BASEEL PARTNERS LLP

Clould SaaS services

Baseel Partners LLP can offer various products in the areas of risk management, security, IT Management, business process, IT governance, and compliance requirements. We can also develop bespoke products as per the client needs and provide the services as SaaS.

Features

  • Range of products in various areas
  • Can develop SaaS solution bespoke to client requirements
  • Partnering with industry leading SaaS providers such as SAP
  • Business specific requirements
  • simple to use and efficient applications

Benefits

  • Product sizing as per client needs
  • Extremely attractive pricing, unlimited users
  • Compliance with industry standards with optimum cost and efforts
  • Products are focusing on the organisational needs
  • Continue product improvements
  • Better management reporting
  • Secured environment

Pricing

£500 to £10,000 a licence a year

  • Education pricing available
  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@baseel.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

3 9 5 0 4 5 2 6 3 5 5 3 4 2 3

Contact

BASEEL PARTNERS LLP Paresh Deshmukh
Telephone: 07825362359
Email: info@baseel.co.uk

Service scope

Software add-on or extension
Yes, but can also be used as a standalone service
What software services is the service an extension to
We are flexible and can develop as per the client needs
Cloud deployment model
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
Service constraints
None - We are flexible and can develop as per the client needs
System requirements
None- flexible and can develop as per the client needs

User support

Email or online ticketing support
Yes, at extra cost
Support response times
We are flexible and can design this service as per the client needs
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
None or don’t know
Phone support
Yes
Phone support availability
24 hours, 7 days a week
Web chat support
Yes, at an extra cost
Web chat support availability
24 hours, 7 days a week
Web chat support accessibility standard
None or don’t know
How the web chat support is accessible
We are flexible and can design this service as per the client needs
Web chat accessibility testing
We are flexible and can design this service as per the client needs
Onsite support
Yes, at extra cost
Support levels
We are flexible and can design this service as per the client needs
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Understanding the business, explaining onboarding process, training , focused handholding sessions
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
  • Other
Other documentation formats
Word
End-of-contract data extraction
It depends on how the client wants to extract their data. we are flexible on the data extraction services.
End-of-contract process
We are extremely flexible on the services and can address client needs in the contract

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
Application to install
Yes
Compatible operating systems
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
  • Windows Phone
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
Nothing major - in some cases the look and feel of the screens might be different but the functionality will remain the same
Service interface
Yes
User support accessibility
None or don’t know
Description of service interface
We are flexible and can design this service as per the client needs
Accessibility standards
None or don’t know
Description of accessibility
We are flexible and can design this service as per the client needs
Accessibility testing
We are flexible and can design this service as per the client needs
API
Yes
What users can and can't do using the API
We are flexible and can design this service as per the client needs
API documentation
Yes
API documentation formats
  • Open API (also known as Swagger)
  • HTML
  • PDF
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
We are flexible and can design this service as per the client needs

Scaling

Independence of resources
We ensure the sizing the application is done properly and we also monitor performance of the applications

Analytics

Service usage metrics
Yes
Metrics types
We are extremely flexible on the services and can address client needs
Reporting types
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

Supplier type
Reseller providing extra features and support
Organisation whose services are being resold
Various

Staff security

Staff security clearance
Conforms to BS7858:2019
Government security clearance
Up to Baseline Personnel Security Standard (BPSS)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
User control over data storage and processing locations
Yes
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least every 6 months
Penetration testing approach
‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
Protecting data at rest
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
Data sanitisation process
Yes
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
We are extremely flexible on the services and can address client needs
Data export formats
  • CSV
  • ODF
  • Other
Other data export formats
Excel
Data import formats
  • CSV
  • ODF
  • Other
Other data import formats
Excel

Data-in-transit protection

Data protection between buyer and supplier networks
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Bonded fibre optic connections
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability
We are flexible to meet the client needs
Approach to resilience
We go for standard cloud providers such as Azure, AWS and CGP. They have a resilient setup
Outage reporting
A public dashboard an API email alerts

