EDGEBITS LIMITED

Cloud Mobility Print Infrastructure Services - EDGEPRINT

A hybrid cloud print solution designed to support NHS Healthcare Providers to digitise their workforce, by enabling users to become fully mobile. This Software as a Service solution delivers standardisation and allows for future-proofing of the very complex and disparate IT print infrastructure across primary care and other IT estates.

Features

• Cloud Service hosted in the UK-South.
• Supports EMIS,TPP/SystmOne and Vision Clinical Systems.
• Third party label printers and software compatibility including LabelTrace/Smart Label.
• Automatic configuration of Printer Settings, Default Printer Trays/Duplex/Drivers.
• Fully Managed Auto Updates for future-proofing.
• Multi-vendor support for printers Brother/HP/Zebra/Smart/Dymo/Kyrocera.
• Fully compliant with Windows 10 and 11.
• User Friendly.
• Runs securely under restricted User Rights (Non-Administrator).
• Networking Printing Support – Enhanced mobility, Centralised Printing/Hub working

Benefits

• Enables use of Laptops with Docking Stations instead of PCs.
• Standardised GPIT Estate Setup includes default printing.
• Supports a fully mobile primary care workforce.
• Enables GPs/PCN staff and others to work across multiple sites.
• Plug and Play functionality with pre-set tray configuration and default-settings
• Reduces engineering required for printer support and related issue management.
• Printers can be dispatched without the need for engineering support.
• Reduces ongoing out of warranty Dual Capital Replacement Costs.
• Independently CHECK Pen-Tested thereby meeting Cyber Security Requirements.
• Developed in direct response to Primary Care clinicians' needs

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ryan.edridge@edgebits.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

745582408005932

Contact

Ryan Edridge
07800609391
ryan.edridge@edgebits.co.uk

About your service

• Service categories:

  Systems Infrastructure Software

  System and service management

  • IT operations management
  • IT service management
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: Not Applicable
• System requirements:
  • Windows 10 PCs or Laptops
  • Windows 11 PCs or Laptops
  • Internet Access

User support

• Email or online ticketing support: Yes
• Support response times: Response times are normally within 24hrs Monday to Friday, excluding Bank Holidays.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Our Contract/SLA includes the delivery of a 24 hour response time covering Monday-Friday (excluding bank holidays).; ; Status updates are provided every 4, 8 and 16 hours depending on the severity of the incident i.e. Minor, Major or Critical. This is included as part of the core solution offering.; ; Technical account management, and access to support engineers, are included within our standard support offering.; ; 24/7 support is available at an additional cost.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: We follow an installation process which includes a document framework that defines every customer's solution integration requirements. This framework outlines how our team will work with our customers to achieve a successful installation. Part of our approach to successful installation and usage includes training on the basic operations of the system so that all our customers can take full advantage of our technology. Training can be remote, face to face and can include personalised documentation. We also provide each customer with a trouble shooting guide with useful hints and tips for resolving the most common post installation queries.
• Service documentation: Yes
• Documentation formats:
  • ODF
  • PDF
  • Other
• Other documentation formats:
  • Microsoft Excel
  • Microsoft Word
• End-of-contract data extraction: Users would just need to uninstall the application. No user data is collected, stored or transmitted by the EDGEPRINT print mobility application software.
• End-of-contract process: Customers have the ability at the end of the contract to accept a contract extension. Should the extension period not be invoked then the Service Termination Notice would be served inline with the terms included in the Contract/SLA.; ; All software would be required to be removed from Users devices in line with licensing and contract agreement.
• Documentation accessibility standard: WCAG 2.2 A

Using the service

• Web browser interface: No
• Application to install: Yes
• Compatible operating systems: Windows
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: WCAG 2.2 AA
• API: No
• Customisation available: No

Scaling

• Independence of resources: Our Service is scalable thorough Microsoft Azure so resources can be scaled to meet customer requirements. We have a core delivery team however, we have the capability and resources to flex the team numbers to increase the team's capacity to meet increasing demand for the service. We regularly monitor and review our service demand and service offering and put in place the necessary plans and resources to meet additional customer requirements.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Not Applicable
• Data export formats: Other
• Other data export formats: Not Applicable
• Data import formats: Other
• Other data import formats: Not Applicable

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • Other
• Other protection between networks: Transport Layer Security: • TLS 1.2+ encryption for all HTTP communications • Perfect Forward Secrecy (PFS) support • Strong cipher suite configuration • Certificate transparency monitoring
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: Transport Layer Security: • TLS 1.2+ encryption for all HTTP communications • Perfect Forward Secrecy (PFS) support • Strong cipher suite configuration • Certificate transparency monitoring.

