STATLOG PRO LIMITED

Statlog

Statlog provides a unified platform for schools, higher education, local authorities, and dioceses to manage their entire estate. It integrates full capital programme delivery and project management with statutory compliance, assets, and maintenance. Combined with expert support, it gives leadership teams the oversight needed for safer, more efficient buildings.

Features

• Centralised statutory compliance management for schools and trusts
• Integrated helpdesk and fault reporting system
• Planned preventative maintenance scheduling tools (PPM)
• Asset and premises condition management
• Capital funding programme management
• Project compliance and safety management
• Secure document and contract management
• Contractor database with compliance checks
• Site manager and contractor statutory testing tools
• Strategic building survey and prioritisation tools

Benefits

• Reduce risk of missed statutory compliance
• Improve oversight of estates and facilities
• Save time managing inspections and records
• Support safer, compliant school environments
• Simplify capital and maintenance planning
• Improve accountability across trust portfolios
• Centralise premises information in one system
• Enable faster issue resolution
• Strengthen audit readiness
• Support informed funding decisions

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at richard.melis@statlog.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

579666323366725

Contact

Richard Melis
03331123133
richard.melis@statlog.co.uk

About the service

• Service categories:
  • Applications
    • Content workflow and management
      • Document
        • Document
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: There are no service constraints. The software is compatible with any current, vendor-supported, secure operating system that can run a current, vendor-supported UK-available internet browser.
• System requirements:
  • Current vendor-supported operating system
  • Current vendor-supported UK-available web browser
  • Reliable internet connection
  • Device capable of running a modern web browser

User support

• Email or online ticketing support: Yes
• Support response times: We aim to respond to support queries as quickly as possible during normal working hours. Response times may vary depending on query complexity and volume
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Statlog provides telephone and email helpdesk support during normal business hours. Support requests are logged through the helpdesk and categorised by severity (critical, serious, moderate, minor). We aim to respond promptly, with faster responses for higher-severity issues. Support is provided remotely. Built-in guidance is included within all modules. Optional implementation and training support is available. Full-day training courses start from £259 (plus VAT) per person. A dedicated account manager is provided as standard.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Statlog provides structured onboarding and ongoing support to help users start using the service quickly and confidently.; ; Our compliance experts configure the statutory compliance schedule for each school, ensuring all required checks and inspections are correctly set up from the outset.; ; Onboarding is typically delivered remotely by a Statlog specialist and covers system setup, key features, and best-practice use, including compliance management, asset setup, reporting, and helpdesk workflows. On-site onboarding can also be discussed where required.; ; Users have access to written guidance, video guidance, in-system help content, and Statlog AI — a trained assistant that provides contextual support and guidance within the platform. Ongoing assistance is available throughout the agreement via Statlog’s expert-led telephone helpdesk, offering practical advice from our experts.; ; Refresher training can be arranged where required.
• Service documentation: Yes
• Documentation formats: HTML
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: All onboarding and offboarding documentation is provided within the Statlog software platform, which is a web-based application accessed through a standard internet browser. Guidance is available as in-platform HTML content and in-system help, including Statlog AI. Documentation can be accessed on desktop, tablet and mobile devices.
• End-of-contract data extraction: When a contract ends, customers can request a copy of their data from Statlog. Data is provided in a standard, commonly used digital format following the request, in line with the terms of the agreement and data protection requirements.
• End-of-contract process: At the end of the initial term, the contract automatically rolls into a rolling 12-month agreement unless either party gives written notice by the last day of the eleventh month of the final contract year.; ; If the contract is terminated, the customer must cease using the service. All licences end immediately.; ; Within 30 days of termination:; • Any outstanding charges for services already provided must be paid.; • Any prepaid charges for unused services will be refunded.; ; Within 10 business days of termination, the customer must delete all copies of the software and related materials from their systems.; ; Customer personal data will be deleted or returned at the customer’s request, unless legal obligations require retention.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Statlog is a web-based application that provides full access on any internet-enabled device.
• Service interface: Yes
• Description of service interface: Statlog is accessed through a secure web-based interface. Users log in via a browser to view dashboards, manage compliance tasks, record inspections, track projects, log helpdesk issues, and access documents.
• Accessibility standards: None or don’t know
• Description of accessibility: The service can be accessed using standard web browsers on desktop, tablet, and mobile devices. Users can navigate using a keyboard and mouse, or touch on mobile devices. Screen magnification tools provided by the operating system or browser can be used.
• Accessibility testing: No formal assistive technology testing has been conducted. The service is designed to work with standard browser accessibility features.
• User support accessibility: None or don’t know
• API: No
• Customisation available: Yes
• Description of customisation: Statlog is provided as a standard, out-of-the-box service. Buyers can configure settings, schedules, user roles, site information, workflows, and reporting preferences to suit their organisation. Customisation is completed by authorised users through the system interface. No bespoke software development is required.

Scaling

• Independence of resources: Statlog is delivered as a cloud-hosted, multi-tenant service with scalable infrastructure.; System resources are monitored and managed to ensure consistent performance for all users.; ; Usage by one customer does not reduce service availability or performance for others.

