Bramble Hub Limited

Bramble Hub Xn Leisure - Leisure Management Systems

Xn Leisure is an innovative provider of comprehensive IT solutions for the public and private sport, leisure and fitness sectors. Cloud based front of house, on line, mobile, self service and business intelligence solutions reduce cost and positiveley change to way you connect with customers.

Features

  • Complete self service solution, on line, mobile bookings and joining
  • Fast track and kiosk self service including payments
  • Concieige and front of house EPOS solutions
  • KPI, business intelligence and analytics including datahub integration
  • Membership, prospecting and direct debit amanagement modules
  • Payment solutions on line, front of house and self service
  • Comprehensive bookings management for courts, spaces, classes
  • Access control, turnstiles, door security - biometric and rfid options
  • Course management including hand held registers and online portal
  • Event ticketing, management, on line / mobile bookings and payments

Benefits

  • Complete self service for customers reduces member and booking administration
  • Kiosk self service reduces staff costs and increases throughput
  • Modern welcoming front of house systems improve customer satisfaction
  • Integrated web based KPI, reports and marketing intelligence solutions
  • Simple wizard based web membership and prospecting
  • Accept any payment method including contactless and BACS
  • Fast bookings interface speed up processing and throughput
  • Secure access control by facial recognition, thumbprint or smartcard
  • Course reception, teacher and home portals digitaly link to customers
  • Modern ticketing platform, grows your business & reduces operating costs

Pricing

£79 a user a month

  • Education pricing available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at contact@bramblehub.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

3 6 7 0 6 9 2 3 7 8 2 3 4 4 9

Contact

Bramble Hub Limited Geoff Couling
Telephone: +44 (0) 2077350030
Email: contact@bramblehub.co.uk

Service scope

Software add-on or extension
No
Cloud deployment model
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
Service constraints
Although a cloud platform Xn need to sign off all connected hardware to ensure
System requirements
  • Windows PC based - windows 10 onwards
  • Microsoft remote desktop web access will be used

User support

Email or online ticketing support
Email or online ticketing
Support response times
Priority 1 response withing an hour, Prority 2 has a 4 hour response, any general or non urgent question will be responded to within one working day
User can manage status and priority of support tickets
No
Phone support
Yes
Phone support availability
9 to 5 (UK time), 7 days a week
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
Xn provide a single software and hardware support service from 7.00am untill 22.00pm 7 days a week, 364 days a year. Priority 1 calls are progressed throughout the day Priority 2 and 3 calls are withn office hours 8.00am until 18.00pm. Team Support tickets and phone calls are accepted, email based tickets are not supported. Our hosting platform is supported 24 hours per day. The Team support portal allows customer issue tracking and management including customer portal. Support included in the service price allows email and phone support. On site support is charged at standard day rates.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Full on site or online training and full user documentation is available for eac client.
Service documentation
Yes
Documentation formats
  • PDF
  • Other
Other documentation formats
MS Word required for customisation
End-of-contract data extraction
Xn will provide full database set to the client in the format and media preferred and secure delivery method required by each client.
End-of-contract process
Full off boarding is included within the contract and a contract end meeting will be held to agree final arrangements for end of closure taking into account any changes that may have occurred during the contracted period.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Chrome
  • Safari
Application to install
Yes
Compatible operating systems
  • Android
  • IOS
  • MacOS
  • Windows
  • Windows Phone
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
The solution is a responsive web site for customers and remote desktop web platform for users
Service interface
Yes
User support accessibility
WCAG 2.1 AA or EN 301 549
Description of service interface
Xn provide a full range of secure API's that are fully documented using Swagger.
Accessibility standards
WCAG 2.1 AAA
Accessibility testing
The latest web based solutions meets WCAG AA standards are are thoroughy tested to this standard. Normally, assitive technologies are User tested as part of any implementation. Additional testing may be required prior to implementetion should clinet require non standard assitive technology products.
API
Yes
What users can and can't do using the API
Each API connection is licensed annually and allows users or 3rd parties to access all data calls according to the functionality of each of Xn Leisure's documented API's
API documentation
Yes
API documentation formats
  • Open API (also known as Swagger)
  • HTML
  • PDF
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
The branding of web facing intefaces are customisable and Xn can provide chargable branding services and the configuration of the solution is highly configurable according to the requirements of each client.

Scaling

Independence of resources
The solution uses separate virtial machines for each client and provides responsive scalling of the solution so that performance is never affected by any increases in usage. This is activeley monitored at our data centre.

