SYNECTICS SOLUTIONS LIMITED

SynID

SynID is a digital identity verification service that streamlines identity checks while ensuring compliance with the UK Digital Identity and Attributes Trust Framework (DIATF). It enables organisations to verify identities securely and efficiently, supporting trusted onboarding, fraud prevention and regulatory compliance.

Features

• Digital identity verification workflows
• Compliance with DIATF requirements
• Document and biometric verification
• Automated identity checks
• Real-time verification responses
• Secure web-based user interface
• API integration for system connectivity
• Configurable verification journeys
• Audit logging and traceability

Benefits

• Verify identities quickly and securely
• Reduce manual identity checking effort
• Improve onboarding efficiency
• Support regulatory compliance with DIATF
• Reduce identity fraud risk
• Enable consistent identity decisions
• Integrate verification into existing processes
• Improve customer and citizen experience
• Scale identity verification securely

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsectorservices@synectics-solutions.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

726607435186211

Contact

Louise Williams
0333 234 3409
publicsectorservices@synectics-solutions.com

About your service

• Service categories:

  Applications

  Enterprise resource management

  Financial

  • Treasury and Risk Management Applications
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: N/A
• System requirements:
  • Modern, standards-compliant web browser
  • Secure internet connectivity
  • HTTPS access enabled
  • Supported desktop or mobile device
  • API connectivity for integrations
  • Data feed conforming to provided schema

User support

• Email or online ticketing support: Yes
• Support response times: Synectics Solutions provides dedicated help desk support for SynID. Queries submitted via email are responded to between 8:00am and 6:00pm, Monday to Friday, excluding public holidays. Response times are defined within the customer’s agreed SLA. Users are also supported by a Client Success Manager, who can assist with service queries and raise technical issues with the help desk. Weekend support is not included as standard.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes
• Support levels: Synectics Solutions provides structured support for the SynID service. Standard support is included and delivered via a dedicated help desk during core business hours, with response times defined in the customer’s SLA. Integration and implementation within the customer’s organisation are fully supported by a dedicated Project Manager at no additional cost. The Project Manager provides system integration documentation, coordinates onboarding, assists with user acceptance testing and production rollout, and delivers full training on the solution.; ; Enhanced support options can be agreed where required, such as extended support hours or additional technical assistance. These options are scoped with the customer and provided at additional cost.; ; Standard support and project management during onboarding and implementation are included in the service price. Enhanced or bespoke support services incur additional charges as agreed.; ; Customers are supported by a dedicated Project Manager during implementation. Where required, ongoing technical account management or specialist support resources can be provided subject to agreement.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Synectics Solutions supports users in getting started with SynID through a structured onboarding process. A dedicated Project Manager is assigned to manage onboarding, coordinate setup and support integration activities. The solution is fully documented, including a Technical Onboarding Pack and comprehensive User Guides. Training on the use of the Investigation Dashboard can be arranged on request at no additional cost and can be delivered remotely or on-site where required.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: When the contract ends, Synectics Solutions works with the customer to support data extraction in line with the termination policies defined in the contract. Data is provided in agreed formats and transferred securely prior to service termination, ensuring a controlled and compliant exit process.
• End-of-contract process: At the end of the contract, Synectics Solutions works with the customer to agree the service exit process, including data extraction, service disablement and data deletion, in line with contractual terms. Once termination is confirmed, the service is disabled and fully decommissioned, and customer data is securely deleted following agreed processes.; ; Standard end-of-contract activities, including coordination of service shutdown, data extraction in agreed formats and confirmation of decommissioning, are included in the contract price. Any additional or non-standard activities, such as extended access periods or bespoke data handling, may be provided at additional cost subject to agreement.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Onboarding and offboarding documentation for SynID is provided in standard digital formats that can be accessed using commonly available devices and software. Where required, Synectics Solutions can provide alternative formats or additional guidance to support users with specific accessibility needs.

