Causeway Technologies Limited

Causeway Donseed Delivery Management

Donseed Delivery Management is an online system for both suppliers and site managers to book, manage and record deliveries across multiple sites. The cloud-based software allows a firm’s supply chain to log into an online system where they can book and manage deliveries to multiple sites across their portfolio.

Features

• Browser based access to cloud-based customer portal
• Real-time access to delivery manifests
• Automated emails to supply chain when booking
• Data available via real-time dashboards and reports
• Access to historical carbon information
• Easy Calendar interface for bookings
• Complex restriction on booking to avoid errors

Benefits

• Automate your on site/location logistics
• Establish cost controls by reviewing planed vs. actual deliveries
• Manage Health and Safety Compliance for deliveries
• Avoid errors by creating on-site workflow
• Manage qualifications, Right to Work records and other documents
• Automatically send out information via email when booking accepted
• Daily delivery manifests for gate marshall/site foreman
• Pictures & Delivery routes avaliable to supply chain

£3,000 a licence a year

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at hywel.evans@causeway.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

163471098551083

Contact

Hywel Evans
01628552000
hywel.evans@causeway.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Any planned maintenance activities that have user or service availability impact are limited and scheduled outside of a normal UK business hours and customers are informed in advance to limit any disruption to their service.
• System requirements:
  • Standard internet browsers are required to access the service.
  • For mobile devices iOS and Android operating systems are supported.

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: All tickets are responded to in accordance with the SLA assigned to that ticket in Business Days only; P1 - 1 hour, P2 - 2 hours, P3 - 4 hours, P4 - 9 hours, P5 - 9 hours. More detail in the Service Description Document
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: The same level of support is offered to all customers.; The Causeway Support team operates a structured and documented methodology for logging, prioritising, progressing and closing enquiries, giving customers visibility of progress and peace of mind that their enquiries are getting the attention they rightly deserve. All requests for Causeway Support will be handled according to the severity level provided by the customer – Critical, High, Medium or Low. A request may include any issue a customer reports regarding the documentation, operation or configuration of the Software. All customers are assigned an Account Manager.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Onsite training and user documentation is made available. Users can access additional product information through the Customer Portal
• Service documentation: Yes
• Documentation formats:
  • PDF
  • Other
• Other documentation formats: Video
• End-of-contract data extraction: At the end of the contract users / customers can request that all data is extracted from the platform. All requests are made through the Customer Support Team and the data extract is completed by Causeway.
• End-of-contract process: At the end of the contract all user accounts are closed and the customer data is released to the customer upon request. There are no additional costs.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The mobile application is designed to verify, capture and synchronise Individuals time sheet by projects to a central database for analysis by the customer.
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: The API provides a read only ODATA data feed for consumption in MS PowerBI, Excel or a REST based client. Access is via a secure connection (SSL) with ASP.Net Identity Authentication. The accessing user account will observe the permissions and access rights set in the main application. No update, insert or administration functionality is provided
• API documentation: Yes
• API documentation formats: Other
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Each location is set up in DMS differently as they are all unique. Number of gates, access to tower cranes, who can access certain gates, what time gates are open etc.; As part of the set up of the system, we work through the requirements and train the customer on how to change.; Once trained the customer can configure.; ; Users can customise their individual user interface environment, such as grid layouts, alerts and scheduled reports

Scaling

• Independence of resources: All users are serviced through a single Cloud Based Multi tenanted environment. Performance balancing is enabled throughout the Cloud Environment and resources are dynamically scaled. The system is hosted with a professional third party hosting firm that has scalable resources.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: DMS solution has an integrated reporting engine which users can customise to extract data in Excel, CSV, Word and PDF formats.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • MS Word
  • MS Excel
  • PDF
• Data import formats: Other

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Availability Uptime of 99.5%. This is measured monthly and reports can be provided. Customers are not refunded if availability is not met.
• Approach to resilience: Causeway and our hosting provider are ISO27001 certified and this information is available on request.
• Outage reporting: Email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: User access restriction is controlled with Role-based access control (RABC) and is managed by the User Administrator; ; The Service access restriction is controlled with Role-based access control (RBAC) is the primary method of managing access. All users are managed to least privileged and access is granted by the CTO and reviewed on a periodic basis
• Access restriction testing frequency: At least once a year
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Lloyds Register
• ISO/IEC 27001 accreditation date: Originally 20/1/2014 and 20/1/2017 and 20/1/2020
• What the ISO/IEC 27001 doesn’t cover: All covered
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications: ISO22301

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Causeway is ISO27001 certified and has all relevant information security policies. ; All employees must read and accept all policies on induction and when any changes are made. ; Information Security training is provided at induction and annually thereafter. ; The Information Security Team led by our Chief InfoSec Officer (CISO) review and update (where necessary) policies annually. ; Employees are encouraged to report all information security breaches and these are reviewed by the Information Security Team. ; Breach of policies forms part of our disciplinary processes.; The CISO is supported by an Information Security Team represented by the main departments of the business.; Policies include: InfoSec, BCP, Electronic Communications, Data Protection, BYOD, Secure Development, Source Code, Removeable Media, Password, Access Control, Change Control, Social Media.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: There is a structured approach to configuration and change management. System patches and updates are managed via a range of automated tools such as WSUS and SCCM. Change to systems, infrastructure and application are managed through a formal change management process – with assessment and authorization granted via the Change Advisory Board (CAB). The CAB meets on a weekly basis to assess proposed changes for implementation during the following weeks change window. ; Emergency changes require the same approvals but expedited procedure.; All changes undergo a retrospective review to ensure the change went as planned or if further action is required.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: Causeway’s programme is a fully integrated approach to managing all the assets and products. The assessment process includes reviews across the development cycles, release and deployment. The program combines both internal and external scanning solutions. ; An external qualified third party are engaged at various points during the year to conduct a combination of application and infrastructure pen-testing and vulnerability assessments. ; The Qualys CloudGuard Vulnerability Management and Web Application Scanning tool is deployed for internal scanning. Vulnerabilities are defined and prioritized according to the CVSS and CVE releases. All reports are review by the Compliance team and issues defined and actioned.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: The asset and infrastructure are monitored using the Solarwinds network monitoring tool, this ensuring the capability to track the overall health of the network, infrastructure and other assets – using event logs, threat detection, capacity thresholds and activity alerts. these are actively monitored in real time across our international established support teams. ; The process meets the guidelines set out in both the Cyber Assessment Framework V.3 and also NIST SP800-137 (Network Security Monitoring)
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: The Causeway incident management procedure is fully aligned with industry best practice standards – the process is managed in two parts allowing for the appropriate prioritisation of activities, controls and mitigating actions – ; 1. The Cyber / security incidents are aligned to ISO 27035 ; 2. Support and other technical incidents are managed within the ITIL Framework / ISO 20000. ; ; Users report incidents via Support Helpdesk or Account Managers and incident reports are provided on request.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  Donseed can encourage or enforce a digital paperless environment. Replacing the traditional paper copies used it avoids the environmental impact of large volumes of paper being produced, transported and stored.
• Covid-19 recovery:

  Covid-19 recovery

  Supports new ways of working including biometric solutions such as facial recognition.

Pricing

• Price: £3,000 a licence a year
• Discount for educational organisations: Yes
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at hywel.evans@causeway.com. Tell them what format you need. It will help if you say what assistive technology you use.