Semantrica Ltd t/a tiscreport.org

TISCreport Human Rights and Environmental Due Diligence Data Platform and Data Services

TISCreport.org is the world's only supply chain transparency platform containing non-financial risk data on global suppliers to the UK. Use TISCreport to assess human rights and environmental due diligence (contextual ESG) metrics for your supply chain and potential suppliers.

Features

• Supplier Dashboards: Instant access to supplier performance dashboards.
• Custom Data Exports: customise and export relevant data.
• Environmental Compliance: Track carbon reduction plans, environmental accreditations.
• Social Compliance: Monitor reporting of gender and diversity paygaps
• Modern Slavery Compliance: companies in scope and compliance status
• Governance Compliance: Evaluate payment practices,board diversity compliance.
• Sanctions and Bribery Compliance: Check for sanctions, Bribery Act awareness.
• AI Compliance Audits, Ratings: automated assessment of UKMSA compliance
• Segment Contextual ESG Indicator Reports: By scopes 1, 2, 3.
• Unique Transparency Score: Aids suppliers in better corporate transparency behaviours.

Benefits

• Early Non-Financial Risk Detection: mitigate before financial signs emerge.
• Supplier Segmentation: Categorise UK suppliers by size, region, sector efficiently.
• VCSE Supplier Support: Identify and support for VCSE suppliers effectively
• Support for Sustainable Growth: Integrate sustainability into business strategies effectively.
• Contextual ESG Reporting: Meet Scope 1, 2, 3 requirements easily.
• Improved Compliance Visibility: Get real-time updates on supplier compliance
• Enhanced Decision Making: Make informed decisions with comprehensive analytics.
• Strengthened Stakeholder Confidence: Build trust through transparent, ethical reporting.
• Cost-Efficient Risk Management: Streamline risk assessments, reduce associated costs.
• Sourcing from Semantrica supports our VCSE corporate transparency social mission

£495 a licence a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jaya@tiscreport.org. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

877060677295529

Contact

Jaya Chakrabarti
+441179273113
jaya@tiscreport.org

Service scope

• Software add-on or extension: Yes
• What software services is the service an extension to: TISCreport data can be accessed by subscription via Atamis and other platforms.
• Cloud deployment model: Public cloud
• Service constraints: Not applicable
• System requirements: Recent web browser, IE 10+, Chrome, Firefox etc.

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Emails are monitored Monday to Friday during business hours. We aim to respond to all enquiries within 2 working days
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.1 AA or EN 301 549
• Web chat accessibility testing: None, chat is provided by hubspot who perform that testing.
• Onsite support: Yes, at extra cost
• Support levels: All clients are assigned a dedicated Account Manager, and will be given direct contact details for them. Product training is included (both onsite and remote) as part of all our subscriptions. Helpdesk support is provided to all customers without additional cost. Our helpdesk team is available by email to help with any questions relating to data, software tools and integration.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Initially training is online with subsequent onsite training done as required. We also can do training over MS Teams, Google Meet or Zoom if preferred. Finally we have user documentation including video tutorials on the TISCreport youtube channel.
• Service documentation: No
• End-of-contract data extraction: Access to the service is switched off at the end of contract. Users can export content in line with the contract up until this point.
• End-of-contract process: Access to the extended products is terminated, basic free-level access remains.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: In some interfaces large table displays are far more usable on desktop.
• Service interface: No
• User support accessibility: WCAG 2.1 AA or EN 301 549
• API: Yes
• What users can and can't do using the API: API is provided for specific customers with specific needs, on request.
• API documentation: No
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Users can customise their dashboards for specific sets of company reports, such as supplier, procurement or research - for each of these the data presented is also customisable (by adding or removing specific datasets). Alerts and monitoring can also be customised on these.

