Clue Computing Company

Clue - intelligence, investigation & case management software

Intelligence, investigation and case management software to manage a wide range of threats - including fraud and economic crime, bribery and corruption, integrity and insider threat, vetting, trafficking, drugs, organised crime, terrorism, cyber-crime, border security, safeguarding, child protection and environmental crime. Prevent, identify, investigate harm; bring victims justice more quickly.

Features

• Solution for incidents, intelligence and development, investigation, prosecution and prevention.
• Sophisticated search and index, including linked databases and repositories.
• Entity (POLE) centric design, with extensive linking; interoperable through API.
• Workflow, tasking, decision logging, evidential compliance for prosecution civil/criminal sanctions.
• AI-driven watchlists, charting, mapping, visualisation, insights, dashboards, and reporting.
• Global user community sharing insights, best practice, feeding product roadmap.
• Information capture via web, email and third-party applications using API.
• Comprehensive redaction, disclosure, case management and schedule generation function.
• Audit tools and prompts enhance data compliance, quality and reporting.
• Granular access control through flexible roles and permissions.

Benefits

• Configuration manages diverse organisational threats from a single system.
• Single search accesses all information reducing missing links/data risks.
• Insights enable emerging threat disruption and improve early intervention.
• Consolidate all interconnected records with guided workflows, ensuring procedural compliance.
• Sophisticated configuration allows multiple teams to collaborate.
• Share sanitised/redacted data with partners or use API.
• NIM-compliant intelligence with information and source management.
• Integrations to eliminate manual processes and information flows.
• User-driven product enhancements to keep pace with evolving needs.
• Redaction capability saves time and avoids prosecutions/sharing risks.

£20,000 an instance a year

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at kevin.kirby@cluesoftware.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

826801761306829

Contact

Kevin Kirby
07769672138
kevin.kirby@cluesoftware.com

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: Clue doesn't have a set maintenance window but can agree with the customer on when upgrades/patches need/must to be made.
• System requirements: Supported browser (Edge, Chrome) on the device accessing the service.

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Support core business hours 0800 - 1800 hrs Monday-Friday. ; No weekend support.; ; Standard Target resolution times: ; • P1=1 Business Day (The business unit is halted completely and no work around is feasible e.g., complete outage or cyber attack); • P2=3 Business Days (An Incident causing significant impact to the business with no workaround available); • P3=5 Business Days (An Incident causing minimal impact to the business. There may be a workaround available); • P4=7 Business Days (An Incident causing negligible impact )
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Onsite support
• Support levels: STANDARD SUPPORT (SS); Target response & resolution time: Standard SLA’s on problem incidents ; Knowledge Hub access: Up to 5 accounts; Portal access to raise tickets 24/7: 2 Licenses; ; ENTERPRISE SUPPORT (ES) ; Target response & resolution time: Enhanced SLA’s on problem incidents ; Knowledge Hub access: Up to 30 accounts; Portal access to raise tickets 24/7: 5 Licenses; Named support contact ; Fortnightly calls to review Support Tickets; Quarterly Support Reviews; Hyper-support during releases; Technical Support for Customer Hosted accounts; ; COST; Cost is based on the number of licenses. Additional cost for (ES) Enterprise Support model (versus Standard).
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Clue appoint a dedicated Implementation team to onboard new customers. Establishing and managing, project governance- delivery plans and status reporting. The team will manage instance set up, running a process, data and integration assessment to ensure a best-practice and applicable standard configuration. Clue support configuration review and refinement and provide a best practice tool kit, including system training materials. Clue will run instructor led, recorded training sessions for super users and end users, ensuring that super users can administrate configuration updates and changes. Once signed off Clue will transition the customer from implementation to business as usual with access to the support team via a ticketing system, to raise and monitor issues and queries, and to the customer success team and Clue Connect community to ensure adoption and onward success.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Users can export their own data at the end of contract or Clue can help with the export.
• End-of-contract process: At the end of contract the customer success manager will discussed the steps in the Clue exit plan. All data can be exported by the customer but Clue can help with the export if required.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Some screens have been optimised for viewing on a mobile device. However, there is no reduction in functionality as a result of this.
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: Clue is a browser-based investigation case management application used by investigators and case officers.
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: We want as many people as possible to be able to use this browser-based application. For example, that means you should be able to:; ; - Zoom in up to 200% without the text spilling off the screen.; - Navigate the website using just a keyboard.; - Navigate most of the website using speech recognition software.; - Listen to most of the website using a screen reader (including the most recent versions of JAWS, NVDA and VoiceOver).; - Change colours, contrast levels and fonts using accessibility plug-ins. (AbilityNet has advice on making your device easier to use if you have a disability.); - -We’ve also made the website text as simple as possible to understand and optimised colour contrasts.; ; We know some parts of this website are not fully accessible. You can see a full list of any issues we currently know about in our Accessibility Statement.
• API: Yes
• What users can and can't do using the API: The API is comprehensive and is primarily used to submit and retrieve information from the Clue system without having to use the web based user interface. It is most commonly used to allow the integration with other third-party systems and tooling.; ; The API is focused on viewing and maintaining the data in Clue rather than the set up and administration of the system. However, the API can be used to administrate users on the system. Including user creation, alteration and deletion.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Users can customise the service as follows:; ; Custom Fields: add, modify, or delete various types such as Boolean, Currency, Date, Dropdown, Free Text, and Links to entities like Address, Organisation, Person, or Staff Records. These can be conditional, mandatory, or unique.; ; Fields: designate fields as mandatory or optional.; ; Lists: customise and order fields in List Views to enhance user experience and ensure quick data access. Includes options to reset to default settings and support from the Clue Support Team.; ; Menus: customise all dropdown field menu values.; ; Tags: configure Tags to categorise records and alert users.; ; Report Templates: design and upload Microsoft Word report templates for custom reporting. Templates autopopulate with record data and be printed as PDFs or Word documents.; ; Data Views and Dashboards: create, modify, and share data views and dashboards. Filter data using no-code rules, customise columns, share and export views, and display results graphically on dashboards.; ; Access to these configurations is permission-based and controlled via the Access Control page in CLUE.

