OFFICELABS LIMITED

Morae Link Enterprise

Morae Link Enterprise integrates SAP document processes with Microsoft SharePoint, Microsoft 365, and other supported enterprise repositories, enabling SAP content to be stored, accessed, and governed within the organisation’s information estate without changing the SAP user experience, while maintaining full customer control of data.

Features

• SAP ArchiveLink compliant document archiving to external content repositories
• Bi-directional synchronisation between SAP and connected content platforms
• Preservation of native SAP user experience without interface changes
• Automated document filing using metadata and business context
• Secure integration with Microsoft SharePoint and Microsoft 365
• Centralised governance of SAP documents using enterprise content controls
• Metadata synchronisation enabling search and retrieval outside SAP
• Support for records management and retention policy enforcement
• Customer-hosted deployment maintaining full control of data
• Certified SAP integration supporting enterprise-scale document volumes

Benefits

• Reduces SAP document management complexity and operational overhead
• Improves access to SAP documents outside SAP environments
• Enables consistent governance across SAP and content repositories
• Lowers total cost of ownership for SAP document storage
• Maintains familiar SAP user experience for business users
• Improves collaboration using Microsoft 365 and SharePoint
• Strengthens compliance through centralised retention and records controls
• Reduces risk from unmanaged SAP-generated documents
• Supports scalable enterprise document volumes without SAP performance impact
• Keeps all content within customer-controlled systems and infrastructure

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@officelabs.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

931218932962943

Contact

Graham Bidwell
01392 24 0 365
sales@officelabs.co.uk

About your service

• Service categories:

  Applications

  Content workflow and management

  Content services

  • Enterprise Content Management Applications
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes
• What software services is the service an extension to: Morae Link Enterprise is an add-on and extension to existing enterprise software services, including SAP ERP and supported content repositories such as Microsoft SharePoint and Microsoft 365. It extends these platforms by integrating SAP document processes with enterprise content management, governance, and records controls without replacing the underlying systems.
• Cloud deployment model: Public cloud
• Service constraints: Morae Link Enterprise requires supported SAP systems and appropriate user licences, along with compatible enterprise content repositories such as Microsoft SharePoint or Microsoft 365. The service is deployed on customer-managed infrastructure and requires supported Windows Server environments. Availability and performance depend on customer infrastructure, network connectivity, and repository configuration.
• System requirements:
  • Microsoft 365 tenant and/or supported repositories
  • Supported SAP ERP system with valid user licences
  • SAP ArchiveLink configuration enabled within SAP environment
  • Windows Server 2019 or later for application components
  • Appropriate administrative permissions across SAP and content repositories
  • TLS 1.2 or higher for secure communications

