IMMENSE SIMULATIONS LIMITED

Immense Platform

The Immense Platform enables rapid testing of strategic and operational transport decisions in a digital environment, reducing costly risks and assumptions. Powered by advanced traffic models and a in-house simulation engine, it delivers quick, accurate insights for planning roadworks and diversions, with dashboards and reports supporting fast, informed decision-making.

Features

• Cloud-based platform accessible through any modern web browser.
• Performs detailed risk analysis for planned traffic interventions.
• Generates reports showing intervention impacts on the traffic network.
• Provides instant re-routing analysis of disruption effects on traffic.
• Builds high-fidelity baseline models using current premium traffic data.
• Supports multi-day simulations for overnight and weekend interventions.
• Uses in-house mesoscopic engine to analyse diverse traffic scenarios.
• Simulates reactive travellers to assess information campaign effects.
• Offers roadworks configuration with map-based impact visualisation tools.
• Assesses bus impacts, including effects on individual routes.

Benefits

• Quickly understand impacts of interventions across the broader traffic network.
• Quantify the delay users are subjected to when planning roadworks.
• Easily download and share impact assessment reports with key stakeholders.
• Quickly assess impacts of different options on the traffic network.
• Save on money and time for your optioneering test processes.
• Test in virtual environments to implement the best option later.

• Education pricing available

Service documents

• Pricing document

  ODP

• Service definition document

  ODT

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at emma.white@immense.ai. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

871013399668326

Contact

Robin North
07971226590
emma.white@immense.ai

About your service

• Service categories:

  Application Development and Deployment

  Analytics and business intelligence

  • Advanced and predictive analytics
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: No interruption to service with planned updated maintenance.
• System requirements:
  • Access to tablet or laptop
  • Internet access
  • Modern browser

User support

• Email or online ticketing support: Yes
• Support response times: We aim to respond in one working day .
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: No
• Onsite support: No
• Support levels: Immense provides three support levels which can be added to a customer subscription package.; ; Standard support is included within all product tiers and consists of a named Technical Account Manager who will provide initial setup, on-boarding and training and first tier customer support. Second tier support is then provided if required in line with our Support Services Policy.; ; Enhanced support provides the customer organisation with scheduled monthly sessions to assist users with specific scenario configuration and analysis tasks through user clinics and workshops.; ; Premium support provides the customer with access to a dedicated Analysis Delivery Manager who supports the week-to-week delivery of customer impact assessments from the Immense Platform.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Immense supports users in getting started through standard onboarding assistance.; ; This includes access to user documentation, walkthrough videos, and platform guidance to help users understand core functionality and workflows.; ; Users are able to configure and use the service independently using the provided documentation and in-product guidance.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • ODF
  • PDF
• End-of-contract data extraction: Users can extract their data directly from the platform using standard export functionality.; ; Impact assessment reports generated by the user can be downloaded through the user interface during the contract term.; ; Users are responsible for exporting any required outputs before the contract ends.; ; After contract completion, customer data is retained in line with the retention policy and then securely deleted.
• End-of-contract process: Contact 1 month before to let them know subscription coming to and end. ; ; Send off boarding doc at completion and reminder of data retention policy
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Onboarding documentation, such as registration instructions are sent to users via email. Once they are registered and approved, upon login, they can access the platform documentation via the User Interface.; ; When approaching the end of a subscription, Immense will provide further details to the client on this, including information on how to export simulation configurations and results.; ; As part of the onboarding process a call will be set up with the relationship manager and the client where they can discuss any special requirements which need to be adhered to, to ensure that their needs are met and everything is accessible throughout onboarding and offboarding.; ; All documentation uses clear language, structured headings, and accessible formats to support assistive technologies.; ; Where required, Immense can work with buyers to provide documentation in alternative formats as a reasonable adjustment.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: The User Interface allows customers to register, log in/out, explore map-based content, access documentation, and perform actions by subscription level. ; ; After login, a landing page offers access to four modules: Flow, Screening, Impact, and Requests.; ; Flow displays Annual Average Weekday Traffic (AAWT) on an interactive map.; ; Screening enables site-level reviews to assess re-routing and risk, showing traffic flows, speeds, and profiles for different times of day.; ; Impact lets users interactively configure, model and visualise roadworks or signal interventions on the network.; ; Requests provides a dashboard for submitting Impact Assessment report requests and download their related output.
• Accessibility standards: None or don’t know
• Description of accessibility: The product is accessible in the following ways:; users can change colours, contrast levels and fonts using browser or device settings; zoom in up to 400% without the text spilling off the screen; navigate most of the platform using a keyboard or speech recognition software; listen to most of the website using a screen reader; We’ve also made the text as simple as possible to understand and PDF's of reports are available when requested . ; ; Our product meets accessibility standards WCAG 2.1 AA and WAI-ARIA.; ; Where required, reasonable adjustments and alternative formats can be discussed with buyers.
• Accessibility testing: Informal accessibility testing has been carried out using keyboard-only navigation. We have not as of yet done any formal testing of assistive technology, however the product has been designed in line with the governments accessibility standards in mind to try and make it as universally accessible as possible.; ; However as part of our product roadmap we will be looking to do interface testing to see how we can make sure our product is as accessible as possible and will also be looking to meet WCAG 2.2 AA
• API: Yes
• What users can and can't do using the API: Our platform is API-based.; ; Upon registration to the platform, each user is assigned an API key that they can use to call the different endpoints of our platform.; ; Through the API endpoints, the users can:; ; request traffic flow and speed information for the roads at a given location (linked to the functionality of the Flow and Screening modules); ; request Select Link Analysis of specific edges (linked to the Screening module); ; configure scenarios by defining roadworks, closure or temporary traffic signals (linked to the Impact module); ; query what configurations have been created and what runs have been executed; ; update existing configurations (e.g. change the definition of the roadworks); ; Users can only query/update on assets they are subscribed to, and cannot see data from other client organisations.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • Other
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Buyers can configure the service using standard features provided within the platform.; ; Configuration options include requesting changes to subscription packages, enabling specific platform modules, defining scenarios, and managing user access.; ; All configuration is performed by the buyer using the platform’s user interface or API.

