Addresscloud Match & Geocoding API
Addresscloud Match is a leading cloud-hosted address matching and geocoding API. It has been designed to work with OS AddressBase & OSNI Pointer data to return a UPRN and coordinates and works especially well for poor quality addresses.
Features
- Easy to integrate (REST service)
- Highly scalable (to 100s of transactions per second)
- Highly available (99.9% uptime guarantee)
- Fully managed data updates (5 day SLA)
- Single string queries, no fixed schema required
- Excellent match rates (98% + for residential addresses)
- Fuzzy matching, can correct typos and incorrect postcodes
- OS AddressBase, OSNI Pointer and Eircode all supported
Benefits
- Match even poor quality addresses to rooftop coordinates and UPRN
- Cleanse, standardised and deduplicate address records
- No need to manage and process raw OS data
- Fully hosted, save IT infrastructure costs
- Geocoding and reverse geocoding supported
- Supports OSMA, PSMA and NIMA
Pricing
£0.02 a transaction
- Free trial available
Service documents
Request an accessible format
Framework
G-Cloud 13
Service ID
6 2 4 4 9 4 2 2 1 7 4 8 3 7 3
Contact
Addresscloud Ltd
Mark Varley
Telephone: +44 1223 625360
Email: sales@addresscloud.com
Service scope
- Software add-on or extension
- No
- Cloud deployment model
- Public cloud
- Service constraints
- None
- System requirements
-
- No third party software licences required
- Compatible with any programming language that supports REST
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
- Technical support is available to all customers through support@addresscloud.com 9am to 5pm Monday to Friday and we respond to all tickets within 1 working day. Telephone and out of hours support including 24/7 is available for an additional cost.
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- None or don’t know
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Onsite support
- Yes, at extra cost
- Support levels
- Email support is available to all customers Monday to Friday 9am to 5pm UK time (excluding public holidays). Telephone and out of hours support up to 24/7 is available at additional cost dependent on requirements. All customers will have access to their account manager.
- Support available to third parties
- Yes
Onboarding and offboarding
- Getting started
- Users are provided with instructions and samples (we recommend Postman) to enable them to quickly get started with the API. We also provide getting started and training videos. Onsite and face-to-face web training are available on request.
- Service documentation
- Yes
- Documentation formats
- HTML
- End-of-contract data extraction
- We do not store any customer data as part of the Address Match API
- End-of-contract process
- The API key is disabled and the service is no longer accessible
Using the service
- Web browser interface
- No
- Application to install
- No
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
- None
- Service interface
- No
- User support accessibility
- None or don’t know
- API
- Yes
- What users can and can't do using the API
- The API is used for matching addresses, users are supplied with an API key and Client ID which must be used for authenticating to the service. The API cannot be used for setting up or managing users, this is done by the Addresscloud support team.
- API documentation
- Yes
- API documentation formats
- HTML
- API sandbox or test environment
- Yes
- Customisation available
- Yes
- Description of customisation
- The datasets used can be customised by Addresscloud support agents to return certain attributes.
Scaling
- Independence of resources
- All Addresscloud services are fully performance tested and capacity is actively managed to ensure there is sufficient availability if resources for all customers. We employ serverless architectures and managed services wherever possible for our services and provide a full SLA including maximum response times.
Analytics
- Service usage metrics
- Yes
- Metrics types
- We record service metrics on the number of calls to the API, average latency, match rates, transactions per second, calls per dataset, locations of matched addresses
- Reporting types
-
- Real-time dashboards
- Regular reports
- Reports on request
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- None
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
-
- United Kingdom
- European Economic Area (EEA)
- User control over data storage and processing locations
- No
- Datacentre security standards
- Complies with a recognised standard (for example CSA CCM version 3.0)
- Penetration testing frequency
- At least every 6 months
- Penetration testing approach
- ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
- Protecting data at rest
-
- Physical access control, complying with CSA CCM v3.0
- Encryption of all physical media
- Data sanitisation process
- Yes
- Data sanitisation type
- Deleted data can’t be directly accessed
- Equipment disposal approach
- Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001
Data importing and exporting
- Data export approach
- We do not store any customer data in the Addresscloud Match API
- Data export formats
- Other
- Other data export formats
- N/A
- Data import formats
- Other
- Other data import formats
- N/A
Data-in-transit protection
- Data protection between buyer and supplier networks
-
- TLS (version 1.2 or above)
- Legacy SSL and TLS (under version 1.2)
- Data protection within supplier network
-
- TLS (version 1.2 or above)
- Legacy SSL and TLS (under version 1.2)
Availability and resilience
- Guaranteed availability
- All Addresscloud services are covered by a 99.9% uptime guarantee and we do not schedule downtime or maintenance windows. Service credits are offered when the Service is unavailable for periods of 30 minutes or more in any calendar month. You will have one day of your monthly service fee credited to your account if the total outage period in a month is 30 minutes or more and an additional day for each additional 30 minutes of downtime up to 50% of your monthly hosting fee.