Scaling

• Independence of resources: Clue use Microsoft Azure to be able to scale up when needed. Clue also have monitoring in place that will alert when certain thresholds are met so capacity can be increased if needed.

Analytics

• Service usage metrics: Yes
• Metrics types: Clue use various tooling for different metrics. Insights for how Clue is being used, Monitoring tools for uptime and capacity and also metrics on support SLA's.
• Reporting types: Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Users can export the data if they have the permissions directly from Clue in a .csv format. Other export formats are supported using the API.
• Data export formats: CSV
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • CSV
  • XML
  • SQL
  • Discreet files as attachments

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: 99.99%
• Approach to resilience: We utilise Microsoft Azures SLA for their data centres. Further details can be available on request.
• Outage reporting: Clue have a monitoring platform built into the service that will notify us of any outages or high consumption of services.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Users can either login in to a web portal with a username and password or SSO can be enabled to link into the preferred active directory.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau
• ISO/IEC 27001 accreditation date: December 2023
• What the ISO/IEC 27001 doesn’t cover: N/a
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Clue has over 40 policies and procedures related to ISO27001 all connected to the Information Security policy. As part of employee onboarding, a selection of these policies are signed for individually by the employee and the rest are read during the induction process. All policies have a section confirming adherence for all employees that links to our disciplinary procedure.; ; Further details can be found at trust.cluesoftware.com

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Clue has a change management procedure for changes made to the service, e.g. development of the product. Clue will then work to a customer's change process when it comes to upgrading/patching the service in the cloud.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Clue have penetration tests at least annually. Clue has a vulnerability management procedure that can be made available on request.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Logs from Azure and the WAF can be fed into a SIEM and 24/7 SOC.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Clue has a strict incident process in line with our commitments to ISO 27001. When an incident is identified Clue will appoint an incident manager and pull together a team to investigate and mitigate. Further details can be provided on request.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Public Services Network (PSN)

