INVIDA LIMITED

INVIDA

INVIDA is a Space, Asset, and Service management platform designed for customers with large or complex property portfolios and supply chains. The platform is commonly referred to as a CAFM or IWMS system, and is typically used by Estates and Facilities teams.

Features

• Space management
• Asset management
• Audit Reporting
• Compliance Management
• Service Management
• Document Management
• Lifecycle Management
• Service Provider Management
• Real-Time Reporting and Dashboards
• System Integration

Benefits

• Designed for end-users
• Ease of implementation and use
• Features that are truly integrated
• Truly Software as a Service (SaaS)
• Highly configurable, avoiding bespoke development
• Pricing and value
• Mobile Apps
• Unlimited User Licences
• Unlimited Storage

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at chris.butchart@invida.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

701349225197318

Contact

Chris Butchart
0333 335 0041
chris.butchart@invida.co.uk

About your service

• Service categories:

  Applications

  Production and operations

  • Other operations
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Invida uses all reasonable endeavours to ensure that the Platform is available 99.95% of the time during each calendar month. Maintenance windows are pre-agreed with customers, and shall not exceed 8 hours in each calendar month. INVIDA is designed to be accessed using modern, supported, web browsers, including Microsoft Edge, Google Chrome, and Apple Safari. An internet connection is required to access INVIDA, or INVIDA Apps can be used in Offline Mode.
• System requirements:
  • Internet Connection (unless working in Offline Mode)
  • Supported Web Browser (Edge, Chrome, Safari etc.)
  • Smart Device (if accessing Mobile Apps)
  • INVIDA User Account (unlimited User Accounts can be issued)

User support

• Email or online ticketing support: Yes
• Support response times: Less than 30 minutes. Response times are delivered 24/7.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: Invida has self-tested the web chat tools, using assistive technologies, to confirm functionality works as expected.
• Onsite support: Yes
• Support levels: All customers receive the same level of support which is included in the monthly subscription charge. ; ; Support calls are classified by severity (Critical, Serious, Moderate and Minor) and have a Recovery Time Objective (RTO) of 30 mins, 1 hour, 4 hours, and 8 hours respectively. Recovery Point Objective (RPO) commitment of less than 24 hours is in place for Critical and Serious events that require the restoration of data from backups.
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: To support new customers during the mobilisation period, INVIDA can be set up with a Standard Build. This build contains a standard suite of Templates and configuration settings, that can be reconfigured during the mobilisation period.; ; Access to administrative settings is made available to customers, allowing changes to be made after mobilisation, giving you true ongoing control of your implementation. This approach facilitates the rapid deployment of INVIDA.; ; Invida’s recommended approach to configuring each module is a 6-stage approach, with a continuous feedback loop once a module is live, to respond to evolving changes in operational practices and environments. This includes Demonstration > Configuration > Testing > Review > Training > Go-Live.; ; A complete mobilisation plan is designed and shared, for all modules and features to be successfully mobilised.; ; To achieve successful implementations, Invida expects to work with it's customers to set clear project objectives, in accordance with the agreed timeline of implementation, and agree a recurring meeting schedule to review project delivery.; ; Training is provided as a combination of online, in-person, recorded content, and documented information, tailored to meet the requirements of specific user groups.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Within 30 days following the termination of the Agreement, the Provider will return to the Customer a digital copy of all Customer Materials stored within the Platform on solid-state portable storage devices with records presented in Microsoft Excel or CSV files and all document attachments presented in folder structures containing files in their original form (doc, pdf, jpg etc.).
• End-of-contract process: At the end of the contract, if a customer chooses not to extend or renew, Invida shall return to the Customer a digital copy of all Customer Materials stored within the Platform on solid-state portable storage devices with records presented in Microsoft Excel or CSV files and all document attachments presented in folder structures containing files in their original form (doc, pdf, jpg etc.), within 30 days. There is no cost for the return of Customer Materials to the Customer.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The INVIDA Mobile Apps are designed to support Self-Service Tools (INVIDA Resolve App), and Service Management Features (INVIDA Mobile App).; ; In addition to full platform functionality, the Web Interfaces include all features included in the Mobile Apps.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: INVIDA includes self-service tools, accessed via either the INVIDA Apps, or Web Interfaces.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: Tools including Google Lighthouse and axe DevTools are used to review best practice, performance, and accessibility. INVIDA Apps are designed to be intuitive, easy to use, and include the appropriate level of detail for the target audience e.g. Engineers, Managers, Service Providers, Building Users etc.
• API: Yes
• What users can and can't do using the API: The INVIDA Platform includes a suite of RESTful APIs that have been used successfully by clients to integrate with their other systems. Invida expect to work with it's customer and their software service providers to build, test, and deploy the integrations required at any time during a subscription.; ; Configuration/development costs for integration work is included as part of a subscription to INVIDA, with no additional or hidden costs.; ; REST APIs may be used to support Read, Create, Update, and Delete (CRUD) operations.; ; All API integrations are protected with appropriate security, including the use of authentication, authorisation, tokens, and encryption.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: INVIDA is a single Platform, developed, implemented, and supported in-house by our UK based team. All Invida clients have their own hosted instance of INVIDA, but importantly, it is the same version of the software.; ; This produces many benefits, including:; - All Invida employees will be familiar with your set-up, resulting in more effective and efficient support.; - Increased testing, which in turn reduces bugs.; - Rapid deployment of new features.; - Increased time spent developing new features for all clients.; ; Customers remain on the latest version of the Platform throughout subscription, at no additional cost.; ; With all customers making use of the same, latest version, of INVIDA, the Platform is designed to be highly configurable. Users with appropriate permissions may make changes to INVIDA configurations using the Full Web Interface, including changes to pre-built lookup values, the creation of an unlimited number of additional reportable data fields, tools to control which interfaces and features different user groups have access to, and interface branding.