Using the service

• Web browser interface: No
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: SynID provides a flexible service interface that supports both system integration and user investigation. The service can be utilised exclusively through secure request and response APIs to enable automated identity verification within customer systems. In addition, SynID includes a secure, web-based Investigation Dashboard that allows authorised users to review enquiries, drill into identity scores, inspect contributing data sources and support investigation and audit activities.
• Accessibility standards: None or don’t know
• Description of accessibility: SynID is accessible through secure APIs and a web-based Investigation Dashboard, both of which can be used with standard browsers and assistive technologies. Users can submit identity verification requests, review enquiry outcomes, examine scores and supporting data, and perform investigation and audit activities. Users can apply their own accessibility settings through their browser or assistive tools. Users cannot modify the underlying verification engines, data sources or trust framework logic; access is restricted to authorised functions based on roles and permissions.
• Accessibility testing: Accessibility of the SynID service interface has been considered through internal usability testing and quality assurance activities. Feedback is reviewed and used to inform ongoing improvements. Formal third-party accessibility testing with assistive technology users has not been undertaken.
• API: Yes
• What users can and can't do using the API: SynID provides secure APIs to enable real-time identity verification within customer systems. Users submit identity verification enquiries through the Request API, which triggers rule matching and analysis. Aggregated verification results are returned via the Output API in a GPG45-compliant response format, supporting automated decision-making and integration with existing workflows.; ; The service is not configured through the API. Initial setup, onboarding, configuration and rule management are handled by Synectics Solutions as part of the service implementation. Changes to verification logic, scoring, data sources or DIATF-aligned processes are not made through the API.; ; Use of the API is optional; the service can also be accessed through the web-based Investigation Dashboard. API access is restricted to authorised users and supports enquiry submission and result retrieval only. Users cannot modify core service configuration or underlying verification engines through the API, ensuring security, consistency and compliance.
• API documentation: Yes
• API documentation formats:
  • HTML
  • Other
• API sandbox or test environment: Yes
• Customisation available: No

Scaling

• Independence of resources: Synectics Solutions ensures users are not adversely affected by other users’ demand through a resilient and scalable service architecture. Capacity and performance are regularly tested to confirm sufficient headroom. Load balancing is used to distribute demand efficiently, supported by multiple internet connections and redundant components to provide resilience and consistent service performance.

Analytics

• Service usage metrics: Yes
• Metrics types: SynID provides service metrics to support operational oversight and performance monitoring. Monthly management information reports are produced by the MI team, covering enquiry volumes, rule hits and performance against agreed service level agreements. Additional or bespoke reporting can be provided on request and may incur an additional charge.
• Reporting types:
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: SynID data is accessed and exported through its APIs only. Verification responses are provided in SOAP XML format via the Output API and are designed for integration into customer real-time environments. Data cannot be exported in bulk or through the user interface; access is limited to authorised API-based request and response interactions.
• Data export formats: Other
• Other data export formats: SOAP XML
• Data import formats: Other
• Other data import formats: SOAP XML