User support

• Email or online ticketing support: Yes
• Support response times: Support requests submitted via email or the online ticketing system are monitored during UK business hours, Monday to Friday, excluding public holidays. Initial responses are typically provided within one business day. Requests received outside business hours are reviewed on the next working day. Response times may vary depending on the nature and priority of the request.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Support is provided as a standard service level included with the software subscription. This includes access to email and online ticketing support during UK business hours, Monday to Friday, excluding public holidays. Support covers incident logging, fault investigation, and resolution of software-related issues.; ; Enhanced support services, including extended support hours, prioritised response, onsite assistance, and advisory support, are available at additional cost and are procured separately under appropriate Cloud Support listings.; ; OfficeLabs does not provide a dedicated technical account manager or cloud support engineer as part of the standard software subscription. Where required, customers may procure named technical resources, implementation support, or ongoing service management through separate Cloud Support services.; ; All support requests are managed through a structured ticketing process, with issues prioritised based on impact and urgency.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: OfficeLabs supports onboarding through structured implementation and configuration assistance. This includes initial discovery to confirm SAP and repository architecture, installation of required components, configuration of integrations, and validation of document flows.; ; Administrator training is provided through guided remote sessions or onsite delivery if required. Documentation is supplied to support ongoing administration and operational use. End users require no training, as they continue working within existing SAP and content repository interfaces.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Morae Link Enterprise does not store customer data. All documents and metadata remain within the customer’s SAP systems and connected content repositories. When the contract ends, users retain full access to their data within those systems, with no extraction or migration required.
• End-of-contract process: At contract end, the software licence and support services expire in line with the agreed notice period. All documents and metadata remain within the customer’s SAP systems and connected content repositories.; ; The contract price includes the software licence, initial configuration, documentation, and administrator training. Ongoing support, enhancements, extended support hours, and offboarding assistance are available at additional cost if required.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Onboarding and offboarding documentation is provided in digital formats that can be accessed through standard web browsers. Documentation is made available online and in downloadable formats, enabling users to apply browser-based accessibility features such as screen magnification, zoom, text resizing, and keyboard navigation. Content is structured to support clear navigation and readability.; ; Accessibility of the documentation depends on the capabilities of the underlying documentation platform and the user’s chosen assistive technologies. No bespoke accessibility adaptations are required to access the documentation, and users can request alternative formats or additional support where reasonable adjustments are needed.; ; Where documentation is provided by third-party platforms, accessibility aligns with the features supported by those platforms and standard browser technologies.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Morae Link Enterprise is administered through a server-based management interface used by authorised administrators to configure integrations, manage connections, and monitor document processing. End users continue to interact through existing SAP and content repository interfaces, with no separate user-facing application required.
• Accessibility standards: None or don’t know
• Description of accessibility: End users access documents through existing SAP interfaces or connected content repositories such as Microsoft SharePoint or Microsoft 365, using standard accessibility features provided by those platforms. Users can view, retrieve, and work with documents according to their permissions but cannot change integration configuration.; ; Administrative functions are restricted to authorised administrators using the management interface. Administrators can configure integrations, manage metadata mappings, and monitor processing but cannot bypass underlying SAP or repository security controls.
• Accessibility testing: No formal user testing has been conducted specifically with users of assistive technologies. Accessibility is supported through the underlying software platform and standard browser accessibility features. Where accessibility issues are identified, these can be raised through the support process and are reviewed to determine whether reasonable adjustments can be made.
• API: Yes
• What users can and can't do using the API: Morae Link Enterprise provides APIs to support integration and interaction with connected enterprise systems. These APIs are used for document handling, metadata synchronisation, and transactional integration between SAP and supported content repositories, and are intended for system-level integration rather than end-user access.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Morae Link Enterprise can be customised through configuration rather than bespoke development. Authorised administrators can configure which repositories are connected, define document types, metadata mappings, retention classifications, and filing rules, and control processing behaviour to align with business processes and governance policies.; ; Customisation is performed using the administrative management interface during implementation or ongoing service operation. End users cannot customise the service; all configuration is restricted to trained administrators operating within agreed security and change management controls.

Scaling

• Independence of resources: Morae Link Enterprise is deployed on customer-managed infrastructure and operates independently within each customer environment. Resources are not shared between customers, and service performance is determined by the customer’s own infrastructure capacity and configuration. Demand from other users or organisations does not affect service operation.

Analytics

• Service usage metrics: Yes
• Metrics types: The service provides operational and administrative metrics to support monitoring and governance of document integration processes. Metrics include document processing status, transaction success or failure events, synchronisation activity, audit logs, and configuration status. Metrics are available to authorised administrators through administrative interfaces to support oversight and troubleshooting.
• Reporting types:
  • Real-time dashboards
  • Regular reports
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Morae Group

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure

Data importing and exporting

• Data export approach: Morae Link Enterprise does not store customer data or generate analytical datasets. All documents and metadata remain within the customer’s SAP systems and connected content repositories. Any data export is performed directly from those systems using their native tools. Configuration and audit information can be reviewed through administrative interfaces prior to contract termination.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Native repository formats
  • SAP-standard export formats
• Data import formats:
  • CSV
  • Other
• Other data import formats: SAP-standard document and metadata formats

