Pop Pop Studio Ltd

Mainstream Inclusion Directory and SEND Audit

The Mainstream Inclusion Directory and Whole School SEND Audit platform is a digital solution designed to support schools and local authorities in managing and improving SEND inclusion practices.

Features

• Evidence-based Inclusion Strategies: Proven strategies for SEND learners.
• Customisable Categories: Aligned with Four Broad Areas of Need.
• Easy Maintenance: Update strategies without new PDF or Word downloads.
• Digital Audit Tools: Supports SENCOs in audits and training planning.
• Secure Reporting: Reports for SLT and governors on SEND practices.
• Digital Action Plans: Shared with Specialist Inclusion Teams for planning.
• Online Resource Directory: Easy to maintain fix broken links quickly.
• Accessibility: WCAG 2.2 AA compliant, ensuring access for all users.
• Mobile Access: Available on mobile devices for anytime, anywhere access.
• Integration with EHCPs and IEPs: Promotes consistency through learner’s transitions

Benefits

• Empowers Schools and SENCOs: Supports mainstream SEND inclusion.
• Promotes Consistency: Shared language ensures continuity as learners progress.
• Enhances Collaboration: Breaks silos between Specialist Inclusion Teams and schools.
• Supports Strategic Planning: Enables long-term planning and SEND practice improvement.
• Increases Transparency: Parent carers see available support, promoting open communication.
• Saves Time: Easy maintenance and real-time updates reduce administrative burden.
• Ensures Compliance: GDPR and accessibility standards for secure, inclusive platform.
• Comprehensive Support: Onboarding, training, and ongoing assistance ensure successful implementation
• Scalability: Platform supports new features and integrations as needs evolve.
• User-Centric Design: Co-designed with SENCOs and Specialist Inclusion Teams.

Service documents

• Pricing document

  ODT

• Service definition document

  ODT

• Terms and conditions

  ODT

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jonny@poppop.studio. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

908550355034741

Contact

Jonny Holden
01619871909
jonny@poppop.studio

About your service

• Service categories:

  Applications

  Content workflow and management

  • Document

  Content services

  • Content Sharing and Collaboration Applications

  Persuasive content management

  • Website Software
  • Digital Asset Management Applications

  Enterprise portals and digital workspaces

  • Multi-Audience Portals
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: Planned upgrades to Drupal and LocalGov Drupal versions.
• System requirements:
  • Modern Browser
  • Up to date Operating system

User support

• Email or online ticketing support: Yes
• Support response times: 1 day during school term times, Monday to Friday.; Up to 1 week during school holidays.; Critical server availability prioritised and dealt with urgently between 8am and 8pm, 365 days a year.
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Support is what makes us different. We don't hide behind levels of support tickets. We work closely with our clients, proactively helping them with planning content, features, and solving technical issues. We have weekly meetings to support project managers.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We work with the local authority's Specialist Inclusion Team and SENCOs to develop the look and feel. ; We can support with creating the content, or moving the content from existing PDFs or Word docs. ; Online training is available, and there is a knowledge base.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • Other
• Other documentation formats:
  • Video
  • Screenshots
• End-of-contract data extraction: As the directory and audit is built in Drupal, at the end of the contract we can transfer ownership of the site. ; Code base can be made available through a version control system.; Data can be exported as a database dump or requested extracts as CSV, JSON, XML. ; ; We will then cease any hosting or support.
• End-of-contract process: Pop Pop Studio will either delete the whole directory and audit or create a copy of the whole site on a version control system, to be passed on to the client.; ; If users require a download of content in any other format, Pop Pop Studio will charge for the time taken.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The usual responsive Menu and Layout changes are applied to make sure the app is WCAG Robust. ; The Directory can be used on mobile, and technically the Audit can work, but a larger screen is recommended.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: Generic Drupal back end allows users to edit content and configure the functions as needed.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: None
• API: No
• Customisation available: Yes
• Description of customisation: The "look and feel" of the front end (the Directory) can be designed to work with your SEND Local Offer, or other branding. This is done by Pop Pop Studio.; ; All the categories for Whole School Universal and Areas of Need, the effective practice strategies, and the resources can be unique to each local authority. These can all be customised by the local authority.

Scaling

• Independence of resources: Each site it hosted in a separate hosting service that allows scaling, the specification of which can be increased as needed, without extra charge.

Analytics

• Service usage metrics: Yes
• Metrics types: We use Plausible.io, an open-source, privacy friendly analytics service.
• Reporting types: Real-time dashboards
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: Never
• Protecting data at rest: Other
• Other data at rest protection approach: Security controls fall inside of ISO 27001:2022, through our hosting partners
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Option to extract data within one of the usual data formats (CSV, XLS, XML, JSON)
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • XML
  • XLS
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: 99.99% uptime expected, with infrastructure monitors alerting hosting engineers.
• Approach to resilience: Our hosting partner is ISO 2700:2022 compliant
• Outage reporting: Hosting partner email alerts and support.

Identity and authentication

• User authentication needed: No
• Access restrictions in management interfaces and support channels: Management access to the platform is restricted and authenticated via username, password. Role based permissions are used and all actions are audit logged.; Support channels are email based for clients, and MFA restricted for our staff.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: Between 1 month and 6 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Working directly with our hosting partners, our developers, and client tech teams (where required) we use the Software Security Code of Practice to guide our best practice at POP POP STUDIO
• Information security policies and processes: All developers report directly to the company Director. ; With each new deployment information security policies and processes are followed.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: All development work is version controlled. ; Internal QA testing in staging environments. ; UAT testing as required.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: As we use Drupal and LocalGov Drupal, we are notified of threats and patches directly from these organisations. Security patches are deployed as soon as possible, within 24 hours.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Drupal and LGD report on potential compromises and we act on these as soon as possible. ; All security patches are installed and updated in line with their instructions.
• Incident management type: Supplier-defined controls
• Incident management approach: Any incidents or suspected incidents should be reported directly to Pop Pop Studio, and they will be reviewed by our technical team. Resolutions will be reported back to the client.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 10%
• Over £5,000,001: 15%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Working conditions which promote an inclusive working environment and promote retention and progression

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Understanding of the issues affecting the development of new skills by target cohort
    • Creation of outreach activities to create a pipeline of employees for the future contract delivery

Service documents

• Pricing document

  ODT

• Service definition document

  ODT

• Terms and conditions

  ODT

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jonny@poppop.studio. Tell them what format you need. It will help if you say what assistive technology you use.