IndySoft, Inc.

IndySoft

Business to business quality control software specialising in calibration, preventative maintenance and tooling.

Features

• Automated Reporting and Dashboards
• Configurable, Scalable
• Mobile and Web Based Access
• Word Order Management
• Compliance and Audit Readiness
• Calibration Management
• Secure, Cloud Hosted Solution
• Preventive and Reactive Maintenance Scheduling
• Centralised Asset Management
• Generation of All Reports, Certificates and Stickers

Benefits

• Improved Asset Uptime
• Increased operational efficiency
• Better compliance and governance
• Reduced maintenance costs
• Greater visibility and control
• Faster response to issues
• Consistent processes across teams
• Work Offline or Online to manage work
• Printing can be done from anywhere

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at heather.mcgrath@indysoft.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

834938507312191

Contact

Heather McGrath
+18645130073
heather.mcgrath@indysoft.com

About the service

• Service categories:
  • Applications
    • Enterprise resource management
      • Asset life-cycle management
        • Asset life-cycle management
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: No constraints
• System requirements:
  • SQL Server (Not Express)
  • Windows 10 and above

User support

• Email or online ticketing support: Yes
• Support response times: Within 1 business day.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: We don't provide varying levels of support. Our support is consistent for each customer and follows a severity system to monitor standard response times. Support is included at no extra cost to the licenses a customer purchases. Our team work together to provide both standard and technical support during standard business operating hours.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: IndySoft provides a full onsite training to get the system admins trained to configure the software. We can then provide regular support as an onboarding process over the following 6 weeks initially. Customers are always able to access support via our team, the support portal and any documentation provided. Finally, we also provide our Tip Tuesday videos on YouTube where users can get a helpful hint about a part of the software.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Our documentation is provided via HTML or PDF through our support portal or directly from our support team. We work with customers to make sure they can be provided the documentation they need in the format they prefer.
• End-of-contract data extraction: Customers are able to extract data via a tool built into the system. This would result in a CSV of their content for standard asset data, however if they require the historical documentation, we would make an agreement with the customer to receive a copy of the backup of their database. This would be setup to be transferred into a central file sharing location where the customer can access and download it for themselves.
• End-of-contract process: As IndySoft is provided as a SaaS solution, the contract is renewed annually unless our end user wishes to terminate or change the contract. We make sure to contact in advance to arrange the next term for the contract and any changes to licensing at that point. If the customer wishes to terminate the contract they can do so at this time and arrangements can be made for data to be extracted.; ; All contracts are priced to account for any licenses and services agreed during the initial sale. Any further additions of licensing or services are dealt with on a case by case basis and quoted and charged accordingly under the same terms already laid out with the customer.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: We have a specific application to work on mobile phones for tracking assets along with the fact that you can access IndySoft on any compatible mobile device, however it is best suited for a larger screen such as a tablet, laptop or desktop.
• Service interface: Yes
• Description of service interface: We provide a customer portal to access support documentation, tickets and communication.
• Accessibility standards: None or don’t know
• Description of accessibility: IndySoft has been designed with accessibility considerations in mind and follows recognised good practice where possible. The service uses clear layouts, consistent navigation, and readable text to support ease of use.; ; The interface can be accessed using standard web browsers and supports keyboard navigation. Form fields and controls use clear labels to aid understanding, and the service aims to work with common assistive technologies.; ; Accessibility is considered during ongoing development, and feedback from users is used to identify and prioritise improvements
• Accessibility testing: At this time we have not done any interface testing with users of assistive technology directly. This is something considered on our roadmap.
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: We provide a fully documented process of usage of our Essentials API via Swagger. There are many pre-defined points that users can work with when setting up API integration, and we are able to additionally discuss any further points on a case by case basis.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: IndySoft is a fully configurable software that is designed to be customised by our users. We provide training and support on how to go through this process and then the system administrators can make changes directly for their system. System administrator is a role that is provided out of the box and is usually reserved for a few people in the software chosen by the end users. There are some places in the software where custom scripting can also be utilised, which we can provide at cost under a SoW, but can also be done by the end users as long as they sign to take responsibility.

Scaling

• Independence of resources: IndySoft ensures users are not affected by the demand other customers place on the service through logical tenant separation, controlled resource allocation, and continuous monitoring. Each customer operates within a separate tenant, with strict data and access isolation at application and database level. Usage controls and rate limiting prevent any single customer from consuming disproportionate resources. The platform is hosted on scalable cloud infrastructure from Microsoft Azure that automatically adjusts to demand, supported by active performance monitoring and alerts to identify and address issues before users are impacted.

