Bramble Hub Xn Leisure - Leisure Management Systems
Xn Leisure is an innovative provider of comprehensive IT solutions for the public and private sport, leisure and fitness sectors. Cloud based front of house, on line, mobile, self service and business intelligence solutions reduce cost and positiveley change to way you connect with customers.
Features
- Complete self service solution, on line, mobile bookings and joining
- Fast track and kiosk self service including payments
- Concieige and front of house EPOS solutions
- KPI, business intelligence and analytics including datahub integration
- Membership, prospecting and direct debit amanagement modules
- Payment solutions on line, front of house and self service
- Comprehensive bookings management for courts, spaces, classes
- Access control, turnstiles, door security - biometric and rfid options
- Course management including hand held registers and online portal
- Event ticketing, management, on line / mobile bookings and payments
Benefits
- Complete self service for customers reduces member and booking administration
- Kiosk self service reduces staff costs and increases throughput
- Modern welcoming front of house systems improve customer satisfaction
- Integrated web based KPI, reports and marketing intelligence solutions
- Simple wizard based web membership and prospecting
- Accept any payment method including contactless and BACS
- Fast bookings interface speed up processing and throughput
- Secure access control by facial recognition, thumbprint or smartcard
- Course reception, teacher and home portals digitaly link to customers
- Modern ticketing platform, grows your business & reduces operating costs
Pricing
£79 a user a month
- Education pricing available
Service documents
Request an accessible format
Framework
G-Cloud 13
Service ID
3 6 7 0 6 9 2 3 7 8 2 3 4 4 9
Contact
Bramble Hub Limited
Geoff Couling
Telephone: +44 (0) 2077350030
Email: contact@bramblehub.co.uk
Service scope
- Software add-on or extension
- No
- Cloud deployment model
-
- Public cloud
- Private cloud
- Community cloud
- Hybrid cloud
- Service constraints
- Although a cloud platform Xn need to sign off all connected hardware to ensure
- System requirements
-
- Windows PC based - windows 10 onwards
- Microsoft remote desktop web access will be used
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
- Priority 1 response withing an hour, Prority 2 has a 4 hour response, any general or non urgent question will be responded to within one working day
- User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), 7 days a week
- Web chat support
- No
- Onsite support
- Yes, at extra cost
- Support levels
- Xn provide a single software and hardware support service from 7.00am untill 22.00pm 7 days a week, 364 days a year. Priority 1 calls are progressed throughout the day Priority 2 and 3 calls are withn office hours 8.00am until 18.00pm. Team Support tickets and phone calls are accepted, email based tickets are not supported. Our hosting platform is supported 24 hours per day. The Team support portal allows customer issue tracking and management including customer portal. Support included in the service price allows email and phone support. On site support is charged at standard day rates.
- Support available to third parties
- Yes
Onboarding and offboarding
- Getting started
- Full on site or online training and full user documentation is available for eac client.
- Service documentation
- Yes
- Documentation formats
-
- Other
- Other documentation formats
- MS Word required for customisation
- End-of-contract data extraction
- Xn will provide full database set to the client in the format and media preferred and secure delivery method required by each client.
- End-of-contract process
- Full off boarding is included within the contract and a contract end meeting will be held to agree final arrangements for end of closure taking into account any changes that may have occurred during the contracted period.
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Internet Explorer 11
- Microsoft Edge
- Chrome
- Safari
- Application to install
- Yes
- Compatible operating systems
-
- Android
- IOS
- MacOS
- Windows
- Windows Phone
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
- The solution is a responsive web site for customers and remote desktop web platform for users
- Service interface
- Yes
- User support accessibility
- WCAG 2.1 AA or EN 301 549
- Description of service interface
- Xn provide a full range of secure API's that are fully documented using Swagger.
- Accessibility standards
- WCAG 2.1 AAA
- Accessibility testing
- The latest web based solutions meets WCAG AA standards are are thoroughy tested to this standard. Normally, assitive technologies are User tested as part of any implementation. Additional testing may be required prior to implementetion should clinet require non standard assitive technology products.
- API
- Yes
- What users can and can't do using the API
- Each API connection is licensed annually and allows users or 3rd parties to access all data calls according to the functionality of each of Xn Leisure's documented API's
- API documentation
- Yes
- API documentation formats
-
- Open API (also known as Swagger)
- HTML
- API sandbox or test environment
- Yes
- Customisation available
- Yes
- Description of customisation
- The branding of web facing intefaces are customisable and Xn can provide chargable branding services and the configuration of the solution is highly configurable according to the requirements of each client.
Scaling
- Independence of resources
- The solution uses separate virtial machines for each client and provides responsive scalling of the solution so that performance is never affected by any increases in usage. This is activeley monitored at our data centre.
Analytics
- Service usage metrics
- No
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- None
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
- United Kingdom
- User control over data storage and processing locations
- No
- Datacentre security standards
- Managed by a third party
- Penetration testing frequency
- At least once a year
- Penetration testing approach
- ‘IT Health Check’ performed by a CHECK service provider
- Protecting data at rest
-
- Physical access control, complying with CSA CCM v3.0
- Physical access control, complying with SSAE-16 / ISAE 3402
- Physical access control, complying with another standard
- Encryption of all physical media
- Data sanitisation process
- No
- Equipment disposal approach
- Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001
Data importing and exporting
- Data export approach
- Data is collectd via a series of configurable wen forms for membership, bookings and courses management together with a user inteface for configuration and on site data collection. Data is alos collected from mobile web pages, access control, self service kiosks and tablets as required by each client.
