Digital Trading

Web Application Development

We can design, create, develop and support web applications which can be installed on all mobile phones and tablets and managed from a desktop platform. The app will have an intuitive and accessible user interface with the best in class security for information sharing.

Features

• Web application build and development
• User-centric application design
• Wireframes and prototypes
• Responsive web application development for mobile, tablet and desktop
• .NET, PHP, HTML, CSS web application development
• Ecommerce web application design and development
• Integration with external systems via APIs.
• Online forms development
• Maintenance & support

Benefits

• Custom user experience for your target audience
• Seamless mobile first experience across all devices
• Built on various content management systems
• Help managing your application development and ongoing
• Range of support options available
• Accessible and intuitive user interface
• Developed as a web app or native application

£4,500.00 a unit a quarter

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bart@digitaltrading.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

855728024572022

Contact

Bart Janaszek
01793680866
bart@digitaltrading.co.uk

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Custom web application development, software development, application hosting, support, creative design,
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: N/a
• System requirements: Currently no known limitations

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Depends on the support package.; On average within 4 hours for normal requests.; Within 1 hour for critical issues.; Support is available Monday - Friday 8:30 - 16:30.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AAA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: PayAsYouGo - £75 + VAT per hour. ; Bronze - annual contract for 3 hours of support a year for £150 + VAT. £60 + VAT per hour for any time required above initial 3 hours. ; Silver - starts at £150 + VAT per month with 3 hours of support each month. £60 + VAT per hour for any time required above initial 3 hours. ; Technical account manager will be dealing with any support requests.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We provide training in all formats both in person and online
• Service documentation: Yes
• Documentation formats:
  • HTML
  • ODF
  • PDF
• End-of-contract data extraction: By request
• End-of-contract process: We would provide all software applications and data for the current live version of the product within the contract.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • MacOS
  • Windows
  • Windows Phone
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: We use Mobile First design principles
• Service interface: Yes
• User support accessibility: WCAG 2.1 AAA
• Description of service interface: We provide an online Ticket helpline and support CRM service
• Accessibility standards: None or don’t know
• Description of accessibility: Accessible via an online portal, email or telephone
• Accessibility testing: We are committed to a progressive multi-year plan to make all of our systems compliant with Web Content Accessibility Guidelines.
• API: Yes
• What users can and can't do using the API: Our API is fully Swagger compliant and secure behind a public private key.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: All user facing information can be customised including user authenticated data.

Scaling

• Independence of resources: We provide services which we can fulfil for the duration of the contract through our own inhouse team and capacity.

Analytics

• Service usage metrics: Yes
• Metrics types: We typically use Google Analytics and AW Stats and we also develop custom reporting defined by clients
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Microsoft Partner & Azure Services, Amazon AWS Services, Hetzner, etc.

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: On request
• Data export formats:
  • CSV
  • ODF
• Data import formats:
  • CSV
  • ODF

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: We guarantee 99.95% availability and can include this within any SLA on request.
• Approach to resilience: Available on request.
• Outage reporting: There is an API available and email/SMS alerts too.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Through the user authentication and role management
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Cyber Essentials
• Information security policies and processes: Adherence to Cyber Essentials guidelines

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We use DevOps and DevSecOps process using GitLab as our version control and Pen testing through development
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We receive updates and risk alerts from our supplier security centres or use pen testing with custom software and respond to deploy patches within 48 hours or sooner if require.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We receive updates and risk alerts from our supplier security centres or use pen testing with custom software and respond to deploy patches within 48 hours or sooner if require
• Incident management type: Supplier-defined controls
• Incident management approach: We receive updates and risk alerts from our supplier security centres or use pen testing with custom software and respond to deploy patches within 48 hours or sooner if require. Incidents are then recorded, reviewed and integrated into future risk assessment and mitigation processes.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  We are committed to reducing and offsetting any negative impact our business activities may have on the natural environment.
• Covid-19 recovery:

  Covid-19 recovery

  The Covid pandemic highlighted the opportunity for more efficient communication and interaction through the internet, and these learnings can be applied to processes to aid the recovery of businesses and community infrastructure.
• Tackling economic inequality:

  Tackling economic inequality

  The internet provides the opportunity for individuals, businesses and communities to interact without the limitations of geography and social culture which can act as barriers to reducing economic inequality.
• Equal opportunity:

  Equal opportunity

  We work with a wide range of organisations in many sectors and countries with a philosophy for inclusiveness and accessibility for all.
• Wellbeing:

  Wellbeing

  The Covid pandemic has highlighted issues affecting the wellbeing of individuals in all parts of the community, and as a result, our business tries to recognise and support this in any way we can.

Pricing

• Price: £4,500.00 a unit a quarter
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: We provide free initial consultation meetings and demonstration of services and solutions we can provide.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bart@digitaltrading.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.