Th3rd Curve Ltd

Microsoft Power BI and Power Apps

Th3rdcurve excels in mega programme and business solutions with Microsoft Power Platform, offering robust reporting through Power BI and bespoke applications with Power Apps.

Features

• Power BI consolidates data from sources into a unified solution
• Power BI for real-time data analysis and monitoring
• Power BI for AI-powered insights and forecasting
• Mobile access and interactivity with live reports
• Custom applications with low-to-no code development
• Power Apps for mapping business process flows to streamline processes
• Power Apps for standardisation of form controls and data entry
• Power Apps for workflow optimisation and automation

Benefits

• Enhances insights, accuracy, efficiency, reporting, and collaboration
• Proactive decision-making in real time
• Advanced predictive analytics capabilities
• Reports on the go, enabling decision making anytime, anywhere
• Rapid development, reducing cost and implementation time
• Streamlined data flows, eliminate data silos, and improve business efficiency
• Consistent data entry and formatting, enhancing data integrity
• Modernisation of business processes for improved efficiency and resilience

£8.20 to £16.40 a user a month

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@th3rdcurve.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

683204031871900

Contact

Niall Faris
07989 437362
info@th3rdcurve.com

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
• Service constraints: Application upgrades and maintenance windows are published in advance.
• System requirements:
  • Pro Power BI Subscription for Access to Power BI Services
  • Power Apps Premium License

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: We commit to responding to inquiries within 4 hours during our operational hours 9:00 am - 6:00pm. Additionally, we are available for communication via both mobile and email channels for your convenience and accessibility. However, please note that response times may be longer subject to bank holidays and contractual agreements.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: We provide flexible support options tailored to meet varying requirements. Our support tiers cater to different needs, ensuring that clients receive assistance aligned with their specific demands. Basic Support grants access to self-service resources such as knowledge base articles and we provide responses to emails typically within the working day. Standard Support offers email assistance and mobile during business hours, responding within 4 hours. For more urgent concerns, Premium Support delivers priority email and phone support, with responses within 4 hours. We also can provide on-site help if required and frequently run workshops to provide additional support and training to customers.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: For getting started with Power BI and Power Apps, we consult with the Buyer to determine the business requirements that will underpin the foundations of the design and build of the solution.; ; To ensure best value, we determine early in the process the number of users for the most cost efficient purchase of licences.; ; For Power BI, th3rdcurve thoroughly analyses the data repositories, categorising them into functional areas with the Buyer. We then create a detailed transformation plan for development of the reporting suite.; ; For Power Apps, th3rdcurve employs a similar approach, analysing or defining the relevant business process by working with the Buyer to document clear scope for the deployment. Our experts strive to ensure the full potential of the platform can be utilised.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Users can export data from Power BI and Power Apps using a variety of means, including built-in export features and third-party migration tools. Users can also export data straight from Power BI and Power Apps to formats such as Excel or CSV for easier retrieval and analysis. Users can also export Power Apps as packages that can be uploaded into other environments.
• End-of-contract process: Termination terms are discussed and agreed upon based on the service provided. We ensure flexibility and alignment with the customer's needs throughout the contract period.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems: Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Desktop applications provides full functionality with users being able to perform comprehensive data analysis, use query editor, design reports and share them. However, mobile service is best suited for viewing Power BI reports, monitoring health and performance of your projects and keeping up to date with your data.
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: No

Scaling

• Independence of resources: The solution is provided on fully scalable platform and infrastructure. ; The deployment is designed and sized such that the system will provide a responsive end user experience to all of the proposed users of the system.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: Microsoft 365 has built in security features that we utilise for protecting data. We also utilise strong Passwords and Multi-Factor Authentication and hold workshops around data security and phishing.
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: In-house destruction process