- Data export formats
- CSV
- Data import formats
- CSV
Data-in-transit protection
- Data protection between buyer and supplier networks
-
- Private network or public sector network
- TLS (version 1.2 or above)
- IPsec or TLS VPN gateway
- Data protection within supplier network
-
- TLS (version 1.2 or above)
- IPsec or TLS VPN gateway
Availability and resilience
- Guaranteed availability
- Xn Leisure’s hosting services offer both high end security and resilience across all solutions. Our hosting ISO 27001 certified data centre based in the Midlands guarantee 100% uptime, ensuring that its clients benefit from a secure and highly efficient hosting service at all times.
- Approach to resilience
- Xn Leisure provide Virtual Private Servers (VPS) hosting and dedicated Virtual Machine (VM) Servers (Cloud Computing), whereby multiple operating systems and applications run on one or more clustered physical servers, giving the same delivery as a physical server but with fewer running costs and improved resilience. Virtualisation is extremely cost effective for clients, due to savings on equipment costs and hardware updates. This option also protects the Council from hardware failure and provides a more robust and flexible option for backup and disaster recovery.
- Outage reporting
- Xn Leisure uses a highly efficient and proactive monitoring solution which delivers complete visibility into the performance and availability of business systems and applications. Xn Leisure monitors and produces real-time alerts on customers’ backup status, server health, Service Level Agreement compliance reports and performance trends. This unique service allows the service desk to deal proactively with network and system issues, spotting potential problems before they occur. RMS perfectly complements its hosting and data centre solutions by efficiently monitoring and optimising the performance of the infrastructure, from physical and virtualised servers through to databases, applications and networks.
Identity and authentication
- User authentication needed
- Yes
- User authentication
-
- 2-factor authentication
- Public key authentication (including by TLS client certificate)
- Identity federation with existing provider (for example Google Apps)
- Limited access network (for example PSN)
- Dedicated link (for example VPN)
- Username or password
- Access restrictions in management interfaces and support channels
- All channels are limited to secure authorised access via authenticated user Id and Passwords
- Access restriction testing frequency
- At least once a year
- Management access authentication
-
- 2-factor authentication
- Public key authentication (including by TLS client certificate)
- Identity federation with existing provider (for example Google Apps)
- Limited access network (for example PSN)
- Dedicated link (for example VPN)
- Username or password
Audit information for users
- Access to user activity audit information
- Users have access to real-time audit information
- How long user audit data is stored for
- User-defined
- Access to supplier activity audit information
- Users have access to real-time audit information
- How long supplier audit data is stored for
- User-defined
- How long system logs are stored for
- User-defined
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- Alcumus ISOQAR
- ISO/IEC 27001 accreditation date
- 05/04/2019
- What the ISO/IEC 27001 doesn’t cover
- Nothing
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- Yes
- Who accredited the PCI DSS certification
- Self certified under SAQ-D
- PCI DSS accreditation date
- 18/03/2022
- What the PCI DSS doesn’t cover
- Xn Leisure utilises payment redirect to PCI compliant provider
- Cyber essentials
- Yes
- Cyber essentials plus
- No
- Other security certifications
- No
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
- ISO/IEC 27001
- Information security policies and processes
- ISO27001
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
- Our security governence covers policies, procedures, processes, tools and traning. A top level policy, which sets out the information security objectives, has been designed by the Senior Management Team. This has been defined at a high level, making the Senior Management Team accountable for information security and ensuring that all staff are fully trained and aware of their personal roles and responsibilities.
- Vulnerability management type
- Supplier-defined controls
- Vulnerability management approach
- Critical and important updates are applied automatically upon release. Other updates are checked for relevance to the software and operating systems and are installed where required or on a monthly basis if they are deemed to be relevant. The service runs on a Microsoft platfoem on a Tier 4 data centre and Xn consults Microsoft, its clients and its data hosting partners SW Direct Limited for key sources of vulnarability mangement infomation.
- Protective monitoring type
- Supplier-defined controls
- Protective monitoring approach
- Access to all Xn instances are restricted to authorised personnel only.
- Incident management type
- Supplier-defined controls
- Incident management approach
- Users may contact support and raise via secure self service support portal or telephone 364 days a year, from 07.00am until 22.00pm. Priority 1 - One Hour response / 4 Hour Fix, Priority 2 - four hour response / 8 hour fix, Priority 3 - next update.
Secure development
- Approach to secure software development best practice
- Conforms to a recognised standard, but self-assessed
Public sector networks
- Connection to public sector networks
- Yes
- Connected networks
- Public Services Network (PSN)
Social Value
- Equal opportunity
-
Equal opportunity
Xn Leisure’s Equal Opportunities and Dignity at Work Policy states the following in relation to career opportunities, this is inclusive of people who are disadvantaged or disabled.
The selection process will be carried out consistently for all jobs at all levels. All applications will be processed in the same way. The employees responsible for short-listing, interviewing, and selecting candidates will be clearly informed of the selection criteria and of the need for their consistent application. Person specifications and job descriptions will be limited to those requirements that are necessary for the effective performance of the job. Wherever possible, all applicants will be interviewed by at least two interviewers and all questions asked of the applicants will relate to the requirements of the job. The selection of new employees will be based on the job requirements and the individual’s suitability and ability to do, or to train for, the job in question.
For job applicants who have a disability, the Company will have regard to its duty to make reasonable adjustments to work provisions, criteria, and practices or to physical features of work premises or to provide auxiliary aids or services in order to ensure that any persons with a disability are not placed at a disadvantage in comparison with persons who do not have a disability.
If it is necessary to assess whether personal circumstances will affect the performance of the job (for example, if the job involves unsociable hours or extensive travel), this will be discussed objectively, without detailed questions based on assumptions about any of the protected characteristics.
The Company will make reasonable adjustments to its standard working practices or requirements to overcome disadvantages caused by disability
Pricing
- Price
- £79 a user a month
- Discount for educational organisations
- Yes
- Free trial available
- No