CATAPULT CX LIMITED

KnowledgeAgent

KA is a bot that provides answers specific to your organisation. It works because the bot has already ingested all your organisations documents (pdf, ppt etc) which it then uses to generate responses.

It works with Copilot and other LLMs, and can be accessed from a MS Teams App.

Features

• Okta and Auth0 licence assessment
• User, application, and feature usage analysis
• Edition and add-on optimisation
• Tenant and environment consolidation review
• Licence alignment across Okta and Auth0
• Co-terming licences to a single renewal date
• Forecasting for growth and identity usage
• Compliance and audit readiness checks
• Pay Okta and Auth0 licences via invoice
• Clear identity licensing governance recommendations

Benefits

• Reduced Okta and Auth0 licensing costs
• Simplified renewals through licence co-terming
• Improved cashflow using invoice-based payments
• Better alignment between licences and actual usage
• Avoidance of unnecessary editions and add-ons
• Improved compliance and audit confidence
• Clear understanding of future identity needs
• Lower risk during renewals and scaling
• Better value from identity platform investment
• Predictable, manageable identity licensing spend

• Education pricing available
• Free trial available

Service documents

• Pricing document

  ODS

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@catapult.cx. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

379136006135486

Contact

Alex Fishlock
+44 203 773 0553
info@catapult.cx

About your service

• Service categories:

  Application Development and Deployment

  AI platforms

  • Search and knowledge discovery

  AI life cycle

  • Data Labeling Software
  • AI Build Software
  • MLOps and Foundation Model Ops Software
  • Trustworthy AI Software

  AI software services

  • Conversational AI Software Services
  • Computer Vision AI Software Services
  • Generative AI Software Services
  • Document AI Software Services
  • Anomaly Detection AI Software Services
  • Personalize AI Software Services
  • Forecast AI Software Services
• Multi cloud support: Yes

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Constraints are the responsibility of Atlassian.
• System requirements: None

User support

• Email or online ticketing support: Yes
• Support response times: Our standard support levels are: Priority 1 - respond 15 minutes, resolution 4 business hours Priority 2 - respond 1 hour, resolution 4 business hours Priority 3 - respond 1 hour, resolution 5 business days Priority 4 - respond 1 hour, resolution 30 business days These can be tailored to meet customer requirements. Both a technical account manager and cloud support engineers are provided.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: Our standard support levels are: Priority 1 - respond 15 minutes, resolution 4 business hours Priority 2 - respond 1 hour, resolution 4 business hours Priority 3 - respond 1 hour, resolution 5 business days Priority 4 - respond 1 hour, resolution 30 business days These can be tailored to meet customer requirements. Both a technical account manager and cloud support engineers are provided.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Initial discovery to determine requirements of usage.
• Service documentation: No
• End-of-contract data extraction: Self-service extracts.
• End-of-contract process: After the grace period access is revoked and data is deleted.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Mobile app and websupport
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: This is provided by Atlassian as standard
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: This is provided by Atlassian as standard
• API: Yes
• What users can and can't do using the API: This is provided by Atlassian as standard
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: The tools support a comprehensive customisation including things like: look and feel, workflows, forms, dashboards. This varies depending on tools. Admins and standard users have different levels of customisation available to them.

Scaling

• Independence of resources: Atlassian is responsible for this.

Analytics

• Service usage metrics: Yes
• Metrics types: Out of the box from Atlassian
• Reporting types: Real-time dashboards
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Atlassian

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: No
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Self-service data exports
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • PDF
  • Word
  • Zip
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: 99.9% uptime SLA
• Approach to resilience: Atlassian is responsible for this.
• Outage reporting: Atlassian is responsible for this, but use Statuspage

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Atlassian is responsible for this.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: ISO27001 and CyberEssentials Plus
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Atlassian is responsible for this.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Atlassian is responsible for this.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Atlassian is responsible for this.
• Incident management type: Supplier-defined controls
• Incident management approach: Atlassian is responsible for this.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Atlassian is responsible for this.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BCI
• ISO/IEC 27001 accreditation date: Monday 11 November 2024
• What the ISO/IEC 27001 doesn’t cover: The ISMS context of the organisation is: The provision of technical consultancy, software engineering, support and maintenance of digital services. Catapults internal processes as defined are the scope of ISMS.
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: F97a46dd-c00a-479a-bba0-2245bf74e9e8
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 4b185103-94a3-4214-a769-e6c52de609b9
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
    • Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
    • Ensuring accessibility to contracting and subcontracting opportunities for disabled business owners and employees
    • Collaborating with anchor institutions and community groups to make facilities available for education, training or community events

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

Service documents

• Pricing document

  ODS

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@catapult.cx. Tell them what format you need. It will help if you say what assistive technology you use.