GAMMA NETWORK SOLUTIONS LIMITED

Webex Calling

Cloud calling platform delivering secure, scalable business telephony anywhere.
Unified calling experience with integrated collaboration, analytics and simple management.

Features

• High‑definition voice services across desktop, mobile and desk phones.
• Enterprise call features including queues, routing, park, pickup and groups.
• Unified Webex app for calling, messaging and collaboration.
• Voicemail‑to‑email transcription for simpler message retrieval.
• Flexible calling plans and PSTN options delivered by Gamma.
• Single management portal for devices, numbers and configuration.
• Secure cloud PBX with resilience and always‑on availability.
• Integrates cleanly with Microsoft Teams and business applications
• Comprehensive call recording and storage options.
• Scalable cloud architecture supporting changing organisational needs.

Benefits

• Improved communication quality using enterprise‑grade cloud calling
• Lower infrastructure overhead with a cloud telephony model.
• Enables hybrid working with calling available on any device.
• Simplifies operations with centralised administration and analytics.
• Strengthens security with enterprise‑grade protections and encryption.
• Scales effortlessly as user numbers or needs evolve.
• Boosts productivity with integrated messaging and meetings tools.
• Easier management of numbers, devices and user settings.
• Smooth migration from legacy PBX and telephony systems.
• Ensures reliable communication through Gamma’s resilient voice network.

• Education pricing available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bidteam@gamma.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

392417120831461

Contact

Public Sector Sales Team
0333 043 7330
bidteam@gamma.co.uk

About your service

• Service categories:

  Applications

  Collaborative

  • Team collaboration
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: The use of third‑party devices with Webex Calling requires Cisco approval before they can be provisioned through Control Hub.; When using Yealink or Poly devices on a Webex Calling service, the following limitations apply:; ; Manual provisioning only (activation codes and EDOS not supported); Devices must be added individually in Control Hub (no bulk provisioning); Configuration is locked, preventing third‑party device management; Device settings cannot be modified through Control Hub (no override support)
• System requirements:
  • Relevant APIs are available within your environment for integration.
  • Adequate bandwidth is in place to support cloud calling services.
  • Firewall rules are configured appropriately to allow required cloud traffic.

User support

• Email or online ticketing support: Yes
• Support response times: Gamma's Service Desk is 24x7 and any emails or online tickets are handled as per the below SLA. General questions are classified as a severity 4 and have an update SLA of 48 hours. However, other severity classifications have a response time as per below: Severity 1 -30 min, Severity 2 -60 min, Severity 3 - 4 hours, Severity 4 -12 hours.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Gamma provides one level of support for all Webex Calling customers 24x7x365 - included free of charge as part of the service charge. The following service levels apply with target resolution times: Critical Fault - Loss of service - Multiple services affected - 60 mins. High - Loss of service - single service - 4 Hours. Medium - Disrupted service - 12 hours. Low - Single number destinations or Quality of Service - 48 hours. Service availability for Webex Calling is 99.99%. Mean Average PESQ Score target of 4.1 for G.711 and 3.7 for G.729. We provide Service Desk and Account Management Teams. Support engineers answer the phones in the Gamma Service Desk and perform first stage fault analysis. If they are unable to resolve the incident will be escalated to Tier 2 and Tier 3 engineers.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Gamma supports users through a structured onboarding process including discovery, design, provisioning, migration and training. We set up Webex Calling, configure call flows, port numbers, deploy devices and prepare users for go‑live with clear guidance and support. Once live, the service transitions into our managed service wrap, with UK‑based support and ongoing optimisation to ensure a smooth and reliable experience.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Information is purged as part of the decommissioning process. All invoices are in one place and kept for 12 months for historical billing information on the services you have taken. This information can be easily downloaded for extraction into excel.
• End-of-contract process: At the end of the contract the customer moves onto a rolling 30 day contract on our standard rates. Numbers can be ported from our Webex Calling service to another supplier following the industry standard process.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Language used and document structure simple and easy to follow, any images used are described in the text.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: There is a consistent user experience across both mobile and desktop clients. However, some features are not available on the mobile app, including automatic answer, manager/assistant functions, call pickup, multiple line support, remote desktop control and screen sharing.; Conversely, certain features are available on mobile but not on desktop, such as placing work calls using callback and the use of mobile widgets.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: Webex Calling has a web-based service interface accessible from any location and secured by login.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: User interface testing is in continuous practice ensuring comprehensive test coverage through agile software delivery framework and user based focus testing with active engaged feedback based on client defined user groups, including identified disbabilities.
• API: Yes
• What users can and can't do using the API: Webex Calling provides a set of open APIs that allow organisations to tailor their calling environment and embed communications into existing business processes. These APIs fall into two main groups: Administrative APIs and User APIs.; Administrative APIs enable actions such as provisioning users, locations and settings, as well as generating reports, including call detail reporting and report templates.; User‑focused Calling APIs support capabilities like call control (performing call actions or surfacing call information within third‑party applications), voice messaging functions and real‑time calling events via webhooks.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: You can customise the Webex user experience by applying your organisation’s branding, including your logo, colour palette, and links to your help, feedback and policy pages. Some elements of this branding can be overridden if required.

Scaling

• Independence of resources: As a cloud‑based service, Webex Calling is built to scale with your organisation. You can start with a small deployment and expand easily by adding licences as your needs grow. This ensures flexibility, efficiency, and predictable scaling for organisations of all sizes.; The secure architecture connecting Webex Calling to customer session border controllers (SBCs) also supports higher levels of scalability, enabling reliable growth without compromising performance.

