SNELLING BUSINESS SYSTEMS LIMITED

Digital Signage & Space Management Solution - Korbyt

Korbyt’s innovative platform empowers businesses to captivate audiences, boost productivity, and foster meaningful connections. Korbyt makes distributing, creating and managing content across various channels easy. Korbyt enables companies to deliver targeted and personalised information to employees through digital signage, mobile apps, desktops and other devices.

Features

• Broadcast communication to mobile, desktop, digital signage, web and email
• Agnostic digital signage platform
• Wayfinding
• Room booking and scheduling
• Content management system
• System on a chip support
• Software integrations
• Up to 8K video capabilities
• Interactive kiosk displays
• Emergency alerts

Benefits

• Enhanced productivity
• Seamless integrations
• Clear communication across hospitality, education and corporate sectors
• Advertising and brand management
• Easy event promotion
• Improved productivity
• Multi-channel content distribution
• Customisable screen zones and sharing
• Personalised workplace experience
• Support for Windows, Android or Linux

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@snellingbiz.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

105548040028836

Contact

Jordan Haystead
01603711111
tenders@snellingbiz.com

About your service

• Service categories:

  Applications

  Collaborative

  • Email
  • Enterprise community
  • Team collaboration

  Conferencing and virtual event

  • Web Conferencing Applications
  • Virtual Event Applications
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Port 443 to *.korbyt.com must be open as an outbound firewall port
• System requirements:
  • Display with HDMI input to show content
  • LAN connectivity for the player

User support

• Email or online ticketing support: Yes
• Support response times: Korbyt provides Business Day and Mission Critical Support packages. Enhanced response and escalation is offered with Mission Critical Support. Support have an SLA to respond within the hour for priority 1 issues.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: No
• Support levels: Korbyt offers Business Day (8x5) and Mission Critical Support (24x7). Mission Critical support includes a named customer success manager plus 2 days of consultancy services per quarter
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Our Foundational Training Program includes 5 Classes, 1 hour each, delivered as part of your solution. All classes are instructor-led virtual, interactive, and using a blend of slides and live demonstration in your Korbyt platform. All classes can be recorded and provided to you for later review, along with any slide materials. Additional Resources for Learning include Korbyt Knowledge base and Korbyt Learning Centre
• Service documentation: Yes
• Documentation formats: Other
• Other documentation formats:
  • Online Knowledge Base
  • Training Portal
• End-of-contract data extraction: Signage - Media, Layouts, Playlists, Players can be exported. Booking - All data can be exported in relevant formats.
• End-of-contract process: We do a complete database extract of all of your data to send back to you. You have 30 days from termination to retrieve your data and of course we are flexible on what your needs are here as well
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Our knowledge base can be found at product.korbyt.com

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Chrome
  • Other
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The Mobile and Web Desktop experience offer the same capabilities overall, the web desktop offer some more feature rich editing capabilities.
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: POSTMAN collection to allow programmatic interaction with Korbyt.
• API documentation: Yes
• API documentation formats: Other
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: The Korbyt solution allows users to design layouts using the Korbyt layout editor offers “WYSIWYG”. Drag and drop elements to support Code-free animations, Social feeds, External URLs, QR codes, Data integration to external data sources, Video, interactive kiosks etc. Content can then be assigned using clever playlist rules to minimise administration overhead. Users can be granted access to various elements within the system using a role based system.

Scaling

• Independence of resources: Korbyt is architected so that report generation is a sperate AWS process and will not impact other core Korbyt processes.

Analytics

• Service usage metrics: Yes
• Metrics types: Various reports exists on Korbyt to provide this, some of these are: audit report, proof of play, Tag usage, Media added in last 30 days.
• Reporting types: API access
• Resource tagging: Yes
• FOCUS resource tagging: Yes

Resellers

• Supplier type: Reseller (no extras)
• Organisation whose services are being resold: Korbyt

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Other
• Other data at rest protection approach: AWS S3 storage
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Users can export Media, Layouts, Playlists, Players via the Korbyt browser user interface.
• Data export formats: Other
• Other data export formats: Can be exported in their original source imported format
• Data import formats: Other
• Other data import formats:
  • Image: .jpg .png .bmp .gif .svg
  • Audio: .mp3 .mp4a .aac
  • Video: .mp4 .webm .avi .mov .mpeg
  • Document: .dco .odt .pdf .xls .ods .ppt .odp .txt
  • Document (cont'd): pages .key .number .csv

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Target 99.5% monthly uptime.
• Approach to resilience: Korbyt utilizes AWS to provide a highly resilient and scalable environment utilizing capabilities such as Availability Zones, S3 storage etc.
• Outage reporting: Each client provides a Dashboard view of their system, showing player status. Email alerts can be configured in the event of player outages etc.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Each user who logs into the Content Management System (CMS) has a role assigned to them that decides what actions they can perform. The three separate services offered by Korbyt are present in such a way that a CMS Users needs to be assigned a role for each system they will be able to interact with. Access roles are: Tenant Administrator, Administrator, Approver, Content Author, Read Only & Launchpad(Signage Only).
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Korbyt leverages AWS data centres and products that are audited and certified to meet numerous standards including SOC 1, 2, 3 and ISO 27001. Additionally, Korbyt holds an ISO 9001:2015 certification for Quality Management Systems. More information on AWS certifications may be found at https://aws.amazon.com/compliance
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Korbyt has three different code environments. Development, Staging, and Production. Code changes require multiple approvals and are only pushed to production during code change periods.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: AppScan is our vulnerability scanning application. Vulnerabilities classified as “medium” will be addressed within 6 months unless the risk is to be accepted with justification and compensating control. Vulnerabilities classified as “low” will only be addressed if classified as a risk to the day-to-day operation of the application.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Korbyt employs TrendMicro DeepSecurity monitoring agent on all production servers. This includes IDS (intrusion detection) and virus and malware real-time threat monitoring. All servers are monitored for various health metrics as well as security events. DevOps staff receive email and SMS alerts for any events requiring attention. Staff are available 24/7/365 to respond to events
• Incident management type: Supplier-defined controls
• Incident management approach: Korbyt maintains an Incident Management Policy and follows standard procedures and escalations when encountering any actual or suspected incident relating to Korbyt systems or information within the custody of Korbyt. It is the responsibility of each Company employee or contractor to report perceived security incidents on a continuous basis to the appropriate supervisor or the People & Culture Department. Reports of security incidents are escalated as quickly as possible. Each incident is analysed to determine if changes in the existing security structure are necessary. All reported incidents are logged and the remedial action indicated.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0.5%
• Between £1,000,001 and £2,500,000: 1%
• Between £2,500,001 and £5,000,000: 1.5%
• Over £5,000,001: 2%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: The Certification Group
• ISO 9001 accreditation date: Monday 6 February 2023
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: D833f685-be13-4cbc-ba57-8b1810f9111a
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 9c301635-73f7-42d6-bdc9-f994e6bfd466
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for the contract workforce by providing career advice, and providing opportunities for staff working on the contract with in-work progression career development into known skills shortages or high growth areas
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
    • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
    • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tenders@snellingbiz.com. Tell them what format you need. It will help if you say what assistive technology you use.