Micad Systems (UK) Ltd.

Micad Estates and Facilities Management SaaS Platform

The Micad IWMS SaaS platform suite of modules helps manage: Property, Locations, Space Utilisation, Asbestos, Compliance, Planned & Reactive Maintenance, Soft Services, Condition Appraisal, Audits, Leases, Stock control, Purchasing, Contractor Management, Customer Portal, Live Floor Plans Drawing Management, BIM, GIS MVP preparation and Document Publishing, ZetaSafe (compliance management), ZetaSurvey.

Features

• Live floor plans (AutoCad), graphic reporting, data visualisation
• Dedicted IOS and Android Apps
• Micad 360 photographs, mapping and MVP
• Micad Analytics, Big data reporting and portable data
• Supports GS1 & GLN's
• PPM, Statutory Maintenance & Compliance, ZetaSafe and ZetaSurvey
• New Standards of Cleanliness Efficacy Audits
• ERIC, PAM, EMR, NSOC, 5 Star Reporting
• Multiple audit categories, Capital Planning & Lifecycle Management
• Estates, Space, CAFM, IWMS, CMMS, Audit and Soft Services Software

Benefits

• Improved space utilisation: accurate drawings & easily updated records
• Better estates management/rationalisation: a single source of the truth
• Increased levels of compliance & reduced risk with improved visibility
• Improved collaboration with suppliers using multiple browsers
• Impartial independent software
• Dedicated NHS and Education modules
• More efficient work practises using portable data & dedicated apps
• Reduced operating costs using a modern mobile solution
• More time to analyse complex datasets through comprehensive reporting
• Helps managers focus on key areas and measure improvement

£578 to £100,000 an instance a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at johnh@micad.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

839672510573154

Contact

John Herron
07850785877
johnh@micad.co.uk

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Patient or Student Records and Management Systems; Finance systems; HR systems; Provides a location based data base for EDI within the GS1 environment; EHS and Risk Management systems; Surveying systems; Classroom and timetabling systems; CAFM; Cleaning & Portering; BIM
• Cloud deployment model: Public cloud
• Service constraints: Support is UK based and operates during normal office hours (9:00-17:30 hrs) excluding bank holidays. Support is via phone, email and a dedicated online support portal.
• System requirements:
  • A valid internet connection to access Micad software
  • Modern web browser - see supported versions

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Support response times are based on the criticality of the request and have targets of between 30 minutes to 24 hours. These targets only apply during normal office hours.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Micad offer a unified single tier support for all their customers unless by special agreement. This includes online ticketing, phone and email support options. There is an online dedicated support portal for logging support requests.; ; All prices include access to the standard support service.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Users have access to a full range of implementation and training services. This can include a tailored training plan making use of onsite and online training and consultancy sessions.; ; Informal training using webinar technology is also available to users by agreement.; ; All modules also come with full online manuals which can be tailored to a users specific needs if required.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Data held in Micad’s software always belongs to the client. Specific off-boarding arrangements will be agreed with each client on commencement of the contract.
• End-of-contract process: At the end of the contract all data is made availabe to the user in its native format (e.g. drawings .dwg). In addition a copy of the SQL data can be made available.; ; If the data needs to be presented in another form (e.g. Excel spreadsheet) or manipulated in any way then additional charges may apply.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: There are dedicated native Apps for trades staff and surveyors that present a different view to the desktop experience.; ; The MiAsbestos App (IOS) lets surveyors collect and augment Asbestos survey information and upload the results to the client's system.; ; The Micad HelpDesk App (IOS/Android) is for trade staff to record work activity and sign off planned and reactive jobs allocated to them.; ; The Micad Audit App (IOS/Android/Windows) allows users to conduct and sign off multiple audits from a single device.; ; The Micad Soft FM App (IOS/Android) allows users to engage in portering and other soft services on a single device.
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: A combination of modern internet technologies.
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: Micad Systems are tested internally.
• API: Yes
• What users can and can't do using the API: Micad is always updating its APIs. The Micad API will be configurable to allow different data interactions and frequency. The most common form this takes is to pass validated space and location records to other internal systems (e.g. Asset management, patient management). A second common use is to pass the asbestos records along with the space records for a fully validated Asbestos register.; The growing requirements of GS1 means that Micad forms the core part of the local registry as the sole repository of physical GLNs.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: All Micad modules allow some degree of customisation. This can take the form of new fields and reports to customising standard dashboards.; ; Output emails from the system can be edited to suit the organisation. Some modules allow for the application of a full language pack that will use local or organisational vocabulary (e.g. space not classroom or campus not site) for instant familiarity by users.; ; All customisations are limited by user rights and some customisation requires input by Micad technical staff.

