SAGE (UK) LTD

Sage Intacct – Cloud financial management software and accounting software

Native AI accounting software and cloud-based financial management for public sector organisations. Provides automation of core accounting processes, real-time reporting, multi-entity consolidation, budgeting and planning, compliance, and audit trails. Designed for healthcare financial software, nonprofit financial software, and education to improve organisational efficiency and financial efficiency.

Features

• Multi-entity financial consolidation, financial accounts payable, and financial accounts receivable
• Financial accounts payable automation
• Financial accounts receivable management
• Organisational cash management tools
• Intelligent general ledger and company customisation services
• Financial purchasing support and order entry workflows
• Financial contracts collation and fixed asset management
• Financial projects reporting and spend management tools
• API integration and marketplace application connectivity
• AI anomaly detection and functional AI support services

Benefits

• Supports multiple entity reporting for trusts and multi-campus organizations
• Reduce invoice delays and improve audit trails for compliance
• Improve cash flow visibility and service continuity control
• Maintain accurate real-time cash position with financial anomaly detection
• Streamline accounting accuracy and ensure regulatory compliance
• Accelerate approval cycles and procurement
• Enable faster, data-driven decisions with cash flow visibility
• Improve financial forecasting and improve resource allocation efficiency
• Automate time-consuming accounting processes and connect systems for seamless data
• Prevent and identify irregularities to prevent fraud

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsector@sage.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

652267534778201

Contact

Proposal Team
0800 694 0566
publicsector@sage.com

About the service

• Service categories:
  • Applications
    • Enterprise resource management
      • Financial
        • Financial and Accounting Applications
        • Accounts Payable Applications
        • Accounts Receivable Applications
      • Procurement
        • Procurement
      • Order management and orchestration
        • Order management and orchestration
      • Enterprise performance management
        • Enterprise performance management
      • Asset life-cycle management
        • Asset life-cycle management
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: We publish a weekly 4-hour scheduled maintenance window, which may vary by product and region. If an extended maintenance period is required, the maintenance will be scheduled nights or weekends and will not exceed 8 hours per week whenever possible. For scheduled extended maintenance periods affecting specific customers, we will notify you 48 hours in advance. ; ; Emergency Maintenance: If we reasonably believe that an emergency necessitates immediate attention, then we may perform emergency maintenance with less notice than specified above. Should emergency maintenance be required, we will provide you notice as soon as practicable.
• System requirements:
  • Internet explorer is not supported
  • Google Chrome (latest versions)
  • Microsoft Edge (Chromium-based, latest versions)
  • Mozilla Firefox (latest versions)
  • Safari (latest versions on macOS)