Scaling

• Independence of resources: Each account we create for clients has its own client specific server instance and database providing segregation of your data, and ensuring the processing performance of your instance of the Platform is not impacted by any high-volume transactions being carried out by our other clients.

Analytics

• Service usage metrics: Yes
• Metrics types: Invida report on service availability and up-time as part of our Account Management processes. Metrics on Platform availability, maintenance windows, and any unplanned outages are communicated to Customers as required.
• Reporting types:
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: Data may be exported from the INVIDA Platform using pre-built reports/export tools, using the INVIDA Microsoft Power BI connector, or by an Invida employee after receipt of a written request from a Customer Nominated Representative.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • Document Downloads
  • Microsoft Excel
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • Microsoft Excel
  • Document Uploads

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The Provider shall use all reasonable endeavours to ensure that the Platform is available 99.95% of the time during each calendar month.; ; In the event that, during a calendar month entirely within the Term, the Platform fails to meet the availability commitment, then the Provider shall ; issue service credits to the Customer, such service credits to be deducted by the Provider from future Charges.; ; Service Credits shall be calculated as follows: ; service credits = ((100 - a) / 10) x b ; where: ; a = the actual percentage availability of the Platform during the relevant calendar month; and; b = the Charges payable in respect of access to the Platform during the relevant calendar month (exclusive of VAT and other taxes).; ; The maximum service credits available to the Customer in respect of any calendar month shall be the total Charges payable in respect of access to the Platform during the relevant calendar month (exclusive of VAT and other taxes).
• Approach to resilience: INVIDA is hosted on secure servers by Amazon AWS, providing world-leading reliability, flexibility, scalability, performance and security. Specific details are available on request.
• Outage reporting: In the event of an unplanned outage, Invida uses a combination of phone call, and email, to notify Nominated Customer Representatives.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: INVIDA includes a rich permissions matrix to control which users may view/add/edit/delete content in the Platform, including controls to limit access by Platform features, and the ability to limit a user's "scope" to one or more geographical locations. Permission Groups (Roles) can be configured, to assign access to Users in a consistent way, and a User may be a member of one or more Roles.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Invida has implemented an Information Security Management System, certified to conform with the ISO/IEC 27001:2022 standard. This includes mandatory documented information, including an Information Security Policy. Policies and processes are implemented to comply with all requirements of the standard, including (but not limited to), Information Security, Information Systems Security, Risk Management, Incident Response, and Continuous Improvement.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Invida has implemented a Change Control Procedure, as part of the organisations ISO 27001:2022 certified Information Security Management System. Changes requests are managed in compliance with this procedure. The procedure is subject to internal and external auditing, to ensure continued conformance with the requirements of the ISO 27001 standard.; ; Change Records are subject to review, approval, and confirmation.; ; Invida maintains a software bill of materials (SBOM) to track components of the service, and to ensure appropriate scanning and monitoring is implemented.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Invida makes use of vulnerability scanning solutions weekly, on all customer instances. Upon detection of a vulnerability, our Developers take action to remedy the issue. The Common Vulnerability Scoring System (CVSS) version 3.1 is used for vulnerability assessment. We remediate vulnerabilities identified within set timescales, upon the release of a vendor provided patch.; ; Penetration testing is performed at least annually by two separate organisations (CREST/CHECK accredited/certified). A CHECK Team Leader (CTL) is responsible for performing the penetration test when we engage with the CHECK certified provider. Findings are categorised and prioritised from Critical to Very Low.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Invida makes use of Intrusion Detection Systems (IDS) and Security Information and Event Management Systems (SIEM) to identify potential compromises. Management and Senior Developers monitor these tools, and are automatically alerted if detections are identified. Tools are implemented and monitored in compliance with the requirements of the ISO/IEC 27001:2022 Annex A Controls applicable to treating risks associated with monitoring processes.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Invida has implemented an Incident Response Procedure, as part of the organisations ISO 27001:2022 certified Information Security Management System.; ; Events are recorded by employees in compliance with the procedure, and are assessed to identify if an Incident has occurred. Incidents are managed in compliance with the procedure.; ; Incident Reports are shared with customers on request, and are reviewed as part of Incident Reviews, and Management Reviews.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Amtivo Group Limited
• ISO/IEC 27001 accreditation date: Monday 24 November 2025
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: De361729-3636-4366-805e-93f8d289331d
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: F7c15f90-f6bd-468e-bba4-53b1c756135f
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
    • How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
    • Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
    • Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at chris.butchart@invida.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.