Scaling

• Independence of resources: Micad’s software solutions are supplied as a SaaS deployment, and Micad’s systems and client installations are hosted with Microsoft Azure. We use MS Azure cloud VMs which use Microsoft Hyper-V technology, thereby ensuring that users are not affected by the demand other users place on our service.

Analytics

• Service usage metrics: Yes
• Metrics types: As standard Micad users benefit from dashboards that demonstrate user activity and the quality of data sets held within the software modules.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Users can export data in a variety of formats including MS Excel spreadsheets .pdf and other native formats (e.g. .dwg, MS Word). This can be done at any time during the contract.
• Data export formats: Other
• Other data export formats:
  • Pdf
  • Dwg
  • Any native format uploaded documents are stored in
• Data import formats: Other
• Other data import formats:
  • Dwg
  • MS Excel

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Micad software is hosted by MS Azure and Micad aim for 99.9% availability and build in resilience where possible. SLA can be provided upon request.
• Approach to resilience: Micad provide a very high-availability and insure high level of resilience on our various layers of infrastructure including multiple Azure Regions, replicated Databases and failover nodes, and multiple instances which also allow almost zero downtime for maintenance all depending on the requirements of the client and the agreed SLA, further details of the MS Azure and Micad Solutions resilience, backup and recovery are available on request.
• Outage reporting: Users are informed of any outages via the support portal home page, email and the Micad status web page https://status.micad.systems

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Before individuals are allowed to access company or client data, training in the use and attributes of the data are fully undertaken and relevant for each employee’s role in the business.; A copy of the Micad data security and management policy is available on request.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau
• ISO/IEC 27001 accreditation date: 07/03/2022
• What the ISO/IEC 27001 doesn’t cover: No Exclusions
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Micad have an ISMS (Information Security Management System) in place that is accredited to ISO 27001 to ensure all controls, policies and procedures are followed. A copy of our certification can be supplied.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Micad have a change management process including a CAB to approve any production changes and assessing their impact.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Micad conduct regular vulnerability reviews as part of their proactive management services. This includes but not limited to; Code Scan review ; PWASP Scans; Pen testing; We aim to resolve any critical vulnerability ASAP or within the next release cycle.; Micad have memberships to specialist security interest groups where information is obtained about potential threats.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Micad conduct regular protective monitoring reviews as part of their proactive management services. This includes but is not limited to review of: IPS and endpoint notifications.
• Incident management type: Supplier-defined controls
• Incident management approach: We have an Incident Management Policy and Procedure which details how security incidents are reported internally. Any incidents that impact a client will be reported to the client ASAP and according to any data protection legislation such as the DPA'18 (GDPR).

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Equal opportunity

  Equal opportunity

  Micad is committed to ensuring the talent and skills of all individuals in its workforce are maximised and achieves this through policies, procedures and management practices that are consistently and equitably applied.; ; Micad's Equality Policy intends to prevent all forms of unfair behaviour, whether such behaviour is lawful or not. Micad is committed to ensuring that all individuals are treated fairly and are valued irrespective of disability, race, sex, gender reassignment, marital or civil partnership status, age, pregnancy and maternity, sexual orientation, nationality, religion and beliefs.

Pricing

• Price: £578 to £100,000 an instance a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Trials can be set up at the request of the user, at the discretion of Micad. The time and scope of the trial is agreed in advance between the user and the supplier. Under certain circumstances charges (e.g. training & data load) may apply.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at johnh@micad.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.