THE FUTURE FOX LTD

Automated Local Plan Consultation Reporting

Local Plan ConsultAI creates instant, accurate reports designed for statutory Local Plan consultations and Gateways. It helps planning policy teams analyse representations including online comments, documents and handwritten letters, producing auditable, transparent and compliant reports. Multichannel and interoperable with existing tools (no need to switch).

Features

• Upload and store all representations for each Local Plan stage
• Interoperable with your tools: Upload comments from any platform
• Add pdf documents, emails and handwritten letters
• Meets Gateway and Regulation 18, Regulation 19, 22 criteria
• Human-in-the-loop review and quality assurance tools
• Accurate chunking of representations by policy or site
• Traceable and auditable report staging and controls
• Real-time dashboards
• Accepts XLSX, DOCX, PDF, TIFF, JPEG, PNG files

Benefits

• Reduce consultation analysis time from months to days
• Lower consultation analysis costs significantly
• Produce defensible, auditable consultation evidence for Gateways
• Improve consistency across multiple consultations, teams and staff
• Reduce risk of missed or misclassified responses
• Free officer time for higher-value work
• Enable faster, evidence-based decisions
• No need to switch - interoperates with existing tools

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at hello@thefuturefox.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

735202170864412

Contact

Bobbi Taylor
02080580584
hello@thefuturefox.com

About your service

• Service categories:

  Applications

  Content workflow and management

  • Document

  Content services

  • Enterprise Content Management Applications
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Hybrid cloud
• Service constraints: No
• System requirements:
  • Internet connection
  • Web browser

User support

• Email or online ticketing support: Yes
• Support response times: Assistance requests logged and initiated within 4 working hours. Response to question within 48 hours Monday-Friday.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), 7 days a week
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: The web chat has been tested with users using assistive technologies, including screen readers and keyboard-only navigation, to ensure basic accessibility and usability. We continue to review accessibility as part of ongoing improvements and welcome feedback from users.
• Onsite support: Yes, at extra cost
• Support levels: Access email, phone and webchat support during office hours via the help button. Assistance requests logged and initiated within 4 working hours.; All requests are handled via a Customer Success Manager with input from the technical team.; Addition support can be agreed upon based on support requirements as outlined in the Pricing Document, using day rates.
• Support available to third parties: Yes
• AI chatbot: Yes

Onboarding and offboarding

• Getting started: We help users get started through a structured onboarding process. This includes an initial online kick-off meeting, guidance on preparing and submitting data, and access to clear user documentation and process guides. Users are provided with secure login details and can request screenshare sessions for setup and familiarisation. We carry out intake validation to ensure data is ready for analysis and provide ongoing support via email, web chat, and optional online training throughout the delivery process.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Administrators with the relevant permissions can export all project data from the dashboard at any time.
• End-of-contract process: At the end of the contract the customers will have the option to request an extension of the service (for a supplementary fee) with a minimum 30 days notice. Should the contract not be extended, all buyer data will be removed within the agreed period. A phone interview will be organised with the client to assess the quality of the service provided and to identify areas of improvement.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The platform is a fully responsive web application. There is no difference in functionality when using different devices.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: The platform is accessed through a secure, web-based user interface using a standard web browser. Users upload and review consultation responses, documents and datasets, monitor analysis progress, and explore results through dashboards and reports. The service includes a web chat interface for user support and guidance. Optional integration interfaces (APIs) allow data to be securely transferred from third-party consultation platforms and other systems.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: The platform has been tested with users using assistive technologies, including screen readers and keyboard-only navigation, to ensure accessibility and usability, and WCAG compliance. We continue to review accessibility as part of ongoing improvements and welcome feedback from users.
• API: No
• Customisation available: Yes
• Description of customisation: Analysis and report settings can be customised by assigned users using the service interface. Organisational defaults can be implemented by administrators.

Scaling

• Independence of resources: The service is designed to distribute processing workloads across multiple machines. Analysis tasks are queued and processed with capacity controls to prevent individual workloads from affecting others. We monitor system utilisation and scale processing capacity as demand increases to maintain consistent performance for all users.