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Synectics Solutions guarantees 98% service availability or higher, measured in accordance with the customer’s agreed service level agreement. Planned development, upgrades and maintenance are performed within scheduled maintenance windows and executed outside of normal operating hours to minimise impact.; ; Availability targets, measurement criteria and exclusions are defined in the SLA. Where guaranteed availability levels are not met, service credits or other remedies are applied in line with the terms agreed with the customer.
• Approach to resilience: SynID is designed with resilience built into both the application and infrastructure layers to maintain availability and protect assets. Systems are engineered to be highly fault tolerant, using dual power supplies and redundant network connections to minimise single points of failure. Load balancing and capacity testing are used to ensure consistent performance, supported by regression and automated testing to validate resilience.; ; The service is hosted in highly resilient data centres equipped with uninterruptible power supplies, backup generators and FM200 fire suppression systems. Data centres are served by multiple internet service provider connections, with backup data centres in place to support disaster recovery and unplanned events. Further resilience details are available on request.
• Outage reporting: Service outages are reported directly to customers in line with contractual arrangements. Where an outage exceeds the customer’s contractual targets, Synectics Solutions notifies the client with details of the issue, estimated resolution times and proposed remediation. Notifications are provided through email alerts and dashboard reports within the service. The service does not provide a public status dashboard or an outage reporting API.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is tightly controlled. SynID users can access the Investigation Dashboard only from allow-listed IP addresses. Each client accesses a dedicated service instance identified by a unique domain. All users authenticate using unique user IDs verified by the application, with role-based access controls enforced. Client administrator accounts are provided to manage user provisioning, permissions and access levels within their organisation.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Synectics Solutions operates a formal Information Security Management System (ISMS) certified to ISO/IEC 27001:2013, supported by fully documented security policies and procedures.; ; Overall responsibility for information security rests with the Chief Information Security Officer (CISO), who reports to the Legal & Compliance Director. An ISMS Review Committee, including at least one Director, meets twice annually to review security posture, risk and compliance. A Security Strategy Group meets fortnightly to oversee ongoing security governance. A dedicated IT Security team manages operational security, while physical security is the responsibility of the Facilities team.; ; Synectics adheres to Cyber Essentials, established Security Operating Procedures (SyOPS), and protective monitoring controls selected from GPG13, informed by IS1 risk assessments. Monitoring is designed to protect OFFICIAL information. An assessment against GPG43 (RSDOPS) has been completed, systems have been continuously accredited since 2009, and all 14 government cloud security principles are met in the secure delivery of services.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Synectics Solutions operates configuration and change management processes aligned with **ITIL v3**.; ; Service components and configurations are tracked throughout their lifecycle using internal configuration and change management systems, providing visibility of assets, versions and dependencies from deployment through to retirement. All product change requests are logged, prioritised and managed within a central internal system.; ; Changes are assessed for risk and potential security impact prior to approval. Security considerations form part of the change assessment process, with appropriate technical and security review where required. Customers can monitor and discuss change requests through a dedicated relationship manager, ensuring transparency and controlled implementation.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Synectics Solutions operates a structured vulnerability management process aligned with its ISO/IEC 27001–certified ISMS. Potential threats are assessed through annual penetration and vulnerability testing, continuous monitoring and risk-based analysis. Where significant risks are identified, the Business Continuity Plan is invoked and a dedicated project team manages investigation and remediation. Patch deployment follows a defined patching policy, with timescales determined by risk and severity. The IT Security team monitors multiple threat intelligence sources, including NCSC guidance, vendor advisories, AlienVault Open Threat Exchange and industry feeds, and participates in the NCSC Cyber Security Information Sharing Partnership (CiSP).
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Synectics Solutions operates protective monitoring in line with documented security policies and accredited RMADS. Potential compromises are identified through continuous monitoring using intrusion prevention and detection systems (IPS/IDS) and a Security Information and Event Management (SIEM) solution, providing assurance and user accountability. Annual penetration and vulnerability testing further supports identification of weaknesses.; ; When a potential compromise is detected, incidents are assessed, contained and investigated in accordance with the Information Security Incident Management policy. Response actions are prioritised by severity, with prompt escalation and remediation to minimise impact and reduce the risk of recurrence.
• Incident management type: Supplier-defined controls
• Incident management approach: Synectics Solutions operates a formal incident management process aligned with **NCSC guidance**, **industry best practice** and **ISO/IEC 27035**. Pre-defined processes are in place for common security and service incidents, supported by documented escalation and response procedures. Users report incidents through dedicated helpdesk facilities via email or telephone. Incidents are assessed and managed in line with the Security Incident Management Policy, with remediation supported by relevant departmental Business Continuity Plans. Incident reports are provided to customers, detailing impact, actions taken and outcomes, and can be reviewed during onsite visits or secure video conferences.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: SynID does not provide a free production version. A time-limited proof of concept can be offered to demonstrate how the service supports identity verification within existing processes. The proof of concept is scoped with the customer and excludes full production functionality.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI Assurance UK Ltd
• ISO/IEC 27001 accreditation date: Sunday 14 December 2025
• What the ISO/IEC 27001 doesn’t cover: There are no exclusions, it covers the entire organisation
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 5481ad36-f8b8-4fbf-a885-0fc0b874aed6
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 45d04f71-6b83-45f8-a067-3157e440a657
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
    • How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsectorservices@synectics-solutions.com. Tell them what format you need. It will help if you say what assistive technology you use.