a multi-tenant architecture with logical isolation, autoscaling infrastructure and traffic management at the edge. Resources scale automatically based on demand, with rate limiting and monitoring in place to prevent any single customer’s usage from impacting the performance or availability experienced by other users.

Analytics

• Service usage metrics: Yes
• Metrics types: Metrics include job views, search activity, application starts and completions, drop-off rates, time to apply, source attribution, device type, location, and candidate journey performance. Metrics provide visibility into how candidates find roles, where friction occurs, and how changes impact engagement and conversion.
• Reporting types:
  • Real-time dashboards
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: NCSC approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Data Erasure

Data importing and exporting

• Data export approach: Via their dashboards in csv format, or by request to their customer success manager.
• Data export formats: CSV
• Data import formats: Other
• Other data import formats: N/a

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The service is provided with a 99.9% availability target, excluding planned maintenance. Availability is monitored continuously.; ; Where availability falls below the agreed service level, service credits may be applied in line with contractual terms. Planned maintenance is communicated in advance and scheduled to minimise disruption to users.
• Approach to resilience: The service is built on distributed public cloud infrastructure with redundancy across multiple availability zones. Traffic is routed via global edge services to improve resilience and performance. Systems are continuously monitored, with automated scaling, failover and backup processes in place to reduce the impact of infrastructure or component failure.
• Outage reporting: >Email alerts ; >Service availability and outage dashboard.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is restricted using role-based access controls and the principle of least privilege. Only authorised personnel are granted access, with permissions reviewed regularly. Administrative access is protected by strong authentication and logging. Support teams access customer data only where necessary to provide support, following documented approval and audit processes.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: The service follows documented information security policies aligned to ISO 27001 principles. Policies cover access control, data protection, incident management, change management and secure development.; ; Responsibility for information security sits with the organisation’s Data Protection Officer, reporting to senior management. Compliance is ensured through staff training, role-based access controls, monitoring, regular reviews and internal audits.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: The service uses documented configuration and change management processes. Service components are version-controlled and tracked throughout their lifecycle. Changes are proposed, reviewed and approved before deployment, with automated testing and rollback procedures in place. Security impact is assessed for all material changes, including changes to infrastructure, access controls and data handling. Changes are deployed using controlled release processes and monitored to ensure service stability and security.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Vulnerabilities are managed through an established Information Security Management System (ISMS) and maintained risk register. Potential threats are identified through regular risk assessments, vulnerability scanning, third-party penetration testing and supplier security advisories. Risks are assessed for impact and likelihood, prioritised, and tracked to remediation. Security patches are deployed promptly using controlled release processes, with critical vulnerabilities addressed as a priority and monitored through ongoing review.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: The service uses protective monitoring defined within the organisation’s ISMS. Centralised logging, automated alerts and monitoring tools are used to identify unusual activity, access anomalies and potential security incidents. Alerts are reviewed promptly and investigated in line with documented incident response procedures. Confirmed or suspected compromises are contained, assessed and escalated according to severity. Response times are prioritised based on risk, with critical incidents addressed immediately and tracked through to resolution and post-incident review.
• Incident management type: Supplier-defined controls
• Incident management approach: The service operates a documented incident management process within the organisation’s ISMS, including predefined procedures for common security and service incidents. Users can report incidents via support email or ticketing channels. Incidents are logged, assessed and managed according to severity, with escalation where required. Customers are informed of relevant incidents through agreed communication channels, and incident reports are provided following resolution, including root cause and corrective actions where appropriate.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 10%
• Between £1,000,001 and £2,500,000: 12.5%
• Between £2,500,001 and £5,000,000: 15%
• Over £5,000,001: 17.5%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: PERRY JOHNSON REGISTRARS, INC.
• ISO/IEC 27001 accreditation date: Thursday 19 December 2024
• What the ISO/IEC 27001 doesn’t cover: N/a
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 98bd029e-0c7c-4065-8460-9295a6bf8678
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at dean@inploi.com. Tell them what format you need. It will help if you say what assistive technology you use.