ALERT CASCADE LIMITED

Alert Cascade Critical Communication Suite

Alert Cascade sends multi-channel alerts in seconds, with rapid, real-time feedback via live reports. Optional modules include information hotlines, automated workflows, document storage, and on call alerting. Communicate quickly, track outcomes, and recover from incidents faster, by closing the communication loop with Alert Cascade.

Features

• Resilient 1 and 2-way critical communication platform with optional add-ons
• Resilient 1 and 2-way critical communication platform with optional add-ons
• Multiple communication paths: voice, SMS, email, push notification, Teams, Slack
• Targeted mass notifications via unlimited static and dynamic groups
• Simple import wizards, data syncs, and self-registration options
• Proven security, resilience, and scalability – minimum 99.999% service uptime
• Permission based access to data, modules, and individual features
• Secure incident reporting and information hotlines with unlimited capacity
• On demand conference service and secure document vault
• 24/7/365 UK based support with Alert Cascade technical experts

Benefits

• Cost effective critical communications; simple onboarding with minimal training needs
• Modular communication suite; configure to suit your specific needs
• Target recipients by skill, role, attribute, location, department, or organisation
• Reduce manual workloads (and errors) with automated alerting processes
• Mitigate impacts using actionable insights about people’s status/safety
• Leverage the same simple dashboard for multiple use cases
• Activate alerts anywhere via SMS, phone call, email, or web
• Intuitive import wizard options save hours of administrative time
• Full self-service audit capability, including assistance with DPIAs
• Ongoing account management and support from UK based experts

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at rachel.spencer@alertcascade.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

999938705633887

Contact

Rachel Spencer
01733 785999
rachel.spencer@alertcascade.co.uk

About your service

• Service categories:

  Applications

  Production and operations

  • Other operations
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: No - Alert Cascade is Software as a Service, meaning that users automatically connect to the latest version via an internet connection. Scheduled maintenance, security updates, and new feature releases are made available to users without any interruption to their services.
• System requirements:
  • Recipients need an SMS, Voice, Email, or Data capable device
  • Administrators need an internet enabled device
  • Senders need an internet, SMS, Voice, or Email capable device
  • Access via the internet requires an up to date browser

