Snelling Business Systems Ltd

BSN.Cloud

BSN.cloud is BrightSign’s cloud based Digital Signage Software (SaaS). It includes powerful authoring software to publish digital signage content to an unlimited number of BrightSign devices and also offers real-time player health and control independent of your CMS.

Features

• Intuitive publishing Tool: Send digital content to screens anywhere
• Customisable Layout builder: digital assets, weather, transport feeds and news
• Schedule Playlists: schedule content for immediately or future use
• Scrolling Text
• Network management, monitoring and diagnosis
• 4K video and graphics across several screens
• Cloud connectivity on all BrightSign players
• Real-time player health and controls
• Display dynamic live feeds, MRSS, social media integrations, and more

Benefits

• Client based Windows, MAC or web browser access
• Connectivity - Standalone, LAN, WiFi and 4G options
• No onsite server hardware or software required
• Signage player and site grouping for easy content segmentation
• Scalable digital signage deployments
• Customisable player setup
• Real-time monitoring and remote management
• Sustainable and power-efficient
• Encourage user-generated content sharing

£416 a device a year

• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@snellingbiz.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

278730526775219

Contact

Alexandra Weston
01603711111
sales@snellingbiz.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Please see https://brightsign.atlassian.net/wiki/spaces/DOC/pages/1889468462/BSN.cloud+Ports+and+URLs+for+Players+and+Software
• System requirements: Can be run on Windows, Mac or in a browser

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: We try to respond within 24 business hours
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: No
• Onsite support: No
• Support levels: BrightSign offers digital signage players with a vast array of capabilities, but with this power also comes a good deal of complexity. To help you with this, we offer several support options with the purchase of one or more BrightSign players:; ; Free Support; Unlimited Email support with the BrightSign Support ticketing system; Unlimited use of the Support knowledgebase, User-to-user Community forums, and Documentation site; Free downloads and updates for BrightAuthor software and BrightSign player firmware; Access to numerous developer resources, including customizable BrightAuthor Plugins, toolchain utilities, and open source code for player firmware; ; Priority Support; ; The response times for Email support depend on the volume of other support tickets, as well as the complexity of the issue itself. If you need comprehensive support for your issue within a short period of time, we also offer call back services that you can purchase:; ; Call Back ($100.00); ; Select this option to schedule a call with BrightSign Technical support within the next business day.; ; Priority Call Back ($400.00); ; Select this option to schedule a call with BrightSign Technical support within the next 4 business hours.; ; Business hours and days are defined as 9 AM GMT to 12 AM GMT, Monday through Friday.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Free of charge online tutorials. ; Additional training is available from third parties, who provide online training for a fee.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • Other
• Other documentation formats: Tutorial videos
• End-of-contract data extraction: Presentations can be downloaded
• End-of-contract process: Customer cancels service, our cloud subscription auto-renews every 12 months until cancelled.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • MacOS
  • Windows
  • Windows Phone
  • Other
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Thin Desktop Client and Web based UI
• Accessibility standards: None or don’t know
• Description of accessibility: BSN.Cloud and BA:Connnected are not tested against accesibility standards
• Accessibility testing: N/A
• API: Yes
• What users can and can't do using the API: Developers can use APIs to build custom content management interfaces with some or all of the features that we have developed for our own content management system. These APIs can also be used for device/fleet management.; ; https://brightsign.atlassian.net/wiki/spaces/DOC/pages/1881866243/API+Docs
• API documentation: Yes
• API documentation formats: Other
• API sandbox or test environment: No
• Customisation available: No

Scaling

• Independence of resources: BSN.Cloud is architected to be fully scalable to meet demands.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Reseller (no extras)
• Organisation whose services are being resold: Brightsign

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: Other locations
• User control over data storage and processing locations: No
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Scale, obfuscating techniques, or data storage sharding
  • Other
• Other data at rest protection approach: Data at rest is encrypted at AES 256 GCM
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Through BrightAuthor:Connected
• Data export formats: Other
• Other data export formats: Presentation data
• Data import formats: Other
• Other data import formats: Presentations are uploaded via BrightAuthor:Connected or the WenUI.

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)
  • Other
• Other protection between networks: Data in transit is encrypted with TLS 1.2
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: Data at rest is encrypted at AES 256 GCM. Please see https://brightsign.atlassian.net/wiki/spaces/DOC/pages/395313359/BSN.cloud+Network+Security

Availability and resilience

• Guaranteed availability: https://www.brightsign.biz/legal/bsn-cloud-terms-of-service/
• Approach to resilience: Each BSN.cloud server has a backup server that can take over in case of unscheduled downtime. The database server for the BSN.cloud has both a mirror and a backup that frequently update to prevent data loss in event the production database goes offline.
• Outage reporting: Incidents are managed on a case-by-case basis. The recovery time objective (RTO) is 30 minutes or less, while the recovery point objective (RPO) is to prevent loss of any customer data. There are different thresholds for communicating impairments and outages to users, depending on whether the downtime is scheduled or unscheduled.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Dedicated link (for example VPN)
  • Username or password
  • Other
• Other user authentication: Digest Authentication at this time. MFA is planned for release in Q3 2024
• Access restrictions in management interfaces and support channels: Username and password
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: No audit information available
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: Between 6 months and 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Security is governed by our security team and based on internally developed policy. BrightSign is pursuing SOC II certification with it slated for Q1 of 2025.
• Information security policies and processes: Please see https://brightsign.atlassian.net/wiki/spaces/DOC/pages/395313359/BSN.cloud+Network+Security

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Currently changes are tracked via internal tools and code check in/release software
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Prior and post release Qualys scans are performed.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: On servers anti malware and anti-virus are installed. In addition, activity logs of the database, gateway, and secondary monitoring servers is audited regularly by the DevOps team. Logs are retained for 6 months in an easily accessible form, and up to 2 years in archives.; ; A combination of operating-system logs and application logs provides a history of successful/failed login attempts, password changes, and account modifications. "
• Incident management type: Supplier-defined controls
• Incident management approach: Incidents are managed on a case-by-case basis. The recovery time objective (RTO) is 30 minutes or less, while the recovery point objective (RPO) is to prevent loss of any customer data. There are different thresholds for communicating impairments and outages.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Fighting climate change

  Fighting climate change

  BrightSign is committed to being an industry leader in improving the sustainability of digital signage media hardware. The players operate at low 5V up to 36 watts across the range of hardware. BrightSign has the lowest mean time between failures report. A player will typically last 1,017,505 hrs at 25C, running 24/7 before needing a replacement. BrightSign is WEEE 2 & RoHS compliant, encouraging materials to be recycled.

Pricing

• Price: £416 a device a year
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: We provide a free 30-day trial of our BSN.cloud solution
• Link to free trial: https://www.bsn.cloud/

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@snellingbiz.com. Tell them what format you need. It will help if you say what assistive technology you use.