Skip to main content

Help us improve the Digital Marketplace - send your feedback

Idox Software Limited

Geospatial Platform as a Service

Our Geospatial Platforms as a Service (PaaS), theMapCloud, provides a cost-effective way to manage and serve geographic data, services and applications. Hosted on AWS, our platform provides a secure, scalable, highly performant spatial data infrastructure. We manage the platform, the application-ready geospatial datasets suite and component services (WFS, WMS, WMTS).

Features

  • Fully managed cloud geospatial platform service
  • Globally leading geospatial technologies
  • Flexible, reliable, scalable, highly-performant platform
  • Built in security
  • 24/7 availability with full backup and disaster recovery
  • Instant access to extensive catalogue of existing geospatial data
  • Provisioning of OGC compliant web services
  • Cloud hosted on enterprise infrastructure from AWS

Benefits

  • Cost effective - no need to invest in expensive infrastructure
  • Reduced costs - no need to manage Cloud GIS infrastructure
  • Future proofed – access to state-of-the-art cloud GIS infrastructure
  • Time savings - rapid service provisioning and speed to market
  • Guaranteed service quality standards
  • Data security and resilience are taken care of.
  • Robust development environment for custom solutions
  • On demand, dynamic scaling - proven, high-performance platform
  • Backed by a dedicated Service Desk

Pricing

£5,495.00 an instance

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at frameworks@idoxgroup.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

3 2 5 3 3 2 7 7 2 1 2 1 8 1 9

Contact

Idox Software Limited Jen.roberts@idoxgroup.com
Telephone: 0333 011 1200
Email: frameworks@idoxgroup.com

Service scope

Service constraints
Planned maintenance will be undertaken without disruption to live services. However, in the unlikely event that maintenance may affect live services, a maintenance period will be scheduled and communicated to customers in advance. Users' internet speed/reliability may impact service performance.
System requirements
Ability to consume standards-compliant HTTPS data feeds / REST APIs

User support

Email or online ticketing support
Email or online ticketing
Support response times
We provide a managed Service Desk available from 08:30 to 17:30 Monday to Friday with the exception of Christmas Day, Boxing Day and New Year’s Day public holidays. Our target response time is in within 1 hour during these times. A case number and a priority will be allocated to the call by a member of our Service Desk and a target resolution date will be set according to call priority, as detailed in our Service Level Agreement.
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
None or don’t know
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
"Standard Service Support Levels
Priority - Nature of query / Target response time / Target resolution time:
1 - Urgent and major fault on the system affecting all users including system unavailability with no workaround / 1 hour / 4 hours.
2 - Significant and/or non-urgent fault affecting many users e.g. specific functionality or data / 1 hour / 3 business days.
3 - Minor fault with no significant impact on usage and/or request for support relating to functionality of a supported application / 1 hour / 5 business days.
4 - Minor/cosmetic issue with workaround available or Request for support on longer term issue. / 1 hour / 10 business days."
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Upon receipt of an order an assessment of platform configuration requirements, data volumes and expected level of usage is defined in collaboration with the customer, forming a data migration and platform configuration plan. We ensure migration of customer applications and data onto theMapCloud is as easy and straightforward as possible. This typically involves either uploading the data via the internet or the use of high capacity hard drives, depending on the individual requirements.
Service documentation
Yes
Documentation formats
Other
Other documentation formats
MS Office Documents
End-of-contract data extraction
Off-boarding from the service is achieved via a formal Service Desk cancellation process. This ensures any relevant user information is removed from the service and all user data is deleted. Account termination is conducted in line with the published terms and conditions of the service, and data destruction certificates are available upon request.
End-of-contract process
An offboarding plan will be defined in colaboration with the customer. We will arrange for customer access to the services to be removed upon contract expiry. All customer data is removed from the platform and can be provided back to the customer, at an agreed charge, as part of the offboarding process if required. A data destruction certificate is available upon request.

