VRTUOSO LIMITED

ARuVR

ARuVR is an award-winning XR software (Augmented and Virtual Reality). It enables teams to quickly and easily create guided XR online and offline immersive, interactive training experiences and sales & marketing presentations - in order to develop new skills and better communicate across the organisation. Deployed by many Fortune500 companies.

Features

• XR Authoring Tool
• XR On-Demand & Real-Time Sessions
• XR Live Streaming

Benefits

• Everyone can now create XR immersive experiences easily and quickly
• Deliver real-time, guided, on/off-line, XR experiences remotely
• Moderate and control what your audience views in real-time
• Share and publish off-line through your website, intranet or LMS
• XR content can be consumed across multiple devices
• Broadcasts your session live from a real-world location
• Analyse and track your user experience and effectiveness
• Fully browser-based, don't need to install any software
• Free to use over half million of XR assets

£14,900 to £35,000 a licence a year

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

• Modern Slavery statement

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at frank@aruvr.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

232694799596583

Contact

Frank Furnari
07399 442371
frank@aruvr.com

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: It supports any PC browser, Android and IOS devices, and the leading VR/AR enterprise Headset brands (Oculus, Pico Interactive, HTC Vive, and soon also Microsoft Hololens).
• System requirements:
  • Latest PC Browsers
  • Latest Android/IOS operating systems (if used with mobile devices)

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: - Business Critical: 1 hour - Within 24 working hours ; - Bugfixing: 4 hours - Within the 1 week cycle ; - General Maintenance: 4 hours - Within the 2 weeks cycle; ; From Monday to Friday, from 09:00 to 17:00 hrs. (BST)
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.1 AAA
• Web chat accessibility testing: We use the tawk.to
• Onsite support: Onsite support
• Support levels: ARuVR takes a proactive approach to onboarding new clients to ensure a swift and comprehensive transfer of knowledge and expertise. At; the start of the service, the client success team will organise tailored training and empowerment to all content creators, these sessions; are delivered in bitesize chunks for a better learning retention and experience. In these sessions, you will learn about all the functionalities of; the ARuVR platform, including the 360-camera training. This is included as part of the licence.; For the additional professional support, programme, operations, and project management, ARuVR will provide a dedicated Account Team; for one single and direct point of contact to ARuVR.; The client success team will be responsible for, but not limited to:; • Service performance and satisfaction and resolution of issues.; • Reviewing the presentations you create to provide guidance and support whether it is technical, or design related.; • Holding monthly and quarterly reviews and with your team to review progress, gather your feedback and share best practices and all; upcoming platform updates.; • Helping you deliver your training sessions internally to ensure a great user experience.; • Providing bespoken tech support
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: ARuVR takes a proactive approach to onboarding new clients to ensure a swift and comprehensive transfer of knowledge and expertise. At; the start of the service, the client success team will organise tailored training and empowerment to all content creators, these sessions; are delivered in bitesize chunks for a better learning retention and experience. In these sessions, you will learn about all the functionalities of; the ARuVR platform, including the 360-camera training. This is included as part of the licence.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Via the EXPORT feature within the service
• End-of-contract process: No additional costs

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: None
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: The platform has been designed for people who are not VR experts,; with near zero learning curve.
• Accessibility standards: None or don’t know
• Description of accessibility: The service is accessible via browser, mobile, tablet and VR headsets
• Accessibility testing: N/A
• API: No
• Customisation available: No

Scaling

• Independence of resources: ARuVR platform is based on a Kubernetes, orchestrated, auto scaling infrastructure.; Our architecture is largely based on the segregation of segregated micro services with custom domains and dedicated resources, which are load-balanced and scaled according to the load requested by current usage. ; The same logic applies to the database system, residing inside the Kubernetes firewall, which is scalable and able load balance.

Analytics

• Service usage metrics: Yes
• Metrics types: During any real-time session, you can engage learners with live score updates while you assess and evaluate quizzes, responses, and; feedback.; Furthermore you can also access to the ARuVR Data Tracking Dashboards where you will be able to access three main analytics dashboards:; Overall, Sessions, and Users dashboards both individuals and aggregated. The user dashboard main stats are (but not limited to):; Specific Session Score; Best performance; Attempts history; Personal growth chart; Average Time spent; User statistics filtered by session; • Session details; • Presentation linked; • Timezone; • Number of attendees; • Start date
• Reporting types: Real-time dashboards

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Via the EXPORT function within the service
• Data export formats: Other
• Other data export formats:
  • PDF
  • HTML
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: The ARuVR platform is built using enterprise grade architecture providing a 99.9% service availability of all components. The ARuVR Business Continuity Plan (BCP) defines precisely how ARuVR manages incidents in the case of a disaster or other disruptive incidents, and how it recovers its activities within set deadlines.; The objective of the plan is to minimise the damage from any potential disruptive incident and keep it to an acceptable level.; ; SLA:; - Business Critical: 1 hour - Within 24 working hours ; - Bugfixing: 4 hours - Within the 1 week cycle ; - General Maintenance: 4 hours - Within the 2 weeks cycle ; ; From Monday to Friday, from 09:00 to 17:00 hrs. (BST)
• Approach to resilience: Available on request
• Outage reporting: Email and Phone alerts

