AMBERJACK GLOBAL LIMITED

Online Assessment Module

An engaging assessment platform built for high‑volume and early‑talent recruitment. Candidates complete realistic cognitive, numerical, situational judgement tasks and video interviews in an inclusive, accessible environment. You gain instant scoring, behavioural insights and tailored recommendations to make confident, consistent hiring decisions at scale.

Features

• Immersive digital assessment platform
• Delivers range of automated off-the-shelf or bespoke assessment tests
• Traditional assessments - aptitude, cognition, judgement and personality
• Behavioural assessments
• Blended assessments include video and/or written response questions
• Self-selection tools such as Situational Judgement Tests or Match-Me tools
• Single assessments or video-immersive assessment stage
• Mobile enabled, seamlessly integrates with existing recruitment process
• In-built personalised automated feedback and Net Promoter Scores (NPS)
• Real-time reporting

Benefits

• Publish content from multiple devices
• Quickly manage content on the move
• Measure abilities to accurately predict success
• Identify potential candidates to succeed in role
• Flexibly measure multiple candidate qualities in a single-stage assessment
• Efficiently identify best-fit candidates
• Flexibly select text, images, video immersive or blended tests
• Make better hiring decisions faster
• Instant and meaningful candidate feedback you can measure
• Complete reporting visibility to individual candidate scores

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Contracts@weareamberjack.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

914158588584138

Contact

Carlin Summers
+441635584130
Contracts@weareamberjack.com

About the service

• Service categories:
  • Applications
    • Enterprise resource management
      • Human capital management
        • Core Human Resources Applications
        • Talent Management Applications
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Candidate Management Platform
• Cloud deployment model: Public cloud
• Service constraints: As with all software services, Amberjack will, with due notice, periodically provision service upgrades and platform maintenance that may require a period of planned downtime. Typically this downtime will be planned outside of key operating hours.
• System requirements:
  • Modern browser (Google Chrome, Safari, Firefox, Microsoft Edge)
  • Internet Access

User support

• Email or online ticketing support: Yes
• Support response times: Depending on the severity of fault, between 2 hours and 1 day.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: Reactive support is included in the price. This provides working day telephone and email support with 4 levels of ticket categorisation.; Technical account management is offered (at a cost) to provide proactive management of the service including service reviews, reporting and strategic support.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: A full implementation service can be provided to design and implement the technical and assessment processes in partnership with the client, only being signed off for live deployment after full user acceptance testing.; ; Full user training and documentation is also provided and can be delivered onsite or remotely.
• Service documentation: Yes
• Documentation formats:
  • ODF
  • PDF
• Documentation accessibility standard: WCAG 2.2 A
• End-of-contract data extraction: Amberjack will provide a data extract in the format required by the client at the end of the contract. Data retention/archive/deletion policies will match the requirements of the client.
• End-of-contract process: Typically at the end of the contract, an exit plan will be put in place to define the timeline for closure of system for new registration, removing access for candidates and client users, data extraction and decommissioning.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The UI has been designed to be mobile responsive and so positioning of text/buttons/tabs will change depending on screen size.
• Service interface: Yes
• Description of service interface: The Assessment Module provides clients with the ability to design immersive assessments for candidates. The Module supports many different kinds of questions and answer type tests. The question interface and scoring mechanisms are pluggable to allow customised experiences to be created for clients. These can range from simple multiple choice to immersive, video enabled experiences. On registration, candidates can then take the assessment tests, the results of which are collated for review by the client assessors. Metrics and analytics are available to enable continual improvement in areas such as diversity and candidate engagement.
• Accessibility standards: None or don’t know
• Description of accessibility: Our service supports accessibility by using semantic HTML landmarks, logically ordered headings, and scalable text that adjusts to user browser settings. Forms include correctly associated labels, validation messages automatically receive focus, and all interactive elements are fully keyboard‑navigable using tabindex and clear focus outlines. We apply ARIA labels to provide meaningful context for screen reader users, ensure all images have alt text or screen‑reader‑only descriptions, and enhance features like “read more” buttons with additional hidden text for clarity. These combined measures ensure the site is usable, understandable, and accessible for all users.
• Accessibility testing: Shaw Trust have been onboarded to assess our solutions for accessibility and WCAG 2.2 AA compliance. Supporting accessibility standards is an ongoing element of the Amberjack technical development roadmap.
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: API integration can be discussed as part of initial partnership dialogue, however typically this service is set up in partnership with our internal technical team who can provide all relevant documentation.; ; Once the integration is in place, any changes must be made via our change request process and cannot be made by users without involvement of our internal technical team.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: We have a flexible approach to our software to allow for customisation such as branding, as well as content and reporting.