Scaling

• Independence of resources: We run simulations in parallel, therefore there is no conflict between users. Shared resources such as databases and API services are configured to scale in/out based upon load.

Analytics

• Service usage metrics: Yes
• Metrics types: Number of simulations run, based on the usage limit established in contract.
• Reporting types: Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Data Erasure
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: They can export Impact Assessment reports via buttons in the interface (zip folder containing images (.png) and .pptx files)
• Data export formats: ODF
• Data import formats:
  • CSV
  • ODF

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Immense uses a two-tier support model. First Tier Support is the customer’s initial contact point and receives all new support requests through agreed channels such as email or ticketing systems. This team collects the information needed to reproduce issues, performs triage, identifies whether problems are faults or can be solved through guidance, and provides an initial assessment within 24 hours of receiving sufficient data. They continue to update the customer and correct issues that do not require source-code access, escalating cases to Second Tier Support when necessary.; ; Second Tier Support consists of specialist engineers who address more complex issues beyond First Tier capability. They advise First Tier on workarounds and lead remediation activities including patches and fixes. Customers cannot contact this team directly.; ; Support requests are prioritised according to severity. Four levels are defined, from major faults that prevent essential operations to minor errors and general advice requests. Each level has specific acknowledgement, triage, update, and resolution expectations, with Immense using commercially reasonable efforts throughout.; ; If a solution is not provided within the expected timeframe, customers may escalate to their Account Manager, then the Solutions Director, and finally the CEO if required.; ; Response times are detailed in attached service document.
• Approach to resilience: We follow the principals defined in AWS Well Architected Framework: AWS Well-Architected and the requirements for AWS Partner Network approval via Functional Technical Reviews.; ; AWS describe their approach to resilience here: https://aws.amazon.com/resilience/
• Outage reporting: Via a public dashboard, https://healthcheck.immense.ai/

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Access to management functions in the platform is controlled by a roles and permissions mechanism in the platform that prevents access to those API calls unless the user has specific roles/permissions to access them. Those roles are specific to the users organisation
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Multi-Factor Authentication (MFA)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: We are ISO27001 certified and have information security policies and processes in line with the ISO27001 specification. All staff are trained on information security annually and are reminded at regular intervals how to follow and access our information security policies and processes. We have an information security manager who regularly liaises with managers across the business to discuss information security and ensure all staff are following the processes.; We have an IT service desk which is used to report of raise any information security concerns. These tickets are shared with our IT support and our information security manager . These tickets are then discussed in our quarterly IT reviews and weekly management meetings to ensure all issues and tickets are closed successfully.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Change requests are submitted with manager approval, then logged by the IT Service Desk. The CEO conducts a risk assessment, and if PII is affected, the Data Privacy Manager reviews the request. The CEO authorises the change only after risks, controls, and fallback plans are confirmed. A documented testing plan is required, and testing occurs in the development environment using anonymised data. Approved business representatives must accept results before deployment. Once testing meets criteria, the CEO approves release to operations. All software and configuration changes are version-controlled, documented, stored in the CMDB, and reviewed annually for accuracy with deviations investigated.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Endpoint devices update automatically, and users must restart when required. Daily vulnerability scans using AppCheck identify issues and confirm patch success. The Chief Scientist reviews reports and ensures timely remediation, prioritised using CVSS scores. All patches and kernel upgrades are risk-assessed to balance installation /non-installation risks. Updates are first applied to the least critical servers to verify stability before wider rollout. For third-party Cloud services, vulnerability management information is requested and incorporated, with Immense-managed vulnerabilities handled under this procedure. For Cloud services provided to customers, technical vulnerability details are shared on request. All updates are risk-assessed and tested before deployment.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Immense follows ISO27001 monitoring requirements. Immense Simulations Limited’s information systems are continuously observed and analysed for anomalous behaviour in line with the logging and monitoring matrix. The IT Team conducts all monitoring activities. Events classified as information security incidents are handled under the Information Security Incident Management Policy and Procedure. Events determined to be false alerts are used to improve and tune monitoring tool baselines, with any proposed baseline changes requiring approval from the Information Security Manager. The CEO is responsible for reviewing administrators’ and operators’ activities on a quarterly basis during scheduled IT Reviews to ensure compliance and oversight.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Users communicate incidents via email to support@immense.ai. This triggers the creation of a ticket on Immense’s helpdesk, which is then picked up by the first line and/or second line support depending on its severity. Resolution of the incident is carried out in accordance to the Support Service Policy. ; ; Once resolved, details about the incident and its resolution are reported in the ticket details and are visible to the user.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 10%
• Between £1,000,001 and £2,500,000: 15%
• Between £2,500,001 and £5,000,000: 15%
• Over £5,000,001: 15%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau
• ISO/IEC 27001 accreditation date: Wednesday 9 July 2025
• What the ISO/IEC 27001 doesn’t cover: The certification is for the whole company.
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: D9e2fad0-7bc2-4d13-91e7-ea8e6ea9c758
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: Abe1bc53-b91d-4892-a500-1c73bc913549
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Working conditions which promote an inclusive working environment and promote retention and progression

Service documents

• Pricing document

  ODP

• Service definition document

  ODT

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at emma.white@immense.ai. Tell them what format you need. It will help if you say what assistive technology you use.