TECHNOIVITY LIMITED

Integration Services Hosting

Technoivity provides integration, configuration, and managed support services for Employment Hero and other HR/payroll platforms. We help UK organisations implement cloud-based HRIS workflows, automate compliance processes, and connect third-party systems. Our service ensures smooth adoption, reliable data flows, and long-term operational efficiency across HR, payroll, and finance teams.

Features

• Automated HR–Payroll Data Sync
• Employment Hero API Connectivity
• Time & Attendance Integration
• SSO-Compatible User Access Controls
• Automated Certificate & Compliance Field Population
• Custom Field Mapping Engine

Benefits

• Eliminate double data entry
• Reduce payroll errors
• Accelerate new starter onboarding
• Maintain compliance
• Adapt faster to organisational changes
• Free up HR and payroll teams

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at enquiries@technoivity.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

702693026614722

Contact

Matt McGuire
07908181788
enquiries@technoivity.com

About the service

• Service categories:
  • Application Development and Deployment
    • Data management
      • Database administration and development
        • Database Administration
        • Database Replication
        • Data Modelling
        • Database Development and Optimization
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Our integration service extends leading HR, payroll, and housing management platforms including Employment Hero, AIMS, Rubixx, and Resourcelink. It also connects with productivity suites like Google Workspace and Microsoft 365. Through API and SFTP connectivity, it enables seamless data flow between systems to streamline processes, reduce errors, and improve reporting.
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: Our service operates within certain constraints that buyers should be aware of. Integration capabilities are dependent on the technical limitations and API availability of third-party platforms such as Employment Hero, AIMS, and Rubixx. This may restrict real-time synchronisation or limit automation depending on the external system’s configuration. Support is provided during standard UK business hours (Monday to Friday), with no weekend or out-of-hours response unless contractually agreed. Planned maintenance is scheduled outside peak hours and communicated in advance. Where integrations involve secure or proprietary environments, additional configuration, access permissions, or security reviews may be required to ensure compatibility and compliance.
• System requirements:
  • Internet access required for cloud-based integration functionality.
  • Compatible with modern browsers (Chrome, Edge, Firefox, Safari).
  • API access enabled on connected third-party platforms.
  • Employment Hero administrator credentials for initial configuration.
  • Secure network access for protected data exchange.

