IN-TEND LIMITED

In-tend Spend Control

In-tend's fully PA23 compliant suite of modular software solutions caters for all end user requirements. From Procurement, DPS/DM (Dynamic Markets/Purchasing System), evaluation, contract management, auctions, analytics and vendor management through to full system integration and spend analysis to provide the full end to end process. Secure by design

Features

• Electronic Tender Management
• Electronic Contract Management
• Electronic Evaluation
• Electronic Auction
• Supplier Vendor Management
• DM (Dynamic Markets)
• Full Audit Trail
• Dashboard Reporting & Analytics
• Spend Analytics and Spend Control
• P2P (Procure To Pay)

Benefits

• Manages Risk, Ensures Compliance and meets with current Regulations
• Ensures Transparency and Fairness
• Facilitates saving through best practice and fair competition
• Contract Register, Document Management & monitoring SLA's
• Control of Supplier Database from Registration to Approved Lists
• Visual charts and graphs illustrating real-time user activity
• Ability to create tailored & bespoke reports
• Date/Time Stamped log of user and supplier system activity
• Links with current ERP databases via secure API web services
• Facilitates full control over Dynamic Market/framework processes

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@in-tend.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

969242750171732

Contact

Euros Jones
0114 407 0056
tenders@in-tend.co.uk

About your service

• Service categories:

  Applications

  Enterprise resource management

  • Procurement
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: No Service Constraints
• System requirements: Accessible on any internet capable device

User support

• Email or online ticketing support: Yes
• Support response times: Immediate support via telephone. Target is same day by email or ticket (where possible). Backed by In-tend's service level agreement which can be shared on request
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AAA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: In-tend provide full telephone and email support to all buyers and suppliers via a dedicated, in-house and fully UK based support department. Support is structured on a tier basis with 1st line support being for simple queries and 2nd line support for more complex scenarios. All support elements are logged via an internal support management system with tickets and reference numbers generated for reporting and referral purposes. Support for both buyers and suppliers is fully included within the initial purchase of the system itself. All customers are assigned a dedicated technical account manager who will conduct review meetings.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: A comprehensive project schedule is provided to all new clients, this gives a step-by-step guide of the In-tend system and it's implementation. We will provide time scales, resource requirements form you (the client), deployment information and training. As standard, you will receive a sandbox training environment dedicated to your organisation along with access to online training material to further support your organisation throughout the lifetime of the contract.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • ODF
  • PDF
  • Other
• Other documentation formats:
  • Online Wiki Help Guides
  • Instructional Videos
• End-of-contract data extraction: If requested by You, In-tend agrees that following accepted termination or expiry of this agreement, In-tend shall offer you two options for off-boarding. Option a): Your data shall continue to be available for extraction via the software manually up until the current term termination date. This option can be done by the customer at no additional charge. in-tend data can be exported in PDF, Excel or CSV formats along side the download of supporting documents from the document storage areas. Option b): In-tend shall prepare and migrate all Your data from the system into a manageable format in either XML, JSON or CSV (additional optional formats as required). All supporting documents will be packaged into a hierarchical folder structure referenced in the XML, JSON or CSV files. This option allows for easy data import to 3rd party systems as it is designed to me machine readable as well as humanly readable. Costs for option B are at prevailing rates at the time of export and is dependant on data size.
• End-of-contract process: In the event of standard cancellation where there is a request to simply cease service, there are no additional costs with the exception of Option B of the data export. If there are any bespoke requirements In-tend can tailor the end of contract process to suite the requirements of the customer, the costs of which are dependant on the specific requirements.
• Documentation accessibility standard: WCAG 2.2 AAA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: No difference - All functionality remains the same. In-tend utilises a responsive layout design to automatically scale correctly to suit the accessing device.
• Service interface: No
• User support accessibility: WCAG 2.2 AAA
• API: Yes
• What users can and can't do using the API: In-tend has REST based API access, which allows easy secure integration between 3rd party systems. In-tend has online documentation for API's allowing for easy development of integrations. the API allows for Create, read, Update and Delete (CRUD) operations for all areas of in-tend. There are no limitations on API usage.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • ODF
  • PDF
  • Other
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Designed with the user in mind, In-tend has the flexibility to be customised to suit the clients requirements and needs. All areas of In-tend are customisable, with most areas by the end user themselves where others may require In-tend to perform customisation on their behalf. Customisation can be undertaken by users dependent on their rights & permissions (set by the organisation)

Scaling

• Independence of resources: The In-tend platform benefits from limitless scalability by design. We monitor all areas of the system including performance. The metrics we gather allow us to respond proactively to demand. The software is deigned in a way that does not allow users to affect performance of other users.