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Morae Link Enterprise is deployed on customer-managed infrastructure and does not provide a platform-level uptime guarantee. Service availability depends on the availability of the customer’s SAP systems, connected content repositories, network connectivity, and hosting environment. The standard contract does not include service credits or availability-based refunds. Availability issues are managed through the support and incident management process. Any enhanced availability commitments or bespoke service level agreements must be agreed separately.
• Approach to resilience: Resilience is achieved through deployment within customer-managed environments, using the resilience features of the customer’s chosen infrastructure and hosting platforms. This may include redundancy, backup, monitoring, and recovery mechanisms implemented by the customer. Morae Link Enterprise operates within these environments and does not introduce shared points of failure across customers.
• Outage reporting: Service issues are reported and managed through the support process. Users can raise incidents via email or the online ticketing system and receive updates on investigation and resolution. No public status dashboard or automated outage reporting service is provided. Where incidents relate to customer infrastructure or third-party platforms, updates are coordinated accordingly.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is restricted through authenticated user accounts and role-based access controls. Administrative privileges are limited to authorised personnel with defined responsibilities. Support channels are accessible only to verified customer contacts and authorised OfficeLabs support staff. Access rights are reviewed periodically to ensure they remain appropriate.; ; Where third-party platforms are used for management or support functions, their native authentication and access control mechanisms are applied in line with organisational security policies.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: OfficeLabs operates a formal information security management framework aligned with ISO/IEC 27001. Documented policies and procedures cover access control, data protection, incident management, risk assessment, supplier management, and business continuity. Policies are reviewed regularly to ensure continued relevance and effectiveness.; ; Overall responsibility for information security rests with a named board-level role, supported by operational security leads responsible for day-to-day implementation. Security risks are identified, assessed, and managed through a structured risk management process, with escalation where required.; ; Compliance is supported through defined processes, role-based responsibilities, staff awareness activities, and internal review mechanisms. Security incidents are managed through documented incident response procedures. Third-party services used in delivery are assessed through supplier and risk management processes. The effectiveness of security controls is monitored and reviewed as part of ongoing governance activities.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Configuration items relating to the service are identified and managed through documented configuration and change management processes. Changes are requested, assessed, approved, and implemented in a controlled manner, with records maintained throughout their lifecycle. Changes are reviewed for security, availability, and operational impact prior to implementation. Where changes affect customer-managed environments, implementation is coordinated with the customer and tested where appropriate to minimise risk.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Potential vulnerabilities are identified through vendor security advisories, vulnerability disclosures, and internal review. Vulnerabilities are assessed based on risk, impact, and exploitability, with remediation actions prioritised accordingly. Security updates relating to the service components are applied in a controlled manner. Where vulnerabilities relate to customer-managed infrastructure or third-party platforms, remediation is coordinated with the relevant suppliers or customer teams.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Protective monitoring is performed through review of service logs, alerts, and notifications from relevant service components. Monitoring activities focus on identifying abnormal behaviour, errors, or security events. Where potential incidents are identified, predefined incident response procedures are followed to assess, contain, and remediate the issue in coordination with the customer where required.
• Incident management type: Supplier-defined controls
• Incident management approach: OfficeLabs operates documented incident management processes covering identification, assessment, response, and resolution of service and security incidents. Incidents can be reported by users via email or the online ticketing system. Incidents are logged, prioritised based on impact and urgency, and managed through to resolution. Users are provided with status updates and post-incident information where appropriate, including actions taken and any required follow-up.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 3%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 7%
• Between £2,500,001 and £5,000,000: 10%
• Over £5,000,001: 12%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Alcumus ISOQAR
• ISO/IEC 27001 accreditation date: Tuesday 7 October 2025
• What the ISO/IEC 27001 doesn’t cover: The ISO/IEC 27001:2022 certification applies to the OfficeLabs Information Security Management System (ISMS) as defined in the documented scope and Statement of Applicability.; ; The certification does not cover customer-owned systems, infrastructure, networks, or devices that are not operated or managed by OfficeLabs, including client environments accessed for consultancy or delivery purposes. It also does not extend to third-party platforms or services used by OfficeLabs, except where these are governed through supplier due diligence, contractual controls, and ongoing risk management within the ISMS.; ; End-user locations, home networks, and personal equipment are not directly certified, beyond the organisational policies and controls applied to remote working. Activities, information assets, or processing operations that fall outside the formally defined ISMS scope are also excluded.; ; As with all management system certifications, the ISO/IEC 27001 certification is based on limited audit sampling and does not guarantee the absence of all non-conformances.; ; All information assets, systems, and services within the defined scope are managed in accordance with ISO/IEC 27001:2022, with risks outside the scope addressed through governance, supplier management, contractual obligations, and risk assessment processes.
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 89b8902b-27bd-4ea6-a83b-54fad105966b
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 8c841283-44fe-4dc5-85ee-6208d10fd4a5
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@officelabs.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.