INOAPPS LIMITED

Inoapps Construction Industry Scheme (CIS) Cloud Solution

CIS Cloud delivers an end-to-end process in a single, fully integrated Cloud solution. Access up-to-date information on the HMRC-registered status of all your Subcontractors, Create and submit CIS Tax Returns to HMRC for payments made under CIS.

Features

• Capture HMRC details and Unique Tax References for all subcontractors
• Automatically validate your records against HMRC records for data integrity
• Automate revalidation of CIS contractor details against the HMRC database
• Identify any changes or discrepancies with subcontractor validation submissions
• Submit monthly HMRC CIS Returns for Withholding Tax entries
• Verify supplier UTR details against the HMRC approved contractor database
• Specify actions through role segregation, and assign duties to users
• Integrate with Oracle allowing efficient payments to HMRC reducing errors
• Generate submission reports for each period that collate subcontractor deductions

Benefits

• Save time and avoid costly mistakes with automated/standardised processes
• Maintain compliance with HRMC reducing the likelihood of incurring fines
• Focus on value added tasks rather than process administration

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales.support@inoapps.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

588416721268359

Contact

Becky Harris
07815544357
sales.support@inoapps.com

About the service

• Service categories:
  • Applications
    • Enterprise resource management
      • Financial
        • Financial and Accounting Applications
        • Corporate Tax Management Applications
      • Procurement
        • Procurement
      • Order management and orchestration
        • Order management and orchestration
      • Enterprise performance management
        • Enterprise performance management
      • Project and portfolio management
        • Project and portfolio management
      • Asset life-cycle management
        • Asset life-cycle management
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes
• What software services is the service an extension to: Oracle
• Cloud deployment model:
  • Public cloud
  • Private cloud
• Service constraints: No
• System requirements: Compatible with most browsers

User support

• Email or online ticketing support: Yes, at extra cost
• Support response times: SLA's are client specific. Support is available 24*7
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AAA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: SLA's are client specific and tailored to budgets. All accounts have a Service Delivery Manager allocated alongside a technical lead.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Users are onboarded with full documentation. Training services are also available both online and onsite.
• Service documentation: Yes
• Documentation formats: PDF
• Documentation accessibility standard: WCAG 2.2 AAA
• End-of-contract data extraction: At the end of the contract, data will be available in a machine readable format for extraction.
• End-of-contract process: The Extension is provided on a SaaS provision - this includes the solution, hosting and support.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Mobile services designed for accessibility.
• Service interface: Yes
• Description of service interface: Users access the service (which can be integrated with SSO) via a browser screen.
• Accessibility standards: WCAG 2.2 AAA
• Accessibility testing: Inoapps have undertaken accessibility testing to ensure that the interface aligns with WCAG and industry best practice.
• User support accessibility: WCAG 2.2 AAA
• API: Yes
• What users can and can't do using the API: API services can be used to integrate custom applications - the scope would be specific on customer requirements.
• API documentation: No
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: The solution can be customised by our developers if the requirements make this a requirement.

Scaling

• Independence of resources: Inoapps use Oracle OCI which is a flexible, scalable and segregated service.

Analytics

• Service usage metrics: Yes
• Metrics types: Reports and metrics can be provided for the service - this would be dependent on the scope of the extension.
• Reporting types:
  • Real-time dashboards
  • Regular reports
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Oracle

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with CSA CCM v4.0
• Data sanitisation process: Yes
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Users (with appropriate permissions) can have a data extract screen setup for extraction into CSV, HTML etc.
• Data export formats:
  • CSV
  • ODF
• Data import formats:
  • CSV
  • ODF

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: 99.7% availability in line with the Oracle Hosting and Delivery Policy
• Approach to resilience: Inoapps design our solutions based on industry best practice. Security and resilience is at the heart of the solution. Resilience details for the platform are provided in the Oracle Hosting and Delivery Policy.
• Outage reporting: Email alerts.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
• Access restrictions in management interfaces and support channels: The CIS application can be restricted as per individual customer requirements. This will be part of the design and in line with industry standards.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Multi-Factor Authentication (MFA)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: SOC 1 PT 2, Cyber Essentials. The Oracle Platform is certified to ISO27001.
• Information security policies and processes: Inoapps have a company wide Security Policy that all staff must follow that is owned by our Security Team. Reporting is tiered through the organisation to board level.

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: All changes follow recognised industry standards and controls. This is provided in line with the Oracle Hosting and Delivery Policies as the solution is built on Oracle Cloud Infrastructure.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Our vulnerability management process follows recognised industry standards and controls. This is provided in line with the Oracle Hosting and Delivery Policies as the solution is built on Oracle Cloud Infrastructure.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Proactive Monitoring follows recognised industry standards and controls. This is provided in line with the Oracle Hosting and Delivery Policies as the solution is built on Oracle Cloud Infrastructure.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Post-quantum cryptography secure: No
• Incident management approach: Incident Management follows recognised industry standards and controls. This is provided in line with the Oracle Hosting and Delivery Policies as the solution is built on Oracle Cloud Infrastructure.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 10%
• Between £250,000 and £500,000: 10%
• Between £500,001 and £1,000,000: 15%
• Between £1,000,001 and £2,500,000: 20%
• Between £2,500,001 and £5,000,000: 25%
• Over £5,000,001: 30%

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 05578703-128f-4cdf-b23f-287614ca9103
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: Yes
• Any other security certifications:
  • SOC 1 Type 2
  • SOC 2 Type 1

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
  • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
  • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
  • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
  • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
  • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
  • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
  • How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
  • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract
• Mission: Break down barriers to opportunity:

  By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

  Policy Outcome 6: Employment and training: For those who face barriers to employment

  • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
  • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales.support@inoapps.com. Tell them what format you need. It will help if you say what assistive technology you use.