Analytics

• Service usage metrics: Yes
• Metrics types: System usage for previous month(s) and to date since day one
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: In-tend's intuitive interface allows users to export data in various formats including XLS, PDF & CSV along with the option to batch ZIP attached documents. Other export formats can be facilitated on request. In-tend's API also allows for exporting data in machine readable formats.
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats:
  • XLS
  • JSON
  • XML
  • Print
  • ZIP
  • Customer specific (on request/review)
• Data import formats:
  • CSV
  • ODF
  • Other
• Other data import formats:
  • XLS
  • XLSX
  • JSON
  • XML
  • Customer specific (on request/review)

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: In-tend utilises VLAN technology and physically segregated networks to offer further network protection, for example In-tend utilises a Storage Area Network which has no direct connection to the outside world.

Availability and resilience

• Guaranteed availability: In-tend currently maintains a 12+ year 100% planned up-time (excluding planned maintenance and upgrades). All SLA's are inserted into the License Agreement dependant on the customer and their purchased requirements. In-tend's SLA is appended to the G-Cloud submission as part of the Terms & Conditions document.
• Approach to resilience: The In-tend platform has been designed as mission critical and high availability. It is fully N+ redundant in all systems, from diverse internet connectivity, redundant power, fully redundant hardware stack with automatic fail over. All systems are replicated in real time to our BCP DR platform hosted at our secondary data centre allowing for resilience in a force majeure event. All hardware is backed by 4 hour mission critical vendor support and repair. In-tend is ISO22301 Business Continuity Management certified and has a documented and tested recovery plan. All systems take hourly snapshots, are backed up nightly with a 6 month data retention. Data transaction logging is utilised and backed up in 15 minute intervals, giving the ability for granular data restoration. The technology in resilience and DR utilised at In-tend gives confidence of our solid platform and is proven in our 12+ year 100% planned up-time record.
• Outage reporting: No unplanned outages have been experienced in over 12 years, however service status is published via a public dashboard should this ever occur.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Relevant information can be provided on request
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • CSA CSM version 4.0
  • ISO/IEC 27001
• Information security policies and processes: In-tend are certified with ISO 27001 Information Security and therefore have audited security policies and numerous processes embedded within the business that are documented in the ISO Management System manual, Procedures and Statement of Applicability. These are reviewed periodically and are subject to external audit annually. In-tend is organised into several departments each with a department head and deputy department head who are responsible for ensuring all procedures are followed. Each department head reports directly to the Director of Operations who reports into the CEO.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Relevant information can be made available on request
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Our systems are fully monitored for threat prevention. Monitoring alerts and quarterly security testing assists our security team in identifying potential threats to our services. Additionally we subscribe to technical security bulletins alerting us to new emerging threats from discovered Common Vulnerability and Exposures (CVE's). Systems are patched according to the CVSS (Common Vulnerability Scoring System). CVSS 4.0 Medium to CVSS 10.0 Critical are patched or mitigated within 24 hours where possible. CVSS 0-3.9 are patched or mitigated within 7 days where possible.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Relevant information can be provided on request
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Relevant information can be provided on request
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Other
• Other public sector networks: In-tend can connect to any public sector network on request

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Access to a sample portal where users can explore the system in its entirety. Users can run full 'dummy' processes and act as both Buyer and Supplier to ensure the system provides the necessary functionality. Access is guided to maximise system exploration and can be up to 30 days.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 5%
• Between £250,000 and £500,000: 25%
• Between £500,001 and £1,000,000: 30%
• Between £1,000,001 and £2,500,000: 35%
• Between £2,500,001 and £5,000,000: 40%
• Over £5,000,001: 50%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: QAS International
• ISO/IEC 27001 accreditation date: Friday 28 March 2025
• What the ISO/IEC 27001 doesn’t cover: No exclusions as per the certificate scope
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: QAS International
• ISO 9001 accreditation date: Friday 28 March 2025
• What the ISO 9001 doesn’t cover: No exclusions as per the certificate scope; Permitted exclusion of clause 7.1.5 "measuring and monitoring equipment"
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: Lloyds Bank Cardnet
• PCI DSS accreditation date: Tuesday 23 December 2025
• What the PCI DSS doesn’t cover: No exclusions stated
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: Df86475b-363e-42ad-9e0d-cc86528d5fbe
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Advertising of supply chain opportunities openly and to ensure they are accessible to a diverse range of businesses, including advertising all subcontracting opportunities on Contracts Finder
    • Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
    • Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
    • Plans to respond flexibly and adapt approaches to community engagement and initiatives

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of employment and skills issues, and of the skills and employment shortages of high growth sectors relating to the contract
    • Creation of employment opportunities particularly for those who face barriers to employment, such as prison leavers, care leavers and/or who are located in deprived areas, and for people in industries with known skills shortages or in high growth sectors
    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

    • Other measures to offer development opportunities for the target cohort(s) in the contract workforce
    • Understanding of issues relating to entering the contract workforce

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@in-tend.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.