CycloMedia Technology BV

Street Smart

Street Smart is an interactive, web-based, cloud hosted, application that provides access to Cyclomedia‘s HD 360 degree panoramic 100 megapixel Street Level Imagery of a customer defined area with simultaneous LiDAR data capture. Street Smart has visualisation, measurement and analysis functions that can be used intuitively.

Features

  • High resolution Street Level 360-degree imagery
  • 3D data model hosting mobile mapping and aerial data
  • Digital Twin
  • LiDAR creates a point cloud and supports positional accuracy
  • Integration with web services including WFS
  • Integration with GIS including ArcGIS Online and QGIS
  • Time travel feature to view historic imagery
  • Measuring heights, distances and areas
  • Digitising real world assets over time for change detection
  • Machine learning led approach to feature extraction

Benefits

  • Digital representation of the real world
  • Objective view of street level environment for making decisions
  • Reducing site visits
  • Measuring real world locations quickly and accurately
  • Situational awareness of the urban environment
  • Understanding what infrastructure is in place before making changes
  • Support smart mobility and smart city initiatives
  • Understand locations of highway assets including street lights and signs
  • Mobile app on Android and IOS available makes content available
  • Assess road surface conditions

Pricing

£98.30 to £143.20 a unit a year

  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at EEvans@cyclomedia.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

2 2 7 6 6 3 3 2 6 0 5 2 5 6 6

Contact

CycloMedia Technology BV Elizabeth Evans
Telephone: 07791170543
Email: EEvans@cyclomedia.com

Service scope

Software add-on or extension
Yes, but can also be used as a standalone service
What software services is the service an extension to
Esri ArcGIS Online, Esri ArcGIS Pro, Esri ArcMap, QGIS, GE Digital Smallword.
Cloud deployment model
Private cloud
Service constraints
No service constraints
System requirements
  • Latest version of Internet Browser. Windows: Edge, Firefox, Chrome
  • Latest version of Internet Browser. Mac: OS X: Safari, Chrome

User support

Email or online ticketing support
Email or online ticketing
Support response times
Within 1 day
User can manage status and priority of support tickets
No
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
All support levels are included within the service at no extra cost.

First line : Basic service desk delivery by cloud support engineer
Second line : In-depth technical support by cloud support engineer
Third line : Expert service support by cloud support engineer
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Through Learning Management System, online trainings, webinars and help-pages.
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
Via export functionality within Street Smart
End-of-contract process
Access to the web application is denied.

Using the service

Web browser interface
Yes
Supported browsers
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
The Street Smart mobile app allows viewing access to Cyclomedia's imagery with limited functionality.
Service interface
No
User support accessibility
None or don’t know
API
Yes
What users can and can't do using the API
Cyclomedia provides many different APIs, which are explained here: https://www.cyclomedia.com/en/api-documentation. The most commonly used API is the Street Smart Javascript API. This API provides an easy way to embed our viewers in any web application. All functions are available from https://docs.cyclomedia.com/StreetSmart/documentation/.

In this way, developers have full power over the size and settings of our viewers. For example, for a very basic integration, our code examples can be used to add the panorama viewer to a website. Alternatively, developers can expand this code to integrate other (point cloud) viewers. Also, it is possible to make the application interact with other (map) components of the web site. Limitations of the Javascript API are that the user is restricted to the viewers and functionalities that we provide within Street Smart. For full control over our data, developers could decide to use the Atlas recordings WFS in combination with the Panorama rendering API.
API documentation
Yes
API documentation formats
  • Open API (also known as Swagger)
  • HTML
  • PDF
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
The level of customisation depends on the type of API that is being used. To export, view or download the imagery, the panorama rendering API can be used to create customised image views.

To embed the viewers in desktop applications, the Street Smart .NET API can be used.

To embed our viewers in web applications, we provide a Street Smart Javascript API.

Customers or partners with developments skills can customise using these APIs.

Scaling

Independence of resources
Automated scaling of cloud services.

Analytics

Service usage metrics
Yes
Metrics types
Amount of image views
Reporting types
  • API access
  • Real-time dashboards

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
European Economic Area (EEA)
User control over data storage and processing locations
No
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least once a year
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
Other
Other data at rest protection approach
Managed by Microsoft Azure
Data sanitisation process
Yes
Data sanitisation type
Deleted data can’t be directly accessed
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
Uses can export their data by using the interface within Street Smart.
Data export formats
  • CSV
  • Other
Other data export formats
  • PNG
  • JPG
  • PDF
  • JSON
Data import formats
  • CSV
  • Other
Other data import formats
  • JSON
  • SHP

Data-in-transit protection

Data protection between buyer and supplier networks
TLS (version 1.2 or above)
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
Known service degradations are reported on www.cyclomedia.com. Users can immediately see if there are incidents and whether we are working on a solution. The customer client service desk is immediately informed by Cyclomedia about known incidents with our services so you can respond to user questions in case of service degradations.

Availability 24/7. Data response 95% < 3 seconds. UpTime 98%. Support response time < 4 hours.
Approach to resilience
Cyclomedia services are hosted in the Azure cloud in West Europe. The services are designed to be resilient by:
• All production data is stored on Geo-Redundant storage accounts. When there is an outage, Microsoft can do a failover to the redundant region.
• Databases are also deployed to Geo-Redundant regions and scalable.
• Our servers are cloud native designed, which means that they can easily scale-up or scale-out.
• Via Devops we can deploy our services to any Microsoft DC region.
Outage reporting
Cyclomedia have a communication process for outrages.

