SchoolBusNet

SchoolBusNET - School Transport Management

SchoolBusNET specialises in student transportation management systems and related technology. The SchoolBusNET Platform is a unified, cloud-based solution that brings together Routing, Planning, GPS/AVL tracking, student ridership verification, field trip management, time and attendance, and parent communication — all from a single interface, designed with school transportation operations in mind.

Features

• One-click route optimization – drag-and-drop route editing.
• Real-time GPS tracking – live vehicle location monitoring.
• Student ridership verification – QR / NFC / RFID check-in.
• Driver tablet app – turn-by-turn navigation and student manifest.
• Parent mobile app – live tracking and notifications.
• Automated alerts – delays, incidents, route changes.
• Scenario planning – simulate routing and policy changes.
• BI dashboards and analytics – KPIs, heat maps, anomalies.
• Secure SaaS cloud hosting – no servers or maintenance.
• Flexible integrations – connect with any SIS, GPS, or system.

Benefits

• Unified all-in-one platform – all tools in a single system.
• Lower operating costs – reduced mileage, fuel, and fleet usage.
• Improved on-time performance – accurate ETAs, fewer delays.
• Increased student safety – full ridership visibility and verification.
• Reduced parent calls – parents receive real-time updates.
• Faster driver onboarding – navigation simplifies new drivers’ routes.
• Less administrative workload – automation replaces manual tasks.
• Full accountability – real-time visibility for every bus and student.
• Better data-driven decisions – actionable analytics and insights.
• Scalable and future-proof – adaptable to any operation size.

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at f.skoulatos@schoolbusnet.eu. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

169725140886938

Contact

Synapidis Dimitri
+306944418222
f.skoulatos@schoolbusnet.eu

About your service

• Service categories:

  Applications

  Production and operations

  • Other operations

  Service industry and public sector operations

  • Education
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: No significant constraints. The service is fully cloud-hosted and requires only a modern web browser for administrative users and Android tablets for the Driver App. Internet connectivity is required for real-time data synchronisation. Planned maintenance is performed outside business hours with prior notification.
• System requirements:
  • Any web browser (Chrome, Edge, Firefox, Safari) for administrative users
  • Standard internet connectivity.
  • Android tablet with mobile data or Wi-Fi connectivity.