Using the service

Web browser interface
No
API
Yes
What users can and can't do using the API
The API offers a read-only HTTPS standards compliant access to digital mapping and geospatial data. Custom APIs can also be developed for customers as an additional service. Customer access is setup by Idox and no changes can be made by the customer via the API.
API automation tools
  • Terraform
  • Other
Other API automation tools
JFrog
API documentation
Yes
API documentation formats
Open API (also known as Swagger)
Command line interface
No

Scaling

Scaling available
Yes
Scaling type
Automatic
Independence of resources
TheMapCloud data services are architected to scale on demand based upon certain thresholds such as CPU and memory usage. This means no adverse effect on performance regardless of service demand.
Usage notifications
Yes
Usage reporting
Email

Analytics

Infrastructure or application metrics
Yes
Metrics types
Other
Other metrics
  • Service requests
  • Web service transactions
  • Data volume usage
Reporting types
Regular reports

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Baseline Personnel Security Standard (BPSS)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
European Economic Area (EEA)
User control over data storage and processing locations
No
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least once a year
Penetration testing approach
‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
Protecting data at rest
Physical access control, complying with CSA CCM v3.0
Data sanitisation process
Yes
Data sanitisation type
Explicit overwriting of storage before reallocation
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Backup and recovery

Backup and recovery
Yes
What’s backed up
  • Spatial Data Store
  • Customer Access Database
  • Virtual Machine Image Backups
Backup controls
Backups are controlled by Idox and not by the customer. If custom web solutions are developed on the platform we can discuss bespoke backup arrangements and the associated managed service charges.
Datacentre setup
Multiple datacentres with disaster recovery
Scheduling backups
Supplier controls the whole backup schedule
Backup recovery
Users contact the support team

Data-in-transit protection

Data protection between buyer and supplier networks
TLS (version 1.2 or above)
Data protection within supplier network
Other
Other protection within supplier network
Hosting infrastructure provided by Amazon Web Services (AWS) provides security groups which are applied to all servers in the network.

Availability and resilience

Guaranteed availability
Testing indicates availability of 99.9%. theMapCloud platform is a highly available, scalable platform hosted on AWS 24/7.
Approach to resilience
TheMapCloud platform is architectured upon Amazon Web Services employing the Multi-Zone capability, meaning we have resilience fail-over to another physical data centre location if required.
Outage reporting
Online 24/7 real-time monitoring systems instantly notify Idox staff in the unlikely event of unforeseen downtime. Any downtime is then communicated to customers via email.

Identity and authentication

User authentication
Username or password
Access restrictions in management interfaces and support channels
Any internal management functions are not shared with customer users and restricted to internal use via user credentials. Access to our support desk is restricted via username and password.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Username or password
Devices users manage the service through
Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

Access to user activity audit information
Users contact the support team to get audit information
How long user audit data is stored for
Between 1 month and 6 months
Access to supplier activity audit information
Users contact the support team to get audit information
How long supplier audit data is stored for
Between 1 month and 6 months
How long system logs are stored for
At least 12 months

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
Citation ISO Certification Ltd
ISO/IEC 27001 accreditation date
01/09/2023
What the ISO/IEC 27001 doesn’t cover
Certification covers all functions and services of Idox Software Ltd.
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
Yes
Cyber essentials plus
Yes
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
All divisions of Idox, follow the ISO27001 accredited Information Security Management System of Idox Software Ltd.
This ISMS covers all business functions including but not limited to, information systems, networks, physical environment, incident/threat management, project & contract management and personnel management. Information security awareness training is conducted to ensure policies are communicated and ongoing annual internal reviews and auditing is conducted to ensure processes are followed. The system and controls are also externally verified an certified annually as part of the ISO 27001 certification process. Risks raised through internal and external audits are reviewed at management meetings by the information security manager, the appropriate head of business and a board representative.