Scaling

• Independence of resources: We ensure a consistent and reliable user experience by leveraging optimised server configurations and efficient data caching strategies to manage load effectively, even during peak usage times.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: In-house
• Protecting data at rest: Physical access control, complying with another standard
• Data sanitisation process: No
• Equipment disposal approach: In-house destruction process

Data importing and exporting

• Data export approach: Company reports and lists can be exported through the application, as well as charts for presentations.
• Data export formats:
  • CSV
  • Other
• Other data export formats: PNG
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The Services will be operational and fully functional in all material respects (i.e. capable of displaying information and conducting transactions as contemplated in the ordinary course of business) 99% of the time during any 30 day period.
• Approach to resilience: Daily full VPS backups, offsite secure database backups. Ability to spin up a replacement VPS to a backup for any of the last 7 days within 1 hour.
• Outage reporting: Email alerts or directly from your account manager

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Access is restricted to small teams of named individuals at senior level who are responsible for the ongoing support of a client.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Public key authentication (including by TLS client certificate)
  • Username or password

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Our approach to security governance involves adhering to established industry best practices and frameworks, regular audits, and continuous monitoring to ensure our systems are secure. We collaborate with external security experts to validate our security measures and keep our protocols up to date, ensuring robust protection for our data and systems.
• Information security policies and processes: We follow a tailored set of information security policies based on industry best practices and guidelines, such as those from ISO/IEC 27001 and the National Institute of Standards and Technology (NIST). Our processes include regular security audits, strict access controls, and ongoing staff training to handle data securely and respond effectively to security incidents.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Our configuration and change management processes are built on years of industry experience, focusing on security-first principles. We maintain a streamlined approach within our small team, where all changes are critically reviewed and mutually agreed upon, ensuring they are secure and purpose-driven. We proactively manage and simplify our configurations, disabling unnecessary settings to minimise risks, and our consistent track record with no security incidents underscores the effectiveness of our strategies.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Our vulnerability management process is anchored in the use of well-supported, industry-standard software and services, complemented by our own secure custom coding. We regularly assess potential threats through reputable sources such as CVE (Common Vulnerabilities and Exposures) databases, security advisories from software vendors, and industry-specific security bulletins. Patches and updates are promptly applied—typically within days of release—ensuring that 99% of known vulnerabilities are addressed swiftly. For our custom-developed components, we adhere to strict coding standards and conduct periodic security reviews to minimize risks, maintaining minimal user access to essential functionalities only.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Our protective monitoring processes are designed to identify potential compromises through a combination of OSSEC for real-time alerts on suspicious activities, supplemented by Fail2Ban and honeypots to detect and mitigate common threats. Upon detecting a potential compromise, our team immediately assesses the impact and implements predefined response strategies to contain and mitigate the issue. We prioritize rapid response to incidents, with initial reactions typically occurring within minutes of detection. This swift action minimizes potential damage and restores normal operations as quickly as possible.
• Incident management type: Supplier-defined controls
• Incident management approach: Although we have not experienced a security incident in the last 15 years, we maintain vigilance through continuous monitoring and regular security updates. Currently, our incident management process involves immediate evaluation and mitigation steps taken by our experienced technical team upon potential threat detection. Users can report incidents directly to our support team via email or a dedicated phone line, or even chat, ensuring rapid communication. Incident reports are provided to users as needed, detailing the nature of the incident, the response actions taken, and measures implemented to prevent future occurrences where such information does not compromise future security.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  TISCreport leverages transparency to combat climate change by ensuring environmental compliance and promoting sustainable practices across global supply chains. Our platform monitors adherence to environmental regulations, including carbon reduction commitments and reported renewable energy usage, empowering organisations to enforce and uphold stringent environmental standards.; Building on our TISC.io infrastructure, we've launched projectvana.org to specifically address eco-transparency and climate action. This initiative utilises HM Land Registry data to innovatively harness corporate land and property assets for environmental benefits. Awarded a Fast Start award by Innovate, projectvana aims to accelerate sustainable land use, transforming how businesses leverage their physical assets for climate advocacy.; Key Contributions of TISCreport and Projectvana to Climate Change Mitigation:; Sustainable Sourcing: TISCreport identifies suppliers prioritising sustainability, encouraging greener supply chains and operational practices.; Decarbonisation Data: Our data-driven approach allows companies to align supply chain operations with their climate goals effectively.; Renewable Energy Insights: We highlight suppliers investing in renewable resources, enabling companies to make informed partnering decisions.; Real-Time Environmental Monitoring: TISCreport’s alerts on environmental compliance ensure that companies quickly address deviations in sustainability commitments.; Collaborative Climate Efforts: By connecting stakeholders across sectors, we facilitate shared strategies and best practices in sustainability.; Influencing Environmental Policy: Both platforms play critical roles in shaping robust environmental policies and practices through strategic governmental collaborations.; Through TISCreport and Projectvana, we not only track and encourage compliance with environmental standards but also pioneer innovative uses of corporate assets for ecological impact. Our commitment to transparency and data accessibility makes us a pivotal ally in global efforts to mitigate climate change.

