StatMap Ltd

StatMap Cluster

Cluster is a unique web-based solution for delivering spatially-enabled data straight to your website. Thanks to Cluster you can forget about lengthy publishing processes or manual synchronization between your spatial resources and Content Management System.

Features

  • Rich formatting features: gives precise control over data presentation
  • Seamless integration: embed directly in CMS, frame-free, cross-domain
  • 100% Cookie free: no cookies or other tracking mechanisms used
  • Instant gazetteer search: partial or full address searching
  • Spatially-enabled web services: Cluster engine - secure, feature-rich API
  • Limitless spatial views for different users
  • All data on a single page: extract aggregated spatial data
  • Plug-in free: JavaScript based and HTML 5 compatible

Benefits

  • No coding required: every Cluster page customised from administration panel
  • Accessibility: ensures visually-impaired people can easily access information
  • Add value: combine different datasets and provide increased value
  • Quick understanding: full summary and key property / area statistics
  • Channel shift: full business data services supplied via client's CMS
  • Mobile device friendly: summarised business data obtainable 'on the go'.

Pricing

£3,600 to £4,500 a unit a year

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@statmap.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

3 0 1 5 1 9 1 7 3 1 5 1 6 8 1

Contact

StatMap Ltd Gordon Norrie
Telephone: 0844 376 4321
Email: info@statmap.co.uk

Service scope

Software add-on or extension
No
Cloud deployment model
Private cloud
Service constraints
There are no constraints.
System requirements
Compliant Internet Browsers - e.g. Internet Explorer, Chrome, etc.

User support

Email or online ticketing support
Email or online ticketing
Support response times
If a ticket is raised at the weekend, this will be dealt with immediately on the next normal working day.
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.1 AAA
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Onsite support
Onsite support
Support levels
The standard support model is the same for all customers.

A technical account manager will be provided for each customer. The Cloud support engineer is available via telephone, e-mail or video call.

Annual visits to customers by the technical account manager are offered to discuss functionality, service development, offer advice and assistance in getting the most out of the software. These visits are provided as part of the standard annual licencing and maintenance agreement.

On-site training is offered to groups for up to 8, at a daily rate of £850.

Technical user forums, on-line technical documentation inventory libraries, and on-line report ticketing system for reporting issues, asking questions, and requesting service features.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
We offer on-site training, on-line videos, an online library of technical user documentation which provides users with access to everything that they need in order to use all technical elements of the software.

The on-boarding process starts with the initial uploading of your spatial data to the Spatial Data Repository database, which StatMap technical personnel will undertake on your behalf - following consultation as to which datasets you wish to upload. As part of the set-up process, we will provide you with two days of 'Knowledge Transfer' which is for the system administrator(s) in order to show them how to set-up and create mapping and spatial applications and projects.

For more details, see the Service Specification document where full details for the On-boarding process are provided, along with getting customers up and running with using and developing the services.
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
Full details are provided in the Service Specification documentation.

In summary, the following steps apply:

i) Withdraw all client access to StatMap’s SaaS facility for all StatMap products.

ii) Copy and place all client data onto a full database schema file (in the form of a SQL file), incorporating spatial data in Well Known Text (WKT) and Well Known Binary (WKB) formats. That data can then be uploaded onto any separate database of the client’s choice.

iii) All data will be additionally copied to ESRI Shapefiles (where the file format restrictions permit).

iv) If requested, StatMap will also supply data in the form of text files, using WKT format for representation of the geometry / geography field.

v) All data will be sent to the client on encrypted media.

Once the client is satisfied that all data has been adequately returned and that it has been safely uploaded onto alternative storage locations, the client will inform StatMap that they are in agreement to have all data relating to their organisation removed in its entirety from the hosted server – thus protecting the business interests of the client.
End-of-contract process
The annual licencing and maintenance contract pays for the right to use the software. If the contract is not re-newed, StatMap will - in consultation with the customer - arrange to off-board all of the customer data.

