Safenames Ltd

SSL Certificate Management

Purchase and manage your SSL certificates from all the leading data encryption providers; Symantec, Digicert, Rapid SSL, GeoTrust, Comodo, Thawte and GlobalSign.

Features

• All major SSL brands available
• Certificate issuing within minutes
• Domain Validated, Company Validated, Extended Validation Certificates available
• Wildcard and SAN certificates available
• Multi-Server Licenses
• 24 x 7 x 365 support included as standard
• Excellent reporting facilities including export

Benefits

• Easy management of large numbers of SSL certificates
• Manage all your SSL certificates in one place
• Centralised billing
• Self-management using our Fully automated Portal
• Free Certificate Re-issues
• Advanced Renewal Notifications

£30 to £1,800 a licence a year

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jon.stock@safenames.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

293347611694380

Contact

Jon Stock
+44.(0)1908 200022
jon.stock@safenames.co.uk

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: No
• System requirements: Web Browser required to access the service.

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: 365 x 24 hour support, 30 minute initial response.; Severity based system,; SEV1 - 1 hour; SEV2 - 4 hour; SEV3 - for scheduled / project work
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 A
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Support availability - 24/7/365; Standard support response times - 30 minutes
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Safenames will provide support in choosing the correct SSL certificate. Technical support is provided for CSR generation and certificate installation.; ; Safenames will provide full training on the use of our portal and user documentation.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Data may be exported from our portal via excel.
• End-of-contract process: No charges are made to end the contract. Any certificates will still function until their expiry date.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Web Application automatically resizes to fit available screen area offered by tablets or mobile phones.; An Apple/Android app is also available for domain registration services.
• Service interface: Yes
• User support accessibility: WCAG 2.1 A
• Description of service interface: Web based self service portal for all order management.
• Accessibility standards: WCAG 2.1 A
• Accessibility testing: None
• API: Yes
• What users can and can't do using the API: Users may order and manage domain names through our API.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Portal can be branded with your logo.; Customised domain reporting available.; Configurable Brand & Trademark reporting options.; Custom domain security options.

Scaling

• Independence of resources: Safenames operates a capacity management plan under our ISO27001 certification.

Analytics

• Service usage metrics: Yes
• Metrics types: Our portal will show the following statistics:-; ; Total registered certificates; Total certificates due for renewal; Certificate Brands; Certificate Expiry dates
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: Symantec, Globalsign, Comodo, Digicert, Rapidssl, Geotrust

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: All data in Safenames management portal can be exported into excel.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Safenames server network SLA is 99.965%; Our full SLA agreement can be found at:-; ; https://www.safenames.net/Legal/ServiceLevelAgreement.aspx
• Approach to resilience: Information available on request.
• Outage reporting: Public Dashboard; Email Alerts; Telephone Support

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Safenames has a role based access system. ; All access is controller through our ISO27001 policies.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: DAS Certification
• ISO/IEC 27001 accreditation date: 03/04/2016
• What the ISO/IEC 27001 doesn’t cover: Our scope contains all aspects of Safenames business.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: Trustwave Holdings, Inc
• PCI DSS accreditation date: 02/03/2010
• What the PCI DSS doesn’t cover: All aspects of PCI DSS have been implemented.
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: We follow utilise the following policies and processes:; ; ISO27001; ISO9001 ; PCI/DSS Compliance; ; We have 2 external audits each year to ensure compliance.; The ISMS is the responsibility of Safenames CTO.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Change control is implemented and operated under our ISO27001 scheme.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: In accordance with our ISO27001 certification, Safenames operates a complete technical and vulnerability management policy.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Safenames has implemented a number of protective monitoring controls aimed at reducing cyber risk. These include inspecting firewall logs, investigating operating system security alerts and monitoring Intrusion Detection Systems.
• Incident management type: Supplier-defined controls
• Incident management approach: Safenames has an ISO27001 compliant Incident Management Process.; Users can report incidents to our help desk.; An incident report would be produced after the incident is resolved and distributed via email.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Wellbeing

  Wellbeing

  Safenames has developed an employee wellbeing policy to manage its obligations to maintain the mental health and wellbeing of all staff. ; It covers our commitment to employee health, the responsibilities of managers and others for maintaining psychological health, ; health promotion initiatives, communicating and training on health issues, the range of support available for the maintenance of mental health, ; and organisational commitment to handling individual issues.; ; Objectives; The aim of this policy is to describe our commitment to the mental health and wellbeing of employees in its broadest, ; holistic sense, setting out how the organisation fulfils its legal obligations, the responsibilities of different functions ; and specialists and the range of services available to help employees maintain health and wellbeing. ; Safenames recognises that wellbeing and performance are linked. Improving employees' ability to handle pressure ; and to balance work and home life will ultimately lead to improved individual and organisational performance.

Pricing

• Price: £30 to £1,800 a licence a year
• Discount for educational organisations: Yes
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at jon.stock@safenames.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.