  Covid-19 recovery

  In the wake of the COVID-19 pandemic, TISCreport.org has been pivotal in supporting global recovery efforts by enhancing supply chain resilience. Our platform leverages transparency to help organisations navigate the complexities introduced by the pandemic, ensuring robust and agile supply chains. Our key achievements are:; Enhanced Supply Chain Visibility: TISCreport.org provides visibility into supply chain operations, enabling organisations to identify vulnerabilities and respond swiftly to disruptions. This transparency is crucial for adapting to the dynamic conditions exacerbated by the pandemic.; Risk Assessment and Management: We offer non-financial risk assessments, helping businesses anticipate and mitigate potential delays or disruptions earlier than relying on financial indicators alone. Our platform facilitates a proactive approach to managing supply chain risks, which are essential for maintaining continuity in uncertain times.; Supplier Diversification: TISCreport.org aids organisations in broadening their supplier base, reducing dependency on single sources, and thereby increasing resilience against global supply shocks.; Collaborative Recovery Efforts: By fostering collaboration between suppliers, buyers, and regulatory bodies, our platform ensures that all stakeholders are aligned in their recovery efforts, enhancing the overall robustness of supply chains.; Sustainability and Compliance: As businesses reevaluate their operational strategies post-pandemic, TISCreport.org supports them in implementing sustainable and compliant practices, crucial for long-term resilience and recovery.; COVID-19, as a non-financial risk, had a massive impact globally, underscoring the need for resilient corporate practices. TISCreport.org is committed to ensuring that organisations are not only equipped to manage such non-financial risks but also thrive in a post-COVID-19 world with stronger, more responsive supply networks.

  Tackling economic inequality

  TISCreport.org is at the forefront of combating economic inequality by enhancing transparency within global supply chains. Our platform empowers organisations to enforce fair labour practices and equitable economic growth by providing access to critical supply chain data.; ; Key Contributions to Tackling Economic Inequality:; ; Promoting Fair Labour Practices: TISCreport.org provides insights into labour conditions across supply chains, helping organisations ensure that their suppliers adhere to fair wage standards and labour laws. This oversight helps mitigate the exploitation of workers and promotes a fairer distribution of income.; Enhancing Supplier Diversity: We support economic inclusivity by encouraging organisations to diversify their supplier bases. This includes engaging with minority-owned, women-owned, and small enterprises, which helps distribute economic opportunities more broadly and supports underrepresented groups.; Driving Compliance with Modern Slavery Acts: Our platform tracks compliance with regulations such as the UK Modern Slavery Act, ensuring that businesses are not complicit in forced labour practices, thereby promoting ethical business practices that contribute to economic equality.; Supporting Local Economies: By providing data that encourages sourcing from local suppliers, TISCreport.org helps keep economic benefits within local communities, supporting job creation and economic stability in less affluent areas.; Fostering Transparency and Accountability: The visibility TISCreport.org offers into corporate supply chains drives accountability and helps prevent corrupt practices that can exacerbate economic disparities.; Through these initiatives, TISCreport.org not only addresses the symptoms of economic inequality but also tackles its root causes by ensuring that fairness, transparency, and inclusivity are integral to corporate supply chain operations. By aligning with TISCreport.org, organisations can play a crucial role in fostering a more equitable global economy.

