LIFTANGO LTD

Sustainability and Scope 3 Commuting Software

The Liftango Commuting Solution allows you to measure, analyse and impact on employees commuting habits.

Centralise all commuting data in one place and then analyse the impact that initiatives could have.

Accurately understand and measure your Scope 3 emissions output and analyse it across your workforce

Features

• Commute Surveys
• Real Time Modal and Data Analysis
• Scope 3 Analysis
• Carpool Integration
• Cycling Integration
• Employee Engagement Platform and Dashboard
• Commuting Optimisation
• Employer Analysis Platform
• Sustainability Reporting
• AI Commuting Tool

Benefits

• Reduction in Emissions
• Scope 3 Analysis and Improvement
• Parking Optimisation
• Modal Shift and Behaviour Change
• Full Commute Management and Visibility
• Third Party Integrations
• Employee Engagement and Benefits
• AI Commuting Tool
• Rewards, Benefits and Competitions

£5,000 to £250,000 a licence a year

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at david@liftango.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

987604094502800

Contact

David Mawhinney
07709443360
david@liftango.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: N/A
• System requirements: Browser for software use

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Liftango offer 97% solution uptime, excluding maintenance and scheduled downtime. The Liftango support desk is available 24/7, with P1 and P2 tickets responded to immediately and regular updates provided. Liftango offers varying levels of comprehensive support, Bronze, Silver and Gold, depending on a customers requirements. Information on these can be provided on request.
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: No
• Onsite support: Onsite support
• Support levels: Liftango have varying levels of support, from Bronze to Gold level. Each stage offers differing and improving SLA's, to suit your needs. Our SLA's cover response times to support queries, bug fixes and product requests. Costs vary depending on a number of factors. Liftango provide our customers with support for scheme development, corporate sustainability targets, project roll out, launch and ongoing support, via our New Mobilities Team, Delivery Managers and Technical Account Managers
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Liftango offer full onsite or online training and can tailor these to meet specific customer needs. Customer are provided with a dedicated Delivery Manager, to work with them from kick off to launch. Liftango have extensive documentation available to customers, as well as online support, FAQ's and dedicated Delivery Managers
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Liftango provides all data back to the customer, in relevant formats, at the end of a contract
• End-of-contract process: N/A

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: WCAG 2.1 AAA
• API: Yes
• What users can and can't do using the API: Liftango have specific API's that users can access, but cannot make specific changes.; ; Documentation can be provided on request.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Customisable integrations with mobility providers, loyalty providers, custom logos in software and custom responses via AI tool

Scaling

• Independence of resources: Liftango services are designed to be both horizontally and vertically scalable. Liftango hosts our infrastructure on Amazon Web Services (AWS), both using AWS ElasticBeanstalk with automatic-scaling groups. Currently, we employ auto-scaling policies which can respond to spikes in traffic volume if needed with a separate node for each part of the technology stack across our business capabilities, customer facing API, matching and routing service and database. This means that we are able to manage significant increases in passengers, drivers and vehicles as well as respond to fluctuating demand.

Analytics

• Service usage metrics: Yes
• Metrics types: Liftango have a comprehensive analytics suite, in the form of a solution dashboard and reporting platform, that can provide metrics on: ; - Usage ; - Utilisation ; - Journey Numbers and Types ; - Commute Modes; - CO2 output ; - Sustainability Reporting; - Distance Metrics ; - Number of Users ; - Visual Usage Maps ; - Transactions ; - Future System Capacity ; ; Plus many more
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: No
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Liftango can export data out of the system on behalf of the customer
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: Private network or public sector network
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: We offer varying levels of SLA's to meet customer requirements.
• Approach to resilience: Liftango services are designed to be both horizontally and vertically scalable. Liftango hosts our infrastructure on Amazon Web Services (AWS), both using AWS ElasticBeanstalk with automatic-scaling groups. Currently, we employ auto-scaling policies which can respond to spikes in traffic volume if needed with a separate node for each part of the technology stack across our business capabilities, customer facing API, matching and routing service and database. This means that we are able to manage significant increases in passengers, drivers and vehicles as well as respond to fluctuating demand.
• Outage reporting: Email alert to customer

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Liftango adhere to key processes, such as: - Password protected with relevant protections - Role access management - Key internal process maintain integrity - All connections are over HTTPS
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: SANAS
• ISO/IEC 27001 accreditation date: 02/11/2023
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Our Security and Process team are in charge of policies, processes and governance. All documents, charters and further information is available on request. We have ISO27001 and maintain strict processes for that certification

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Liftango services are located in AWS data centres and adhere to industry standard controls and best practices. Changes are tracked, monitored and reviewed by our infrastructure, security and technical teams to ensure suitability. These are tagged to ensure future traceability and lifetime monitoring. User devices are secured with industry standard software and monitored.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Liftango use industry leading cloud security and monitoring systems, to prevent threats and immediately alert our support team of any abnormal system behaviours. We minimise use of personal data as per GDPR. We monitor all traffic through all systems and use rate limiters with set with thresholds to prevent DDOS attacks. In the event of attack, we would shut down affected services to limit exposure and work to remove any attackers or vulnerabilities immediately.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Should our monitoring systems discover potential compromises, these systems would immediately alert key technical staff, who would immediately begin to investigate. Depending on the type of attack, we have strict processes and protocols in place to manage, review and resolve these incidents, limiting exposure to all parties, as fast as possible.
• Incident management type: Supplier-defined controls
• Incident management approach: Liftango have strict processes for such events, including protocols, key staff and systems in place to monitor and track. Users can report incidents via our apps, back office portals or directly with our support team, who can analyse and resolve. We provide regular status updates, both internally and externally.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Fighting climate change

  Fighting climate change

  Liftango are committed to sustainability and deploying solutions to tackle climate change. Our solutions are designed to monitor key sustainability and scope 3 emission metrics, report these back to internal teams and then provide ways of changing a passengers commute, to lower their carbon footprint. Working in the Public Transport, we are passionate about deploying innovative and attractive solutions that can move people from single private car use to shared mobility and public transport.

Pricing

• Price: £5,000 to £250,000 a licence a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at david@liftango.com. Tell them what format you need. It will help if you say what assistive technology you use.