User support

• Email or online ticketing support: Yes
• Support response times: SchoolBusNET provides structured support with defined response and resolution targets depending on severity.; ; - Critical issues: immediate response by phone, resolution target of within 1 hour.; - High severity issues: response within 1 hour, resolution within 6 hours.; - Medium severity issues: response within 24 hours, resolution within 48 hours.; - Low severity issues: response within 48 hours, resolution within 5 days.; ; All incidents are acknowledged immediately, logged in our ticketing system, and escalated automatically until resolved. Support is available 18/7, with proactive system monitoring.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: SchoolBusNET provides comprehensive, reliable, and customer-focused technical support to ensure uninterrupted system performance and user satisfaction. Support services are available 18/7 through multiple channels, including phone, email, and secure web portals. ; Support tiers include Standard and VIP service levels, each with guaranteed response times, defined escalation procedures, and dedicated account management for critical operations. ; ; The platform benefits from continuous system monitoring and proactive issue management, significantly minimising potential disruptions and ensuring optimal uptime.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: SchoolBusNET provides a comprehensive yet flexible training program designed to ensure that all staff and drivers are fully prepared to use and manage the system effectively. Our training framework covers all user levels — from administrators and planners to drivers — and guarantees a smooth transition to full operational use.; ; Training delivery:; •Online or onsite sessions tailored to the organisation’s needs.; •Detailed training schedules with follow-up sessions as required.; •Train-the-Trainer approach to create internal experts and ensure long-term sustainability.; •Comprehensive online materials and user manuals, continuously updated with new releases.; ; All training is conducted on a fully operational and pre-configured system, ensuring hands-on experience in real working conditions.; ; By completion, staff and drivers are fully proficient and confident, enabling an efficient and seamless launch of SchoolBusNET.
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: At the end of the contract, buyers retain full ownership of their data. All data stored within SchoolBusNET can be exported by authorised administrators through the platform’s built-in export tools or via API.; ; Data can be extracted in standard open formats such as CSV or XLSX, ensuring full portability and reusability with other systems.
• End-of-contract process: At the end of the contract, the buyer retains full access to their data and may export it using the platform’s built-in tools or API. Standard data extraction, read-only access for 30 days after contract termination, and secure permanent data deletion are included in the contract price. After the 30-day period, all customer data is permanently erased from live and backup environments in line with our data retention and GDPR policies.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The SchoolBusNET platform offers a desktop web console for administrative users, accessible through any modern web browser on desktop or mobile devices. The SBN console provides full functionality for routing, monitoring, configuration, reporting, and user management.; ; The SBN Driver App is a dedicated mobile application designed for Android devices (tablet recommended) and provides turn-by-turn navigation, student manifest, ridership verification, and real-time updates.; ; The SBN Parent App is available on both Android and iOS mobile devices and provides live bus tracking, notifications, and schedule updates.; ; Functionality remains consistent across all devices, with interfaces optimised for each user role.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: The service provides a modern, browser-based administrative interface and dedicated mobile applications. Administrative users access the platform through a web console, available via any web browser, without the need to install software. The console provides full functionality for routing, real-time monitoring, student data management, reporting, configuration, and user administration.; ; Drivers use the Driver App on Android devices, accessing turn-by-turn navigation, the live student manifest, and ridership check-in/out functionalities.; ; Parents and guardians use the Parent App on iOS or Android to receive real-time notifications, bus tracking, and schedule information.; ; A REST API is also provided to enable integration with external systems.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: We design and develop our interfaces following accessibility best practices. The administrative console and mobile applications are tested for compatibility with assistive technologies such as screen readers (NVDA and VoiceOver), keyboard-only navigation, colour contrast validation and zoom/magnification tools.; ; User interface components are evaluated against WCAG 2.2 AA usability principles, ensuring that key tasks can be completed without dependency on mouse interaction.; ; We perform internal accessibility testing during releases, and we incorporate accessibility improvements as part of our continuous UI/UX improvement cycle.
• API: Yes
• What users can and can't do using the API: Our API provides a range of functions and can discussed with buyers prior to purchase.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Users can customise the interface design by amending their user preferences.

Scaling

• Independence of resources: SchoolBusNET guarantees consistent performance by operating on a high-availability, multi-tenant cloud architecture where each customer’s environment is logically isolated, ensuring no shared resource contention. Autoscaling, containerised services, and load balancing dynamically adjust compute and storage capacity during peak demand. The platform includes 99.5% uptime, geographically distributed data centres, redundant network connections, and automated failover to maintain service continuity. Continuous monitoring and alerting detect bottlenecks before they affect users. This ensures that one customer’s usage cannot impact another, providing stable, predictable performance regardless of overall demand.

Analytics

• Service usage metrics: Yes
• Metrics types: SchoolBusNET provides extensive service usage metrics that allow buyers to monitor performance, utilisation, and operational efficiency. Metrics include real-time data on vehicle movement, completed routes, delays, trip durations, mileage, passenger counts, and ridership activity. Additional metrics cover scheduled versus actual performance, driver and fleet utilisation, attendance patterns, cost-per-trip, fuel-related indicators, and alerts raised or resolved. All metrics are available through dashboards, downloadable reports, and automated scheduled reports, enabling stakeholders to analyse trends, identify inefficiencies, demonstrate compliance, and support data-driven decision making.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Data can be extracted in standard open formats such as CSV, XLSX or PDF.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • XLS
  • PDF
• Data import formats:
  • CSV
  • Other
• Other data import formats: XLS