Analytics

• Service usage metrics: Yes
• Metrics types: The service provides metrics including input data volumes (such as numbers of responses and documents processed), analysis and processing status, completion timestamps, and the number of reports generated. Users can also see project scope indicators such as questions, policies or sites analysed, and basic usage information including active users and report availability.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure

Data importing and exporting

• Data export approach: Assigned users can export data and reports at any time using the platform controls.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Xlsx
  • Docx
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • XLSX
  • PDF
  • DOCX
  • PNG
  • TIFF
  • JPEG

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Guaranteed 99.9% service availability, measured monthly, excluding planned maintenance. If availability falls below this level, customers may be eligible for a pro-rata service credit or refund, as set out in the Terms and Conditions. The service is designed for resilience using distributed cloud infrastructure. Planned or unplanned outages are communicated to users via email alerts, with updates provided until service is restored.
• Approach to resilience: The platform is designed for resilience using cloud-based infrastructure hosted in UK data centres operated by a third-party provider. The service uses distributed processing across multiple machines, managed backups, and monitored capacity to reduce the impact of component failure. Data centres provide built-in resilience including redundant power, networking and physical security controls. Detailed architecture and resilience information is available on request.
• Outage reporting: Service outages are reported to users via email alerts. Notifications are sent when an outage is identified, with follow-up updates provided until the service is restored.

Identity and authentication

• User authentication needed: Yes
• User authentication: Multi-Factor Authentication (MFA)
• Access restrictions in management interfaces and support channels: Access to management interfaces is protected using strong authentication, including multi-factor authentication (MFA). Passwords are stored in encrypted form. Role-based access control (RBAC) is used to restrict access to data and project types based on user roles, with access rights reviewed on a quarterly basis. Administrative access and user actions are logged and auditable by authorised administrators. Support channels are access-controlled, encrypted, and logged to prevent unauthorised access.
• Access restriction testing frequency: At least once a year
• Management access authentication: Multi-Factor Authentication (MFA)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Our security governance follows ISO/IEC 27001 principles and is embedded across the organisation. Security policies, including a Cyber Security Policy and Data Breach Policy, are reviewed on a quarterly basis, with oversight and accountability held by the CEO. Security is integrated into product design, development and ongoing operations, and applied across people, process and technology, including staff onboarding, training and compliance with security requirements.
• Information security policies and processes: Our information security policies and processes are designed to minimise risk and protect customer data. The CEO holds overall responsibility for information security and policy compliance. Adherence to policies is reviewed on a quarterly basis, with actions tracked and addressed as required. Controls include strong password management, use of password managers, multi-factor authentication, role-based access controls, and device security. Staff are required to follow security policies as part of onboarding and ongoing operations. We are Cyber Essentials Plus certified and registered with the ICO.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We use source control (Git) to track all service components throughout their lifecycle. Changes are proposed, reviewed and approved by the Technical Lead and CEO before implementation. Changes are developed and tested in a staging environment using automated testing before release to production. Each change is assessed against a technical risk register, including potential security impacts, to ensure risks are understood and managed prior to deployment.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We operate a risk-based vulnerability management process aligned with Cyber Essentials Plus controls. Potential threats are identified through automated vulnerability testing, dependency monitoring, and review of system changes. Vulnerabilities are prioritised by severity and potential impact. Critical vulnerabilities are assessed and contained within 4 hours, including deploying hotfixes where required, followed by investigation and remedial actions. Software packages and operating systems are kept up to date. Threat intelligence is sourced from cloud service providers, operating system vendors, dependency security advisories, and security update notifications.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We operate protective monitoring to identify potential security compromises using system alerts, monitoring logs, and automated indicators of suspicious activity. Alerts are reviewed by authorised staff, who assess events using log data and other diagnostic information. Where a potential compromise is identified, incidents are handled in line with our Incident Management Policy, which defines roles and responsibilities across containment and recovery, investigation and risk assessment, notification, and evaluation and response. Incidents are prioritised within 4 hours, with high-priority incidents addressed immediately.
• Incident management type: Supplier-defined controls
• Incident management approach: Users can report incidents to us at any time through their account manager or the Help button, by email, phone or in person. These are logged and initiated within 4 working hours. Administrators are informed regularly of progress, according to severity. Once the incident is dealt with, an incident report is filed and provided to the relevant parties by email. Data breach incidents are managed following our Data Breach policy.; ; Our Incident management policy covers 4 steps with roles and responsibilities: Containment and recovery,Investigation and risk assessment,Notification, Evaluation and response.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Access for one month with a limit of 100 credits. After the trial period or credit limit is reached, continued use requires a paid subscription.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 2.5%
• Between £500,001 and £1,000,000: 3.5%
• Between £1,000,001 and £2,500,000: 4%
• Between £2,500,001 and £5,000,000: 5%
• Over £5,000,001: 5%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 52d17229-aed0-47dd-b1cf-756f1b517f89
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: C4c66f73-9f67-4136-9490-e4accfb7b1e1
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
    • Measures to involve local stakeholders and/or users in design (e.g. in the design of services, systems, products or buildings)
    • Plans to respond flexibly and adapt approaches to community engagement and initiatives

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at hello@thefuturefox.com. Tell them what format you need. It will help if you say what assistive technology you use.