Sky Discovery

eDisclosure document review and analysis services using Relativity eDiscovery software

Sky Discovery uses Relativity, the leading eDiscovery review cloud software, to assist our customers with our consulting expertise providing proactive advice to help them optimise the review process, offering cost reductions on data hosting and legal review by embracing some of our advanced workflows and custom built solutions.

Features

• Data Mapping Exercises to Help Target Refined Data Sets
• Targeted Document Processing and File Types
• Document DeDuplication
• Apply search terms and Filtering criteria to Cull Irrelevant Data
• Early Case Assessment. Review Data Set and Build Case Strategy
• Secure Online Cloud Hosting
• Advanced Searching, Analysis and Redaction Ability
• Email Threading, Clustering, Near Duplicate Analysis and Visualisation Tools
• Technology Assisted Review with Active Learning
• Document Production Support

Benefits

• Legally defensible data collection
• Data mapping to report on what types of data exist
• Early Case Assessment providing instant access to large datasets
• Advising on best practice review workflows and solutions
• Secure evidence storage in a single repository
• Analytical tools to group and prioritise documents
• Cull large datasets defensibly
• Reduce resource and cost on your legal document review
• Confidential data management and protection
• Custom productions and disclosures adapted to requirements and practice directions

£10 a gigabyte a month

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at mflavell@skydiscovery.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

299854337156029

Contact

Martin Flavell
0207 562 8999
mflavell@skydiscovery.co.uk

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: There is a scheduled maintenance window every Monday between 2AM - 5AM. During this time the system may not be accessible.
• System requirements:
  • 4GB DDR memory (min. 512MB SDR memory)
  • Intel Pentium 4/AMD Athlon XP (min. Intel Pentium 3 equivalent)
  • Internet connection required
  • All major web browsers supported

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: We aim to respond to all support requests within 1 hour during standard business hours (Mon-Fri 9AM - 5:30PM) and 4 hours outside of business hours
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: Support request are send to a central support email address which is always monitored. Support requests are assigned to the appropriate members of the team. If we are unable to provide immediate support we will respond with the timescale in which we can assist or the planned resolution.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Usually training is conducted online via screen share at the beginning or the project and then throughout the project as required. Training session are usually 30-60 minutes based on the user requirements. Onsite or offsite training can be arranged for larger groups. Additional training is provided as the project progresses and the users require to use more features.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: There is a archive option available at the end of the project. This is in standard Relativity ARM archive format that can be restored on any other supported Relativity environment. There is also an option of exporting the data in flat-file text format and native files, this is not recommended as only case data is exported and not other systems data such as audit logs and redactions.
• End-of-contract process: The offboarding process in very straight forward as there is no termination period for our services. At the end of the project the buyer should provide notice to end the contract via email to the lead contact on the project, the workspace will then be deactivated at the end of the current month (or prior if requested). Sky Discovery can provide the following archiving options: Standard Relativity ARM archive format that can be restored on any other supported Relativity environment and Flat-file text format with native and image files. An archive will be provided within 7 days if requested as per the costs in the pricing document. All data relating to the project will be deleted within 90 days of the end of the contract are sooner if requested. There are no end of contract fees. An archive fee will be payable at the end of the contract, if an archive is required.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: Yes
• Description of customisation: All customisations are performed but our consulting team. We will work with the users to understand their requirement and then build views, dashboards, custom layouts in the system to best accommodate their requirements

Scaling

• Independence of resources: The server environment is hosted in AWS and is resource is monitored in real-time. Alerts are sent to our infrastructure team if/when resource hits peak thresholds. The architecture of the software allows us to scale across multiple servers. Within AWS is very quick to scale up the system with additional servers/server resource/storage space when demand increases.

Analytics

• Service usage metrics: Yes
• Metrics types: Service metrics can be requested and are customised to the project. This can include (but not limited to): Number of docs review per day/month etc.; Number of overturn decisions per user; Number of GB Processed per tranche; Number of GB Hosted per month; Number of users accessing the system per month.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest:
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Users can be given permission to export any fields and download native files/images.
• Data export formats: Other
• Other data export formats:
  • CSV
  • XLS
• Data import formats: Other
• Other data import formats:
  • CSV
  • XLS

