PIXELNEBULA LIMITED

Flare Digital Signage

Digital signage with a focus on user experience - Flare digital signage makes it easy to get beautiful content on any screen instantly. Our online digital signage CMS makes configuring content across your estate simple. Easily build in your brand, connect to live data feeds, and even run as screensavers.

Features

• Enterprise-grade digital signage
• Remote display management
• Real-time content updates
• Branded content layouts
• Integration with external data providers
• Live and on-demand video playback
• Content scheduling
• Location based and localisable content
• Fine-grained permissions and approval system
• Screensavers and web-embedded slideshows

Benefits

• Easily and instantly share rich communications across your entire organisation
• Quickly manage content on the move
• Combine local content with organisation-wide content with ease
• Keep displays fresh with dynamic content feeds
• Ensure content is always on brand
• Communicate with colleagues who have no access to company IT
• Prepare content ahead of time
• Instantly update all screens with a single click
• Engage colleagues with multi-channel campaigns
• Reduce reliance on paper communications

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@pixelnebula.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

276056309194341

Contact

Sales team
03300880504
sales@pixelnebula.com

About your service

• Service categories:

  Applications

  Content workflow and management

  • Media Services
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Compatible display endpoints (i.e. "Flare Boxes") are required to communicate with the service and display content on screens.
• System requirements:
  • Modern web browser for interface access (e.g. Chrome, Firefox, Edge)
  • Flare Boxes and screensavers require Internet access
  • Flare Boxes require HDMI or DisplayPort compatible displays
  • Screensavers require Windows 10 or 11

User support

• Email or online ticketing support: Yes
• Support response times: We aim to respond to all tickets within 30 minutes during UK business hours, or within 12 hours at other times.; ; 24/7 telephone support is available for urgent enquiries.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Yes
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.2 AA
• Web chat accessibility testing: Web chat provided by intercom.io. See here for details: https://www.intercom.com/blog/messenger-accessibility/
• Onsite support: Yes, at extra cost
• Support levels: Support is included within the standard licence agreement at no extra cost. A technical account manager will be assigned to assist with deployment, in-life troubleshooting, and issue resolution.; ; End user support is available through all previously mentioned support channels, and by means of an online user guide.; ; On-site support can be discussed but the majority of our customers do not require any on-site assistance due to the simplicity of the system.
• Support available to third parties: Yes
• AI chatbot: No

Onboarding and offboarding

• Getting started: We offer training either on-site or as an online webinar, and also provide a range of self-guided resources including an online knowledge-base, and in-app product tours.; ; Additional technical documentation is available on request to assist with systems integration and advanced networking tasks.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Users can extract their data by contacting their account manager and requesting this service.
• End-of-contract process: Users may request export of their data free of charge within a 60 day period following the contract end date. Users will still be able to access the system during this time, but will not be able to create new content, and any screens registered to the account will stop displaying content.; ; After this 60 day period (or earlier, if requested), user access to the system will be revoked, and all data deleted.; ; There are no additional charges associated with a contract ending.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Documentation is accessible digitally in HTML format, which allows browser and OS-level tools to be used for visually impaired users (e.g. screen readers and magnification). Guidance is written in plain English for ease of comprehension, with easy-to-follow references to interface navigation items, supporting imagery, and alternate image text.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: All features are accessibility on both mobile and desktop versions
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Online content management system accessed through a web browser. The intuitive design makes creating great looking content easy, through use of a WYSIWYG slide editor interface. Our cutting-edge template system allows users to quickly create content that adheres to internal brand guidelines, using assets such as fonts, logos and colour palettes.
• Accessibility standards: None or don’t know
• Description of accessibility: Our service is designed primarily to enable users to create visual content designed to be displayed on digital screens. Unfortunately this activity is not suited to users with a high level of visual impairment and therefore we are not able to accommodate this type of user.
• Accessibility testing: None
• API: Yes
• What users can and can't do using the API: Our API allows users to trigger "takeover" messages on their Flare screens from external services.
• API documentation: Yes
• API documentation formats: HTML
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: The service is highly customisable:; ; Administrators of the service can define user roles that will enable or disable certain features for non-administrator users.; ; Our development team are able to implement custom integrations with third party data providers, and can design and develop custom templates which conform to brand guidelines, displaying data or messaging to our customers' specification.