Data importing and exporting

• Data export approach: Power BI offer various methods for exporting. As default Power BI reports are in the form of PBIX. However, using "Export Data" users can export data tables as a CSV or Excel, whilst the report can be exported as a PDF or a PowerPoint presentation.; ; PowerApps using data tables can also be exported to CSV or Excel for manipulation.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • PPT
  • XLS
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • XML
  • JSON
  • XLS
  • SQL Server

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Microsofts SLA vary depending on the service.; https://www.microsoft.com/licensing/docs/view/Service-Level-Agreements-SLA-for-Online-Services?lang=1&year=2023; ; SLAs can differ slightly according to application.
• Approach to resilience: The Microsoft Azure Services that help power Power Apps and Power BI have been built with data redundancy capabilities, security and compliance, optimal infrastructure and an overriding level of robustness to be resilient.
• Outage reporting: Outages are communicated through a variety of means. Microsoft 365 Service Status provides an . Outages can also be reported via email, such as notifications when a report fails to refresh or when automated process on Power Apps fail.; ; Power BI Service Health Dashboard can also be used to view any issues within Power BI.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Th3rdCurve implements access restrictions in management interfaces and support channels using role-based access control (RBAC), multi-factor authentication (MFA), and network segmentation, including SharePoint security measures. Access is assigned based on job roles and security groups in our SharePoint ecosystem, with permissions limited to specific functionalities and data. We also use firewall rules to restrict access to authorised IP addresses or VPN connections, while suspicious IP addresses are flagged. Also by frequently using Azure AD , audit logs and monitoring of unauthorised attempts are quickly detected.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: You control when users can access audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Our approach to security governance for Power BI and Power Apps is centred around keeping data safe and accessible. We prioritise understanding our security needs and risks, and use Microsoft's security tools to control who can access what and encrypt our data. We particularly make sure of Microsoft security groups to assign permissions.
• Information security policies and processes: We follow Microsoft Data Loss Prevention (DLP) best practices which contain identifying and classifying sensitive information, data encryption, anomaly detection, controlling employee permissions in Azure AD and educating our staff and stakeholders of potential risks.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: -
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: By utilising Microsoft's Defender Vulnerability Management, th3rdcurve are able to take advantage of its built in features. This includes risk-based vulnerability management , remediation and tracking of identified risks and assessments of critical vulnerabilities.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Microsoft manage monitoring with Microsoft Defender Antivirus, this enables Real-Time Threat Detection by observing processes and engagements with the system. This also uses anomaly detection to adapt to new threats and take action against malware.
• Incident management type: Supplier-defined controls
• Incident management approach: Microsoft’s approach to incident management is comprehensive and aligns with the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-61. This provides detection and analysis of incidents, containment, eradication and recovery when an incident is detected, and post-incident activity for better prevention in future.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Th3rdcurve believes in and is committed to being an environmentally friendly company. We do not operate company vehicles and we encourage our staff to use public transport when travelling to both the office and to our clients' offices or sites. We encourage remote working and all our roles are hybrid. We participate in the Bike2Work scheme to encourage our staff to cycle instead of using motorised public transport. Our office is located in a shared office space, which is committed to climate change and decreasing greenhouse house emissions and being a net zero carbon business by 2030. Year on year, it has reduced its overall energy consumption, by removing gas boilers, installing LED lighting and efficient heating and ventilation systems. We ensure our office waste is separated and recycled accordingly. We are a majority paperless company, with printing used only as a last resort or legal requirement. We discourage the use of a printer if work can be done electronically. Th3rdcurve works with clients and suppliers to promote a focus on climate change. This has included the design and implementation of reports and dashboards on large infrastructure projects to monitor and drive their commitments to the environment, notably compliance with environmental and energy efficiency requirements.; We will continue to seek further opportunities and improvements, wherever possible, to tackle climate change to try to safeguard our planet for future generations.