Scaling

• Independence of resources: We ensure users aren’t affected by spikes in demand from others through automatic autoscaling, which expands capacity whenever usage increases. The platform’s real‑time monitoring and alerting lets us detect unusual load early and respond before performance is impacted.

Analytics

• Service usage metrics: Yes
• Metrics types: Metrics are specific to each organisation depending on their implementation design and will typically be a combination of built in and custom reports alongside analysis provided by technical account managers. These can include candidate volumes, as well as adherence to KPIs (e.g. system uptime)
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: The client user interface supports the export of candidate data including scores, and associated custom meta data.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • .xlsx
  • .pdf
• Data import formats:
  • CSV
  • Other
• Other data import formats: .xlsx

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Up to 99.9% availability (excluding planned maintenance, but deployment of the platform takes typically less than 2 minutes). Service credits are agreed as part of contract negotiations.
• Approach to resilience: Redundancy is built in by design, for example, load balanced web servers, firewalls, and the data centre is replicated across 2 different sites.
• Outage reporting: Reactive RfO (Reason for Outage) reporting as well as a public dashboard.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Separation by site. e.g. the admin site is independent from the client site and with independent authentication. Within the client site there are 2 levels of user, standard and super to restrict access appropriately.
• Access restriction testing frequency: At least once a year
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 6 months and 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: Between 6 months and 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: We employ a fully ISO27001:2022 Information Security Management System with a statement of applicability for all controls. This means we have a full suite of information security policies and procedures that are independently audited on at least an annual basis.; ; Security is governed by our Board of Directors with daily management deferred to our head of security (who sits independently of any department).; ; All changes are governed by a weekly change board, and we have an independent SOC monitoring our systems 24x7. We undertake daily vulnerability scans of all our systems and perform automated patching twice weekly or as required.; ; Our head of security monitors compliance with our policies and standards and reports to the board on a quarterly basis.

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: All changes are managed through a weekly Change Board attended by service and system owners. Requests are reviewed and if approved are tracked to completion with mop up sessions.; ; Each change has to consider the impact to security risk (reduce, maintain, worsen), the likely impact to service and whether comms are required to users of the system.; ; Only correctly formed requests are considered for approval.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: We undertake daily Internal and External Infrastructure assessments to the PCI standards as a benchmark. Our SLA for patch deployment is within 10 working days for High/Critical and 30 days for Medium rated vulnerabilities.; ; We use several sources for threat intel including BitSight, Risk Ledger, MyNCSC, Tenable.IO and the Microsoft Threat Intelligence reports.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: We have the latest threat analysis tools deployed to all systems which in turn feed into our fully managed 24x7 SOC.; ; We have defined runbooks to respond to various scenarios and our response time varies depending on the severity of the alert. We enable our SOC to block access if they deem necessary while we investigate the incident.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Post-quantum cryptography secure: Yes
• Incident management approach: Our incident process is published to all users desktops and is well understood by staff. Reports always require an email but initial contact/reporting can be via any communication method.; ; Incidents are then assessed for severity and runbooks for standard scenarios are followed. Incidents are logged in a dedicated system which feeds into our security management system. This enables incident reports to be generated if required.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 1%
• Between £500,001 and £1,000,000: 1%
• Between £1,000,001 and £2,500,000: 2%
• Between £2,500,001 and £5,000,000: 2%
• Over £5,000,001: 3%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: British Assessment Bureau
• ISO/IEC 27001 accreditation date: Wednesday 1 October 2025
• What the ISO/IEC 27001 doesn’t cover: All services are covered
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: Yes
• CSA STAR accreditation date: Tuesday 8 July 2025
• CSA STAR certification level: Level 1: CSA STAR Self-Assessment
• What the CSA STAR doesn’t cover: All services are covered
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: Eac44c57-f050-42f9-abf4-eaa67c0b2502
• Cyber essentials plus: Yes
• Cyber Essentials Plus Certificate Number: E31edba5-7b1b-4db2-9ac7-6521abe9430d
• Other security certifications: No

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
  • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
  • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
• Mission: Make Britain a clean energy superpower:

  To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

  Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
  • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
  • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
  • Activities to reconnect people with the environment and increase awareness of ways to protect and enhance it
• Mission: Break down barriers to opportunity:

  By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

  Policy Outcome 6: Employment and training: For those who face barriers to employment

  • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
  • Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
  • Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
  • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Collection of the views and expertise of disabled people and their representative organisations on successfully supporting disabled employees or applicants
  • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
  • Offering a range of quality opportunities with routes of progression if appropriate, e.g. T Level industry placements, students supported into higher level apprenticeships.
  • Working conditions which promote an inclusive working environment and promote retention and progression

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Contracts@weareamberjack.com. Tell them what format you need. It will help if you say what assistive technology you use.