STAFFVETTING.COM LIMITED

Employee Screening Services including DBS

Our service and software provides clients a platform to conduct a full range of background screening checks on their employees, such as Baseline Personnel Security Standard (BPSS) and all levels of Disclosure and Barring Service (DBS) and Disclosure Scotland checks.

Features

• E-bulk platform
• Compliant and Secure
• Remote Access
• Real-time Reporting
• Real Person Support
• Dedicated Service Manager
• Highly Configurable
• Integration Available
• Client Branding
• Full range of UK and International Screening Checks

Benefits

• Quick and Efficient DBS Processing
• Quick and Efficient Employee Screening
• Cost Effective Employee Screening
• Reduce HR Administration
• Streamline Employee Onboarding
• Improve Candidate Experience
• Improve processes through easy integration

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@staffvetting.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

693144253121984

Contact

Michelle Bestford
0191 588 7980
tenders@staffvetting.com

About your service

• Service categories:

  Applications

  Enterprise resource management

  Human capital management

  • Core Human Resources Applications
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: No
• System requirements:
  • Works on computer, tablet and mobile devices
  • Multi-factor Authentication
  • Compatible with all major browsers

User support

• Email or online ticketing support: Yes
• Support response times: We will send an initial response to all questions within 5 working hours
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: We have a Client Services and Support Team to support all clients. Our Client Services Team will provide a dedicated Manager who will be the key contact for clients. This will be their first point of contact for any support and there will be regular service review meetings to assess contract performance and ensure the client is happy with the service. We also offer a Support Line and ticketing system for any users of our platform to be able to speak to a real person or raise a ticket for support. Our comprehensive and expert Support Services are part of our service and provided at no additional cost.; We have a technical team who can support with more complex IT questions as well as any integration or API requirements a client may have. This is provided to clients free of charge, however, additional cost may be incurred if there is any required development to meet a clients individual requirements.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We have a full onboarding process and provide user training and resources to support both clients and their candidates. We can offer most of these services and resources at no additional cost. Where onsite training is required we can offer this as an additional service, there may be additional cost depending on the scope of this.; Each clients nominated Service Manager will help them create an individual onboarding plan for their organisation. We have experience in onboarding both medium sized clients as well as very large organisations and have a professional, well structured and tested approach to ensure a smooth transition that meets the agreed timelines.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • ODF
  • PDF
• End-of-contract data extraction: Users download and retain reports at regular intervals throughout the service due to strict data retention rules. Any remaining data can be downloaded and exported securely at the end of a contract at no additional cost.
• End-of-contract process: Prior to a contract ending a Clients Service Manager will discuss options to extend or renew a contract. Where the client decides to end the contract an Off-boarding plan will be agreed. This sets agreed timelines regarding the cessation of new checks and what happens with those in process. ; We will agree a plan for any existing data, this ensures that we can provide in an acceptable format any required data or information prior to purging and removing it from our system to comply with our data protection and GSPR requirements.; We will also ensure that a final invoice is agreed and once paid confirm that all outstanding requirements set in the offboarding plan have been met.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: No difference in available features. The UI will adjust to ensure the user experience is seamless dependent on how they access our platform.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: The interface is simply designed for ease of use and accessibility. A user can log into our interface and easily create a new check, monitor the progress of any existing checks and has access to a full reporting suite to access any reporting they require. Applicants log in to a separate interface which is equally user friendly and accessible, with clear guidance on how to complete any required application form.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: We have access to ReciteMe accessibility tools which enable our users disabilities and non-native speakers to tailor our portals content to meet their specific needs. We have worked with a number of clients to support their users and have seen the benefit and value of this.
• API: Yes
• What users can and can't do using the API: Users can use the API to create checks, obtain updates and pull back final reports or results of any checks. Our API integrates with most existing HR software and we can create a bespoke approach to suit any client requirements.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Customer can have organisational logos added to the service and any communications sent out from it. ; Clients can only add the services they require to use to keep things simple. Additional screening types can be added at any time and these can be labelled to meet any internal terminology. ; Clients can have nominated users with configurable user permissions, we can set up a clients service to meet any company structure requirements. ; We can also offer flexible invoicing options to meet a clients individual requirements, taking into consideration differing cost centres or PO numbers.

Scaling

• Independence of resources: Our system's capacity is set well above current and existing usage and as usage grows we maintain a level of capacity well above this. Our system capacity is regularly reviewed and expanded ahead of usage and demand. This ensures that our clients are unaffected by new clients or by seasonal or demand variations across the year.