Analytics

• Service usage metrics: Yes
• Metrics types: Customers can review the usage of their systems through audit logs. IndySoft monitors the server that the customers instance of IndySoft is on, to make sure it is running consistently and reports on any outages whether they be planned or not.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Exporting reports and certificates can be done on an automated basis or ad-hoc via built in tools of IndySoft. When exporting asset data, it is done via the tool provided in the software for meta data and if any mass documentation is required, we can provide a back-up of the customers database to a central file sharing service where the customer can download it for themselves.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • Excel
  • XML
  • HTML
• Data import formats:
  • CSV
  • Other
• Other data import formats: Data migration via our team

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: IndySoft targets high availability through resilient cloud hosting and operational controls. The service is hosted on Microsoft Azure and designed to achieve 99.9% availability, excluding planned maintenance. Availability is monitored continuously, and incidents are managed in line with defined support and incident response processes. If availability falls below the stated target in a given billing period, affected customers may be eligible for service credits or fee adjustments, calculated proportionately to the impact and duration of the outage, in line with contractual terms.
• Approach to resilience: IndySoft’s service is designed for resilience at both application and infrastructure level. The service is hosted on Microsoft Azure, using resilient cloud architecture with built-in redundancy across critical components such as compute, storage, and networking. This reduces single points of failure and supports continued operation during infrastructure issues. Application-level controls, including monitoring, automated recovery, and regular backups, further improve resilience. Datacentre and regional resilience details are managed by Microsoft Azure and are available on request where required.
• Outage reporting: IndySoft reports service outages through defined operational communication channels. Where appropriate, customers are notified via direct communication, such as email, and updates are provided until service is restored. Internally, availability and performance are continuously monitored, and incidents are logged and managed through established incident response processes to ensure timely resolution and clear communication.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: IndySoft restricts access to management interfaces and support channels through role-based access controls and the principle of least privilege. Administrative access is limited to authorised staff only and granted based on job role. Access to production systems and support tools is logged and reviewed, and credentials are protected using defined access management policies. Support interactions are handled through controlled channels to ensure customer data is accessed only where necessary to resolve an issue.
• Access restriction testing frequency: At least once a year
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: SOC 2 Type II
• Information security policies and processes: IndySoft operates a defined information security management framework aligned to SOC 2 Type II requirements. This includes documented policies covering access control, data protection, incident management, change management, and supplier security. Security governance is overseen by senior management, with responsibility for policy approval and enforcement clearly assigned. Compliance is supported through staff training, role-based access controls, logging and monitoring, and regular internal reviews. Independent third-party audits and penetration testing provide assurance that controls are operating effectively and that policies are consistently followed.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: IndySoft follows defined configuration and change management processes to control changes throughout the service lifecycle. Service components and configuration items are tracked through version control and documented environments. Changes are logged, reviewed, and approved before implementation, with security impact assessed as part of the change review. Testing is performed prior to deployment, and changes are monitored post-release to identify any unintended impact. These controls are reviewed regularly to ensure they remain effective.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: IndySoft follows a defined vulnerability management process aligned to its security governance controls. Potential threats are assessed through regular risk reviews, automated dependency and platform updates, and independent penetration testing. Security updates and patches are prioritised based on risk and applied in line with change management processes, with urgent fixes deployed as soon as practicable. Information about emerging threats is obtained from cloud platform security advisories, trusted security sources, and findings from third-party testing.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: IndySoft uses defined protective monitoring processes to identify and respond to potential security incidents. Service activity and system health are monitored to detect unusual behaviour or indicators of compromise. When a potential issue is identified, it is investigated, contained where necessary, and managed through an incident response process with escalation to appropriate personnel. Incidents are assessed and responded to promptly based on severity, with actions taken to minimise impact and restore normal service.
• Incident management type: Supplier-defined controls
• Post-quantum cryptography secure: No
• Incident management approach: IndySoft follows defined incident management processes to ensure consistent and timely handling of service issues and security events. Common incident types are covered by pre-defined response procedures. Users can report incidents through established support channels, including direct communication with the support team. Incidents are logged, investigated, and resolved in line with severity, with incident summaries or reports provided to affected customers where appropriate.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: IndySoft offers a free sandbox environment provided on a case-by-case basis. This includes full access to the current product for evaluation and testing purposes. Production use, formal support, and service level commitments are not included. There is no fixed time limit, with access reviewed in discussion with the customer.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 10%
• Between £250,000 and £500,000: 10%
• Between £500,001 and £1,000,000: 10%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 10%
• Over £5,000,001: 10%

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: Yes
• Any other security certifications: SOC 2 Type 2

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
  • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
  • Plans to engage the contract workforce in deciding the most important workplace issues to address
  • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
  • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
  • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
  • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
  • Activities to cascade good practice on fair working conditions throughout the supply chain
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
  • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
  • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
  • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
  • Volunteering opportunities for staff
  • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
  • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
  • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
  • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
  • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
  • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
  • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at heather.mcgrath@indysoft.com. Tell them what format you need. It will help if you say what assistive technology you use.