Using the service

Web browser interface
Yes
Supported browsers
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
None.
Service interface
No
User support accessibility
WCAG 2.1 AA or EN 301 549
API
Yes
What users can and can't do using the API
All eVO features of the service are available via API

As an example, rich JavaScript APIs enable the embedding of fully customisable interactive maps for all applications, embed application functions configured in eVO Flows, searching for addresses in multiple gazetteers via web-page interface, and much more.

Data services are exposed via APIs. These are configured using the administration tools integrated within the internet browser client interface by those granted permissions to do so. APIs enable data to be exposed and consumed as OGC-compliant WFS, WMS, WMTS, JSON / GeoJSON, and GML.
API documentation
Yes
API documentation formats
  • HTML
  • PDF
API sandbox or test environment
No
Customisation available
Yes
Description of customisation
The application can be fully customised using standard CSS styling to accord to the pages and corporate styling used within the organisation's web pages / CMS.

Scaling

Independence of resources
The service is offered via a single tenant hosting instance, so therefore is entirely unaffected by other customers who may be using the service.

Analytics

Service usage metrics
Yes
Metrics types
The service usage metrics are available via the Administrator tools integrated into the Earthlight user interface. They can be made available to as many users as the customer wishes to grant (configured via Roles groups), but normally restricted to just a few users with administrator privileges.
Reporting types
Real-time dashboards

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Conforms to BS7858:2019
Government security clearance
Up to Baseline Personnel Security Standard (BPSS)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
Yes
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least every 6 months
Penetration testing approach
In-house
Protecting data at rest
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
Data sanitisation process
Yes
Data sanitisation type
Explicit overwriting of storage before reallocation
Equipment disposal approach
A third-party destruction service

Data importing and exporting

Data export approach
There are integrated tools within the Earthlight browser client interface which enable users to import and export data in various formats, including .shp, .tab, .mid/mif, .csv, .kml.

The customer can also be provided with .sql dump files which enables the data to easily be reloaded into whatever database the customer wishes.
Data export formats
  • CSV
  • Other
Other data export formats
  • ESRI Shapefile
  • Mapinfo .TAB files
  • KML
  • Excel
  • MapInfo Mid/Mif
  • DXF
  • WMS
Data import formats
  • CSV
  • Other
Other data import formats
  • ESRI Shapefile
  • MapInfo .TAB files
  • MapInfo Mid/Mif files
  • CSV
  • WFS
  • GeoTiff
  • ECW
  • TIFF
  • JPEG (.tfw)
  • BMP

Data-in-transit protection

Data protection between buyer and supplier networks
TLS (version 1.2 or above)
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
StatMap will use commercially reasonable endeavours to make all services available 99.99% between 6am and 11pm.

StatMap will carry out planned, preventative maintenance on a regular basis. Maintenance will be performed outside of the period of Service Desk availability listed above and we will inform the customer with details of the planned maintenance and timescales for completion with a minimum of 5 working days’ notice. Unplanned maintenance will be immediately communicated to the customer along with the action to be taken.

Following the receipt of problems with the service, StatMap will assess the availability and if it falls below the Microsoft Azure guaranteed availability, StatMap will seek to refund customers on a per day basis as a proportion of the annual licencing and maintenance contract.
Approach to resilience
We offer additional processing power, high-availability and resilience options. This al-lows deployment of multiple EVO application instances, accompanied by software load balancers and other services to ensure that the service can better withstand periods of high activity and/or the failure of one node. These are available by buying one or more units of Additional Cloud Compute Capacity, depending on the configuration you need.
Outage reporting
For planned system outages and downtime, the Administration tools within the Earthlight application browser interface enables system messages to be set to communicate with any and all users to provide them with instructions via the Earthlight browser client interface. This can be used to report outages and require users to save and logout of the system.

Identity and authentication

User authentication needed
Yes
User authentication
Identity federation with existing provider (for example Google Apps)
Access restrictions in management interfaces and support channels
Restriction and control is provided via the Administration tools integrated into the Earthlight browser client interface. These enable management interfaces to be restricted to just those granted access to via Administration tools within Earthlight.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
User-defined

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
Laboratoire National de Métrologie et d’Essais
ISO/IEC 27001 accreditation date
16/07/2021
What the ISO/IEC 27001 doesn’t cover
Data centres not mentioned in the certification document. All UK data centres are covered. All eVO applications are hosted on UK data centres.