Availability and resilience

• Guaranteed availability: We have an 99.9% uptime SLA through Azure services. No refund is available in the unlikely event of a lack of service.
• Approach to resilience: Azure Service Redundancy:; • Multi-region deployment capabilities; • Automatic failover for Azure Functions; • Load balancing and traffic distribution; • 99.9% uptime SLA through Azure services.; ; Data Redundancy and Backup:; • Geo-redundant storage for all critical data; • Point-in-time recovery capabilities; • Automated backup procedures; • Regular backup validation and testing; ; Soft Delete Implementation:; • Recoverable deletion for critical data; • Version control and change tracking; • Asset recovery procedures and workflows; • Data retention policy compliance.
• Outage reporting: We report any outages and updates via Email Alerts.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Public key authentication (including by TLS client certificate)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to the infrastructure is through Microsoft Azure which includes a premium 2 Licenses. Which we enforce 2MFA and includes Identity Protection and Privileged Identity Management (PIM) enforcing conditional Access for Admins.; Automated Security Monitoring:; • Azure Security Centre integration for threat intelligence; • Real-time detection of suspicious access patterns; • Automated alerting for security events; • Integration with Microsoft threat intelligence feeds
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Other
• Description of management access authentication: Access to the infrastructure is through Microsoft Azure which includes a premium 2 Licenses. Which we enforce 2MFA and includes Identity Protection and Privileged Identity Management (PIM) enforcing conditional Access for Admins.; Automated Security Monitoring:; • Azure Security Centre integration for threat intelligence; • Real-time detection of suspicious access patterns; • Automated alerting for security events; • Integration with Microsoft threat intelligence feeds

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Cyber essentials, Cyber Essentials Plus, NHS Data Security Protection Tool Kit
• Information security policies and processes: We recognise the importance of information security in protecting our data, our clients' data, and maintaining business continuity. Our information governance is built on industry best practices appropriate for an SME environment and is designed to be robust, adaptable, and comprehensive.; We have the following policies: ; 1. Data Information Security Policy; 2. Data Protection Policy; 3. Data Quality Policy; 4. IG Security Training Policy ; 5. Record Keeping Policy; 6. Data Protection by Design Default Policy.; 7. Business Continuity & Disaster Recovery Plan.; IG is integrated into our operational management, ensuring visibility and accountability. Our Managing Director holds ultimate responsibility for information security. The IT Director is responsible for the day-to-day implementation, maintenance, and monitoring. The Team report any suspected security incidents, vulnerabilities, or policy violations immediately to their Line Managers and these are are escalated, responded to and communicated in line with documented our policies and procedures.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Environment Configuration:; • Secure storage of all configuration settings; • Environment-specific configuration management; • Version control for configuration changes; • Regular configuration security reviews.; Dependency Management:; • Automated dependency scanning and updates; • Security patch management procedures; • Version consistency across deployment environments; • Third-party component security assessment.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We leverage both Azure Vulnerability Scanner and Microsoft Defender for Cloud within our infrastructure along with regular Penetrations Tests with our Cyber security experts Densify in order to ensure we are taking a continuous and proactive approach to our Cyber Security and Vulnerability.; All security updates and patches are; installed within 14 days of release as part of the; company security policy.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Event logs are via Azure Application Insights; Used for diagnostics if/when required. ; Logging data is available up to the most recent rolling 30 days.; All Incidents are responded to within 24 hours.; ; Azure Application Insights Integration:; • Centralised telemetry and logging for all system components; • Real-time performance monitoring and alerting; • Custom security event tracking and analysis; • Automated anomaly detection and notification.; ; Security Event Collection:; • Authentication and authorisation events logged; • API access patterns monitored and analysed; • System performance metrics tracked continuously.
• Incident management type: Undisclosed
• Incident management approach: Our polices require users to log calls via our email support desk. Issues are then triaged/resolved either remotely or via telephone. Users are advised on updates/resolution formally through email,
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Health and Social Care Network (HSCN)

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Free Trails are available and discussed on per customer requirement

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 2%
• Between £250,000 and £500,000: 4%
• Between £500,001 and £1,000,000: 6%
• Between £1,000,001 and £2,500,000: 8%
• Between £2,500,001 and £5,000,000: 10%
• Over £5,000,001: 12%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 67eb85e2-08e7-470f-8608-93abae287ea7
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 2115f271-ce10-43f6-ac44-976603361755
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ryan.edridge@edgebits.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.