LOOP SOCIAL VALUE LIMITED

Loop

Loop’s National Social Value Standard is a measurement framework accessible through a SaaS subscription. The Loop platform helps users to measure, manage and monetise the social value generated through the full lifecycle of an activity. The Loop offering is supported by a team of social value consultants and economists.

Features

• Real time informative dashboards
• End to end project monitoring
• Import a bespoke social value framework
• Access to 1000+ metrics (90% monetised) through the SVS Framework
• Hierarchy option, recreate your organisation structure
• Evidence can be uploaded to each metric to provide audibility
• Align to other social value frameworks
• Forecast the value your bid creates
• Supply chain module
• Create tags to group projects and metrics.

Benefits

• Intuitive dashboards insight into social, economic and environmental performance
• Monthly, Quarterly and Yearly monitoring
• Extensive filtering options to view data at all levels
• Create projects/activities across the hierarchy increasing organisational transparency
• Export your data to Excel, PDF or Word
• Backfill historic performance
• Forecast, monitor and evaluate the entire lifecycle of projects
• Additional support available through the Loop consultancy team
• Create bespoke metrics
• 1st Line technical support provided as standard

£3,900 a licence a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jonny@loop.org.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

860931103430533

Contact

Jonny Hayes
01482 975883
jonny@loop.org.uk

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Pagabo.
• Cloud deployment model:
  • Public cloud
  • Private cloud
• Service constraints: We support the latest version of Chrome, Safari and Firefox and Microsoft Edge. On mobile we support modern version browsers on android and iOS.
• System requirements:
  • Modern Browser
  • Internet enabled smart phone

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Monday - Friday 08.30 - 17.00 ; Acknowledge receipt in 120 mins.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Onsite support
• Support levels: Service desk provides initial triage and prioritisation of incidents where they are not able to resolve they can then be escalated to the software team.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We provide online training, documentation and technical support via telephone and email.
• Service documentation: No
• End-of-contract data extraction: Via a support request.
• End-of-contract process: Included within the fees are on-boarding costs, user subscriptions and training, customer support and system maintenance and upgrades. Not included within the standard fees are any customer specific system changes or developments, non standard branding or non system specific support.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The mobile experience is delivered by responsive design.
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: We only make our calculations available via our API. Access to the API is manually configured via bearer tokens.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: No

Scaling

• Independence of resources: Our hardware is specified to be in excess of all current users needs and we have the ability to scale out if needed at very short notice.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Users can export data via Word, Excel and PDF.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: All of our solutions are provisioned on an availability of 99.5% uptime. In a scenario where there has been an impactful outage, refunded downtime will be identified and paid back. This would exclude a scenario where withdrawal of service is planned due to system upgrade or maintenance. In these scenarios we provide all users with a contracted minimum of 30 days prior notice. In addition, these outages for essential work/upgrade are performed at weekend/bank holidays to reduce project impact.
• Approach to resilience: Available on request.
• Outage reporting: We have a publicly available service status page. Dependent on the nature of the outage our service desk team may contact end users via email.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Management interfaces are further restricted by IP address white lists.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Username or password
  • Other
• Description of management access authentication: Secure VPN.

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau
• ISO/IEC 27001 accreditation date: Initial - 25/03/2021 and renewed 07/03/2024
• What the ISO/IEC 27001 doesn’t cover: N/A.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications: ISO 9001