User support

• Email or online ticketing support: Yes, at extra cost
• Support response times: Support inquiries received via our case submission process have an initial response time that is based on Priority and Service Plan chosen Priority 1 issues will be responded to within 1 hour. Priority 2 and 3 cases will be responded to only within our published UKI operating hours and between 2 and 8 hours depending on the Service plan selected.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: We offer an unlimited use of our support helpdesk to a support user that you designate. Our helpdesk services are delivered by our highly experienced and qualified product experts; either by phone or by email, according to customer preference. The service is available between the hours of 8:30am and 5:30pm, 5 days a week, with an average response resolved during the first contact. time of less than 4 hours, and with 86% of support calls being Within the Intacct product there is in-screen access to extensive and easily searchable help function and training resources. Additionally, as a customer, the user can join the Intacct Community granting access to the knowledge base, where users ask or search previously asked questions, receiving answers from other users and experts worldwide.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Sage Intacct helps users get started through a structured onboarding process delivered by Sage accredited implementation partners (implementation is procured separately). These specialist Systems Integrators configure the system to the customer’s requirements, set up core modules, migrate data, and provide tailored, role-based training to ensure users understand how to operate the solution in the context of their organisation. In addition to this bespoke onboarding, customers have access to Sage University, which offers a wide range of online learning courses, guided learning paths, and role-specific training materials to support users at their own pace.; ; Once the system is live, customers can continue developing their skills and knowledge through the Sage Help Centre, which provides searchable articles, videos, how-to guides, and troubleshooting support. Users also have access to the Sage Intacct Community, an online forum where customers can ask questions, share best practices, and engage with peers, experts, and product specialists. This combination of implementation support, structured training, and ongoing self-service resources ensures users can adopt the system effectively and continue to improve their proficiency over time.
• Service documentation: No
• End-of-contract data extraction: Customers can extract all of their data directly from the application before termination. The system includes built-in export tools across all modules, allowing users to download reports, transactions, master data, and lists in formats such as CSV, Excel, XML, and PDF. For organisations needing more advanced extraction, Sage Intacct provides open APIs (REST and SOAP), enabling full data retrieval programmatically, including transactions, master records, and custom objects. Attachments and documents can also be extracted either through the user interface or via the APIs. After the subscription ends, accounts can move into a read-only archive license to allow customers continued access for data extraction, all data remains accessible to the customer for self-service export before the account is closed.
• End-of-contract process: When a customer serves notice to terminate their Sage Intacct contract (30-day minimum notice), they retain full access to the system until the contract expiry date. Customers can self serve to extract all of their data using the standard export tools or APIs at no additional cost until the contract expiry date.; ; At the end of the contract term, system access will be removed unless the customer chooses to renew on a read-only archive licence. This optional licence allows continued access for data review or extraction after the main contract ends and is available at an additional cost. If the customer does not take an archive licence, their data will be securely deleted in line with Sage’s data retention and destruction policies once the access period has ended.; ; Optional paid offboarding services—such as assisted data extraction, or tailored archival reporting—can also be requested if customers require support beyond the standard included functionality.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Development of our service has been done with consideration made for both web and mobile users. The mobile service has optimised web page focusses on specific tasks (approvals and dashboards). The mobile application is designed to be used as a tool and allows for content to be accessed, tasks to be completed, and for records to be completed and maintained on the go.
• Service interface: Yes
• Description of service interface: Users will access the product via a frontend user interface, to perform basic and advanced actions, such as login and core functionalities of the product
• Accessibility standards: None or don’t know
• Description of accessibility: We are working towards being compliant with WCAG 2.2AAA
• Accessibility testing: We use tools such as AxeCore, manual testing, Voice over, JAWS and NVDA to test accessibility
• User support accessibility: WCAG 2.2 AA
• API: Yes
• What users can and can't do using the API: Users can integrate with 3rd parties via our API.; They can manage the data that is being transferred from 3rd parties via our API connection.; We do not manage the 3rd party data and how it is managed, users are liable to ensure it is properly managed.; Users can set up, by enabling the platform service and go to the Rest API, to integrate with a 3rd party service that they use, or via the Sage Intacct Market Place.; Users can register on our developer portal, to access the API.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Direct buyers can customise our services to meet their needs. They can customise certain features that requires specific work flows, and they can customise page layouts within the product by adding additional javascript and HTML. It is strongly recommended that such customizations are performed by a user with a developer licence

Scaling

• Independence of resources: Each Sage Intacct customer will choose a Performance Tier. The standard tier, Performance Tier 1, is the default tier and applicable to most customers.; Multi-Tenant Cloud Architecture: Sage Intacct is built on a multi-tenant public cloud, primarily hosted on Amazon Web Services (AWS).; This allows multiple customers to share the same infrastructure while maintaining data isolation, security, and customization.; Resources are dynamically allocated based on demand, ensuring that no single tenant can monopolize system performance

Analytics

• Service usage metrics: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with SSAE-18 / ISAE 3402
• Data sanitisation process: Yes
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
• Equipment disposal approach: In-house destruction process

Data importing and exporting

• Data export approach: Users can export their data directly from Sage Intacct using built-in tools available across all modules. Reports, transactions, master data, and lists can be downloaded in formats such as CSV, Excel, XML, and PDF. All data can also be retrieved programmatically using Sage Intacct’s open APIs, including attachments. This self-service functionality enables customers to extract the information they need at any time during their subscription.
• Data export formats: CSV
• Data import formats:
  • CSV
  • Other
• Other data import formats: API (managed by customers)

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: Other
• Other protection within supplier network: Sage implements multiple layers of firewalls and monitoring. Remote access is also controlled via VPN. Administrative access to the production network is performed over an encrypted channel and requires the use of private/public key authentication. Key authentication is required to access the operating system that supports the Sage Intacct application.

Availability and resilience

• Guaranteed availability: Our SLA is 99.8% and we offer subscription credit for availability below 99.*%. You can receive a credit of 10% of your subscription fees for the month in which the outage event(s) occurred for every percentage point that Service Availability falls below 99.8%, up to a maximum of 50% of the applicable subscription fees for that month.
• Approach to resilience: All services are running in cloud and most of the services are highly available using load balancers and clusters. In case of failures services can be failed over to DR site. More info can be provided on request.
• Outage reporting: Any outages are notified to the customer via an incident management process and published over Sage's service status page at https://status.sage.com

