SYNECTICS SOLUTIONS LIMITED

SynDOC

SynDOC is an unstructured data analysis service that automates detection of fraudulent documents and images. It analyses document and image data and uniquely leverages syndicated data to identify fraud indicators, helping organisations reduce manual review and strengthen fraud prevention across document-driven processes.

Features

• Unstructured document and image analysis
• Automated fraud detection for documents
• Syndicated data enrichment
• Image authenticity and manipulation analysis
• Machine learning risk indicators
• Automated document classification
• Secure cloud-based processing
• Configurable rules and thresholds
• Audit logging and traceability

Benefits

• Automatically identify fraudulent documents and images
• Reduce manual document review effort
• Detect fraud earlier in document-driven processes
• Improve accuracy of fraud decisions
• Leverage syndicated intelligence unavailable internally
• Increase operational efficiency
• Strengthen fraud prevention controls
• Support consistent, auditable decisions
• Scale document analysis securely

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsectorservices@synectics-solutions.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

738828413623950

Contact

Louise Williams
0333 234 3409
publicsectorservices@synectics-solutions.com

About your service

• Service categories:

  Applications

  Enterprise resource management

  Financial

  • Treasury and Risk Management Applications
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: SynDOC is not an extension of third-party software services. It can be deployed as a standalone service but is commonly used in conjunction with SIRA and National SIRA, where it extends document and image analysis capabilities to support fraud detection and risk decisioning.
• Cloud deployment model: Private cloud
• Service constraints: Yes. SynDOC is delivered as a cloud-based SaaS service and requires network connectivity and a supported web browser or system integration. The service relies on the availability and quality of customer-provided document and image data. Planned maintenance is carried out during scheduled maintenance windows. Custom functionality beyond configuration may require additional professional services.
• System requirements:
  • Modern, standards-compliant web browser
  • Secure internet network connectivity
  • HTTPS access enabled
  • Supported desktop or laptop device
  • API connectivity for integrations
  • Supported document and image formats
  • Secure file transfer capability