Scaling

• Independence of resources: System resources are automatically scaled according to the demand on the service. This includes both the number of active licences and the current rate of user requests to our infrastructure.

Analytics

• Service usage metrics: Yes
• Metrics types: The real time and historic connection status of each screen can be monitored through the online dashboard within the content management system.; ; Reports for content and user activity metrics for a given period can be generated by request.
• Reporting types:
  • Real-time dashboards
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: NCSC approved service provider
• Protecting data at rest:
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: Users can export their data by contacting their account manager and requesting this service.; ; Individual media assets (i.e. images and video) and slide snapshots can be manually downloaded or exported at any time through the service interface.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • JSON
  • Image/video files (individual)
• Data import formats: Other

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: We offer an uptime SLA of 99.99%. This excludes maintenance periods during which screens will continue to display cached content.
• Approach to resilience: We use redundancy at every level of our infrastructure with automatic failover.; ; More detailed information is available on request.
• Outage reporting: We display outage information on the platform itself, as well as provide email notifications for critical incidents.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
• Other user authentication: Users can either be authenticated using email and password (with optional MFA using one-time codes), or via 'Sign in with Microsoft'. IP whitelisting can also be enabled on request.
• Access restrictions in management interfaces and support channels: The management interface uses roles and permissions checks for every request to ensure that users are authorised to access or modify a particular resource.; ; Support channels require verification of the user's identity (either manually or automatically) before discussion of any non-public information.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: Less than 1 month

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: We currently maintain our own security policies while working towards ISO27001 certification.
• Information security policies and processes: We have a range of infosec and acceptable use policies that are documented and communicated to all employees, including policies for:; - Passwords; - Email; - Clean desk; - Acceptable use; - Use of equipment; - Remote access; - Service security; - Web application security; ; All employees report to the Head of Infrastructure and Security who in turn reports to the board. Policies are enforced through regular training, and random internal audits.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We maintain an up-to-date log of all known issues and change requests on our source control platform.; ; Individual changes follow a pre-defined workflow, including phases for pre-production testing and customer approval. Security is a keystone of our development process, and each change is individually reviewed and approved by the Head of Infrastructure and Security.; ; Our internal product roadmap is regularly reviewed and prioritised based on both internal strategic vision and customer requirements.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: We make use of mailing lists and online security bulletins as well as some automated tooling to stay up to date with the latest threats and vulnerabilities.; ; We have weekly maintenance windows for standard software patching, but aim to deploy patches for critical vulnerabilities within 48 hours of a fix becoming available.; ; In cases where the threat to our service cannot be ascertained internally, our policy is to engage with an external security provider for more information.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We monitor and are alerted to all infrastructure access in real-time and implement controls to detect and block unauthorised access and attacks on our system.; ; We implement accounting and audit trails across both our infrastructure and application which allows us to investigate any potential compromises and alert our customers of any security concerns.; ; We respond to all incidents immediately and comply with data protection notification requirements.
• Incident management type: Supplier-defined controls
• Incident management approach: All incidents will be investigated by the Head of Infrastructure and Security. We have a pre-defined process that is followed for all incidents that includes collection and documentation of evidence, communication with relevant stakeholders, and post-incident root cause analysis and correctional action.; ; Users may report incidents through any support channel or directly to the Head of Infrastructure and Security.; ; Incident reports are created using a pre-defined template, and are distributed to relevant customers by email.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Free trial includes full access to the service for use with up to 3 screens for 60 days. Extensions and additional screens may be available if deemed appropriate.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 25%
• Between £500,001 and £1,000,000: 25%
• Between £1,000,001 and £2,500,000: 25%
• Between £2,500,001 and £5,000,000: 25%
• Over £5,000,001: 25%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@pixelnebula.com. Tell them what format you need. It will help if you say what assistive technology you use.