- Approach to resilience
- The Addresscloud Match API supports many commercial applications including online insurance quotation engines where 24/7 uptime is critical. We have designed and built a cloud-first architecture following best practices of our cloud partner AWS. Our application layer uses serverless technology to ensure we are always on and we use AWS managed database services that are replicated over 3 data centres for high availability. All services are fully monitored and an engineer is on call 24/7 to respond to any automated alerts.
- Outage reporting
- We provide a public status page at status.addresscloud.com which provides real-time updates and a dashboard showing the current health of all Addresscloud services. Customers may signup for email alerts from the status page.
Identity and authentication
- User authentication needed
- Yes
- User authentication
- Username or password
- Access restrictions in management interfaces and support channels
- Addresscloud uses two separate thrid-party services to manage user access to its customer-facing applications and internal tools (who conform to standards incl. ISO 27001:2013, 27018:2014). Management interfaces and support channels are only accessible by Addresscloud employees, and require secure passwords and 2FA. These requirements are documented in our Information Security Policy.
- Access restriction testing frequency
- At least every 6 months
- Management access authentication
-
- 2-factor authentication
- Identity federation with existing provider (for example Google Apps)
- Username or password
Audit information for users
- Access to user activity audit information
- Users receive audit information on a regular basis
- How long user audit data is stored for
- At least 12 months
- Access to supplier activity audit information
- Users contact the support team to get audit information
- How long supplier audit data is stored for
- At least 12 months
- How long system logs are stored for
- At least 12 months
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- UKAS
- ISO/IEC 27001 accreditation date
- 06/12/2021
- What the ISO/IEC 27001 doesn’t cover
- N/A
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- No
- Other security certifications
- No
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
- ISO/IEC 27001
- Information security policies and processes
-
As a distributed, data-centric company, Addresscloud uses a Zero-trust approach to securing its infrastructure and services. In this way, working at the individual level, the company uses a principal of least possible level of access, which along with Zero-trust mean that all employee interactions with Addresscloud services are authenticated and authorized using an approved method.
Addresscloud's security practices are described in a suite of nine policies, which are broadly divided into three categories; data, services, and individuals. Data policies, including Data Protection and Security are formed around a Data Classification Policy which drives policy implementation of who, and what has access to Addresscloud's data, and how it is accessed. Services cover how Addresscloud secures its customer-facing applications using industry standards, and falls within the remit of Software Engineering. Policies for Individuals detail how Addresscloud employees can interact with Addresscloud systems (adhering to principals of zero trust), including levels of responsibly and methods of reporting and communicating security issues at all levels.
Operational security
- Configuration and change management standard
- Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
- Configuration and change management approach
- Addresscloud uses an Infrastructure As Code (IAC) approach for managing infrastructure, which is revision controlled alongside the services' software. This enables fine-grained change management of both infrastructure and software changes, including a log of change request and approval for audit processes. Changes are discussed with, and approved by senior management prior to deployment. Addresscloud operates multiple separate environments for development, user-acceptance testing and production services, so that changes can be tested internally and by customers prior to production deployments.
- Vulnerability management type
- Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
- Vulnerability management approach
- Threat intelligence, including vulnerability details, are evaluated against each layer of the Addresscloud infrastructure. Addresscloud uses a serverless architecture, with virtual and physical machines managed and patched in real-time by our service provider. Addresscloud operates continuous vulnerability scanning of its cloud infrastructure, providing real-time checks against known vulnerabilities. Intelligence is regularly monitored and gathered from relevant publications including NCSC advisories.
- Protective monitoring type
- Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
- Protective monitoring approach
- Potential compromises may be detected by our automated monitoring systems detecting unusual traffic patterns, by a staff member, or by a customer. Vulnerability scanning is performed against cloud infrastructure daily. Breach indicators are listed in our Cyber Security Incident Policy. The CTO is responsible for coordinating response to potential compromises; identifying what has happened, what is affected, remediation steps, internal feedback for future improvements. Addresscloud responds to incidents on day of notification, with a resolution target of 24 hours. Our monitoring process is in scope for our ISO 27001 certification.
- Incident management type
- Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
- Incident management approach
- Addresscloud's incident management process is documented in its Security Incident Policy (staff procedures) and in the Business Continue Plan (BCP committee actions). Users report incidents to the technical incident response team (documented in Policies). Incident reports are provided by the CTO back to the company in form of verbal description in first-instance, and then written report to be distributed internally and to customers if required. The incident management process is tested throughout the year as part of the BCP internal audit schedule. The process is in-scope for our ISO 27001 certification.
Secure development
- Approach to secure software development best practice
- Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)
Public sector networks
- Connection to public sector networks
- No
Social Value
- Fighting climate change
-
Fighting climate change
Addresscloud provide services which can be used to help our customers better understand current and future environmental risk. We partner with data providers who include future climate scenarios for perils such as flood and subsidence. Addresscloud services are delivered using a serverless architecture which significantly reduces our carbon footprint when compared to services delivered using traditional on-premise or hosted servers. Addresscloud is a fully remote employer and has a comprehensive environmental policy including carbon offsetting for all of our employees.
Pricing
- Price
- £0.02 a transaction
- Discount for educational organisations
- No
- Free trial available
- Yes
- Description of free trial
- We provide a free non-commercial trial of up to 100 transactions up to 30 days. Longer trials are available on request