  Equal opportunity

  TISCreport.org is dedicated to advancing equal opportunity by enhancing transparency and accountability within global supply chains. Our platform enables organisations to actively participate in promoting diversity and inclusivity at every level of their operations.; ; Key Features Promoting Equal Opportunity:; ; Supplier Diversity Initiatives: TISCreport.org helps companies identify and engage with suppliers from diverse backgrounds, including minority-owned, women-owned, and small businesses. This broadens economic opportunities and supports underrepresented groups, fostering a more inclusive economic landscape.; Transparency in Labour Practices: By providing detailed insights into the labour practices of suppliers, TISCreport.org ensures that organisations can uphold fair employment practices. This includes monitoring for discrimination in hiring, pay, and promotion, thereby advocating for workplace equality.; Enforcing Compliance with Equality Standards: Our platform tracks adherence to international and local equality standards, helping organisations ensure their supply chains are free from discriminatory practices. This promotes an ethical approach to business that values and respects diversity.; Empowering Marginalised Communities: TISCreport.org offers data that can be used to support procurement from businesses in economically disadvantaged areas, helping uplift communities through economic participation.; Creating Accountability: The visibility provided by TISCreport.org drives corporate accountability, encouraging companies to commit to equitable practices across their operations and supply chains.; Through these measures, TISCreport.org not only facilitates compliance with regulatory standards but also actively contributes to creating a fairer business environment. By leveraging our platform, organisations can ensure that equality and diversity are not just aspirational goals but integral parts of their operational strategies. TISCreport.org is committed to transforming supply chains into engines for social and economic equity, making equal opportunity a reality for all.

  Wellbeing

  TISCreport.org: Enhancing Wellbeing Through Supply Chain Transparency; TISCreport.org is committed to promoting wellbeing by ensuring ethical and responsible practices throughout global supply chains. Our platform empowers organisations to align their operations with standards that enhance the quality of life for all stakeholders involved.; Key Contributions to Promoting Wellbeing:; Advocating for Fair Labour Practices: TISCreport.org provides insights into labour conditions, helping ensure that workers are treated fairly and humanely. This includes monitoring for fair wages, reasonable working hours, and safe working conditions, directly contributing to the physical and mental wellbeing of workers.; Supporting Sustainable Practices: Our platform encourages businesses to adopt environmentally sustainable practices that lead to healthier living environments. This includes promoting the reduction of pollution and waste, as well as the use of renewable resources, which have profound impacts on community health.; Enhancing Corporate Social Responsibility (CSR): By tracking compliance with CSR standards, TISCreport.org helps companies implement programs that benefit the health, education, and general welfare of communities. These initiatives often include support for local healthcare, education projects, and community development.; Empowering Marginalised Communities: TISCreport.org aids in identifying opportunities for economic participation by disadvantaged groups, improving access to employment and reducing inequality, which are essential for societal wellbeing.; Fostering Transparency and Accountability: The visibility provided by our platform ensures that companies adhere to ethical standards, preventing exploitative practices that can undermine community wellbeing.; By leveraging the power of data and transparency, TISCreport.org facilitates a holistic approach to business operations that prioritises human and environmental wellbeing. Our platform helps organisations not only meet regulatory compliance but also go beyond to make a positive impact on the lives of people and the health of the planet. ; ; Finally, enabling procurement officers the ability to amplify social impact has contributed to their sense of purpose and commitment without adding to their workload.

Pricing

• Price: £495 a licence a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Our freemium membership account includes 1 user seat and limited data sets, and up to 50 suppliers.
• Link to free trial: https://tiscreport.org/pricing

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jaya@tiscreport.org. Tell them what format you need. It will help if you say what assistive technology you use.