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Fighting climate change ; We are committed to reducing our environmental impact over the next five years and to zero by 2035. This includes but not limited to working towards ISO 14001. We have a duty of care to fight climate change both internally and through the decisions we make within our limited supply chain. ; ; We focus on four areas of environmental impact reduction:; ; - Reducing pollution to zero;; - Reducing our contribution to climate change to zero;; - Reducing our depletion of natural resources to zero;; - Reducing our contribution to habitat destruction to zero.; ; Internal working practices and policies in support of these objectives: ; ; Developing features that enable our staff to limit their travel such as mobile working;; ; Encouraging the use of digital meetings and public transport; ; ; Employing locally and home-based/hybrid employment contracts; ; ; Electric vehicle purchasing scheme; ; ; Encouraging BYOD mobile usage and operation of device replacement programmes;; ; Energy-efficient LED bulbs and motion-sensitive timing switches in the office; ; ; Electric charging points for vehicles and ‘Bike-To-Work’ salary sacrifice scheme; ; ; Energy-efficient utilities, improved insulation, solar panelling,and grey water recycling systems; ; ; Eliminating paper in our day-to-day internal operations; ; ; Waste reduction and recycling programs to minimise landfill waste; ; ; A paperless office, all work is done digitally and, in the cloud, reducing the number of pages printed to near-zero; ; ; Supplier Management:; ; Microsoft is our largest supplier and directly impacts our environmental impact reduction. Microsoft will be using 100% renewable energy by 2025. Its zero-waste certification 2030 includes increased reuse and recycle rates of all cloud hardware to 82%, with a 2030 goal of 90%. ; ; Scored questions on environmental responsibility within our supplier selection process. ; ; A sourcing strategy that sources locally, to reduce the miles travelled by suppliers; ; ; We track progress against our objectives for continuous improvement.

  Tackling economic inequality

  We actively work to create an equitable and inclusive environment, championing fairness and ethical practices. This includes : ; ; We are a signatory of the Tech Talent Charter and are committed to working with it to increase the diversity and inclusion at Clue. ; ; We have a proactive stance against risks aligned to modern slavery including a modern slavery statement. This commitment extends from our Board throughout our contract delivery process, including our supply chain. ; ; Career development & progression. We have a dedicated training budget available to all team members at Clue which we utilise to support individual development relevant to their roles and empower individuals to move into more senior positions. ; ; Equal and fair pay. We undertake pay reviews every six months, including a benchmark to ensure no disparities between protected characteristics.

  Equal opportunity

  Reducing the disability employment gap: ; ; We recognise the existing disparity in employment between disabled and non-disabled individuals. Our goal is to bridge this gap by actively recruiting and supporting disabled talent. ; ; Our values of United, Respectful and Ethical promote an inclusive environment where everyone feels valued. ; ; Accessible Recruitment Practices: We utilise an applicant tracking system with enhanced accessibility for disabled candidates, including accessible job postings, application forms, and interview arrangements. Our dedicated recruiter has had full disability awareness training. ; ; Reasonable Adjustments: These include flexible work hours, hybrid workspaces, including the ability to work from home, and full workspace assessments. For neuro-diverse individuals, our People team includes an ILM-qualified workplace coach. ; ; Hybrid, flexible work environment; Our work arrangements include remote working and fully flexible working hours. ; ; Mental and Physical Health support: Our employees have access to counselling and a 24-hour private GP service.

  Wellbeing

  We prioritise well-being for all. Our approach ensures that everyone feels supported, engaged, and empowered. Initiatives we’ve implemented include: ; ; Social and wellbeing calendar: From team-building activities to wellness challenges, our calendar encourages camaraderie and positive interactions. ; ; YuLife Wellbeing app: This app promotes well-being through activities and team collaborations. It’s a hub for fitness challenges, mindfulness exercises, and virtual social gatherings. ; ; Meeting default times and breaks: We recognize the importance of breaks during the workday. By adjusting default meeting times, we encourage everyone to recharge and maintain focus. We share this ethos with our customers and suppliers. ; ; Enhanced healthcare and life insurance: Our team members enjoy upgraded levels of healthcare and life insurance coverage from day one of employment. ; ; Employee Assistance Program (EAP): Our EAP provides confidential support for personal and professional challenges. ; ; Mental health policy: We’ve developed a robust mental health policy that destigmatizes discussions around mental well-being. Our goal is to create a supportive environment where everyone feels comfortable seeking help. ; ; Engagement surveys: We conduct engagement surveys every six months to assess employee satisfaction, identify pain points, and address concerns promptly. ; ; Motivation and well-being pulse surveys: Our bi-monthly pulse surveys gauge motivation levels and overall well-being. ; ; Information sharing: We regularly share resources related to well-being. Whether it’s World Mental Health Day, heart health awareness, or cost-of-living tips, we keep our team informed. ; ; Face-to-face collaboration: While remote work is essential, we promote a weekly “come to the office day.” This ensures that team members connect in person, fostering collaboration and social bonds. ; ; Volunteering days: We encourage all employees to undertake a volunteering day to support our communities. ; ; We are committed to creating a thriving work environment where well-being is at the core of our success.

Pricing

• Price: £20,000 an instance a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at kevin.kirby@cluesoftware.com. Tell them what format you need. It will help if you say what assistive technology you use.