User support

• Email or online ticketing support: Yes
• Support response times: Synectics Solutions provides dedicated help desk support for SynDOC. Queries submitted via email are responded to between 8:00am and 6:00pm, Monday to Friday, excluding public holidays. Response times are defined within the customer’s agreed SLA. 24/7 support, including weekends, can be provided at additional cost where required.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes
• Support levels: Synectics Solutions provides structured support for the SynDOC service. Standard support is included and delivered via a dedicated help desk during core business hours, with response times defined in the customer’s SLA. In addition, the integration and implementation of SynDOC are fully supported by a dedicated Project Manager at no additional cost. The Project Manager holds overall responsibility for the project plan, coordinates onboarding, leads implementation and production rollout, and provides full training on the solution.; ; Enhanced support options, including extended hours or 24/7 support, are available where required. These options are agreed with the customer and priced on a case-by-case basis depending on scope and service levels.; ; Standard support and project management during onboarding and implementation are included in the service price. Enhanced or bespoke support services incur additional costs as agreed.; ; Customers may be supported by technical specialists as part of enhanced support arrangements. Where required, ongoing technical account management or cloud support engineer support can be provided subject to agreement.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Synectics Solutions supports users in getting started with SynDOC through a structured onboarding process. A dedicated Project Manager is assigned to oversee onboarding, coordinate setup and support users through initial use of the service. The solution is fully documented, including a Technical Onboarding Pack and comprehensive User Guides. Training on the use of the SynDOC user dashboard can be arranged on request at no additional cost, delivered remotely or on-site where required.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: When the contract ends, Synectics Solutions works with the customer to support data extraction in line with the termination policies defined in the contract. Data is made available in agreed formats and transferred securely to the customer or a nominated third party. The approach, scope and timing of data extraction are agreed during the offboarding process to ensure a controlled and compliant service exit.
• End-of-contract process: At the end of the contract, Synectics Solutions works with the customer to agree the service exit process, including data extraction, service disablement and data deletion, in line with contractual terms. Once termination is confirmed, the service is disabled and fully decommissioned, and customer data is securely deleted following agreed procedures.; ; Standard end-of-contract activities, including coordination of service shutdown, data extraction in agreed formats and confirmation of decommissioning, are included in the contract price. Any additional or non-standard activities, such as extended access periods, bespoke data transformation or additional support, may be provided at additional cost subject to agreement.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: N/AOnboarding and offboarding documentation for SynDOC is provided in standard digital formats that can be accessed using commonly available devices and software. Where required, Synectics Solutions can provide alternative formats or additional guidance to support users with specific accessibility needs.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: SynDOC is accessed through a secure, web-based user interface. Users can submit referred enquiries or ad hoc documents through a loading screen and review analysis results. The interface allows users to view rule hits, compare files against flagged syndicated data, inspect image metadata, and perform additional validity checks on documents.
• Accessibility standards: None or don’t know
• Description of accessibility: SynDOC is accessed through a secure, web-based user interface that can be used with standard browsers and assistive technologies. Users can submit documents and images for analysis, review rule hits and fraud indicators, compare files against syndicated data, inspect image metadata and perform additional validity checks. Users can navigate the interface using standard input methods and browser accessibility features. Users cannot modify the underlying analysis engines or syndicated datasets; access is restricted to authorised functions based on user roles and permissions.
• Accessibility testing: Accessibility of the SynDOC service interface has been considered through internal usability testing and quality assurance activities. This has included testing with keyboard-only navigation, browser zoom and contrast settings, and screen reader tools to validate core user journeys such as document submission, review of analysis results and navigation of rule hits. Feedback from users is reviewed and informs ongoing improvements to accessibility and usability.
• API: Yes
• What users can and can't do using the API: SynDOC provides APIs to support real-time integration with customer systems and automated document processing. Users can submit documents and associated data via the API for real-time analysis and receive responses containing analysis results and fraud indicators. This enables real-time enquiries and automated data exchange alongside use of the web-based interface.; ; The API is not used to set up the service. Initial configuration, onboarding and service setup are managed by Synectics Solutions. Ongoing changes to rules, thresholds and service configuration are managed through the service interface and agreed change processes rather than through the API.; ; Use of the API is optional and the service is not dependent on API integration. The API cannot be used to modify core analysis engines, syndicated datasets or underlying service infrastructure. Access is limited to authorised users and supports data submission and retrieval only, ensuring secure and controlled integration.
• API documentation: Yes
• API documentation formats:
  • HTML
  • Other
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Users can customise SynDOC to align with their operational and business needs through configurable service options.; ; Users can tailor the service by selecting which SynDOC modules are enabled, configuring analysis rules and thresholds, defining document types, and determining how results and fraud indicators are presented. Integration options, such as API usage and data flows, can also be configured.; ; Customisation is agreed during onboarding or through formal change requests. Configuration is applied within the service by Synectics Solutions, with users able to manage permitted settings through the service interface where appropriate.; ; Customisation is requested by authorised customer representatives, such as service managers or administrators. Synectics Solutions implements and governs configuration changes to ensure service integrity, security and performance.

Scaling

• Independence of resources: Synectics Solutions ensures users are not adversely affected by other users’ demand through a resilient and scalable service architecture. Capacity and performance are regularly tested to confirm sufficient headroom. Load balancing is used to distribute demand efficiently, supported by multiple internet connections and redundant components to provide resilience and maintain consistent service performance.

Analytics

• Service usage metrics: Yes
• Metrics types: SynDOC provides service metrics to support operational oversight and performance monitoring. Monthly management information reports are provided by the MI team, covering enquiry volumes, rule hits and performance against agreed service level agreements. Additional or bespoke reporting can be provided on request and may incur an additional charge.
• Reporting types: Regular reports
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Users can export data at an individual enquiry level through the service interface. For each enquiry, a full breakdown of web matches, rule hits and analysis results can be downloaded in an agreed format. Mass or bulk data extraction is not supported due to the sensitive nature of matching against external organisations’ files and syndicated data.
• Data export formats: Other
• Other data export formats: JSON
• Data import formats: Other
• Other data import formats:
  • PDF
  • JPEG
  • PNG

