Metastreet Ltd

Private Housing Regulation Software & Apps

Property licensing (all types), hazard assessment (HHSRS), licence auditing, & Inspector App.

Private rented housing regulation software, including case management, compliance and enforcement.

Tenure Intelligence and stock condition intelligence .

Features

• Developed by sector experts - expert project support included
• Fully customisable - client branding & Gov.uk guidelines
• Fully compliant - meets legal requirements out of the box
• Specialised mobile inspection app (hazards) with cloud integration
• Cloud based team management and workflow
• Integrated payment gateway & self service reports
• Open APIs & no exit fees
• Print, email, portal and direct post solution
• Full case management and hazard assessment (HHSRS)
• Artificial intelligence and data assembly provide housing and non-compliance insights

Benefits

• Expert design and stand alone - limited integrations
• Drive up service efficiency and reduce administration costs
• Productivity boost - smart workflows & validation
• Designed by practitioners - experienced in delivering PRS services
• Mobile working - cloud based via any internet connected device
• Inspector App - integration to reduce officer data entry
• Open APIs & no exit fees
• Secure by design, 2FA, encrypted document storage, audit logs
• Auto scaling AWS architecture to support peaks in traffic
• Full payment integration (Stripe and Capita Pay)

£12,000.00 an instance a year

• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at team@metastreet.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

763355489943956

Contact

Team Metastreet
02089383768
team@metastreet.co.uk

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: No
• System requirements:
  • Modern web browsers
  • Smart phone for two factor authentication
  • Each user needs unique e-mail address

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Provide e-mail and on line support 9a.m to 5p.m Monday to Fridays. (except bank holidays) Response times set out in our service standards.; ; We also use Freshchat live chat support for clients 9a.m to 5p.m Monday to Friday (except bank holidays)
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.1 AA or EN 301 549
• Web chat accessibility testing: Provided by third party
• Onsite support: Yes, at extra cost
• Support levels: Technical account manager support; Support package can be tailored to clients requirements
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Training will be available online; User documentation available through the 'help centre'; Support line available; Training videos; A training/test system will be set up and available throughout the life of the contract
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: We will assist in the migration of data to the buyer or a new supplier as detailed in the agreed exit plan. This will be in a structured JSON format.
• End-of-contract process: Obligations as required by the agreed exit plan and contract are included in the price of the contract.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Menu structure
• Service interface: No
• User support accessibility: WCAG 2.1 AA or EN 301 549
• API: Yes
• What users can and can't do using the API: The Metastreet API is organised around REST. Our API has predictable resource-oriented URLs, returns JSON-encoded responses, and uses standard HTTP response codes, authentication, and verbs.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: A wide range of elements are configurable on set up, including branding - e.g logo, favicon, accent colour; fee levels; licence conditions, notices and letters; bespoke additional conditions system e-mails; split payments (part B payment); ; Configuration of application form - required documentation; public register configuration; message on payment screen .

Scaling

• Independence of resources: Auto scaling infrastructure and a queue based messaging pipeline to stop blocking requests

Analytics

• Service usage metrics: Yes
• Metrics types: Applications submitted; Applications processed; Payment; Third party analytics (e.g Google analytics)
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Can be provided on request
• Data export formats: CSV
• Data import formats:
  • CSV
  • Other
• Other data import formats: Dtf 7.3

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: 99%
• Approach to resilience: This is available on request
• Outage reporting: E-mail alerts; Public dashboard

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: We implement a role based access control list and have a policy using principle of least privilege
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Citation ISO Certification
• ISO/IEC 27001 accreditation date: 01/11/2023
• What the ISO/IEC 27001 doesn’t cover: The design and supply of cloud-based SaaS-based software products for the public protection sector and the provision of data analytic services.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: PCI
• PCI DSS accreditation date: 06/11/2023
• What the PCI DSS doesn’t cover: None
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: All software development and products are done to OWASP guidelines
• Information security policies and processes: Full details are available on request

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Any new feature before it goes into development has a security impact assessment .Before any functional major release there is a regression test and a external penetration test before release.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We follow industry news bulletins for potential threats. Dependant on relevance and severity we provide patches within 48 hours. All threats are risk assessed and triaged
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We employ a range of AWS security tools which monitors any unauthorised access to production environments.; Our system administrators investigate immediately on being alerted with the relevant business and tech stakeholders
• Incident management type: Supplier-defined controls
• Incident management approach: We have a pre-defined incident report process and all clients are notified by e-mail of the incident and our response and kept updated

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Tackling economic inequality

  Tackling economic inequality

  Metastreet’s mission is to support housing authorities in achieving their ambitions to protect tenants and drive-up standards in the private rented sector. ; We have seen first hand how poor housing conditions can wreck tenants' lives and entrench poverty. We believe a well operated property licensing scheme combined with dynamic regulation can tackle criminal behaviour amongst some landlords. It also helps create a level playing field for those who are complying with the rules. ; ; We understand how technically complex property licensing schemes and advanced private housing regulation can be. That is why specialist housing practitioners and established software developers have teamed up to develop good value and highly effective technological solutions to support the authorities work. As a company we are committed to continuous development of our products and services and to work in collaboration with housing authorities to achieve it’s public protection goals.

Pricing

• Price: £12,000.00 an instance a year
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: We have a sandbox site which potential customers can access and test.

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at team@metastreet.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.