Electronic Form Creation, Processing and Management System
Victoria Forms design specialised electronic form processes, providing libraries of online template forms and calculators for Revenues, Benefits, Licensing, HMO, Building Control, Environmental Health, Planning, Education and more. Solutions are tailored for Corporate Branding, In-form Intelligence, Data Validation; PDF export, Campaigns, Back Office XML Automation, Evidence Capture, and Payment Integration.
Features
- Scalable Cloud Based System presents, processes and stores eForms
- Ready made Template Libraries, or Bespoke Design Services Offered
- 325+ data capture forms for multiple departments; with legislative updates
- Includes real-time calculations to assist the user
- Users can attach evidence directly to online form
- Processing system can raise reviews for cases when circumstances change
- Design, Create & Maintain eForms using MS Word
- Multiple Field types plus fixed and conditional Field properties
- eForms accessible via desktop, laptop, mobile devices and tablets
- Forms work in major browsers with no additional software required
Benefits
- Flexible architecture to allow phased implementation as needed
- Intelligent forms reduce errors and improve user experience
- 20+ years of experience supplying Local Government
- SaaS solutions allow customers to be up-and-running quickly
- Forms are fully customisable allowing Councils to replicate existing forms
- Filter questions ensure only eligible applicants can apply
- Localised Verification allows dynamic and personalised evidence requests
- Familiarity of Word means no new design package to learn
- Integration eliminates time spent on rekeying information
- Customer focused approach develops most efficient service for you
Pricing
- Free trial available
Service documents
Request an accessible format
Framework
G-Cloud 15
Service ID
7 9 8 6 3 0 1 6 4 8 2 9 5 9 2
Contact
Victoria Forms
Barry Young
Telephone: 01284 703000
Email: VFSales@victoriaforms.com
About the service
- Service categories
-
- Applications
- Content workflow and management
- Capture
- Capture
- Document
- Document
- Capture
- Content workflow and management
- Applications
- Multi cloud support
- Yes
Service scope
- Software add-on or extension
- Yes, but can also be used as a standalone service
- What software services is the service an extension to
-
Microsoft Word (VF Creator)
Third Party back Office Systems (Data Capture Forms) - Cloud deployment model
- Private cloud
- Service constraints
-
VF Creator, the Simplified CTR Application Processing and Management system and the main Enterprise Forms Server Software are only compatible with Windows and should be installed on Windows Devices and Windows Servers. VF Creator is a Word Add-In and requires Word 2010+ (not Office Online) to allow your organisation to design your own forms.
Please Note: End Users can access eForms using any operating system, it is only the core software, design and server software that is constrained to Windows. - System requirements
-
- If Self-Hosted: Windows Server 2016 and above
- If Self-Hosted: Microsoft IIS7.5 & above
- If Self-Hosted: SQL Database
- For VF Creator Add-In: Word 2010+ (not Office Online)
User support
- Email or online ticketing support
- Yes
- Support response times
- Target Initial Response Time: 60 Minutes Target Incident Management Response Times - Priority 1: 60 Minutes Priority 2: 180 Minutes Priority 3: 24 Hours Priority 4: None (Logged for information purposes only) Support Desk open Monday - Thursday 09:00 to 17:30 UK Time; Friday 09:00 to 17:00 UK Time. Excluding English Bank Holidays and Public Holidays, and between Christmas and New Year. Out of hours technical support is available upon request and as mutually agreed.
- User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Onsite support
- Yes, at extra cost
- Support levels
-
Email and Telephone support is available to buyers and their end users. Onsite Support is provided at extra cost, of £1,000 per day.
Customers of our Electronic Forms and Cloud-Based Processing System and Simplified CTR Application Processing and Management System will have a dedicated Account Manager. - Support available to third parties
- Yes
Onboarding and offboarding
- Getting started
-
Victoria Forms appoint a Project Manager for the implementation phase, supported by Consultants, eForms Designers and the Technical Support Team. Through an Initial Project meeting and additional discussion, required information is obtained from the Buyer to assist Victoria Forms in the Setup of the Solution. Any changes required can be discussed and implemented at any time during the project.
Training is included within the Setup of the Core Enterprise Forms Server Software. Typically this will be a session where the Buyer interacts with the system both from the perspective of the end-user, and as an administrator - to understand all facets of the service. In addition, Victoria Forms provide access to manuals and support resources to assist with the use of the software.
eForm branding is applied by Victoria Forms, with no need to involve web designers. For End Users to access forms, all that is required is to provide a link from your website to the appropriate eForm (the appropriate link will be provided by Victoria Forms). When a user clicks on the link, the appropriate eForm will open up in a new browser window on the End User’s computer. - Service documentation
- Yes
- Documentation formats
-
- HTML
- Documentation accessibility standard
- WCAG 2.2 AA
- End-of-contract data extraction
-
Off-boarding is straightforward; given the data being captured by the system in a submitted eForm is used or captured by the Authority for its own on-going processing and record keeping regularly. Therefore, any data held should already have been captured by the Buyer.