Restricted to the following: Information security management system for the support of data storage activities in datacentre for the following services : - Server : Dedicated server, Hosted Private Cloud, NAS, Backup storage - Public Cloud : Compute, Storage (Block, Object, Archive, Snapshot, Instance Backup) Kubernetes, Logs Data Platform, Cloud Databases, Data processing, ML Serving / AI Training - Email and collaborative : Trusted Exchange
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
Yes
Cyber essentials plus
No
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
Information Security policies are held and developed internally and the processes are enforced by the company General Manager who is responsible for corporate information security.

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
Components tracking.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
We operate rapid patching and update support. The software is continually monitored for risks and any potential vulnerabilities – but is rigorously tested prior to release, using best practice software development. As such we comply fully with the recommendations made by the Cabinet Office in terms of meeting best practice with regard to the PSN framework.

Patching and upgrades to eliminate identified vulnerabilities is undertaken immediately upon identification.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Monitoring processes.
Incident management type
Supplier-defined controls
Incident management approach
Calls and issues are tracked throughout via our Support Centre Ticket System. The pre-defined process for reporting common events is for users to log all incidents via the Support Centre Ticket System. All communication is logged and transmitted to this system. Individual users and clients report through dedicated support accounts.

Three levels of reporting provided via the software: (1) Incident reports which describe a single error instance. (2) Security logs which describe users’ activities and are used by system managers to detect any security breaches. (3) Low-level logs which are kept on the server.

Secure development

Approach to secure software development best practice
Conforms to a recognised standard, but self-assessed

Public sector networks

Connection to public sector networks
No

Social Value

Fighting climate change

Fighting climate change

StatMap's cloud-hosting data centre partner, OVHcloud, commits to achieve the recently stated aim of The European Green Deal - which recently announced aims to make Europe the world’s first climate neutral continent by 2050. In order to achieve this, OVHcloud recognises that the cloud industry must play its part. OVHcloud commit to leading by example and enable players from other industries who rely on OVHcloud services, as well as its competitors services. OVHcloud fully supports and contributes to the CISPE approach (Cloud Infrastructure Services Providers of Europe). CISPE is an organisation chaired by OVHcloud, which gathers 30 cloud infrastructure services providers operating in Europe. A “Green Cloud Task Force” was set up in December 2019 to discuss how to make this possible and define what Climate Neutrality means for our industry. Members have agreed to reach Climate Neutrality for the cloud infrastructure industry by 2030. Subsequently, the European Digital Strategy, published in February 2020, confirmed that this goal was adequate for the data centre industry.
Covid-19 recovery

Covid-19 recovery

Public-facing applications provided via the eVO technology platform use common internet browser clients and enable users to participate easily in public-participation exercises / activities, including viewing and responding to consultations via easy to use public-facing interfaces (which are fully accessible to WCAG 2.1 guidelines).

eVO technology platform enables users of its applications to participate in community / public consultations from any location and from any device. It means that, not only can members of the public and community groups meaningfully participate at their convenience, it reduces the need for them to travel and that those with physical and mental health problems do not have to make such an effort to attend particular locations in order to make their opinions known, and in so doing they do not need to call upon support workers provided by public-sector institutions in order to assist in getting them to remote locations.

Because full system functionality for all eVO technology platform applications is provided via the internet browser client, workforce employees can work from any location, performing their role from remote locations, facilitating effective social distancing, remote working, and sustainable travel solutions by removing the need for employees in particular roles from needing to travel to offices / places of work to access missing functionality. As everything is provided out-of-the-box for eVO technology platform applications via the internet browser client, all operations to process cases / activities can now be undertaken remotely as there are no elements missing from the application which require access to third-party applications available only in an office environment.
Tackling economic inequality

Tackling economic inequality

N/A
Equal opportunity

Equal opportunity

N/A
Wellbeing

Wellbeing

N/A

Pricing

Price
£3,600 to £4,500 a unit a year
Discount for educational organisations
No
Free trial available
No

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@statmap.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.