ENTITLEDTO LTD

Council Tax Reduction Modelling

The Council Tax Reduction (CTR) Modelling Service combines our benefits calculation engine with your anonymised local authority caseload data to analyse the impact of alternative CTR scheme/s on claimants. The service identifies the cost to the authority of alternative schemes and supports you in preparing carefully considered schemes for consultation.

Features

• Model alternative scheme(s) of your creation or using existing templates
• Existing templates for all current working-age CTR schemes
• Compare awards for your caseload under current/alternative CTR scheme(s)
• Check costs/savings of alternative schemes against your current scheme
• Explore opportunities for future savings
• Evaluate the impact of alternative schemes on vulnerable groups
• Feed into relevant equalities impact assessment(s)
• Report on entitlements for each household under modelled CTR schemes
• Provide insight for members, officers, residents and other interested parties
• Includes our CTR consultation calculator to help inform public

Benefits

• Access latest published CTR schemes from other Local Authorities
• Up-to-date with the latest entitlement legislation and reforms
• Dedicated user support from entitledto’s experienced CTR team
• Fully compliant with data security standards, hosted/supported in UK

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at nicki@entitledto.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

811921625015184

Contact

Nicki Duckworth
0161 980 6276
nicki@entitledto.co.uk

About your service

• Service categories:

  Applications

  Content workflow and management

  Persuasive content management

  • Website Software
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: No
• System requirements:
  • Internet access
  • Internet enabled device

User support

• Email or online ticketing support: Yes
• Support response times: Available during office hours (9am to 5pm Monday to Friday, excluding public holidays).; Response times are as follows: ; • Highest - target response time 2 hours, target resolution 4 hours ; • High - target response time 4 hours, target resolution 1 day ; • Medium - target response time 1 day, target resolution 2 days ; • Low - target response time 2 days, target resolution 10 days
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: Support hours are 9.00am to 5:00pm during office hours (excluding public holidays). If support is required outside of normal hours this can be arranged in advance. Support is included in all subscriptions at no extra cost.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Clients receive an on-boarding call as part of their subscription. The inclusive support service offered to clients includes a dedicated named client manager to contact in the organisation.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Clients extract their data through the admin interface while using their administrator log in details. We can also export data as a .csv file if required.
• End-of-contract process: Clients are required to notify entitledto in writing (either by email or by letter) with not less than three (3) Months’ notice that they would like to end their contract. Notifications are acknowledged and appropriate arrangements made to cancel the contract at the end of current licence year.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: And desktop service Products are responsive, to enhance UX experience according to the device used by the user.
• Service interface: No
• User support accessibility: WCAG 2.2 AA
• API: Yes
• What users can and can't do using the API: The API can be used for integrating entitledto's software with other software solutions.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: The products are highly configurable and can be customised in terms of content and design. Clients can log in using the admin interface to customise products, including amending text, or we will manage customisations on their behalf.

Scaling

• Independence of resources: We monitor service loads to ensure CPU usage is low and service speeds are high. Additional servers are added as required to ensure there are always sufficient resources available for all clients.

Analytics

• Service usage metrics: Yes
• Metrics types: We provide a comprehensive suite of management information covering application usage levels, completion rates and value of benefits identified.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: Yes
• Equipment disposal approach: In-house destruction process
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Clients extract their data through the admin interface while using their administrator log in details. We can also export data as a .csv file if required.
• Data export formats:
  • CSV
  • Other
• Other data export formats: Excel
• Data import formats:
  • CSV
  • Other
• Other data import formats: Excel

Data-in-transit protection

• Data protection between buyer and supplier networks: Other
• Other protection between networks: In most instances there is no connection between the buyer's network and the entitledto network as the tools are freestanding. Where there is integration with another service we protect data using SSL and locked-down IP addresses.
• Data protection within supplier network: Other
• Other protection within supplier network: All our databases are co-located in one data centre.

Availability and resilience

• Guaranteed availability: Service is available all year around, 24 hours per day. We have a record of 99.9% up-time.
• Approach to resilience: Systems are hosted at ANS data centre in Manchester which has a range of failover, backup and disaster recovery mechanisms in place.
• Outage reporting: Unscheduled downtime is extremely rare, but is reported within 24 hours to clients (by email) should there be any downtime.

Identity and authentication

• User authentication needed: No
• Access restrictions in management interfaces and support channels: Management interfaces and support channels are accessed via a log in. Each log in supplied is associated with a role (e.g. adviser, administrator etc.) which is then used to identify the data required for each user and each role. We ensure that the system defaults to providing only data required by the user (e.g. to calculations and budgets that they have created).
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: We have been awarded Cyber Essentials Plus. This provides an established framework that ensures our information security strategy meets applicable laws and regulations through adherence to policies and internal controls.
• Information security policies and processes: We have an internal framework that ensures leaders are accountable and where roles, responsibilities and segregation of duties are defined. Staff are trained in the framework and it is reviewed and audited regularly.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We have an on-going process of identifying and managing changes to deliverables and products. These are managed through a third party tracking system.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: A clearly defined cyclical practice exists where we identify, classify, remediate and mitigate vulnerabilities. This is managed through third party software. We also carry out regular penetration testing.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Third party software is used to detect and alert in relation to operational and security issues. Response times depend on the category of the issue:; • Highest - target response time 2 hours, target resolution 4 hours; • High - target response time 4 hours, target resolution 1 day; • Normal - target response time 1 day, target resolution 2 days; • Low - target response time 2 days, target resolution 10 days
• Incident management type: Supplier-defined controls
• Incident management approach: Third party software is used to track and manage incidents. Users report incidents through their preferred communication method.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Free trials of full functionality products are available. Free trial periods range from 14 to 30 days (or more on request).
• Link to free trial: https://free-trial.entitledto.co.uk

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 5acde836-ef8b-4ebe-bfd0-d6350f254c73
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at nicki@entitledto.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.