Victoria Forms can provide additional access to the database for the Buyer if required, to download any further eForms submitted in the last days of contract provision, to ensure it has sufficient time in which to download these and capture the included customer data.
When the Buyer has confirmed it has downloaded all records from the system or the agreed additional access time has finished, Victoria Forms will permanently delete all data held securely under contract, including any backups to ensure it satisfies all its Data Protection requirements. - End-of-contract process
- At the end of the Contract, removal of the system is included within the Annual Maintenance Fee paid by the Buyer.
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Opera
- Other
- Application to install
- Yes
- Compatible operating systems
- Windows
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
- Relates to end user online forms ONLY: Mobile eForms are resized automatically to fit the device screen, and the eForm controls shrink to a minimalist bar across the top of the screen allowing more space for eForm questions to reduce excessing scrolling. Controls can be accessed via a mobile menu.
- Service interface
- Yes
- Description of service interface
-
End users interact with forms via their browser. No login is required, and users can navigate through forms using the form controls at the top of the page. Forms are presented in the style of the buyer's website, or as mutually agreed.
The Buyer will have access to Enterprise Forms Server, a cloud hosted management system which controls the processing and hosting of forms. This is accessed via username and password, and allows the buyer to configure form settings and perform additional actions with their forms, as well as add new users. - Accessibility standards
- WCAG 2.2 AA
- Accessibility testing
- For public facing forms, accessed via the browser - Victoria Forms have conducted a number of tests using market leading assistive technology and have also had feedback from visually impaired users of the software.
- User support accessibility
- WCAG 2.2 AA
- API
- Yes
- What users can and can't do using the API
- There are APIs available in various parts of our service which provide the facility to pre-populate forms, control form features, access partially completed forms and submitted forms, and control form processes. The exact APIs available depend on the options chosen as part of the service. The APIs need to be set up by Victoria Forms IT, who can provide documentation and example code, as well as work with the Buyer's IT to achieve requirements.
- API documentation
- Yes
- API documentation formats
-
- Open API (also known as Swagger)
- HTML
- API sandbox or test environment
- Yes
- Customisation available
- Yes
- Description of customisation
-
Buyers can request a bespoke eForm design service from Victoria Forms. Experienced eForms Design staff discuss requirements with the Buyer, and can create bespoke forms based on a given specification according to requirements. Buyers can also opt to customise any ready-made templates, to meet requirements.
Buyers have control over a number of eForm configuration options, via administrative staff who have an account on the core software, allowing complete customisation over content of information shown and sent to the End User at the point of eForm Submission, as well as some controlling eForm Features.
The Service can be branded to the buyer's website or according to specification, including corporate colour schemes and branding guidelines.
Add-On Modules and integrations can be added to the core software at any time, allowing the service to be expanded and customised with additional functionality to meet changing requirements.
Scaling
- Independence of resources
-
Buyers have the option of hosting their own solution internally, or Victoria Forms can provide hosting, through Microsoft Azure. Where Victoria Forms provide hosting, each customer has their own independent database.
For the End User - the system enables the entire eForm to be loaded by the local user browser, including all the inbuilt intelligence. Once completed, processing of eForm data takes only a few seconds. Many concurrent users can complete eForms while the server remains unburdened.
Analytics
- Service usage metrics
- No
Supplier type
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Baseline Personnel Security Standard (BPSS)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
- United Kingdom
- User control over data storage and processing locations
- Yes
- Datacentre security standards
- Managed by a third party
- Penetration testing frequency
- At least once a year
- Penetration testing approach
- In-house
- Protecting data at rest
-
- Physical access control, complying with another standard
- Other
- Other data at rest protection approach
- For Hosted solutions, data is protected by Microsoft Azure's Transparent data encryption (TDE).
- Data sanitisation process
- Yes
- Data sanitisation type
- Deleted data can’t be directly accessed / Cryptographic Erasure
- Equipment disposal approach
- In-house destruction process
Data importing and exporting
- Data export approach
-
Data is exported in PDF, XML, or CSV format.
All forms can be exported as PDF files. These can be be sent to a document system via email, or manual upload. Alternatively, with some custom coding, our system can generate detailed indexing information for each form, and send this directly to a document system with the form.
Selected forms can export as XML files, which can be sent to a Back Office System via connectors/APIs, to allow data to be integrated with existing Back Office Systems.
Data can also be extracted from forms in CSV format via the Statistics Module. - Data export formats
-
- CSV
- Other
- Other data export formats
- XML
- Data import formats
- CSV
Data-in-transit protection
- Data protection between buyer and supplier networks
-
- TLS (version 1.2 or above)
- IPsec or TLS VPN gateway
- Data protection within supplier network
- TLS (version 1.2 or above)
Availability and resilience
- Guaranteed availability
- Where Victoria Forms provide hosting, the eForms System will be hosted by Microsoft Azure. Microsoft’s data centers are engineered to provide 99.999% availability to meet their customer’s SLAs and service needs. 98+% Target Service Availability 98+% uptime guarantee does not include scheduled maintenance - normally conducted outside working hours and as previously notified. Service Desk Support Hours Monday to Friday 09:00 to 17:00 GMT Excluding English bank and public Holidays and between Christmas and New Year. Out of hours technical support is available upon request and as mutually agreed.