Analytics

• Service usage metrics: Yes
• Metrics types: These are fully configurable and are part of our regular service reviews. These can include number of checks raised, type of check, spend data, time to complete, number of checks successfully completed.; Service Reviews will discuss pre-agreed SLA's and can therefore be tailored to meet each clients individual needs.; Our portals also have a reporting suite where there are a variety or real-time reports that can be downloaded to view progress and results of any checks. These can be high-level or granular in details with time stamped actions.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Data Erasure

Data importing and exporting

• Data export approach: All reports can be downloaded from the portals - screening reports can be downloaded in PDF and the reporting suite allows downloads in csv format. For some checks our team can securely email password protected screening reports in PDF format. For Disclosure certificates, the DBS will post the certificates directly, whilst Disclosure Scotland and Access NI have the candidates share results directly with an organisation of their choosing.
• Data export formats:
  • CSV
  • ODF
• Data import formats:
  • CSV
  • ODF

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Our system and service has >99% uptime. We would be happy to agree an SLA with each client to meet their requirements. We would be open to discussing a discounted rate per check for any affected by a lack of system availability - this would be a agreed on a client by client basis.
• Approach to resilience: Our datacentre setup is resilient with infrastructure as code to allow rapid restoration of system configuration in event of failure. It also has automatic failover within the cloud environment.
• Outage reporting: We proactively report any outages through a public dashboard and through email alerts to all users. ; Regular updates will continue to be communicated until normal service is resumed.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: All users need to log in with a minimum of MFA. Each user is granted a specific level of permission which only allows them to see or perform pre approved functions. We can also create an organisational structure to sub-divide user accounts so they can only access part of the interface relating to a specific business area or areas. This is completely configurable.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 6 months and 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: Between 6 months and 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • CSA CSM version 4.0
  • ISO/IEC 27001
• Information security policies and processes: We have an information security framework which is assessed through our ISO27001 accreditation. We comply with GDPR and all data protection laws. Our CISO oversees security and he reports directly into our Group CEO. Our key security policies are Access Control Policy, Data Protection Policy, Incident Response Policy, Acceptable Use Policy and our Network Security Policy.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: We have management processes to keep track of services and regularly assess security impacts through the various lifecycle stages of our products. All changes go through a stringent change maangement process which requires sign off by senior management once the changes have been risk assessed fully. We are ISO9001 and ISO27001 which ensures our management processes and information security processes are accredited to a recognised high standard.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: "Major version updates (E.g. PHP, Laravel) are performed annually, in line with product releases. Minor-updates are tracked, reviewed & deployed in a quarterly cycle. Urgent advisories and self-determined bug-fixes are deployed ASAP. The target for these is within 7 days from awareness (subject to complexity) Maintenance windows are notified to clients as planned and, wherever practical, occur outside normal UK business hours.; Capacity is reviewed as part of the quarterly maintenance cycle or based on evolving metrics from the real-time environment monitoring"
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: The system is continuously monitored using AWS real‑time health metrics, with all user access and data changes logged for audit review. Performance, capacity and error detection are supported by AWS tools and automated log monitoring (e.g., RollBar), with alerts managed through an Incident Workflow. Security includes monthly Intruder.io scans and annual independent penetration testing. Code changes undergo peer review, QA testing, UAT, and security checks using tools like Qualys and Intruder.io. Major updates occur annually, minor updates quarterly, and urgent fixes within seven days. Maintenance windows are pre‑notified and scheduled outside normal UK business hours where possible.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: We have a documented and tested plan for handling incidents, including criteria to determine if an event is actually an incident. A documented plan to respond to any incident which defines how we will contain, mitigate and recover. Processes also incorporate learning from incidents to improve future security. Our process requires users to report incidents as soon as they are identified through clearly defined channels. There is clear guidance on what to report and what the key information is that needs to be gathered, the team receive regular training. We also maintain an incident register recorded by severity.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Other
• Other public sector networks:
  • Disclosure and Barring Service
  • Disclosure Scotland
  • Access NI

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: We can offer a no contract PAYG arrangement so interested parties can trial our service and only pay for the checks that they process.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau
• ISO/IEC 27001 accreditation date: Thursday 16 October 2025
• What the ISO/IEC 27001 doesn’t cover: All our services offered on this framework are covered by our ISO27001
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: National Security Inspectorate
• ISO 9001 accreditation date: Friday 1 November 2024
• What the ISO 9001 doesn’t cover: All services offered on this framework are covered
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 8c34d84f-5368-49af-9254-7ff61fab9c9c
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
    • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations
    • Plans for positive actions with community groups.

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
    • Understanding of issues relating to entering the contract workforce
    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@staffvetting.com. Tell them what format you need. It will help if you say what assistive technology you use.