Operational security

Configuration and change management standard
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach
IT change management processes are carried out using Change Requests and records are maintained within the Change Management system. All concerned parties are informed of the status of the request as changes or progress is made as applicable.
Vulnerability management type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach
We monitor OWASP and various vendor alert sources for emerging vulnerability intelligence and patching data. A combination of web application scanning, host vulnerability scanning, and external perimeter proactively identifies any design, configuration, or patching weaknesses. When identified, any threats are assessed in context and where warranted, mitigations are implemented in accordance with their severity. These controls and processes are monitored as part of our ongoing ISMS/ISO27001 auditing programme.
Protective monitoring type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach
Monitoring tools are used to measure server performance metrics as well as storage and network/bandwidth utilisation and unusual server/network/perimeter activity. The alerts from these systems are actively monitored and reviewed and any potential intrusion attempt is raised in line with our security incident reporting procedure for further investigation.
Incident management type
Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach
Incidents or suspected incidents are raised to internal service desk and reviewed by the information security manager. They are allocated a risk reference, entered into the information security risk log and tracked until closure. In the case of major incidents, an Incident Response Team will be formed as required with key personal required to investigate and take necessary actions, and a major incident report will be produced.

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Separation between users

Virtualisation technology used to keep applications and users sharing the same infrastructure apart
No

Energy efficiency

Energy-efficient datacentres
Yes
Description of energy efficient datacentres
AWS Datacentres adhere to the EU code of conduct for energy-efficient datacentres. For more information please visit https://aws.amazon.com/about-aws/sustainability/

Social Value

Social Value

Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity

Fighting climate change

Idox has adopted the 3 scopes of the Greenhouse Gas Protocol (GHG). Working within the three scopes Idox commits to net-zero carbon emissions by 2040. Our business-wide three-step approach to carbon emissions will eliminate emissions, or where this is impractical, will prioritise reducing the emissions impact of our activities and will offset emissions that cannot be eliminated or further reduced by engaging in a compensating carbon offset programme.

Scope 1: Eliminate all equipment in offices which produce direct emissions. Replace with energy-efficient, electric alternatives. Eliminate emissions from company-owned vehicles. Replace with electric alternatives Offer employees access to salary-sacrifice EV scheme.
Scope 2: Reduce electricity usage by implementing Energy Savings Opportunity Scheme recomendations. Eliminate the purchase of non-renweablby sourced electricity.
Scope 3: Reduce business travel through remote working and on-line collaboration tools. Eliminate travel by private vehicles which produce emissions. Offset emissions from public transport used for business travel and from hotel stays either by choosing operators offering direct offset or through a carbon-offset programme. Eliminate waste by removing single-use plastic products and reduce waste from offices through effective recycling. Offset non-recyclable waste trhough a carbon-offset programme. Eliminate waste from surplus equipment by passing this on for re-use in support of our social contribution wherever possible. Where this is not possible, reduce waste by fully recycling the equipment and offset residual emissions in a carbon-offset programme.

We are strengthening our performance as an all-round responsible business that makes a valuable contribution to society, has good governance embedded in its culture and processes, and is on target to achieve net zero carbon emissions.

Our gross GHG emissions of CO2 (tCO 2e) are reported yearly in our published Annual Report.

Covid-19 recovery

Idox is continuing to work on finding the optimal working pattern for our colleagues post-Covid. We have to make sure that we have the right blend of home and office work, and essential and non-essential travel, that allows our colleagues to be efficient but also continue to benefit from the lifelong development and learning opportunities that are an important part of corporate, office life. Employers must work hard and creatively to enable appropriate new ways of working that meet all these new requirements without allowing a drop in the most important thing, excellent customer service.
To meet the changing needs of the workplace, Idox looked at how the post-COVID period affected working environments and how this related to its office estate. With the sharp increase in home working and subsequent move away from highly-populated office environments, Idox closed some long-lease main office property and instead opened short-lease serviced offices. This allowed us to be much more flexible in the way that we can adapt our property holdings to meet the needs and distribution of employees, while reducing carbon footprint in terms of our office utilities and travel times. We have also increased the frequency of online workshops, chat lounges, management team broadcasts and staff surveys, allowing both remote and office based colleagues to participate in group activities and maintain a sense of company camaraderie, inclusion and wellbeing.
Idox has produced a white paper looking at how the workplace has to change in response to the COVID-19 pandemic. The white paper:
• sets out the challenges and legal requirements facing businesses of getting back to work safely and efficiently
• looks at how businesses can prepare for reopening and implement these plans
• provides hints, tips and guidance on reopening facilities to be ‘COVID-secure’
The white paper is available at: https://www.idoxgroup.com/idox-insights/computer-aided-facilities-management-insights/getting-back-to-business/