- Approach to resilience
- Information available upon request.
- Outage reporting
- Within the Enterprise Forms Server System, any error alerts are displayed in the 'Filled Forms' area of the system, notifying users if there are forms waiting to be downloaded. Should systems be unavailable for extended periods of time, Victoria Forms will notify the Buyer and will work to reinstate systems as soon as possible.
Identity and authentication
- User authentication needed
- No
- Access restrictions in management interfaces and support channels
- All data is held securely within an internal system, separate from the external system that presents eForms for completion. The eForms System is hosted on secure servers, provided by the customer, or by Victoria Forms (Microsoft Azure) - servers are restricted by MultiFactor Authentication, a whitelist of IP Addresses, as well as requiring a username and password, or (optionally) authentication via Active Directory Federation Services, for access.
- Access restriction testing frequency
- At least once a year
- Management access authentication
-
- Multi-Factor Authentication (MFA)
- Identity federation with existing provider (for example Google Apps)
- Username or password
- Other
- Description of management access authentication
- Restriction by whitelist of IP addresses.
Audit information for users
- Access to user activity audit information
- Users have access to real-time audit information
- How long user audit data is stored for
- User-defined
- Access to supplier activity audit information
- Users have access to real-time audit information
- How long supplier audit data is stored for
- User-defined
- How long system logs are stored for
- User-defined
Security governance
- Named board-level person responsible for service security
- No
- Software Security Code of Practice
- Yes
- Security governance certified
- Yes
- Security governance standards
- ISO/IEC 27001
- Information security policies and processes
- Victoria Forms have an ISO 27001 Certified Information Security Management System (ISMS) in place which is followed by all staff members. The policies within the ISMS form part of our staff induction process, and staff members formally agree to policies within the scope of their work. Policies are supported by documentation and processes which make use of task management software. Regular audits are carried out to ensure continued compliance and that policies continue to be appropriate for our work. The system architecture is designed with information security at the forefront of decision-making, and we use an industry leading hosting service (Microsoft Azure) to store and process data. Further information is available upon request.
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
- Victoria Forms use Source Control Software to track components of our services through their lifetime. Changes are assessed using an in-house code review programme.
- Vulnerability management type
- Supplier-defined controls
- Vulnerability management approach
- Testing is carried out to assess potential threats to the service. Where possible, threats will be replicated and fixes/updates will be applied to the system to rectify any vulnerabilities. Major System updates are applied every 18 months. Minor updates are applied approximately every 6 months. Where vulnerabilities have been identified, patches will be applied immediately. Potential threats are identified via Penetration Testing, Customer Feedback and Regular research on current/potential threats.
- Protective monitoring type
- Supplier-defined controls
- Protective monitoring approach
- Potential compromises are checked for alongside vulnerabilities. In the event of the discovery of a potential compromise, Victoria Forms will endeavour to correct the issue, and assess the impact and escalate priority as required. Upon discovery of any compromise, Victoria Forms will escalate the incident to the highest priority, and will provide a response to the affected party within 60 minutes.
- Incident management type
- Supplier-defined controls
- Post-quantum cryptography secure
- Yes
- Incident management approach
- Incidents or issues can be raised through our Support Helpdesk, which will be responded to by a member of the Support Team. All Incidents that have permanent or long-lasting effect on Information Security are run through our internal Incident Response Plan, which includes writing a report document. Incident reports can be shared to the relevant party when required.
Secure development
- Approach to secure software development best practice
- Supplier-defined process
Public sector networks
- Connection to public sector networks
- No
Pricing
- Discount for educational organisations
- No
- Free trial available
- Yes
- Description of free trial
-
Victoria Forms provide Buyers with links to a comprehensive selection of Demonstration eForms, which can be accessed at any time to review forms templates.
A Free Trial of the core Enterprise Forms Server software is not available.
Discount percentage by annual call-off contract value (excluding VAT)
- Less than £250,000
- 0%
- Between £250,000 and £500,000
- 0%
- Between £500,001 and £1,000,000
- 0%
- Between £1,000,001 and £2,500,000
- 0%
- Between £2,500,001 and £5,000,000
- 0%
- Over £5,000,001
- 0%
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- ISO/IEC 27001 accredited by
- British Assessment Bureau
- ISO/IEC 27001 accreditation date
- Friday 19 April 2024
- What the ISO/IEC 27001 doesn’t cover
-
Anything outside of certificate scope:
"Provision of forms technology that enables organisations to replace or complement paper forms with intelligent, professional, online forms that users can fill, sign and submit in any browser, on any device worldwide" - ISO 28000:2022 certification
- No
- ISO 9001 certification
- No
- Quality management systems (QMS)
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- No
- Cyber Essentials Alternative
- In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
- Cyber essentials plus
- No
- Cyber Essentials Alternative
- None of the criteria
- Other security certifications
- No
Social value
- Mission: Break down barriers to opportunity
-
By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 6: Employment and training: For those who face barriers to employment
- Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce