Pro2col Ltd

Thru Secure Enterprise-Class Managed File Transfer

Leading provider of cloud-native, enterprise grade, secure managed file transfer solutions. Designed as no-code, easy to use and built for iPaaS. Market-first technologies designed to tackle the most demanding and complex file transfer challenges. Event-driven architecture and asynchronous parallel processing improve performance, reliability and scalability.

Features

• Subscription-based licence model
• API-centric, native MFT extension of iPaaS
• No code needed for configuration or management
• Simple and fast partner onboarding
• Guaranteed delivery of large file data and metadata sets
• Publish-subscribe design
• Detailed logging and reporting
• Self-service web portal

Benefits

• Cloud native, no provisioning software, hardware, no maintenance
• Integration with leading iPaaS platforms using Thru native connectors
• Onboard partners within minutes allowing faster decision making
• Persistent delivery and secure file storage, checkpoint restart
• Flexible and simple connections of file transfer flows
• Single pane of glass management
• Drill into file transfer and system activity, view granular details
• Manage file transfers via self-service portal
• Simplify partner organisations' onboarding and protocol endpoints
• Web based configuration and management. Developer skill set not required

£3,500 to £1,270,750 a licence a year

• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@pro2colgroup.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

338269690184351

Contact

G-Cloud Team
​0333 123 1240
gcloud@pro2colgroup.com

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: Planned maintenance to service will be communicated to users with notice period as specified in service terms and conditions.
• System requirements: Thru provided as a managed service

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Four hour response from Level 1 support team.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Web chat
• Web chat support availability: 24 hours, 7 days a week
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: Link from support page.
• Web chat accessibility testing: NA
• Onsite support: Yes, at extra cost
• Support levels: Level 1-3; Technical Account Manager available
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Onboarding and training session provided.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Customers have manual or automated processes for extracting their data. Upon service termination data is held for 30-days for customers to extract.
• End-of-contract process: Upon notification of end of contract and reaching end of contract date, platform/site is disabled and data is retained for 30-days before being purged.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Linux or Unix
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: No difference
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Administration dashboard
• Accessibility standards: None or don’t know
• Description of accessibility: Don't know
• Accessibility testing: Don't know
• API: Yes
• What users can and can't do using the API: Refer to API documentation; ; https://www.thruinc.com/integration-api/
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Vanity URL, branding, basic web customisation

Scaling

• Independence of resources: Platform is built to scale automatically

Analytics

• Service usage metrics: Yes
• Metrics types: Thru provides user, storage, files and transaction metrics.
• Reporting types:
  • API access
  • Real-time dashboards
  • Reports on request

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Thru Inc.

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Via web browser (HTTPS), FTPS/SFTP or API
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Native file format
  • Database audit records in CSV
• Data import formats:
  • CSV
  • ODF

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: 99.99% uptime
• Approach to resilience: Service is built in a highly available design with multiple instances of each component. More information upon request.
• Outage reporting: A status page is provided - https://status.thruinc.com

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Via group mechanisms
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: You control when users can access audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications: Pro2col is IS0 27001 certified, covering provision of additional services

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: NA
• Information security policies and processes: NA

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: All configuration and changes are logged
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Firewall access is limited to security level personnel and change records are tracked and approved.; (WAF) filters HTTP traffic managed by Network Security team.; Inspection of web traffic and dynamically learning from flows to regulate legitimate and potentially malicious traffic.; Network security team performs weekly reviews of WAF reports to eliminate any false positive events.; IDS is deployed and configured to further protect Thru’s customer for all non-http traffic.; Configured to take automatic detect attack signatures and take preventative action.; Intrusion detection signatures are updated within 72 hours of release.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: • Alert logics 24x7 global monitoring and threat management; • IMPERVA web application firewall security platform; • Qualys used for web application vulnerability and infrastructure scanning; • Fortify used for application security testing; • NTA Monitor Comprehensive security testing, external hacking, encryption and secure handling of client data.
• Incident management type: Undisclosed
• Incident management approach: • Thru has pre-defined processes for common events; • Users can report incidents via the usual channels; • Incident reports are provided when requested.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  Doing things right, doing the right thing. That’s the ethos that we live by at Pro2col. That mantra drives our commitment to protecting and preserving the environment. Our environmental policy focuses on three key areas. ; ; 1) Reducing emissions: We make environmentally-driven decisions within our office – switching to a green energy provider who delivers 100% renewable energy, using environmentally friendly cleaning products and office supplies, encouraging our team to travel to work by sustainable methods and establishing a cycle to work scheme. Where possible we’ve chosen to reduce work trips and on-site work to deliver our services and support remotely and sustainably. Our hybrid work policy has reduced the number of unnecessary commutes into the office.; ; 2) Reducing waste: We campaign against today’s throwaway culture, recognizing that recycling is good, reusing is better, not buying at all is better still. We encourage our staff to recycle or use reusable materials. Our office acts as a crisp packet recycling point where anyone in the local area can drop off crisp packets and we’ll take them off to be recycled. We even got our local coffee shop to transition to compostable coffee cups and lids…; ; 3) Inspiring the community: We strive to involve our wider community in our environmental efforts. As a company we’re incredibly lucky to be a stone’s throw from the beach and some of the most spectacular countryside in the UK. And we want to protect and support that environment. So, every year we organize a beach clean. The whole Pro2col team gets involved. We bring along our families and friends. We invite our partners and suppliers. We involve local businesses. Last year we collected 16kg of rubbish and covered 300m of beach.
• Covid-19 recovery:

  Covid-19 recovery

  Covid-19 Recovery; ; At Pro2col we’re passionate about our local area – and supporting the businesses in our local area. We’re particularly focused on supporting the brilliant array of independent retail, hospitality and manufacturing operators in the area.; As part of our team culture and benefits we offer every member of the team a voucher to celebrate their birthday and their work anniversary with Pro2col. Following the Covid-19 outbreak we decided that we were going to ensure these vouchers were only spent with local retailers. Similarly, when we were forced to cancel our Christmas parties, we decided to allocate funds to our employees for them to spend at local delivery and takeaway outlets to help support our local hospitality industry. ; Finally, throughout the Covid-19 pandemic, we offered up free access to our Certified File Transfer Professional (CFTP) qualification. Across the last 18 months that has seen over $40,000 worth of training and certification given away for free. We’ve used CFTP to enable hundreds of professionals to retrain, add new knowledge to their CVs and develop skills and learnings that will support them and make them more employable. ; We continue to prioritize buying locally wherever possible – be that getting our milk and cleaning products from a local sustainable supplier or using local venues for conferences, meetings or events.
• Tackling economic inequality:

  Tackling economic inequality

  Pro2col have partnered up with The Friends of Dorset Care Leavers (https://www.friendsofdorsetcareleavers.org.uk/), a charity organization that supports young people aged 18-25 as they leave the care system. The charity aims to reduce isolation, loneliness and supports care leavers with their aims for the future. ; With our technical expertise we have decided that rather than just supporting the charity financially, we could make a dramatic difference by supporting them with the re-launch of their website. Together with the charity we have begun rebuilding their website and their online shop. Using our technical experience, web development skills and marketing insights to build an online platform that will increase the web presence of the charity and build a secure, visible platform that they can use to increase interest in, and donations to the charity. ; Alongside our support building their website, we are also making our Certified File Transfer Professional course (CFTP) available to any of the young people they are supporting who are interested in pursuing a career in technology. ; Two members of the Pro2col team have signed up to mentor and support care leavers, providing a friendly face, someone who can offer advice and support and help young care leavers take their first steps into the workplace.
• Equal opportunity:

  Equal opportunity

  Pro2col are committed to being an equal opportunities employer and oppose all forms of unlawful discrimination. Our objective is to have a diverse workforce and our long-term aim is that the composition of our workforce should broadly reflect that of our local community.; We believe that individuals should be treated on their merits and that employment-related decisions should be based on objective job-related criteria such as aptitude and skills. We have developed a Great People Framework to ensure that our team receives the same treatment, skills-based evaluations, training, and opportunities for progression.; We have set out specific policies to ensure our recruitment, pay, benefits, promotion, training, and disciplinary procedures. Pro2col commits to:; - Create an environment in which individual differences and the contributions of all team members are recognized and valued.; - Create a working environment that promotes dignity and respect for every employee; - Not tolerate any form of intimidation, bullying or harassment; - Encourage employees to treat everyone with dignity and respect; ; We aim to apply these policies to all those working at our workplace, including agency, casual and freelance staff as well as employees.
• Wellbeing:

  Wellbeing

  Pro2col’s goal is for its team to be made up of healthy and happy employees. We strive to do the right thing for our clients and customers, and it is only right that we do the same for our employees. To do this we have adopted a range of policies and strategies to ensure that we are focused on maintaining the health and wellbeing of our teams. ; We are particularly conscious about the mental wellbeing of our team as they emerge from the isolation and loneliness of the pandemic and get accustomed to our new hybrid working model. To make sure we are equipped to assist our team, every member of the Pro2col management team is offered mental health first aid training, giving us the knowledge and skills to be able to approach our team and colleagues about their mental state. ; Alongside working to improve the mental health of our teams we have recently introduced a cash health plan as a business benefit to give our staff access to a wide range of medical services, 24-hour access to consultants and GPs and the ability to get specialist treatment for both new and pre-existing conditions. ; Our commitment to health and wellbeing extends outside of our direct team. We have a Health and Wellbeing charity team within Pro2col who work with local charities and organisations in the local area. They have been working in conjunction with Christchurch Library to become digital guardians / embedded digital champions to help residents who use the library for access to digital services but lack the technical knowledge or confidence to use online tools. They have also provided technical services and support to local retirement and care facility residents.

Pricing

• Price: £3,500 to £1,270,750 a licence a year
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: All functionality is included for up to 30-days. Extensions can be requested on a case by case basis.
• Link to free trial: https://www.thruinc.com/

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@pro2colgroup.com. Tell them what format you need. It will help if you say what assistive technology you use.