Analytics

• Service usage metrics: Yes
• Metrics types: The service provides in-system visibility of usage and activity, including user logins, compliance actions, inspections recorded, tasks completed, asset records, and helpdesk activity.; Customers can view this information directly within the platform to monitor operational usage and compliance performance.
• Reporting types: Real-time dashboards
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Users can export their data using several supported methods.; ; Statlog will work with customers to provide access to their data in a suitable format and through an appropriate export method, depending on the type and volume of data requested.; ; Support is available to assist with the export process where required.
• Data export formats:
  • CSV
  • Other
• Data import formats:
  • CSV
  • ODF
  • Other

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The service uses cloud-hosted infrastructure and reasonable endeavours are made to maintain availability.; ; 100% uptime is not guaranteed. Downtime caused by maintenance, force majeure events, internet failures, or customer system issues is not considered a breach of contract.; ; The agreement does not include a formal availability SLA or service credit / refund scheme.
• Approach to resilience: Statlog is hosted on resilient cloud infrastructure designed for high availability and fault tolerance. The service uses geographically distributed data centres with built-in redundancy for power, networking, and storage.; ; Data is regularly backed up and can be restored in the event of system failure. Security updates and maintenance are applied routinely to maintain service stability and performance.; ; The platform is monitored to identify and respond to service issues promptly. Planned maintenance is carried out where required to support long-term reliability and security.; ; Datacentre resilience and physical security controls are managed by the hosting provider in line with recognised international standards. Further technical details can be provided on request.
• Outage reporting: Statlog does not provide a public status dashboard or outage API.; ; If a service issue occurs, customers are informed through direct communication, such as email notifications or updates from the support helpdesk.; ; Users can also report issues via the helpdesk during business hours, where incidents are logged, monitored, and managed until resolved.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces is restricted to authorised staff using individual user accounts and role-based permissions. Only approved personnel can access administrative functions.; ; Support channels are accessed through verified email or phone contact. Requests are logged and handled by authorised support staff.; ; User access to the platform is controlled through secure login credentials, and permissions are assigned based on user roles to limit access to relevant features and data.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: No
• Security governance approach: Statlog follows recognised secure software development and operational security practices aligned with the UK Software Security Code of Practice.; ; Security responsibilities are defined internally, with controls in place for access management, data protection, incident response, and regular system updates.; ; The service is hosted on AWS infrastructure, which provides certified physical and technical security controls. Statlog applies secure configuration, monitoring, and patching processes to maintain system integrity and protect customer data.; ; While the organisation is not formally certified to a specific security standard, security governance processes are reviewed and maintained to support ongoing risk management and service reliability.
• Information security policies and processes: Statlog follows documented information security policies covering access control, data protection, incident response, system updates, and staff responsibilities.; ; User access is role-based and restricted to authorised personnel. Customer data is protected through secure configuration, encryption, and monitored system access. Security updates and patches are applied regularly.; ; Any security incidents are logged, investigated, and managed through internal reporting processes. Where required, customers are informed of relevant issues affecting their data or service availability.; ; Staff receive ongoing security and data protection training to ensure policies are understood and followed. Compliance with security procedures is reviewed internally to support continuous improvement and risk management.; ; The service is hosted on AWS infrastructure, which provides certified physical and technical security controls aligned with recognised international standards.

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Statlog maintains an internal change management process for software updates and configuration changes. System components are tracked through version control and documented releases.; ; All changes are reviewed, tested, and vulnerability-scanned as part of the CI/CD pipeline before deployment to assess operational and security impact. Security updates and patches are prioritised where required.; ; Changes are implemented in a controlled manner to minimise service disruption, with post-release monitoring to ensure stability and performance.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Statlog monitors potential security risks through system alerts, supplier security updates, and industry guidance. The service is hosted on AWS infrastructure, which provides continuous security monitoring and vulnerability notifications.; ; Potential threats are assessed based on severity and impact. Security patches and updates are prioritised and deployed as soon as practical, with critical fixes applied promptly.; ; Information about emerging threats is sourced from AWS security bulletins, software suppliers, and relevant industry security advisories. Changes are tested before release to maintain system stability and security.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Statlog uses system monitoring, access logs, and security alerts to identify potential compromises. The service is hosted on AWS, which provides continuous infrastructure-level monitoring and threat detection.; ; If a potential security issue is identified, it is investigated promptly and appropriate action is taken to contain and resolve the issue. This may include access restrictions, system updates, or security patches.; ; Incidents are logged and reviewed, and customers are informed where relevant. Response times are prioritised based on the severity and potential impact of the issue.
• Incident management type: Supplier-defined controls
• Post-quantum cryptography secure: No
• Incident management approach: Statlog has predefined internal processes for handling common service and security incidents.; ; Users report incidents through the support helpdesk by email or phone during business hours. Issues are logged, assessed, and prioritised based on severity and impact.; ; Incidents are investigated promptly, with actions taken to contain and resolve the issue. Where relevant, customers are informed of the incident and any actions required.; ; Incident details and outcomes can be provided to customers on request.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
• Mission: Make Britain a clean energy superpower:

  To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

  Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at richard.melis@statlog.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.