User support

• Email or online ticketing support: Yes
• Support response times: 24/7/365 UK based email and telephone support. Response times are graded by criticality, with general questions usually being responded to within 4 hours.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: We offer a single support plan - all customers have access to 24/7/365 customer support at no extra cost. Our UK based support staff are experts in the Alert Cascade solution suite, and work with customers across multiple sectors - they provide technical support, best practice guidance, and work with you via screenshare to help you get the best out of your service.; ; All customers have a dedicated Account Manager who will meet with you regularly via screenshare to ensure you are meeting the goals you want to achieve with Alert Cascade. They also liaise with our Product Development specialists on your behalf if needed.; ; On-site support is available from your Account Manager and/or specialist support staff, subject to extra costs as defined in our pricing documentation.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Our implementation and migration teams deliver comprehensive online training to administrators and other authorised users, tailored to specific customer needs and use cases. Training sessions are broken down per role, and recorded so they can be shared internally.; ; Each Alert Cascade service provides access to the online Help and Support Centre, with detailed documentation, best practice guidelines, "how to" articles, and training videos. Our release note process includes emails to relevant users with user instructions and short training videos on new/improved features, and adding the new videos and documentation to the "Latest News" section in the Help and Support Centre.; ; Our 24/7/365 UK-based support team is available to answer questions, share our experience of "best practice", and support you in getting the best results possible.; ; Our on-site training teams and Account Managers are cleared to DBS Enhanced level and hold current security clearance to attend site at critical national infrastructure, policy, and military establishments, enabling you to benefit from our experience face to face as well as by phone, email, and web screenshare.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Alert Cascade users have the ability to download data from their service at any time during the contract period. This includes contact data, user data, message reports, message templates, audit logs, files stored in the Document Vault, and database settings and preferences. All data with the exception of Document Vault files are exported in either .csv of PDF format. Document Vault files are exported in the format used by the customer at upload.; ; Customer's can also create custom reports at any time from within the web dashboard and download these as Excel, .csv, or PDF files.
• End-of-contract process: 30 days prior to contract expiry, Alert Cascade's support team will reach out to account admins to confirm the final date that access will be available to the services, and to outline the options available for extracting data prior to this date. Upon request, the support team will also offer assistance in downloading data via a web screenshare at no additional cost.; ; Upon contract expiry, the account is disabled and access is no longer available to customers. Disabled accounts are retained for 30 days, and then permanently purged - a certificate of data destruction is automatically provided once all data is successfully purged.; ; Following contract expiry, no further support is available - Alert Cascade will not engage with any migration process to an alternative provider. However, such support should not be necessary given that customer admins have the requisite access to extract all data in a common human and machine-readable format prior to contract expiry.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: All Alert Cascade service features are available on any internet-enabled device, regardless of screen size. All services have been designed to be render correctly (and legibly) based on screen size rather than having a specific mobile and desktop version.; ; Data maintenance via file may be easier to perform on a device with a larger screen size due to limitations with viewing large Excel files on mobile screens.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: Secure, permission dependent, web dashboard, accessible on any internet enabled device. Q&A style wizards guide users through core tasks including message sending, telephony configuration, data maintenance, reporting, document management, and security/audit logs. Drag and drop functionality and keyboard shortcuts are fully supported in relevant modules.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: We use a range of automated and manual testing strategies, including using the Mozilla Accessibility Inspector and the accessibility features in Chrome DevTools.; ; We have tested with a combination of screenreaders and screen magnifiers across a variety of browsers, including Chrome, Edge, Firefox, Safari, and Opera.
• API: Yes
• What users can and can't do using the API: Alert Cascade provides a RestfulAPI that allows external applications to manage contact data, create messaging groups, manage user access rights, send alerts, and collect alert outcomes. Our application-agnostic Web Services also allow customers to work with our Technical Service Team to create bespoke integrations - custom integrations are priced in line with our pricing document.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Alert Cascade is fully customisable, and our migration and implementation teams work with you to configure your initial account set up - this will include porting existing phone numbers to your Alert Cascade service, where applicable. Fields for storing and processing contact data and other contact/user information are bespoke per customer based on their specific needs and the data available in their source data system (usually an HR service). Customer-chosen default settings for data imports and message sending can be removed from screen to prevent accidental changes, or can be left accessible (permission dependant).; ; Each service has dedicated SMS sender names, SMS sender numbers, voice call phone numbers, and email sender addresses, chosen by the customer. Security policies are configured by Alert Cascade on written instruction from appropriately authorised customer users. Distribution lists for system alerts, changes to the bespoke data fields, welcome audio for conference services, on call rotas, and merge fields are configured by the customer via the secure dashboard. Self sign-up registration pages are customised with individual URLs, branding, font, colours, logos, and content.

Scaling

• Independence of resources: Alert Cascade uses multiple geo-dispersed EU and UK data centres in mirror image hot standby mode to ensure capacity can be ramped up when required. We use multiple resilient carriers for all communication channels, allowing us to use elastic capacity and scale up and down with carriers to avoid localised demand issues and ensure speedy delivery of our services. We conduct regular load balancing tests to ensure that our infrastructure is equipped to deal with the scenario of critical incidents affecting all customers at once.

Analytics

• Service usage metrics: Yes
• Metrics types: Standard service metrics include:; • Activity log of all actions taken in the account by all users over a given timeframe; • Individual audit trail and monthly trend reports for all alerts sent, responses received, and outcomes against "Response Time" KPI set by customer; • Average delivery and response time over given period or per alert; • Usage - voice call minutes used, SMS sent, alerts sent, conference bridges initiated, document storage used; • Service uptime, time to respond, and time to fix (rolling 12 monthly); ; Additional security reports are available from the support team on request.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Data exports are permission dependent for data privacy reasons. Exports are initiated via the secure web dashboard; available formats are .csv, PDF, or XLSX as standard for all accounts.; ; JSON and XML formats are available by request as a bespoke option, subject to additional pricing.; ; Customers have the option to allow contacts to manage their own data instead of managing centrally. For this use case, contacts additionally have the ability to log in and print a copy of their own data via their browser's PRINT function.
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats:
  • XLSX
  • PDF
  • JSON
  • XML
• Data import formats:
  • CSV
  • ODF
  • Other
• Other data import formats: JSON