User support

• Email or online ticketing support: Yes
• Support response times: We aim to respond to all queries within 4 business hours (Monday to Friday, 9am–5pm UK time). Queries received outside these hours, including weekends, will be responded to on the next working day.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• AI chatbot: No
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Our web chat support is browser-based and user-friendly, offering real-time assistance during standard business hours. Users can open a chat window directly from our website or support portal to engage with a support representative. The interface allows users to type questions, receive prompt replies, and end sessions at their convenience. While the system is designed to be intuitive and responsive across devices, we have not yet formally assessed the chat platform against specific accessibility standards such as WCAG or EN 301 549. Users with specific accessibility needs are encouraged to contact us through alternative support channels such as email or phone.
• Web chat accessibility testing: We have not yet conducted formal accessibility testing of our web chat functionality with assistive technology users. While the chat system has been tested internally for usability and cross-device responsiveness, no structured user testing has been completed with screen readers, voice control software, or other assistive technologies. We recognise the importance of inclusive design and are currently evaluating options to improve accessibility in future updates. In the meantime, users requiring support via alternative methods are encouraged to contact us by phone or email, where our team can provide personalised assistance.
• Onsite support: Yes, at extra cost
• Support levels: We offer flexible support levels tailored to each buyer’s needs. While most issues are handled remotely via email, phone, or web chat, we can provide on-site support at an additional cost. This may involve one of our in-house implementation consultants or a vetted third-party engineer depending on location, urgency, and technical requirements.; Support scope and response times are defined collaboratively during onboarding. Pricing varies based on the complexity of the deployment, SLA expectations, and whether enhanced support (e.g. out-of-hours or on-site) is required.; Due to the bespoke nature of support delivery, fixed pricing is not listed quotes are provided on request.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We begin by guiding users through the system settings and core configurations to establish a strong operational foundation. From there, we walk them through general access controls, permissions, and user roles. Next, we configure workflows, automations, document uploads, and key templates to reflect the client’s internal processes. Once the backend setup is complete, we shift focus to the user interface, providing clear guidance on how employees and managers will interact with the platform. This structured onboarding is delivered through a combination of online training, documentation, and dedicated support, with optional onsite sessions available for larger implementations.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Our onboarding and offboarding documentation is provided in accessible digital formats, primarily PDF and HTML, and is compatible with standard screen readers and assistive technologies. All documentation is written in plain, clear English and structured with headings, bullet points, and visual aids to support comprehension. We ensure that content is accessible via desktop and mobile devices, and we offer alternative formats (e.g., large print or text-only versions) upon request. Step-by-step guides are supplemented with screenshots and captions to assist users with varying digital skills. For users requiring additional support, we also provide recorded video walkthroughs and 1:1 live sessions where needed.
• End-of-contract data extraction: At the end of the contract, clients retain full access to all their data directly through the platform. Users can log in and export data at any time, including reports, employee records, workflows, and audit trails. In addition, we provide an optional offboarding pack that includes a Word document with screenshots and configuration details specific to their setup. This serves as a reference for continuity or migration planning. Clients are never locked out of their data and can self-manage extraction without needing to rely on our team unless additional support is requested.
• End-of-contract process: At the end of the contract, clients retain full access to their platform data and can continue using self-service tools to extract reports, employee files, configuration settings, and audit logs. We provide basic offboarding guidance and a system snapshot (configuration summary) at no additional cost. If clients require more comprehensive offboarding services, such as data migration support, manual extraction assistance, or configuration documentation tailored for transition, these can be arranged at an additional cost. System access remains available until the contract end date, after which the account is deactivated unless a renewal or data transfer extension is agreed.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
  • ChromeOS
  • Other
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Our service is fully accessible on mobile devices through responsive browser-based interfaces. Core functionalities such as approvals, reporting, and user management are optimized for smaller screens. However, some advanced configuration and integration tasks are better suited to desktop due to layout complexity and data input requirements.
• Service interface: Yes
• Description of service interface: The service interface is web-based, accessible through standard browsers, and designed with simplicity in mind. It provides users with intuitive dashboards, configuration panels, and role-based access to key features. Admin users can manage integrations, user permissions, and workflows, while standard users can interact with designated service modules.
• Accessibility standards: None or don’t know
• Description of accessibility: Our service is accessible via any modern browser without the need for additional installations. It supports keyboard navigation, screen readers, and responsive design for mobile compatibility. Users can access dashboards, complete workflows, and manage account settings. However, some advanced configuration tools are limited to desktop environments and may not be fully usable on mobile.
• Accessibility testing: We have not yet conducted formal testing with users of assistive technology; however, we have not received any reported issues or barriers to access. Our interface has been used successfully across a wide range of environments and devices without incident.; While not certified against a formal accessibility standard at this time, we follow established usability principles and maintain a clean, structured layout that supports keyboard navigation and readability. Future development cycles will incorporate more rigorous accessibility testing, including compatibility with screen readers and adherence to WCAG guidelines.; We welcome feedback from assistive technology users and are committed to resolving any issues promptly if they arise.
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: Our service leverages APIs provided by integrated third-party platforms (e.g. Employment Hero, Google Workspace) to enable users to automate processes, synchronise data, and manage configurations. Users can set up the service via the API by authenticating using secure tokens or keys, then invoking endpoints to provision users, retrieve data, and trigger workflows.; Through the API, users can make changes such as updating employee records, adjusting access permissions, syncing leave balances, or pulling reports into other systems. API access supports both GET and POST requests, depending on the integrated system’s capabilities.; However, there are limitations. Users cannot directly alter core system architecture, modify embedded workflows, or bypass standard user roles and approval processes. Any changes outside the API’s documented capabilities must be done via the standard user interface or through admin access.; We assist clients in securely configuring API access and automations during onboarding and offer ongoing support for maintenance and enhancements.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Users can customise multiple aspects of the service to suit their organisation’s workflows, branding, and reporting needs. Administrators can create and configure approval workflows, define custom fields, and adjust role-based permissions to ensure data access aligns with internal policies. Reporting dashboards can also be tailored to surface relevant metrics, while the user interface supports branding options such as uploading a custom company logo and selecting preferred colour schemes. These customisations are managed through an intuitive admin interface, typically without the need for technical support. However, setup assistance is available for more advanced configurations upon request.

Scaling

• Independence of resources: We guarantee service independence by isolating each client environment within logically separated cloud infrastructure. This ensures performance is not impacted by other users’ activity. Resource allocation is managed via autoscaling and traffic balancing, so high-demand periods are handled without degradation. Each client’s data and workflows remain secure and unaffected.

Analytics

• Service usage metrics: Yes
• Metrics types: We provide core service usage metrics including login activity, user engagement levels, feature usage (e.g. workflows, document uploads), and support ticket volumes. These metrics are accessible via the admin dashboard or can be exported on request. Custom usage reporting may be provided for enterprise clients on a case-by-case basis.
• Reporting types:
  • API access
  • Real-time dashboards
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Physical Destruction / Hardware containing data is completely destroyed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Users can export their data directly from the platform using built-in reporting and download tools. This includes exporting employee records, payroll data, compliance logs, and custom fields in CSV, Excel, or PDF formats. No technical expertise is required—exports can be completed by admins via the interface.
• Data export formats: CSV
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • PDF
  • PNG