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: User registration and de-registration process for ARuVR’s assets that have access controls, such as IT systems, is done by the system administrator for each system or access-controlled asset.; For ARuVR, registration and de-registration means adding or removing the user’s details from the ‘User Privileges Review Schedule’ spreadsheet. This is done as a part of the User Access Provisioning.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: NQA
• ISO/IEC 27001 accreditation date: 03/08/2021
• What the ISO/IEC 27001 doesn’t cover: None
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: The high-level sequence of Incident Management actions is to determine if the Incident is in progress or historic. If it is in progress when detected the actions need to be immediate to contain the incident and mitigate the impacts. If it is historic the actions need to be timely and proportionate to comply with the legal and contractual obligations of ARuVR.; ; ARuVR detects or is notified of a data breach or information security incident and logs the details in the PII Data Breach and InfoSec Incidents Log spreadsheet in the ARuVR drive.; - The first step is to record the PII Data Breach or Information Security Incident or weakness with its relevant attributes in the log spreadsheet.; - The second step is to determine data, systems, suppliers, customers and data subjects impacted or potentially impacted.; - The third step is to assign the Incident to an appropriate owner such as the CTO or Data Protection Officer (DPO) for Leadership oversight. The owner shall make a decision on immediate containment (if not already contained) and who to report the incident to and whether the Police need to be informed.; ; PDF Available on request. ARuVR is ISO27001 certified.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: The ARuVR Change Management process is used to plan and control changes.; When a need for change is identified it's assessed by the ARuVR Directors. Following this assessment the Directors decide on whether to go-ahead or cancel the change. If the decision is to proceed with the change the Directors plan the change by considering a number of key listed aspects.; When the change is planned it's implemented in accordance with that plan. During the implementation the Directors also review and update affected Policies and Procedures of the IMS.; [The full Change Management process is available upon request]
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Vulnerabilities and potential threats are constantly scanned through automated systems to prevent the raise of issues due to known or emerging threats.; ; Given the architecture of the platform, based on the segregated microservices, and secured by a firewall through the Kubernetes orchestration, the assessment of threats and vulnerabilities is possible through the isolation of the components.; Once the vulnerability is assessed and resolved, the default deployment process takes from 5to10 minutes for a full architecture redeployment (not always needed).; ; Potential threats and vulnerabilities are identified by our scanning systems which access updated databases of information regarding known and emerging threats.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Vulnerability scans are periodically carried out through automated systems and through periodical security reviews.; In the case of a vulnerability/defect detection, the resolution process includes:; - Detection and recording; - Classification and ownership assignment; - Investigation & diagnosis; - Resolution and recovery; - Closure of the incident; - Post closure report; Vulnerability issues are usually closed within 24 Hours from detection
• Incident management type: Supplier-defined controls
• Incident management approach: ARuVR’s assets are detailed in the Asset Inventory together with details of the business impact and identifies any interested parties that may need to be contacted;; If the incident is not contained, ARuVR will initialise the Business Continuity Plan.; ARuVR have an Data Breach and InfoSec Incident Log which are used as an information security database and are populated and updated quickly. This is also used for evidence collection and analysis.; Depending on the nature or seriousness of the incident it maybe appropriate to complete the Incident Report which will detail an action plan with assigned tasks and target dates.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  ARuVR recognises that all companies have a vital role in meeting the challenges of climate change. The following procedure sets out the measures that ARuVR has put into place. ARuVR believes by setting an example on climate action there is also a huge opportunity for ARuVR to engage in a positive way with staff and customers – many of whom already feel passionately about this issue.; ; Sustainable Commuting; In the UK, commuting accounts for 15 percent of all journeys and 20 percent of the total distance travelled each year. So, there are a number of ways ARuVR has adopted to tackle this.; When company cars are required, electric cars are used. Staff are encouraged to car share or use public transport. Other employees are keen cyclists and will cycle to work.; ; Working from home; The ultimate way to reduce emissions is to work from home. As such ARuVR works from home 90% of the working week.; ; Reduce wastage in the workplace; Staff are always encouraged to turn off lights, equipment and to take the stairs instead of the lift. Recycling bins are used in the office and by setting the highest standards in the workplace, staff are keen to transfer their environmentally friendly habits from work into the home and make a significant difference to their personal carbon footprint.; ; ARuVR also encourages sustainability within the business and reviews the environmental impact on key decisions.
• Covid-19 recovery:

  Covid-19 recovery

  In addition to the ARuVR continuity recovery planning policy, ARuVR recognises the need to have a separate pandemic recovery plan and procedure. The reason for this is that a general continuity recovery plan focuses on a short-term recovery programme. The effects of the pandemic could last many months.; ; The following procedure sets out the contingency measures that the ARuVR will bring into effect in response to the current coronavirus (Covid-19) pandemic.; ; The procedure aims to ensure that the organisation will be able to operate its business to the best of its abilities during the pandemic while protecting, as far as is reasonably possible, its employees.; ; Furthermore, ARuVR continues to be committed to providing opportunities for employment and has recruited a number of staff in the past year. Existing staff have been promoted within the business and retrained where necessary. ; ; ARuVR will follow all official guidance relating to the pandemic and how to run businesses in a “Covid-secure” manner. All risk mitigation measures adopted will be based on best practice and will take into account the levels of infection rates in the region and country.; ; Managers are responsible for ensuring that employees understand the organisation’s pandemic recovery plan policy and procedure. Employees are responsible for familiarising themselves with the procedure and should speak to their manager should they have any questions.; ; ARuVR will keep Covid-19 risk assessments and business continuity plans updated. Remote working is in place which saves employees from having to attend the office and use public transport. ; ; ....; [ask for a copy of the full policy]
• Tackling economic inequality:

  Tackling economic inequality

  ARuVR’s vision is to create new businesses and new employment opportunities together with improving education and training, ARuVR is committed to tackling economic inequality at root. Our overriding vision is to help lower the unequal distribution of income and opportunity between different groups in society. This is achieved by the following:; - ARuVR ensure suppliers are paid promptly;; - Employees are paid at least the living wage;; - There is no employee discrimination;; - ARuVR pays the right tax at the right time;; - Invest in assets that do not hinder progress.
• Equal opportunity:

  Equal opportunity

  ARuVR is committed to encouraging equality, diversity and inclusion among our workforce, and eliminating unlawful discrimination.; ; The aim is for our workforce to be truly representative of all sections of society and our customers, and for each employee to feel respected and able to give their best.; ; This policy's purpose is to:; 1. Provide equality, fairness and respect for all in our employment, whether temporary, part-time or full-time; 2. Not unlawfully discriminate because of the Equality Act 2010 protected characteristics; 3. Oppose and avoid all forms of unlawful discrimination. ; ; ARuVR commits to:; 1. Encourage equality, diversity and inclusion in the workplace as they are good practice and make business sense.; 2. Create a working environment free of bullying, harassment, victimisation and unlawful discrimination, promoting dignity and respect for all, and where individual differences and the contributions of all staff are recognised and valued.; This commitment includes training managers and all other employees about their rights and responsibilities under the equality, diversity and inclusion policy. Responsibilities include staff conducting themselves to help the organisation provide equal opportunities in employment, and prevent bullying, harassment, victimisation and unlawful discrimination.; All staff should understand they, as well as their employer, can be held liable for acts of bullying, harassment, victimisation and unlawful discrimination, in the course of their employment, against fellow employees, customers, suppliers and the public.; 3. Take seriously complaints of bullying, harassment, victimisation and unlawful discrimination by fellow employees, customers, suppliers, visitors, the public and any others in the course of the organisation's work activities.; Such acts will be dealt with as misconduct under the organisation's grievance or disciplinary procedures, and appropriate action will be taken. Particularly serious complaints could amount to gross misconduct and lead to dismissal without notice.; .... ; [ask for a copy of the full policy]
• Wellbeing:

  Wellbeing

  Introduction ; The purpose of this policy is for ARuVR to establish, promote and maintain the mental health and wellbeing of all staff through workplace practices, and encourage staff to take responsibility for their own mental health and wellbeing. ; ; ARuVR believes that the mental health and wellbeing of our staff is key to organisational success and sustainability. ; ; Aims of Policy ; To build and maintain a workplace environment and culture that supports mental health and wellbeing and prevents discrimination (including bullying and harassment). ; To increase employee knowledge and awareness of mental health and wellbeing issues and behaviours. ; To reduce stigma around depression and anxiety in the workplace. ; To facilitate employees active participation in a range of initiatives that support mental health and wellbeing. ; ; Responsibilities ; All employees are encouraged to: ; Understand this policy and seek clarification from management where required consider this policy while completing work-related duties and at any time while representing ARuVR support fellow workers in their awareness of this policy support and contribute to ARuVR’s aim of providing a mentally healthy and supportive environment for all workers. ; All employees have a responsibility to: ; Take reasonable care of their own mental health and wellbeing, including physical health;; Take reasonable care that their actions do not affect the health and safety of other people in the workplace. ; Managers have a responsibility to: ; Ensure that all employees are made aware of this policy;; Actively support and contribute to the implementation of this policy, including its goals to manage the implementation and review of this policy. ; ; We will ensure that this policy is communicated and available to all relevant stakeholders as appropriate. This policy shall be reviewed for effectiveness and suitability at least annually as part of the management review process.

Pricing

• Price: £14,900 to £35,000 a licence a year
• Discount for educational organisations: Yes
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

• Modern Slavery statement

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at frank@aruvr.com. Tell them what format you need. It will help if you say what assistive technology you use.