KLARYTEE LTD

Klarytee

Klarytee is a data centric governance platform. Klarytee automates sensitive data discovery and cataloguing and then applies fragment-level encryption and policy binding directly to the data. This delivers unified security, privacy, and intelligence that persist wherever the data flows.

Features

• Data discovery and cataloguing
• Data security
• Data privacy
• Data intelligence

Benefits

• Live context and visibility from continuous discovery and cataloguing
• Persistent protection in third party environments through fragment data encryption
• Data privacy without compromising utility, preserving analytical and AI value
• Continuous intelligence and control beyond enterprise boundaries

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@klarytee.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

365631212938195

Contact

Nithin Thomas
+44 20 4551 5675
info@klarytee.com

About your service

• Service categories:

  Application Development and Deployment

  Data management

  Data integration and intelligence

  • Data Access Infrastructure Software
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Klarytee can be deployed as an add-on to Microsoft Office to enable encryption and decryption of content in Microsoft Word documents.
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: Deployment with existing enterprise software can be done through API integrations that will be done as part of the onboarding process
• System requirements: Users must have internet connection to access decryption service

User support

• Email or online ticketing support: Yes
• Support response times: Critical/Urgent issues: 1-4 hours initial response; High priority: 4-8 hours; Normal priority: 24 hours (1 business day); Low priority: 48-72 hours
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: We strive to meet or exceed the requirements for the Web Content Accessibility Guidelines (WCAG) 2.1, Level AA Conformance (WCAG 2.1 Level AA)
• Web chat accessibility testing: None
• Onsite support: Yes, at extra cost
• Support levels: Klarytee provides customer specific account managers to support client requirements.; 24x7 support can be made available at additional cost depending on requirements.
• Support available to third parties: Yes
• AI chatbot: No

Onboarding and offboarding

• Getting started: Klarytee provides user onboarding documentation. Online and onsite training sessions can be purchased as an addon.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Klarytee does not store any document data and is a zero-knowledge platform. All data fragments encrypted with Klarytee will be decrypted. All logs and intelligence data can either be downloaded by the customer at no extra cost or it can be migrated to a customer or third party storage at an extra cost which will be priced based on requirements.
• End-of-contract process: Klarytee does not store any document data and is a zero-knowledge platform. All data fragments encrypted with Klarytee will be decrypted. All logs and intelligence data can either be downloaded by the customer at no extra cost or it can be migrated to a customer or third party storage at an extra cost which will be priced based on requirements.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Don't know

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The service works consistently on both mobile and desktop
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: The admin service interface allows admin users to configure rules, user groups and integrations. The user service interface allows non-admin users to decrypt and access data based on their privileges.
• Accessibility standards: None or don’t know
• Description of accessibility: None or don't know
• Accessibility testing: None or don't know
• API: Yes
• What users can and can't do using the API: The Klarytee API allows users to integrate the Klarytee platform to 1) discover and catalogue sensitive data in different data stores, 2) integrate key management servers and third party encryption services, 3) integrate third party detection platforms, DSPMs and firewalls, 4) authenticate users with third party identity and authentication services, 5) enforce enterprise rules on data access by AI chatbots and services
• API documentation: Yes
• API documentation formats:
  • ODF
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Users can customise the encryption algorithm, key management, enterprise applications that are integrated, data classification levels, user groups, access control lists, detection rules and various other configurations with how data is detected, classified and protected.

Scaling

• Independence of resources: We use session based authentication and authorization to ensure that changes being made by one user don't corrupt the fragments for other users. All services operate behind a load balancer to ensure resources scale according to demand.

Analytics

• Service usage metrics: Yes
• Metrics types: Daily active users, fragments encrypted, fragments decrypted, fragments removed, documents encrypted, fragments edited, sensitive data fragments detected
• Reporting types:
  • API access
  • Real-time dashboards
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: NCSC approved service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Document data is not stored by Klarytee and remains in the customer environment. Logs and intelligence data can be exported from the Klarytee admin portal.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: SLAs will be agreed with the customer based on hosting requirements and priced accordingly.
• Approach to resilience: Available on request
• Outage reporting: We report outages using an API

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
• Access restrictions in management interfaces and support channels: Management interfaces are restricted to admin users who are nominated by the organisation and authenticated using their existing identity platform.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Cyberessentials
• Information security policies and processes: The Klarytee Information Security Policy is intended to protect Klarytee Limited's employees, partners and the company from illegal or damaging actions by individuals, either knowingly or unknowingly. ; ; The policy applies to the use of information, electronic and computing devices, and network resources to conduct Klarytee Limited business or interact with internal networks and business systems, whether owned; or leased by Klarytee Limited, the employee, or a third party. This policy applies to employees, contractors, consultants, temporaries, and other workers at Klarytee Limited, including all personnel affiliated with third parties. This policy applies to all Klarytee Limited controlled company and customer data as well as all equipment, systems, networks and software owned or leased by Klarytee Limited. The policy covers security incident reporting, whistleblower anonymous fraud reporting, mobile device policy, clear screen, clear desk policy, remote working and access policy, acceptable use policy, unacceptable use policy, email and communications policy. Further details of these policies are available on request.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Changes to the organization, business processes, information processing facilities, production software and infrastructure, and systems that affect information security in the production environment and financial systems are tested, reviewed, and approved prior to production deployment in accordance with the Klarytee change management policy, available on request. All configurations are subject to the configuration and hardening standards defined in the Klarytee Operations Security policy, available on request.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Vulnerability management process is defined in the Klarytee Operations Security policy. Information relating to information security threats is collected and analyzed to produce threat intelligence from diverse sources, such as blogs, news articles, vendor updates, public databases, and industry communities. Patches are deployed as follows: Critical - 30 days; High - 30 days; Medium - 60 days; Low - 90 days; Informational - as needed
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Production infrastructure is configured to produce detailed logs appropriate to the function served by the system or device. Event logs recording user activities, exceptions, faults and information security events are produced, kept and reviewed on a quarterly basis. ; Alerts are configured for events that represent a significant threat to the confidentiality, availability or integrity of production systems.
• Incident management type: Supplier-defined controls
• Incident management approach: Available on request
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: A free version of the Microsoft Word addin can be used to try the capabilities of the system and decrypt Word documents encrypted with Klarytee. This can be deployed directly from Microsoft. Users will have access to 30 free encryption operations and unlimited decryption operations which are not time limited.
• Link to free trial: https://marketplace.microsoft.com/en-GB/product/office/WA200004225

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 20%
• Between £500,001 and £1,000,000: 50%
• Between £1,000,001 and £2,500,000: 60%
• Between £2,500,001 and £5,000,000: 70%
• Over £5,000,001: 80%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Understanding of in-work progression issues affecting the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
    • How these flow down the supply chain and are monitored Illustrative examples include reporting, site visits, audits, etc.
    • How to ensure business decisions re: price/cost, short lead times, payment timescales do not create modern slavery risks in the supply chain

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@klarytee.com. Tell them what format you need. It will help if you say what assistive technology you use.