Identity and authentication

User authentication needed
Yes
User authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
Access restrictions in management interfaces and support channels
Access restrictions are done through role-based access controls. Technical controls are implemented for the access restrictions
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
User-defined

Standards and certifications

ISO/IEC 27001 certification
No
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
Yes
Cyber essentials plus
Yes
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
  • CSA CCM version 3.0
  • ISO/IEC 27001
Information security policies and processes
We follow ISMS framework (ISO27001) as well as NIST and CSA CCM version 3.0, where applicable

Operational security

Configuration and change management standard
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach
We have our configuration and change management process complying with ISO27001 and NIST framework
Vulnerability management type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach
We conduct regular risk assessments and vulnerability scans, and pen testing of our environment. we have a strong patch management process in which the high risk and critical patches are applied within 7 days and other patches are applied maximum within a month. we get information about potential threats from various security product providers
Protective monitoring type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach
We have logging and monitoring mechanisms setup to identify the potential compromises. once alert is raised, we investigate the alert and assess the impact to take action based on the risk level. we can respond to an incident as soon as we are alerted
Incident management type
Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach
Yes we have a predefined process aligned to NIST and ISO27001 standard. users report incidents to our incident mail id incident reports are provided to the required and relevant stakeholders through email

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks
No

Social Value

Fighting climate change

Fighting climate change

As part of the contract delivery we shall try our level best to:
- Deliver additional environmental benefits in the performance of the contract including working towards net zero greenhouse gas emissions.
- Influence staff, suppliers, customers and communities through the delivery of the contract to support environmental protection and improvement.
Covid-19 recovery

Covid-19 recovery

As part of the contract delivery we shall try our level best to:
- Create employment, re-training and other return to work opportunities for those left unemployed by COVID-19, particularly new opportunities in high growth sectors.
- Support people and communities to manage and recover from the impacts of COVID-19, including those worst affected or who are shielding.
- Support organisations and businesses to manage and recover from the impacts of COVID-19, including where new ways of working are needed to deliver services.
- Support the physical and mental health of people affected by COVID-19, including reducing the demand on health and care services.
- Improve workplace conditions that support the COVID-19 recovery effort including effective social distancing, remote working, and sustainable travel solutions
Tackling economic inequality

Tackling economic inequality

As part of the contract delivery we shall try our level best to:
- Create opportunities for entrepreneurship and help new, small organisations to grow, supporting economic growth and business creation.
- Create employment opportunities particularly for those who face barriers to employment and/or who are located in deprived areas.
- Create employment and training opportunities, particularly for people in industries with known skills shortages or in high growth sectors.
- Support educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications.
- Influence staff, suppliers, customers and communities through the delivery of the contract to support employment and skills opportunities in high growth sectors
Equal opportunity

Equal opportunity

We shall always
- Demonstrate action to identify and tackle inequality in employment, skills and pay in the contract workforce.
- Support in-work progression to help people, including those from disadvantaged or minority groups, to move into higher paid work by developing new skills relevant to the contract.
- Demonstrate action to identify and manage the risks of modern slavery in the delivery of the contract, including in the supply chain

We also try our level best to
Demonstrate action to increase the representation of disabled people in the contract workforce.
- Support disabled people in developing new skills relevant to the contract, including through training schemes that result in recognised qualifications.
- Influence staff, suppliers, customers and communities through the delivery of the contract to support disabled people
Wellbeing

Wellbeing

we shall always
- Demonstrate action to support the health and wellbeing, including physical and mental health, in the contract workforce.
- Influence staff, suppliers, customers and communities through the delivery of the contract to support health and wellbeing, including physical and mental health.
-Demonstrate collaboration with users and communities in the codesign and delivery of the contract to support strong integrated communities.
- Influence staff, suppliers, customers and communities through the delivery of the contract to support strong, integrated communities

Pricing

Price
£500 to £10,000 a licence a year
Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
We are flexible and need to discuss this with the client

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@baseel.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.