  Covid-19 recovery

  Throughout COVID-19 all our roles were fully remote and now have transitioned to a hybrid working model. During lockdown, we supplied our staff with office equipment to set up a functional and healthy workspace at home. We set up Slack, a messaging app for that connects people to business-related information and discussion. To retain morale and grow team bonding, we used Whatsapp to stay in regular social contact and we organised (non-compulsory) after work virtual team quizzes. We also encouraged our staff to think of each other during the lockdown and look out for signs of anyone that seemed to be withdrawn or struggling.; ; When it was required, we implemented social distancing and face masks in line with government guidance. We are proud that, despite being a small company, we were able to flex and adapt to the situation to provide continued services to our clients to work in a fully virtual and then later hybrid way. We did not need to use the furlough scheme - we continued to keep everyone working and paid.; ; Additionally, once hybrid working began, we fully supported the decision of a member of staff who wanted to continue to fully work from home to protect their physical and mental health.; ; In early 2021, a small team took part in Race The Thames where, through indoor rowing, cycling and running, covered a distance of 346km and raising £2,822 for charity in just one week.

  Tackling economic inequality

  Th3rdcurve runs both graduate and internship schemes. For our first graduate scheme, we partnered with GradFuel and the Kickstarter Scheme, which is for 18–24-year-olds on universal credit. For our internships, we approach a variety of universities and courses across the UK to ensure a diverse range of candidates. ; ; We support our staff in undertaking additional training and professional qualifications. We encourage our staff to share their knowledge and expertise by training other members of staff regularly and hosting lessons learnt sessions. ; ; We have a corporate social responsibility partnership with Date Sultan, a company that sources premium dates with ethical and Fairtrade purchasing at the heart of what it does, ensuring that everyone in its supply chain is paid a fair living wage and isn't a victim of modern slavery.

  Equal opportunity

  Th3rdcurve employs individuals from a diverse range of social, economic and ethnic backgrounds. We firmly believe that having a diverse and inclusive workforce, where people are valued for their individuality – in fact, ‘individuality’ is one of our company values – brings a wealth of differing experiences and perspectives that strengthen the services that our company provides. We currently have a gender ratio of 40% females, which we pride ourselves in as this much higher than the industry average.; ; We have a partnership with The Diversity Hut, a social enterprise that actively and positively promotes diversity and inclusion, and equips companies with the knowledge and tools to attract and retain diversity, therefore increasing productivity, profitability and innovation.

  Wellbeing

  Th3rdcurve is fully committed to employee wellbeing. We pride ourselves in being proactive and campaigning for healthy mental and physical health. We have appointed a mental wellbeing champion who regularly provides insight, tips and help for our employees’ wellbeing through regular bulletins and events.; ; We provide SAD lamps to help our team through the winter months and have an internal guide on supporting mental wellbeing. All staff members have access to wellbeing portals via Vitality and UNUM, which has a 24/7 employee assistance helpline. ; ; We run wellbeing days where the whole company gets together to focus on our mental wellbeing and support each other. We encourage our staff to take part in charity events, particularly focused around wellbeing and mental health charities. For example, we have participated in the Race the Thames rowing competition and The Lost Hours Walk, both supporting CALM (Campaign Against Living Miserably) charity. We also ran an internal step competition to encourage our staff to walk more and get outside for the benefit of their mental and physical health.; ; Throughout the year we run anonymous surveys to get feedback on our employees’ wellbeing and gather suggestions for other events or improvements. We encourage our employees to meet up in person to ensure there is connection across the team as we know this is beneficial for wellbeing especially with hybrid working.; ; We are particularly mindful of our staff’s wellbeing when individuals are embedded within a client organisation. Each commission has a director-level commission lead who is responsible for the team's wellbeing. Additionally, everyone meets regularly with their line managers, where a discussion on wellbeing is part of the standard agenda. We also have a ‘buddy’ system, where our staff have a nominated colleague to contact for advice, encouragement and to ‘check in’ with each other informally.

Pricing

• Price: £8.20 to £16.40 a user a month
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@th3rdcurve.com. Tell them what format you need. It will help if you say what assistive technology you use.