1) Outages are reported via 1st line support or via our monitoring system to 2nd line support

2) The incident will be reported on our website within 5 minutes

3) Account managers and the Escalation team will be informed within 5 minutes

4) System status investigation and determination of the severity of the problem within 15 minutes

a. P1 Full System down: One or more cores services are down (Imagery, depth maps, recording locations, Map, Aerial, measure functionalities)

b. P2 Functional degradation: basics (imagery, depth maps, recording locations) are working, but could experience a degradation of the performance

5) P1 / P2 issue handling

a. 2nd and 3rd line are working on a solution

b. Communication:

i. Update incident on web site. P1: every 60 minutes; P2: every 120 minutes

ii. After 5 minutes update incident to escalation team and Service desk (update every 2 hours)

iii. After 5 minutes Email to customers

6) P1 / P2 issue resolved

a. Communication:

i. Escalation team and Service desk will be informed

ii. Email to customers

b. Root cause analyses

Identity and authentication

User authentication needed
Yes
User authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
Access restrictions in management interfaces and support channels
Access is restricted based on user roles.
Access restriction testing frequency
At least once a year
Management access authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password

Audit information for users

Access to user activity audit information
Users contact the support team to get audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
User-defined

Standards and certifications

ISO/IEC 27001 certification
No
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
No
Cyber essentials plus
No
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
  • ISO/IEC 27001
  • Other
Other security governance standards
ISO 9001 planned for July 2022
Information security policies and processes
The information security policy is defined and documented. The security policy is communicated with relevant internal and external stakeholders. The security objectives are yearly defined in the security policy.

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
The components of the service are tracked through their lifetime using a proprietary issue tracking product.

Determining the potential impact on information security is a team effort. A change in the ticket will be flagged and a description will be added regarding the impact and how it can be mitigated.

Bugs and feature requests are registered in a Production Issue board. Everyday the Scrum of scrums session evaluates and prioritises.

After the change is implemented, it is tested on the staging environment and once approved, deployed on the next deployment window.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
The responsibility for the vulnerability management processes resides with the IT manager.

An annual penetration test is conducted by the supplier SECURA to determine the level of Security of Street Smart, the Account management application and their API.

It is a grey box test, from outside to inside. The results are evaluated by the ITOPS team.

Tickets are solved with the Citicals given the highest priority and then the Mediums and Lows.

There is tooling in the Azure platform to scan for vulnerabilities on a monthly base which are regularly evaluated by the IT Ops team.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Sign ins, unauthorised access, technical logging production servers, Azure administrator logging and user click behaviour in Street Smart are defined and logged. Responsibilities, retention periods and store locations are defined.
Logging information is regularly reviewed on trends.

Data breaches are handled by Compliance, other security incidents by the Security Officer.

Under GDPR, a reporting obligation applies in the event of a data breach. Within 72 hours, the Dutch Data Protection Authority must be informed of any breach that results in a significant risk of, or serious adverse effects on, the protection of personal data.
Incident management type
Supplier-defined controls
Incident management approach
Security incidents are reported via e-mail (security-incidents@cyclomedia.com) and are centrally registered.

The measure taken is evaluated during the internal audit for effectiveness and recorded in the incident review.

Under GDPR, a reporting obligation applies in the event of a data breach. This means that within 72 hours at the latest, the Dutch Data Protection Authority must be informed of any data breach that results in a significant risk of, or serious adverse effects on, the protection of personal data.

All measures taken are documented in the incident reports recording of the security incident.

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks
No

Social Value

Fighting climate change

Fighting climate change

Cyclomedia are determined to contribute to a safer, greener, happier and better world. We are aware of the urgency to create a healthier planer for generations to come.

Although our products help customers to create a sustainable environment, we acknowledge that environmental issues exist in the solutions we create itself. However, we are committed to minimise our negative impacts, while at the same time maximising our positive impacts.

Cyclomedia have selected five Sustainability Development Goals of the United Nations that show most overlap with the challenges we are trying to solve through our business. These five main goals are being used as a guideline to structure Cyclomedia's Sustainability Statement, available on request.

1) Decent work and Economic Growth
2) Industry, innovation and Infrastructure
3) Sustainable cities and communities
4) Responsible consumption and production
5) Climate action
Equal opportunity

Equal opportunity

Candidacy for employment or advancement is based solely on the relevant qualities the candidate would bring to the job position. Equal opportunity extends to all aspects of the employment relationship, including but not limited to hiring, promotions, training and development, working conditions, compensation and benefits. All such decisions are made by using objective standards based on the individual’s qualifications as they relate to the particular job.
Wellbeing

Wellbeing

Cyclomedia want to provide social cohesion, cooperation, communication, performance and wellbeing within the organisation by providing a safe and pleasant working environment in line with the company culture.

Pricing

Price
£98.30 to £143.20 a unit a year
Discount for educational organisations
No
Free trial available
Yes
Description of free trial
A 30 day free trail of the Street Smart platform is available on request. Content for a limited geographic area will be made available.

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at EEvans@cyclomedia.com. Tell them what format you need. It will help if you say what assistive technology you use.