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: We guarantee a 99.5% service availability rate during standard operating hours (Monday to Friday, 09:00–17:00 GMT), excluding planned maintenance windows, which are communicated in advance. Our infrastructure is built with redundancy and high availability to minimise service disruption. If availability drops below the guaranteed level within a calendar month, users may be eligible for service credits. These are calculated based on the duration and severity of the downtime and applied to future invoices, provided the request is submitted within 30 days of the incident. While 24/7 uptime is our goal, only core business hours are covered under our standard SLA. Premium SLAs, including enhanced uptime guarantees and 24/7 response coverage, can be arranged for enterprise and government clients at an additional cost based on the level of support required.
• Approach to resilience: Our service is designed with resilience in mind to ensure continuity, reliability, and data protection for all users. We operate on cloud infrastructure hosted by providers that maintain high availability zones with geographically separated datacentres. This allows for automated failover in the event of hardware failure or service disruption. Key systems are replicated across environments, and regular backups are performed to safeguard customer data. Network redundancy, load balancing, and system monitoring are built into our architecture to proactively detect and mitigate potential failures. Access controls, disaster recovery plans, and testing routines are in place to ensure rapid restoration in the event of disruption. Full technical details of our datacentre setup, resilience strategy, and failover protocols are available upon request.
• Outage reporting: Outages are reported to clients via direct email alerts, ensuring that stakeholders are informed immediately of any disruption. In addition to email communication, we offer optional SMS notifications for critical incidents when requested. While we do not currently operate a public status dashboard or API-based outage reporting, clients are kept informed of issue progress and resolution timelines through our ticketing system and support contacts. Post-incident reviews are available upon request. Where applicable, we also work directly with third-party software providers (e.g. Employment Hero) to relay updates on upstream outages that may affect service performance.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: We enforce strict role-based access control (RBAC) across all management interfaces and support channels. Only authorised personnel with appropriate clearance can access sensitive configurations or client data. Access is granted on a need-to-know basis, with multi-factor authentication and activity logging enabled. Support interactions are monitored, and permissions are regularly reviewed.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: We hold the following certification: https://www.ncsc.gov.uk/cyberessentials/overview; ; Our data centres are provided by Microsoft in their Azure cloud services and are physically secured by them.
• Information security policies and processes: At Technoivity, we adhere to a comprehensive set of information security policies and procedures aligned with ISO/IEC 27001 standards. These policies cover key areas such as access control, data protection, risk management, and incident response. All policies are reviewed on a quarterly basis and formally approved by senior leadership. Compliance is enforced through a clear reporting structure, any suspected incidents are escalated from staff to the Security Officer, then to the Compliance Lead, and ultimately reviewed by executive management. All team members complete mandatory security awareness training during onboarding and at regular intervals thereafter. System usage is monitored to detect policy breaches, and access is role-restricted and audited. Policy updates are communicated centrally, tracked for staff acknowledgment, and reinforced through monthly operational reviews. This governance structure ensures that information security remains a priority across all areas of our service delivery.

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Our configuration and change management process follows Employment Hero’s structured release cycle for core system updates, paired with Technoivity’s client-side governance. All configuration changes—such as workflows, integrations, or policy rules—are logged, tested in sandbox environments, and approved before deployment. We maintain a full audit trail of changes, including timestamps and user actions. Security impact is assessed during planning stages, with rollback protocols in place for critical updates. Clients are notified of significant platform changes in advance, and bespoke configurations are version-controlled to ensure continuity and traceability across updates.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Our vulnerability management process follows ISO/IEC 27001 standards. We continuously assess potential threats through automated scans and regular third-party audits. Information is sourced from CVE databases, vendor alerts, and threat intelligence feeds. Patches for critical vulnerabilities are typically deployed within 24–72 hours, depending on severity, following internal validation and change control processes.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Our protective monitoring processes are designed to ensure rapid detection, investigation, and resolution of potential threats. We use automated monitoring tools to identify anomalies, unauthorized access attempts, or suspicious activity across systems. If a potential compromise is detected, it’s immediately escalated to our incident response team, which follows a structured triage and investigation process.; ; We respond to verified incidents within hours, isolating the risk and taking corrective action while maintaining full audit trails. Our approach is aligned with ISO/IEC 27001 standards and supported by up-to-date threat intelligence feeds. This enables us to safeguard client data with speed, precision, and accountability.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Post-quantum cryptography secure: No
• Incident management approach: Our incident management process follows a structured framework with predefined protocols for common scenarios such as data breaches, service interruptions, or access control failures. Users can report incidents via email, ticketing system, or phone, depending on severity. Each incident is logged, triaged, and assigned a response priority. Detailed incident reports are provided upon resolution, including root cause analysis, corrective actions, and future prevention measures. Incident data is reviewed regularly to identify trends and improve response procedures. All incidents are handled in alignment with ISO/IEC 27001 standards, ensuring traceability and accountability across all service areas.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Our free trial includes access to core integration and automation features, standard templates, and limited user onboarding support for up to 14 days. It excludes custom configurations, dedicated support, and API integrations. This trial allows prospective buyers to assess fit and functionality before committing to a full contract.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: 608a94e9-8081-41b4-b22d-d1073bd64b07
• Cyber essentials plus: Yes
• Cyber Essentials Plus Certificate Number: 5216efb2-1ca8-42bd-8d19-f07c09fe5bc2
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

  • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
  • Methods for engaging with different parts of the community (including the education system and charities representing the community) and how communities come together to inform decisions, strategy and projects to leave a positive legacy for future generations

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at enquiries@technoivity.com. Tell them what format you need. It will help if you say what assistive technology you use.