Rocktime Ltd

QR code generator cloud platform

Using Cloud Technology the QR Code Generator Cloud platform harnesses the power of QR Codes and integrates these into a system that allows local authorities to manage all communication messages whether delivered for citizen consumption and/ or guidance for council staff during the course of their daily work activity.

Features

• Real-time
• Inform at point of need
• Targeted Audience
• Most up-to-date Information
• Cloud based
• Mobile device accessible
• Utilises different media formats such as web page, video, document

Benefits

• Communicate at recreation venues with access to public amenities
• Public Safety such as transportation
• Environmental Protection
• Parking Regulations
• Business support and advice
• Social Services supporting the community
• Education & Childcare
• Property access and maintenance
• Community & leisure centres
• Health & Social Care

£1,500 an instance

• Education pricing available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at rtsales@rocktime.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

390772080883836

Contact

Alex McCreath
01202 678777
rtsales@rocktime.co.uk

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: The QR Code Generator Cloud Platform can be integrated with any other platform via an API so support the generation of important information statements/ messages.; Our platform benefits any situation where there is a need to display a QR Code with the option to access specific updateable information.
• Cloud deployment model: Public cloud
• Service constraints: No constraints identified.
• System requirements: No requirements as standalone cloud hosted system

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Our standard response times are during normal office hours with an option for clients who wish to extended this with an Extended Warranty and Support Agreement which includes 24/7.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: Our Extended Warranty and Support Agreement is tailored to individual organisation requirements with access to a support team via our online ticket system which uses SMS notifications to inform the team out of hours or managed by the support team during normal office hours.; A support manager is made available for any additional communications.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Rocktime's ethos is to build partnerships with our clients to ensure the best possible outcomes. This involves scoping and stakeholder workgroups at the onset and regular account and project management meetings with the client during the delivery process. Full training is supplied onsite on a one-to-one or one-to-many basis, ongoing training support is via telephone or screen share facilities.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: All data is held in a SQL database or if integrated, within the users systems. All data will be extracted by Rocktime and sent to the user in their preferred format at the end of the contract.
• End-of-contract process: Rocktime have a documented process for onboarding and offboarding clients using verso. this includes extracting client data from verso and ensuring all API links are closed. Any developer time required for this process will be quoted for depending on the client configuration.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Our platform has been built using a responsive framework to maximise the user experience without losing functionality.
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: Our platform provides a user dashboard to allow for access to service functionality.
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: Our platform relies on the accessibility settings defined by the user's device.
• API: Yes
• What users can and can't do using the API: A custom API provides the necessary access to push and pull information.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: No

Scaling

• Independence of resources: Each client will have their own iteration of the system

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Data can be exported via API or .CSV
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: Updates will be carried out on request by the client according to the following summary of services: Option 1: Telephone and email support service during standard working hours and evenings Email support service during evenings Site Monitoring Response Times Priority Level 1 Within 24 hours Priority Level 2 Within 50 hours Option 2: Telephone and email support service during standard working hours Email support service during evenings Site Monitoring (tests every 5 mins) Response Times Priority Level 1 Within 18 hours Priority Level 2 Within 50 hours Option 3: Telephone and email support service during standard working hours Email support service during evenings and weekends Site Monitoring Response Times Priority Level 1 Within 12 hours 24/7 Priority Level 2 Within 40 hours Option 4 - Critical: Telephone and email support service during standard working hours Email support service during evenings and weekends Site Monitoring Response Times Priority Level 1 Within 4 hours 24/7 Priority Level 2 Within 24 hours Note: These are response times for incident notification; they are not times for incident resolution.
• Approach to resilience: Information available on request
• Outage reporting: Email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Verso's control panel utilises role based permissions, so staff and admin user functionality is defined by the users individual login permissions. Support functions are limited to named persons within the organisations who will either email or provide authentication when using telephone support
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: No audit information available
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: The British Assessment Bureau (UKAS accredited)
• ISO/IEC 27001 accreditation date: 01/02/2024
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: Self Assessment - SAQ-D
• PCI DSS accreditation date: 25/04/2024
• What the PCI DSS doesn’t cover: N/A
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications: CESG Architectural Pattern No. 10

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Our systems and services are compliant with ISO 27001:2017