Analytics

• Service usage metrics: Yes
• Metrics types: Webex Calling provides built‑in reporting and analytics within Control Hub, offering detailed insights into calling activity and service performance. This includes analysis of call behaviour, quality metrics and overall utilisation.; Reports can be created on demand, scheduled for automatic delivery, or generated programmatically through APIs.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Typically users will extract their applicable data in Excel or CSV format.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Excel
  • PDF
• Data import formats:
  • CSV
  • Other
• Other data import formats: Excel

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Webex Calling service availability is calculated as: Total number of minutes in the measurement period – Unplanned Downtime x 100 / Total number of minutes in the measurement period Note: If a Service is partially available then the Unplanned Downtime shall be calculated in equal proportion i.e. if a service is 50% available then the unplanned downtime will be calculated as 50% x elapsed period of the incident. Availability Measurement Period: 1 Calendar month. Target availability for Webex Calling is: 99.99%+. Not included: - Outages which are deemed by us to be the result of matters outside of its direct control - Planned or emergency maintenance works - User error Notes: (1) Core functions are defined as Gamma Switching infrastructure, transmission equipment and core network, the service that supports call routing and termination. (2) Non-Core functions include Gamma Support Systems, access to any relevant portals and feature based services such as Call Plans, Call diverts, Auto Attendant, Call Recording, and Unified Messaging
• Approach to resilience: Gamma’s Webex Calling service is designed for high availability and fault tolerance through resilient cloud architecture and accredited business continuity practices. The service uses virtualised Session Border Controllers deployed in highly available clusters within AWS, designed so that multiple component failures within a cluster can occur without impacting service continuity. These clusters run in UK government‑compliant AWS data centres, providing geographical resilience across regions (London and Ireland).; Gamma also underpins resilience with certified continuity processes, holding ISO 22301:2012 Business Continuity Management accreditation. Detailed continuity and resilience controls can be shared on request where appropriate.
• Outage reporting: A public network status dashboard, Email alerts, Portal alerts, Text messages to opted in mobile numbers, Service desk verbal communication

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Username or password
  • Other
• Other user authentication: SAML SSO
• Access restrictions in management interfaces and support channels: We authenticate users through customer administrators setting permissions for access. Access can be restricted by Role to specific areas and functionality within Webex Calling.
• Access restriction testing frequency: At least once a year
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cyber Essentials, Cyber Essentials Plus
• Information security policies and processes: Gamma has deployed an Information Security Management System Manual (ISMS) which meets and is certified to ISO 27001:2013, Cyber Essentials and Cyber Essentials Plus. It is supported by numerous policies and processes including but not limited to the following: Information Security Policy, Information Security Incident Policy, Acceptable use policy, Access Control Procedure Backup Plan, Business Continuity Plan, Confidential Data Policy, Data Protection Policy. The Reporting structure is from employees or customers to the Information Security Manager to the Information security Forum which is attended by several Directors and heads of departments. The Information Security Forum meets monthly to review all security incidents and events and corrective actions are agreed and tracked at this forum. To raise awareness, Gamma uses a computer based training platform for Security Awareness which is repeated annually. Line Managers have a responsibility to ensure their staff are aware of and follow these policies.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Change Control Process covers changes made to operational systems, to mitigate the risks and impacts that any change has and ensures good communication at all stages. Change Management ensures changes to core infrastructure and services are performed and implemented correctly. Best practice guidance, aligned to ITIL (OGC), recommends that the starting point for any change should be a review of generic questions or the ‘seven Rs’. A risk and impact assessment is carried out for each change this involves detailing the assets under change. The Change Advisory Board (CAB) has a representative from each impacted business area.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: We use failure mode effects analysis process, conducting regular, systematic assessments of vulnerabilities to determine the necessity of safeguards, countermeasures and controls, monitoring for changes to maintain an acceptable level of risk. Includes identifying key information assets and subjecting them to specific risk assessments, assessing exposure to a list of common threats and vulnerabilities, maintaining risk registers, implementing technical, policy, business continuity and management initiatives; Each patch is assessed and deployed accordingly: High - Urgently. Medium - ASAP. Low - as time permits. Gamma utilise many Vendor sources and industry RSS feeds, CERT, Ubuntu and Debian. Member of CiSP.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Gamma utilises GPG 13 guidance. Gamma has built a Security Information & Event Management Solution (SIEM) to identify potential compromises. If a compromise is found it is investigated. A Security Incident is raised to track the investigation, root cause and solutions if required to rectify or improve the situation. We respond to incidents as close to real time as practicable.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Gamma has an Incident Management process which has numerous pre-defined sub groups of staff designated for particular products or scenarios. It can be initiated by any member of staff and is managed by the 24/7 Network Operations Centre (NOC). Any incident is reported by the customer to the Service Desk, it is recorded in a customer relationship management tool (CRM) and an Incident report is produced after root cause analysis has taken place. Any Incident reports are made available to end users via pdf.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: Yes
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 2%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 12.5%
• Over £5,000,001: 15%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Alcumus ISOQAR
• ISO/IEC 27001 accreditation date: Wednesday 2 July 2025
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: Alcumus ISOQAR
• ISO 9001 accreditation date: Monday 17 June 2024
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: A-LIGN
• PCI DSS accreditation date: Friday 12 September 2025
• What the PCI DSS doesn’t cover: N/A
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: C4531076-493b-4813-a761-c80d933ad97c
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 4f2547da-4b2d-4057-bfd9-b6553ac0faee
• Other security certifications: Yes
• Any other security certifications:
  • ISO22301
  • CREST SOC

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bidteam@gamma.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.