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: SchoolBusNET guarantees 99.5% service availability, measured monthly. Availability covers access to the administrative console, database, API services, real-time communication components and mobile applications. Planned maintenance is performed outside business hours and excluded from availability calculations. Service uptime is continuously monitored, and incidents are logged and escalated automatically until resolved.; Our service architecture is hosted on high-availability cloud infrastructure with redundancy, automated failover and proactive monitoring, ensuring that issues are identified and mitigated before affecting users.
• Approach to resilience: SchoolBusNET is architected for high resilience to ensure uninterrupted transport operations. The service uses geographically distributed datacentres that provide built-in redundancy for compute, storage and networking. If a primary location becomes unavailable, traffic is automatically redirected to a secondary site through automated failover, ensuring continuity without user intervention.; ; All components are deployed using load-balanced, containerised services with autoscaling to handle fluctuations in demand. Data is replicated across availability zones, and continuous monitoring detects potential issues before they affect performance. Resilient network paths, redundant power systems, and strict environmental controls further protect infrastructure against failure.
• Outage reporting: SchoolBusNET reports outages through email. If a service disruption occurs, affected users receive email alerts with details of the issue, impact, and expected resolution time. System status is also published via our online service status page, which acts as a public dashboard for availability and incident updates. Major incidents trigger automatic escalation and follow-up communication once resolved, including post-incident summaries where applicable.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is restricted through role-based access controls, multi-factor authentication and least-privilege permissions. Only authorised personnel can access administrative consoles, and production systems are segregated from development environments.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: SchoolBusNET follows a comprehensive set of information security policies aligned with ISO 27001 principles, covering access control, data protection, incident management, business continuity, encryption, change control, and supplier security. Policies are reviewed at least annually, approved by senior management, and communicated to all staff during onboarding and through regular training.; ; Security responsibilities are clearly defined. The Information Security Officer reports directly to executive management and is responsible for policy implementation, risk assessment, compliance oversight, and incident coordination. All employees are required to follow the policies, supported by mandatory security awareness training, role-based access controls, multi-factor authentication, and continuous monitoring.; ; Compliance is enforced through internal audits, logging, automated controls, and periodic penetration testing. Any breaches or risks are escalated through a formal incident response process with clear reporting lines and accountability. This governance structure ensures policies are actively followed, continuously improved, and embedded in daily operations rather than existing only as documentation.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: SchoolBusNET follows a formal configuration and change management process aligned with recognised cloud security standards. All service components are version-controlled and tracked throughout their lifecycle, with configuration items logged in a central repository. Proposed changes undergo structured review, impact assessment and approval before deployment. Each change is evaluated for potential security implications, including access, data handling, and infrastructure risks. Security reviews, automated testing, and staged releases ensure changes do not compromise confidentiality, integrity or availability. All deployments are recorded, monitored, and auditable, enabling full traceability and rollback if required. Critical changes trigger additional security validation and management sign-off.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: SchoolBusNET operates a continuous vulnerability management process aligned with industry standards. Potential threats are identified through automated scanning, penetration testing, code reviews and security monitoring. We gather threat intelligence from trusted sources, including Microsoft advisories, CVE databases, NCSC alerts and industry security feeds. Identified vulnerabilities are risk-assessed based on impact and exploitability. Critical patches are deployed as soon as vendor updates are available, typically within 24–72 hours; lower-risk issues are addressed in scheduled releases. All changes are tested before deployment to ensure service integrity. Our process ensures emerging threats are rapidly mitigated and security measures remain current and effective.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: SchoolBusNET employs continuous protective monitoring to detect potential compromises and abnormal activity. System logs, access attempts, configuration changes and network traffic are monitored using automated tools and alerting mechanisms. Potential incidents are identified through anomaly detection, threat intelligence feeds and predefined security thresholds. When a suspected compromise is detected, our incident response process is triggered, isolating affected components and conducting forensic analysis. Critical incidents receive immediate attention, with response times starting within minutes; lower-severity alerts are investigated within defined SLAs. All incidents are recorded, reviewed and remediated, and lessons learned are used to enhance monitoring rules and controls.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: All incidents are logged, categorised by severity and assigned to a support engineer for investigation. Communication is maintained throughout the incident lifecycle, and users receive updates until resolution. For significant incidents, a written incident report is provided, detailing root cause, timeline, remediation actions and preventative measures. Lessons learned are reviewed and integrated into our processes to reduce recurrence.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: We offer a free, time-limited trial of the SchoolBusNET platform, including access to core routing, monitoring and app features. The trial excludes live data migration, integrations and production use, and is provided solely for evaluation.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 3%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 7%
• Between £2,500,001 and £5,000,000: 9%
• Over £5,000,001: 10%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: The Certification & Inspection Body EQA HELLAS S.A.
• ISO/IEC 27001 accreditation date: Monday 29 April 2024
• What the ISO/IEC 27001 doesn’t cover: Development, Provision & Support of Software
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at f.skoulatos@schoolbusnet.eu. Tell them what format you need. It will help if you say what assistive technology you use.