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Verso has has a release cycle for upgrades and changes, the implementation of which is managed under ISO 9001:2015 & ISO 27001:2017
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: In accordance with ISO 27001:2017 Rocktime's approach for managing vulnerabilities is as follows: Timely identification of vulnerabilities - The sooner we discover a vulnerability, the more time we will have to correct it, or at least to warn the clients about the situation, decreasing the opportunity window a potential attacker may have. Assessment of Rocktime's exposure to a vulnerability. - Rocktime will risk assess to identify and prioritise those vulnerabilities that are more critical to our own or our clients assets and business. Proper measures considering the associated risks - plan actions and allocate resources to deal with risks accordingly.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Rocktime conforms to ISO 27001:2017 requirements for logging and monitoring. This includes Event Logging, Protection of log information, Administrator and operator logs and clock synchronization.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Rocktime conforms to ISO 27001:2017 incident management clauses that include: 5.1 — Leadership and commitment 7.2 — Competency 5.3 — Organizational roles, responsibilities and authorities A.16.1.1 — Responsibilities and procedures A.16.1.4 — Assessment of and decision on information security events A.16.1.5 — Response to information security incidents A.16.1.6 — Learning from information security incidents

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Rocktime Limited aims to achieve excellence in all areas of our company with the commitment to minimising the environmental impacts of our business operations. Our commitment sets out to: • Reduce our consumption of resources and improve the efficient use of those resources. • Continuously improve our environmental performance and integrate recognised environmental management best practice into our business operations. • Measure and take action to reduce the carbon footprint of our business activities to meet objectives and targets. • Manage waste generated from our business operations according to the principles of reduction, re-use and recycling. • Manage our business operations to prevent pollution. • Give due consideration to environmental issues and energy performance in the use of our office buildings. • Ensure environmental, including climate change, criteria are taken into account in the procurement of goods and services. • Comply as a minimum with all relevant environmental legislation as well as other environmental requirements. To meet our commitments, we will: • Set and monitor key objectives and targets for managing our environmental performance at least annually. • Communicate internally and externally our environmental policy and performance on a regular basis and encourage feedback. • Communicate the importance of environmental issues to our people. • Work together with our people/employees, service partners, suppliers, landlords and their agents to promote improved environmental performance. • Promote appropriate consideration of sustainability and environmental issues in the services we provide to our clients. • Review our environmental policy regularly.

  Covid-19 recovery

  Covid-19 recovery As a cloud technology company, Rocktime has been successful in implementing changes to processes and procedures to adapt to the new norm that features greater flexibility in the manner in which it conducts its business both with its staff as well as with clients. The company has actively promoted excellence through the use of technology that helps local businesses to connect and work more effectively, benefitting from collaborative working arrangements to foster positive business relationships in the local community and recovery as we exit Covid-19 and accept the current economic landscape. The company engages with local diverse market businesses to advise on the use of technology in the same manner as it does with its public sector clients with the aim to open up supply chain opportunities.

  Tackling economic inequality

  The company’s values a diverse workforce and the contribution each individual makes. We are committed to promoting inclusivity, equality and diversity in our policies, practices and procedures. This policy applies to the company's dealings with all its people as well as others engaged by or who work with the firm including, for example, clients, job applicants and other third parties. The company believes in treating everyone equally and with the same attention, courtesy and respect regardless of their age, disability, gender reassignment, marriage/civil partnership, pregnancy/maternity, race, religion or belief, sex and sexual orientation which is referred to within its Equality, Diversity and Inclusion Policy as the "protected characteristics".

  Equal opportunity

  The company has always believed in promoting diversity within the workplace and this forms part of its recruitment practices. Using the 5 foundational principles of quality work set out in the Good Work Plan (e.g. fair, pay, participation and progression, voice and autonomy). Career advice with local schools offers opportunity to instil insights and confidence in potential career paths for young people whilst also providing the opportunity for a work placement. Additionally, consideration is made for recruiting trainees and training them to perform roles whilst offering them a career path within the business or as a means to seek one elsewhere.

  Wellbeing

  The company recognises the pressures that have arisen in recent times with Covid-19 and the effects of social distancing, remote working and travel enforcements. Through constant dialogue with its team the company has sort to provide flexible working conditions whilst maintaining regular and personal engagement to reduce the impact of loneliness and isolation. Believing in the positive nature of ‘culture’ within a company, initiatives are in place to maintain and reinforce a team mentality that aims to support individuals and foster wellbeing.

Pricing

• Price: £1,500 an instance
• Discount for educational organisations: Yes
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at rtsales@rocktime.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.