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Annually the company handbook is reviewed by the Board of Directors with all agreed amendments being ratified. All department leads are equipped with a current company handbook outlining all company processes and procedures. Allied to this the on- boarding process of new starters focusses on information security and the established processes we have in place. At monthly company board meetings, quality, H&S and information security policies are considered, discussed and where appropriate modifications are agreed and communicated to all staff. A decision record and key event board minutes are recorded.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We employ JIRA Service Management approval flows to track and process change management requests. We have tiered approval requirements dependent on the risk assessed impact of the change being requested.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We use a number of tools to provide observability of potential vulnerabilities. 1) Azure Sentinel 2) Sentry.io 3) SonarCloud 4) Defender for Cloud\Endpoint. We then use the reports from the above set of tools to assess and prioritise remediation for any identified vulnerabilities. We undertake annual penetration testing as verification of our approach to security in addition we subscribe to various vulnerability alerts.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We use a number of tools to proactively monitor our software 1) Azure Sentinel 2) Sentry.io 3) SonarCloud 4) Defender for Cloud\Endpoint. We then use the reports from the above set of tools to assess and prioritise remediation for any identified issues and potential compromises. We undertake annual penetration testing as verification of our approach to security. The development team can quickly react and prioritise accordingly and where necessary relevant action are immediately executed, and any stakeholders informed.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Our internal processes and documentation have been assessed in accordance with the named standard to ensure the following: 1. There is robust help desk and issue management/tracking that ensures priorities are flagged and actioned, and customers have full transparency. 2. Common help desk issues are responded to quickly and standard responses are provided, and more complex issues are fully researched prior to issuing of responses. 3. SLA's are timely and clearly communicated.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  As a social value framework and software provider Loop is a key enabler to organisations delivering against all five Social Value Model (PPN 06/20) themes. Loop not only incorporates all reporting metrics specific by the Social Value Model but also includes over 1,000 additional metrics. This board range of social value metrics supports organisations in measuring, managing, and ultimately delivering on these themes effectively.; ; In addition, Loop has its own social value strategy and objectives, and directly delvers against all the Social Value Model themes. ; ; Please do get in touch for further details on any of this and the latest updates can be shared.

  Covid-19 recovery

  As a social value framework and software provider Loop is a key enabler to organisations delivering against all five Social Value Model (PPN 06/20) themes. Loop not only incorporates all reporting metrics specific by the Social Value Model but also includes over 1,000 additional metrics. ; This board range of social value metrics supports organisations in measuring, managing, and ultimately delivering on these themes effectively.; ; In addition, Loop has its own social value strategy and objectives, and directly delvers against all the Social Value Model themes. ; ; Please do get in touch for further details on any of this and the latest updates can be shared.

  Tackling economic inequality

  As a social value framework and software provider Loop is a key enabler to organisations delivering against all five Social Value Model (PPN 06/20) themes. Loop not only incorporates all reporting metrics specific by the Social Value Model but also includes over 1,000 additional metrics. ; ; This board range of social value metrics supports organisations in measuring, managing, and ultimately delivering on these themes effectively.; ; In addition, Loop has its own social value strategy and objectives, and directly delvers against all the Social Value Model themes. ; ; Please do get in touch for further details on any of this and the latest updates can be shared.

  Equal opportunity

  As a social value framework and software provider Loop is a key enabler to organisations delivering against all five Social Value Model (PPN 06/20) themes. Loop not only incorporates all reporting metrics specific by the Social Value Model but also includes over 1,000 additional metrics. This board range of social value metrics supports organisations in measuring, managing, and ultimately delivering on these themes effectively.; ; In addition, Loop has its own social value strategy and objectives, and directly delvers against all the Social Value Model themes. Please do get in touch for further details on any of this and the latest updates can be shared.

  Wellbeing

  As a social value framework and software provider Loop is a key enabler to organisations delivering against all five Social Value Model (PPN 06/20) themes. ; Loop not only incorporates all reporting metrics specific by the Social Value Model but also includes over 1,000 additional metrics. This board range of social value metrics supports organisations in measuring, managing, and ultimately delivering on these themes effectively.; ; In addition, Loop has its own social value strategy and objectives, and directly delvers against all the Social Value Model themes. ; ; Please do get in touch for further details on any of this and the latest updates can be shared.

Pricing

• Price: £3,900 a licence a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: If a procurement is facilitated through Pagabo the licence, training and onboarding is free of charge. This covers the full lifecycle of the project.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jonny@loop.org.uk. Tell them what format you need. It will help if you say what assistive technology you use.