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Sky Discovery engineered infrastructure to meet the following SLA's: RPO - 1 Hour; RTO (Core Services) - 4 Hours. Sky Discovery warrants an average monthly availability of 98%. If we don’t meet this objective the buyer can deduced 0.5% of their monthly invoice.
• Approach to resilience: Sky Discovery operates in AWS. Sky Discovery network spans 2 availability zones. Each availability zone can be considered as a segregated data centre operating on different network and power supplies. In the unlikely scenario that one Availability Zone goes down, the other is available. Sky Discovery Works on a Primary/Pilot light infrastructure basis. All data is backed up on an Hourly basis to S3 and is available if one Availability zone goes down. In the event of a disaster, Sky Discovery has playbooks to ensure deployment of infrastructure in the second availability zone within the RTO.
• Outage reporting: Sky Discovery actively monitors it's infrastructure utilising AWS cloudwatch. An SNS service will alarm staff of any issues at any time of the day. Email is utilised to identify clients of any outages.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Sky Discovery utilises Active Directory to define users roles within the business. Staff are assigned to roles via a change management process. Administrators are provided with an administrator account with elevated privileged. Admin accounts are to be used on a as required basis and use is audited monthly.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI
• ISO/IEC 27001 accreditation date: 04/11/2022
• What the ISO/IEC 27001 doesn’t cover: TBC
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Cyber Essentials.
• Information security policies and processes: Sky Discovery Retains a Top Level Information Security Policy which all directors of Sky Discovery sign off on. This policy contains 21 managerial statements in regards to Sky Discovery and client security. Level 2 policies are owned by departmental heads and reviewed annually. Policies compliance is tracked via regular internal audits and via compliance monthly board reporting. An Information Security committee is responsible for overseeing implementation of all policies and general effectiveness of the ISMS.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Sky Discovery utilises propriety software to track client change and authorisation processes. This process ensures: all change requests are made in writing, all changes are checked to ensure the requestor has the authority to request the change, the change is completed by someone authorised to make the change, the change is QA'd and the change is logged. Non standard change requests are escalated and authorised after consideration by a head of department or Director.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Sky Discovery assesses for vulnerabilities in real time CVS Vulnerabilities. We utilise automated technologies to complete scans (Crowdstike Falcon Complete, Manage Engine, AWS Inspector). Patches are deployed: Within 7 days for critical vulnerabilities (through our SMW); within a month for all other unrealities; Vulnerabilities defined as extreme risk (as defined by Director of Technology or Head of IT) are to be patched within 48 hours and includes authorisation to break client RPO's/RTO's and complete patches outside of SMW to comply.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Sky Discovery utilises Crowdstrike Falcon Complete to identify potential malware/ransomware and other malicious incidents. All items are tracked in Real time. Any identified potential incident is investigated within 15 minutes by an individual who will triage/escalate as appropriate. Initial strategy is to isolate the incident before attempting to remediate. As a general principle we will ensure the confidentiality and integrity of client's data over availability. Sky Discovery also utilises event logging tools to preserve logs.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Conforms to ISO 27001. Sky Discovery has established an incident management process in place with rules upon when and how this is implemented and the roles undertaken by specific individuals. Sky Discovery retains multiple playbooks to respond to particular scenarios (e.g. Hardware failure, Cybersecurity Incident, Breach Incident etc) these playbooks are a mix of defined technical processes and guidelines when addressing the scenarios. Sky Discovery retains a VICC (virtual incident control centre) where all required documentation is retained, and communication are centralised. Incident management processes are practiced annually.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Wellbeing

  Fighting climate change

  As part of Sky Discovery’s Corporate Social Responsibility Policy, we are committed to a sustainable future through the adoption of environmentally responsible policies and practices, and by promoting sustainable management solutions to our staff, clients and suppliers. As part of this commitment, we acknowledge our responsibility to reduce the impact that our business operations will have on the environment. ; Policy Objectives ; • Continually monitor and improve the Environmental Management System; ; • Develop environmental objectives and targets, and implement programs to achieve them; ; • Comply with applicable laws, regulations, codes of practice and industry requirements. ; We do this through the following initiatives: ; • We are a true ‘paperless’ organisation; ; • Use of teleconferencing and webinars to cover meetings and reduce corporate travel requirements and carbon offsetting (should the Sky Discovery employee travelling choose this option; Sky Discovery will support and pay for it) where travel is required; ; • Continuous improvement to identify methods to reduce or off-set Sky Discovery’s carbon footprint; ; • The Directors are committed to continually identify new initiatives Sky Discovery can become involved in to improve environmental performance. The Operations Consultant is responsible for planning, gathering and reporting these initiatives to the Directors and staff.

  Covid-19 recovery

  Sky Discovery has been operating since 2015 and over that period, the organisation has always offered flexible working conditions for all employees. This includes a working from home model that doesn’t require mandatory attendance at any business premises. This enabled Sky Discovery to move seamlessly into our business continuity plan during the global pandemic of Covid-19. During the various lockdowns and restrictions of movement that occurred in different locations globally, Sky Discovery was very conscious of our employee’s mental health and morale. We organised some online functions including a Trivia night where drinks and snacks were delivered to each person’s home so a fun evening which included other family members as well, could be had. We also had a Lego building evening where all staff were delivered a piece of Lego for them to build together over a Teams Call. There was a prize associated with the winning build.; The organisation also gave each staff member a bonus gift of value up to £150 for people to choose whatever they would like. There were high pressure cleaners, sunglasses, SUP board, Tent, BBQ, camera flash and many other different gifts that the staff enjoyed.; All these activities provided a great boost to morale and mental health during a very challenging time.; ; Also, during the Covid pandemic years, Sky Discovery grew in staff numbers due to a higher demand for the services we provide. This growth opened opportunities for new staff members to onboard and not necessarily be locked into a location where our offices were physically located. Some staff moved closer to extended families during this challenging time. We are geographically disbursed within the countries where our business is operating. Sky Discovery has always been supportive of staff members and their families’ well-being.

  Wellbeing

  Sky Discovery considers mental health to be an important factor in anyone employment and will support staff where they are struggling or in times of need. Staff have the option to expense up to 2 hours of cost per month from a Mental Health Professional. ; Sky Discovery also support staff in times of need. Recent examples include giving time off and financial assistance.

Pricing

• Price: £10 a gigabyte a month
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Free Proof or Concept (POC) trials can be arranged where non-standard review services have been requested. POC trials will be done on a limited set of data for a limited duration. Fees may be incurred for trials where there is a 3rd party cost to Sky Discovery.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at mflavell@skydiscovery.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.