Tackling economic inequality

Idox takes environmental, social and governance responsibilities very seriously. Social value forms part of contract commitments to our public sector Buyers; we work with our customers to support their priority targets and outcomes.
Examples of social value we deliver:
Facilitate skills workshops;
Financial donations to fund places on training courses,
Fund community projects that work to tackle economic inequality,
Reduce the digital skills gap, creating training opportunities for those who face barriers to employment and/or who are located in deprived areas,
Support educational attainment,
Donate used IT equipment to VCSEs to support people in deprived areas,
Provide work experience placements.

Our robust social value process includes annual reviews of social value delivery performance. These reviews ensure we understand customers’ priorities and set appropriate yearly targets, continuously improving how we deliver social value.
We create socially responsible and valuable opportunities for our teams to give back. Each year we offer colleagues one day paid volunteering leave and provide opportunities to support charities and causes throughout the year. Idox fully supports the UK Government initiative to implement a structured approach to providing direct, impactful social value contributions. This approach is also being replicated in other, local Government contracts. Through our tenders we have committed to local social value contributions, providing local employment including apprenticeships and work placements, support for healthy meals for children outside term time and in direct donation to local initiatives aligned with customers’ social value priorities. We also provide small charities free access to Idox’s My Funding Central which typically saves these organisation £50p.a. but which can help them access funding opportunities worth upwards of £10,000. The service is specifically aimed at charities and voluntary organisations with incomes below £1M and is free-to-use for organisations with incomes below £30,000. In 2023, 3,526 groups signed up to this free service.

Equal opportunity

Idox strives to create workplaces that reflect the communities we serve, where everyone feels empowered to bring their full, authentic self to work.
Our guidance to employees and suppliers concerned with recruitment, training, promotion and delivery is outlined in our Equality and Diversity Policy which covers our responsibilities under the Equalities Act and how we deliver them. We can provide a copy of the policy upon request.
We have clear goals to achieve a gender-balanced workforce by 2027. To tackle under-representation in leadership, we are particularly focused on increasing the proportion of women in the people-leader tiers of the business to correlate with the gender ratio of the company in general and to support the overall reduction of the gender pay gap specifically.
Our policies and initiatives that support Diversity, Equality and Inclusion include:
• Flexible working
• Family friendly policies
• Pay Gap reporting, published annually on our website;
• Fair Pay, Idox is an accredited Living Wage Employer.

In 2020, Idox launched Elevate, a programme sponsored by Idox plc board members, championing a truly inclusive culture. The team is particularly focused on building gender equality at all levels of the organisation and challenging us all to be more inclusive.
With initiatives that will build a diverse, gender-balanced workforce and develop the skills and confidence of our colleagues, Elevate advocates equality and diversity in our organisation. The pillars we work within to achieve this are:
Terms of employment: Ensuring that we start from a position of equality and good foundations in HR and that Elevate is championed from the top down.
Organisation attractiveness: Creating an inclusive culture that attracts a more diverse workforce and promotes inclusion internally.
Recruitment: Develop a more diverse approach to recruitment.
Employee development: Supporting career progression across the organisation and moves into leadership positions.

Pricing

Price
£5,495.00 an instance
Discount for educational organisations
No
Free trial available
No

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at frameworks@idoxgroup.com. Tell them what format you need. It will help if you say what assistive technology you use.