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Other
• Other protection between networks: Customer's are able to use our SFTP connector with built in PGP encryption to securely transmit data maintenance files to their Alert Cascade services.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Alert Cascade's redundant infrastructure design allows us to contractually agree to a service availability of 99.999% or greater, measured on a calendar quarterly basis.; ; Customers are entitled to a service credit for each month that the service level is not achieved.
• Approach to resilience: We utilise multiple geo dispersed data centres, each running in mirror image hot standby mode and able to provide the full Alert Cascade Critical Communication Suite. Dynamic routing automatically routes traffic to the most appropriate data centre to avoid localised issues. Additional information is available on request.
• Outage reporting: In the unlikely event of any outage, all affected customers are informed via email initially - initial communication is to Admins and Contract Owners (who have contractual responsibility but may not be active users of the service).; ; Depending on the nature and/or duration of the outage, Admins and Contract Owners may also be contacted by phone call/SMS text from our 24/7/365 UK based support team.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Cryptographic controls including SSL and TLS 1.2 are used at the web interface. Data is encrypted using dual layered AES-256 i.e. at the physical hardware and database level. Access is role based, with customer's controlling the roles assigned to their users; user passwords are hashed and salted, no passwords are stored in cleartext and individual random salts are used for each password. Alert Cascade support staff can only access accounts on request, using a time limited access token that can only be generated from the fixed IPs of our designated support areas using 2FA devices physically held in those areas.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cyber Essentials Plus; NHS Data Security and Protection Toolkit (NHS DSPT)
• Information security policies and processes: As per ISO27001 and Cyber Essentials Plus requirements at a minimum. We are accredited to both standards for all business operations and regularly audited as part of this. We also hold "standards exceeded" rating for NHS DSPT.; ; Due to the global nature of our business, our operational security practices are also generally compliant with NIST SP 800-53 but not formally accredited.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Our change management process is mandated by our Secure Software Development Lifecycle suite of policies, which is ISO 27034 compliant. We routinely run application scans in line with OWASP on all development and staging environments prior to deployment, the results of which require documented IS team sign off prior to deployment in the production environment.; ; We carry out the following tests:; • Manual code review; • Manual interface testing; • Static Application Security Testing (SAST); • Dynamic Application Security Testing (DAST); ; Software releases are made every 2 - 3 weeks on average
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Within our application, we use a static code analysis tool to ensure any application and infrastructure level vulnerabilities are promptly addressed. We are also subscribed to all supplier release notes and additionally scrape vendor pages daily to check for early notifications. Patch management within the application and its associated infrastructure is prioritised based on the severity of the vulnerability the patch addresses, using CVSS 3 wherever possible. Critical - within 24 hours, High - within 72 hours, Medium - within 14 days, Low - within 28 days, None - when possible.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: We run firewalls protecting the server environment with Intrusion Detection System software installed preventing unauthorised access to the secure network. Each server site is protected by the combination of a firewall and a demilitarised zone to defend against various denial of service and automated web-based attacks.; ; System logs are transmitted to our log management service, which is reviewed on a regular basis by our internal teams. If the monitoring detects anything unusual or suspicious i.e. outside of normal operating patterns, an auto alert is generated to our on call team for immediate investigation.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: We have a documented IMP in place which is reviewed quarterly, with at least annual testing. The IMP includes a defined escalation matrix, including details of the incident response team, each with defined roles and responsibilities. Users can individually report incidents via our support ticket process, via email, or via phone call, and our monitoring tools also auto create incidents where appropriate. Incident information and regular updates are automatically shared with customer admins and named Contract Owners until the incident is resolved, and post incident wash ups are also provided where appropriate.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Initial web demo with an implementation specialist to discuss your specific use case, followed by access to a fully featured demo account configured based on your web demo. We support 14 and 30 day trials as standard, longer trial periods available on request and subject to use case.
• Link to free trial: https://alertcascade.co.uk/contact/

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: IAFDC
• ISO/IEC 27001 accreditation date: Tuesday 4 March 2025
• What the ISO/IEC 27001 doesn’t cover: N/A - our ISO 27001 certification scope covers our whole business and all business activities of Alert Cascade Limited.
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: IAFDC
• ISO 9001 accreditation date: Monday 3 March 2025
• What the ISO 9001 doesn’t cover: N/A - our ISO 9001 certification scope covers our whole business and all business activities of Alert Cascade Limited.
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: A9a95586-36b8-446d-a8cc-975928695206
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain
    • Means of influencing staff, suppliers, customers, communities and/or any other appropriate stakeholders with respect to modern slavery risks relating to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Advertising, promotional and outreach activities designed to raise awareness of the offer to reach the target cohort
    • Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
    • Working conditions which promote an inclusive working environment and promote retention and progression
    • Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain
    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
    • Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
    • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at rachel.spencer@alertcascade.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.