Analytics

Service usage metrics
No

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
None

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
No
Datacentre security standards
Managed by a third party
Penetration testing frequency
At least once a year
Penetration testing approach
‘IT Health Check’ performed by a CHECK service provider
Protecting data at rest
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
Data sanitisation process
No
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
Data is collectd via a series of configurable wen forms for membership, bookings and courses management together with a user inteface for configuration and on site data collection. Data is alos collected from mobile web pages, access control, self service kiosks and tablets as required by each client.
Data export formats
CSV
Data import formats
CSV

Data-in-transit protection

Data protection between buyer and supplier networks
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability
Xn Leisure’s hosting services offer both high end security and resilience across all solutions. Our hosting ISO 27001 certified data centre based in the Midlands guarantee 100% uptime, ensuring that its clients benefit from a secure and highly efficient hosting service at all times.
Approach to resilience
Xn Leisure provide Virtual Private Servers (VPS) hosting and dedicated Virtual Machine (VM) Servers (Cloud Computing), whereby multiple operating systems and applications run on one or more clustered physical servers, giving the same delivery as a physical server but with fewer running costs and improved resilience. Virtualisation is extremely cost effective for clients, due to savings on equipment costs and hardware updates. This option also protects the Council from hardware failure and provides a more robust and flexible option for backup and disaster recovery.
Outage reporting
Xn Leisure uses a highly efficient and proactive monitoring solution which delivers complete visibility into the performance and availability of business systems and applications. Xn Leisure monitors and produces real-time alerts on customers’ backup status, server health, Service Level Agreement compliance reports and performance trends. This unique service allows the service desk to deal proactively with network and system issues, spotting potential problems before they occur. RMS perfectly complements its hosting and data centre solutions by efficiently monitoring and optimising the performance of the infrastructure, from physical and virtualised servers through to databases, applications and networks.

Identity and authentication

User authentication needed
Yes
User authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
Access restrictions in management interfaces and support channels
All channels are limited to secure authorised access via authenticated user Id and Passwords
Access restriction testing frequency
At least once a year
Management access authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
User-defined

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
Alcumus ISOQAR
ISO/IEC 27001 accreditation date
05/04/2019
What the ISO/IEC 27001 doesn’t cover
Nothing
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
Yes
Who accredited the PCI DSS certification
Self certified under SAQ-D
PCI DSS accreditation date
18/03/2022
What the PCI DSS doesn’t cover
Xn Leisure utilises payment redirect to PCI compliant provider
Cyber essentials
Yes
Cyber essentials plus
No
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
ISO27001

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
Our security governence covers policies, procedures, processes, tools and traning. A top level policy, which sets out the information security objectives, has been designed by the Senior Management Team. This has been defined at a high level, making the Senior Management Team accountable for information security and ensuring that all staff are fully trained and aware of their personal roles and responsibilities.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
Critical and important updates are applied automatically upon release. Other updates are checked for relevance to the software and operating systems and are installed where required or on a monthly basis if they are deemed to be relevant. The service runs on a Microsoft platfoem on a Tier 4 data centre and Xn consults Microsoft, its clients and its data hosting partners SW Direct Limited for key sources of vulnarability mangement infomation.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Access to all Xn instances are restricted to authorised personnel only.
Incident management type
Supplier-defined controls
Incident management approach
Users may contact support and raise via secure self service support portal or telephone 364 days a year, from 07.00am until 22.00pm. Priority 1 - One Hour response / 4 Hour Fix, Priority 2 - four hour response / 8 hour fix, Priority 3 - next update.

Secure development

Approach to secure software development best practice
Conforms to a recognised standard, but self-assessed

Public sector networks

Connection to public sector networks
Yes
Connected networks
Public Services Network (PSN)

Social Value

Equal opportunity

Equal opportunity

Xn Leisure’s Equal Opportunities and Dignity at Work Policy states the following in relation to career opportunities, this is inclusive of people who are disadvantaged or disabled.

The selection process will be carried out consistently for all jobs at all levels. All applications will be processed in the same way. The employees responsible for short-listing, interviewing, and selecting candidates will be clearly informed of the selection criteria and of the need for their consistent application. Person specifications and job descriptions will be limited to those requirements that are necessary for the effective performance of the job. Wherever possible, all applicants will be interviewed by at least two interviewers and all questions asked of the applicants will relate to the requirements of the job. The selection of new employees will be based on the job requirements and the individual’s suitability and ability to do, or to train for, the job in question.

For job applicants who have a disability, the Company will have regard to its duty to make reasonable adjustments to work provisions, criteria, and practices or to physical features of work premises or to provide auxiliary aids or services in order to ensure that any persons with a disability are not placed at a disadvantage in comparison with persons who do not have a disability.

If it is necessary to assess whether personal circumstances will affect the performance of the job (for example, if the job involves unsociable hours or extensive travel), this will be discussed objectively, without detailed questions based on assumptions about any of the protected characteristics.

The Company will make reasonable adjustments to its standard working practices or requirements to overcome disadvantages caused by disability

Pricing

Price
£79 a user a month
Discount for educational organisations
Yes
Free trial available
No

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at contact@bramblehub.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.