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Synectics Solutions guarantees 98% service availability, measured in accordance with the customer’s agreed service level agreement. Planned development, upgrades and maintenance are performed within scheduled maintenance windows and are executed outside of normal operating hours to minimise user impact.; ; Availability targets, measurement methods and exclusions are defined in the SLA. Where guaranteed availability levels are not met, service credits or refunds are applied in line with the terms of the SLA, proportionate to the level and duration of the service unavailability.
• Approach to resilience: SynDOC is designed with resilience built into both the application and infrastructure layers to maintain availability and protect assets. The service is load balanced across multiple virtual machines, enabling continued operation if individual components fail and allowing workloads to be migrated to new physical hardware when required. Systems are built to be highly fault tolerant, using dual power supplies and redundant network connections.; ; The service is hosted in highly resilient data centres equipped with uninterruptible power supplies, backup generators and FM200 fire suppression systems. Data centres are served by multiple internet service provider connections to ensure network resilience. A dedicated Business Continuity Management department oversees continuity planning, testing and response. Further details of the resilience architecture can be provided on request.
• Outage reporting: Service outages are reported directly to customers in line with contractual arrangements. Where an outage exceeds the customer’s contractual targets, Synectics Solutions notifies the client directly, providing details of the issue, estimated resolution times and proposed remediation. Notifications are typically provided via direct communication such as email or telephone. The service does not provide a public status dashboard or an outage reporting API.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is tightly controlled. SynDOC users can only access the service from allow-listed IP addresses. Each client accesses a dedicated service instance identified by a unique domain. All users authenticate using unique user IDs verified by the application, with role-based access controls enforced. Client administrator accounts are provided to manage user provisioning, permissions and access levels within their organisation.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Synectics Solutions operates a formal Information Security Management System (ISMS) aligned to the ISO/IEC 27000 series and certified to ISO/IEC 27001 by the BSI Group. Information security policies are designed to protect information against unauthorised access, assure confidentiality, maintain integrity and ensure compliance with regulatory and legislative requirements.; ; Overall responsibility for information security is supported by a defined governance structure, with policies implemented across all business areas and adherence required from all employees. Information security training is provided to staff, and all actual or suspected security incidents are reported and investigated in line with documented processes.; ; Risk management is used to identify, assess, report and manage information security risks across the organisation. Risk assessments are performed periodically and whenever significant changes occur, ensuring policies remain effective and aligned with business and security requirements.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Configuration and change management processes are operated in line with ITIL V3.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Synectics Solutions operates a structured vulnerability management process aligned to its ISO/IEC 27001–certified ISMS. Potential threats are assessed through annual penetration and vulnerability testing, continuous monitoring and risk-based analysis. Where significant risks are identified, the Business Continuity Plan is invoked to manage remediation. Patch deployment follows a defined policy, with prioritisation based on risk and severity. The IT Security team monitors multiple threat intelligence sources, including NCSC guidance, vendor advisories, AlienVault Open Threat Exchange and industry feeds, and participates in the NCSC Cyber Security Information Sharing Partnership (CiSP).
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Synectics Solutions operates protective monitoring in line with documented security policies and accredited RMADS. Potential compromises are identified through continuous monitoring using intrusion prevention and detection systems (IPS/IDS) and a Security Information and Event Management (SIEM) solution, providing oversight, assurance and user accountability. Annual penetration and vulnerability testing further supports identification of weaknesses.; ; When a potential compromise is detected, incidents are assessed, contained and investigated in accordance with the Information Security Incident Management policy. Response actions are prioritised based on severity, with prompt escalation and remediation to reduce impact and prevent recurrence.
• Incident management type: Supplier-defined controls
• Incident management approach: Synectics Solutions operates a formal incident management process aligned with NCSC guidance, industry best practice and ISO/IEC 27035. Pre-defined processes are in place for common incidents, supported by documented escalation procedures. Users report incidents via dedicated helpdesk facilities by email or telephone. Incidents are assessed and managed in line with the Security Incident Management Policy, with remediation supported by departmental Business Continuity Plans where required. Incident reports are provided to customers and include details of impact, actions taken and outcomes.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: SynDOC does not offer a free production version. A time-limited proof of concept can be provided to demonstrate the operational uplift achieved when applied to existing processes. The proof of concept is scoped with the customer and does not include full production functionality.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI Assurance UK Ltd
• ISO/IEC 27001 accreditation date: Sunday 14 December 2025
• What the ISO/IEC 27001 doesn’t cover: There are no exclusions, it covers the entire organisation
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 5481ad36-f8b8-4fbf-a885-0fc0b874aed6
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 45d04f71-6b83-45f8-a067-3157e440a657
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
    • How the supplier will work with NGOs, trade unions or other businesses to address modern slavery risk
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
    • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsectorservices@synectics-solutions.com. Tell them what format you need. It will help if you say what assistive technology you use.