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
• Other user authentication: Sage Intacct authenticates users through secure login credentials combined with multi-factor authentication. Users must enter a unique username and password that meets strong complexity requirements. Two-step verification is enabled by default for all production environments, requiring an additional one-time code delivered via authenticator app, SMS, or phone call to gain access. Administrators can enforce policies such as password expiration, inactivity timeouts, and session duration limits. Optional Single Sign-On (SSO) integration provides a centralised identity management. Trusted devices can also be configured for convenience, while access logs track login attempts and verification messages.
• Access restrictions in management interfaces and support channels: Users who do not have access to certain areas based on the role and permission policy, are shown a pop up to ask them to reach out to their Admin to provide them with access
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Other
• Description of management access authentication: Users can use SSO, single sign on to authenticate. By using SSO, the company email directory is used and their authentication model is adopted

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Sage Intacct enforces information security through documented policies aligned with industry standards like SOC 2, GDPR, and HIPAA. A dedicated Information Security team oversees implementation, monitoring, and enforcement. The reporting structure includes regular updates to senior leadership and the Board. Policies are reinforced through employee training, access controls, encryption, and continuous monitoring. Vulnerability assessments and penetration testing are conducted routinely. Incident response procedures ensure rapid containment and resolution. Compliance is validated via third-party audits. Enforcement includes disciplinary actions for internal violations and contractual requirements for vendors.

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Sage Intacct tracks service components from deployment to decommissioning using a centralized system. Changes undergo structured security reviews, including risk analysis, isolated testing, and approval workflows to ensure integrity. Annual SOC 2 Type 2 reporting is performed.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Sage Intacct continuously assesses threats using automated tools and expert analysis. Patches are deployed rapidly, often within hours of detection. Threat intelligence is sourced from security databases, forums, and cybersecurity partnerships.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Sage Intacct detects compromises using layered monitoring and automated alerts. Incidents are triaged and escalated per a documented response plan. Response begins immediately upon detection, with legal and customer notification as required.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Post-quantum cryptography secure: No
• Incident management approach: Sage Intacct adheres to the broader Global Sage Security Incident Response Framework, which classifies incidents by severity - Crisis, Major & Significant, and Standard categories. Each class follows predefined protocols. E.g. Major incidents activate dedicated Incident Commanders and cross-functional support, including Legal and Communications. In contrast, medium-level incidents may be fully managed by the Cyber Defence Operations team. Security incidents may be reported through official channels. Service level metrics capture core performance indicators such as resolution time, response time, and volume of tickets. Significant or Major incidents additionally trigger executive summaries and, when appropriate, communications through enterprise wide channels

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Other
• Other public sector networks: HMRC for VAT submission

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 10%
• Between £250,000 and £500,000: 10%
• Between £500,001 and £1,000,000: 10%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 10%
• Over £5,000,001: 10%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: British Standard Institution (BSI)
• ISO/IEC 27001 accreditation date: Tuesday 10 December 2024
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• ISO 9001 certification accredited by: BSI
• ISO 9001 accreditation date: Friday 1 August 2025
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: Yes
• PCI DSS certification accredited by: A-lign
• PCI DSS accreditation date: Monday 17 March 2025
• What the PCI DSS doesn’t cover: Professional Services, consulting, training and support. The business does not store, process, or transmit account data. In addition, these services do not have the ability to impact the security of the cardholder data environment. The services are segmented from the cardholder data environment.
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: Yes
• Any other security certifications:
  • SSAE 18 SOC 1 Type II
  • SOC 2 Type II
  • ISAE 3402 / ISAE 3000

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
  • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
  • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
  • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
  • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
  • Activities to cascade good practice on fair working conditions throughout the supply chain
  • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
  • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
  • Volunteering opportunities for staff
  • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
  • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
  • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
  • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
  • How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
  • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges

  Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

  • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
  • Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
  • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
  • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
  • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
  • Plans for positive actions with community groups.
  • Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
  • Collaborating with anchor institutions and community groups to make facilities available for education, training or community events
• Mission: Make Britain a clean energy superpower:

  To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

  Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
  • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
  • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it
• Mission: Break down barriers to opportunity:

  By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

  Policy Outcome 6: Employment and training: For those who face barriers to employment

  • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
  • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Working conditions which promote an inclusive working environment and promote retention and progression
  • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

  • Understanding of the issues affecting the development of new skills by target cohort
  • Understanding of the underlying factors affecting improvements to reduce barriers to entry and training schemes for the target cohort(s) related to the contract workforce
  • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
  • Understanding of issues relating to entering the contract workforce
  • Creation of outreach activities to create a pipeline of employees for the future contract delivery
  • Content of the outreach activity is designed to suit the target cohort
• Mission: Build an NHS fit for the future:

  That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

  Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

  • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
  • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsector@sage.com. Tell them what format you need. It will help if you say what assistive technology you use.