Skip to main content

Beta Help us improve the Digital Marketplace - send your feedback

CARADOX LIMITED

Caradox Ltd

TIER is a cloud-based platform to maintain operational readiness and increase their deployment efficiency.
It assists in Training Scheduling, Asset and Equipment management, Incident response and Reporting.

Features

  • real-time reporting
  • self service
  • complete system interoperability with full featured APIs
  • self-built reporting capabilities with out-of-the-box reports
  • self-configurable to your organisations needs
  • parent child relationships for your organisations teams
  • Single Sign On with Microsoft, Google and others.
  • Open Standards

Benefits

  • reduce training burden
  • ensure operational readiness
  • restrict access to equipment for unqualified people
  • real-time asset information
  • support informed operational decisions
  • assess team capabilities on the move
  • evidence team capabilities on the move
  • reduce planning and management overheads
  • capture event analytics
  • user configurable dashboards and reporting

Pricing

£2 to £15 a user a month

  • Education pricing available
  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at c.hall@caradox.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

9 5 3 6 8 8 2 5 5 7 7 1 3 4 1

Contact

CARADOX LIMITED Craig Hall
Telephone: 07402331810
Email: c.hall@caradox.co.uk

Service scope

Software add-on or extension
Yes, but can also be used as a standalone service
What software services is the service an extension to
Any HR, Training, Incident or Equipment system that supports APIs.
Cloud deployment model
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
Service constraints
Only supported by MSSQL and .NET for the APIs.
System requirements
  • MSSQL for Database
  • .NET hosting for APIs
  • Web Server for. Angular front end

User support

Email or online ticketing support
Email or online ticketing
Support response times
Typically within 24 hours.
User can manage status and priority of support tickets
No
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Onsite support
No
Support levels
Email and remote support via dedicated channels
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Inbuilt guides and feature videos
User documentation
Online training
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
There is an ability for any active user to download their own data at anytime, system administrators have an ability to extract all data within their organisation through a support request.
End-of-contract process
TIER is run as Software as a Service (SaaS) and 30 days post end of contract period, all Personally Identifiable Information (PII) is wiped from the system.

Cloud instances will retain information for historical audit capabilities but will not contain PII. We will provide a mapping file for records to PII so if you wish to reinstate the service in the cloud, you will be able to by restoring the PII.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
Mobile friendly formatting
Service interface
No
User support accessibility
WCAG 2.1 AA or EN 301 549
API
Yes
What users can and can't do using the API
TIER follows Open API standards and every interaction available through the User Interface is also available through the API, so complete use, setup and configuration of the system can be achieved through the API.
API documentation
Yes
API documentation formats
Open API (also known as Swagger)
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
Customers can provide customised CSS and image files for branding of the instance of the system. The system also supports customisations of the of the system to support how they chose to utilise the features. In some circumstances, this extends past turning features on and off but also allows tuning of certain features to suit their needs.

Scaling

Independence of resources
The system automatically scales with the number of users meaning if you add more users in a month, the resources underpinning the system automatically scale with it.

Analytics

Service usage metrics
Yes
Metrics types
We use inbuilt code metrics as well as platform specific metrics that can be consumed on a per instance basis.
Reporting types
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
Yes
Datacentre security standards
Managed by a third party
Penetration testing frequency
Never
Protecting data at rest
  • Physical access control, complying with CSA CCM v3.0
  • Encryption of all physical media
Data sanitisation process
Yes
Data sanitisation type
Deleted data can’t be directly accessed
Equipment disposal approach
A third-party destruction service

Data importing and exporting

Data export approach
Each user has an ability to click on a "download profile data" button in their profile screen. This causes the system to generate a user specific downloadable file, which will prompt the user to save to their device.
Data export formats
CSV
Data import formats
CSV

Data-in-transit protection

Data protection between buyer and supplier networks
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
Other protection within supplier network
Whitelist IPs on the firewall and Microsoft Sentinel

Availability and resilience

Guaranteed availability
We work to 99.99% availability. If there is a drop below this then a support request can be raised for a refund.

Cloud service is provided from Microsoft Azure. Availability and refunds are inline with their policy, as laid out at https://www.microsoft.com/licensing/docs/view/Service-Level-Agreements-SLA-for-Online-Services
Approach to resilience
We utilise cloud technologies to make the dynamic parts of the service geo resilient within the UK. Making use of Content Delivery Networks for speed and resilience of static content.
Outage reporting
An API makes the information available to connected systems and an email alert is generated for system administrators.

Identity and authentication

User authentication needed
Yes
User authentication
Identity federation with existing provider (for example Google Apps)
Access restrictions in management interfaces and support channels
The application utilises claims to ensure segregation of responsibilities within the system. High level admin and support channels exist in different systems.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
Users contact the support team to get audit information
How long supplier audit data is stored for
At least 12 months
How long system logs are stored for
At least 12 months

Standards and certifications

ISO/IEC 27001 certification
No
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
No
Cyber essentials plus
No
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
No
Security governance approach
We comply to ISO27001 by using policies applied to M365 although we are not currently certified in this approach.
Information security policies and processes
We use policy enforcement that restricts access to information and systems within the company, based on device, user credentials with Multi Factor Authentication.

Compliance is monitored through M365

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
We use source control, package manager and build pipeline controls in the Microsoft stack with Visual Studio and Azure standard tooling.
Vulnerability management type
Undisclosed
Vulnerability management approach
The system is routinely scanned for vulnerabilities and the Package Manager is used to identify vulnerabilities in the supply chain.
Protective monitoring type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach
Azure Sentinel
Incident management type
Supplier-defined controls
Incident management approach
We follow an in-house defined process which has been honed over the several years the platform has been operational.

User raises a request for support via phone or email.

Incident summary is provided at the closure of the support request and summary reports are available on request.

Secure development

Approach to secure software development best practice
Conforms to a recognised standard, but self-assessed

Public sector networks

Connection to public sector networks
No

Social Value

Social Value

Social Value

  • Equal opportunity
  • Wellbeing

Equal opportunity

Caradox Ltd is an Equal Opportunities Employer. The organisation provides equal employment opportunities regardless of ethnic origin, gender, nationality, religion, physical ability, sexual orientation, marital status, parental status, or medical history.

Wellbeing

At Caradox Ltd, we are deeply committed to the well-being of our employees. We understand that our team is our greatest asset, and we strive to provide a supportive and inclusive environment that encourages not only professional growth but also personal health and happiness. We offer comprehensive health benefits, flexible working arrangements, and resources for mental health and wellness. Our commitment extends beyond the workplace with initiatives that promote work-life balance, ensuring that every team member feels valued, respected, and supported. At Caradox, we believe in nurturing a culture where everyone can thrive.

Pricing

Price
£2 to £15 a user a month
Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
There is a fully featured trial version that includes demonstration data available for a maximum of 10 users for 1 month.

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at c.hall@caradox.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.