MMG Mobile Marketing Group

SMS Reminders

Messaging alert services. SMS, Email, Voice and HLR , Multi-Channel Campaign Manager. The most highly accredited SMS provider for Security. UKAS Accredited ISO-27001, ISO9001, Cyber Essentials, Cyber Essentials Plus & Secure Digital Transactions Kitemark accredited. MMG delivers more SMS messages for UK Central and Local Government than any other provider

Features

  • 2FA / OTP Messaging
  • HLR Home Locator Response
  • API Integration
  • Email 2 SMS
  • Multi-Channel Campaign Platform
  • Omni Channel Messaging
  • 2 Way SMS Messaging
  • Global Connectivity
  • Smart Messaging
  • Email Messaging

Benefits

  • Secure UKAS ISO27001, Cyber Essentials, Cyber Essentials Plus
  • Secure Digital Transactions Kitemark Accredited
  • Connect Via API
  • Use the online UI for Sending and Receiving SMS
  • Send SMS Messages Globally
  • Fully redundant System
  • Premium SMS Routing
  • Send SMS from any email program , no integration required
  • Trusted supplier to Central and Local Government
  • All Systems and Services UK Based with no Data Transfer

Pricing

£0.02 to £0.02 a unit

  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@mmgrp.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

4 1 9 1 9 5 0 1 0 9 6 3 1 3 9

Contact

MMG Mobile Marketing Group Jason Bromley
Telephone: 02078732421
Email: sales@mmgrp.co.uk

Service scope

Software add-on or extension
No
Cloud deployment model
Private cloud
Service constraints
No Constraints
System requirements
Internet Access

User support

Email or online ticketing support
Email or online ticketing
Support response times
Within 30 Minutes
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.1 AAA
Phone support
Yes
Phone support availability
24 hours, 7 days a week
Web chat support
No
Onsite support
Onsite support
Support levels
There is a standard Service Level agreement which details all response times, and fixes to issues based on priority. The SLA is available on request. Alternatively certain clients may require a more bespoke SLA, which can be arranged.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Online training is available via Skype, Webex or Google Hangouts. A userguide in pdf format is available for the UI, and API integration. Technical support is available for any help required with any service.
Service documentation
Yes
Documentation formats
PDF
End-of-contract data extraction
Clients can access their report centre via the online UI at any time, and delete any information held. Clients can also pause or disable their account. Clients have the ability to change data retention polices within their UI Account.
End-of-contract process
Data will be encrypted and removed from all systems including backups after 30 days of the final invoice date. The data is held for this period for audit purposes only.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
No Difference, All features of the Online UI are available
Service interface
Yes
User support accessibility
WCAG 2.1 AAA
Description of service interface
Online UI, Dashboard, Reporting and Support Ticketing System
Accessibility standards
WCAG 2.1 AAA
Accessibility testing
Tested by CREST Approved 30,000 Hour Auditor
API
Yes
What users can and can't do using the API
Setup new API credentials through the Online UI to Manage multiple API connections. There is a single API for outbound and Inbound Messaging and connection types include HTTP, JSON, SMPP
MMG's systems allow 70,000 API connections per second.
API's are accredited with the Secure Digital Transactions Kitemark accreditation to OWASP guidelines.
API documentation
Yes
API documentation formats
PDF
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
Through the online UI users can customise certain functionality including sub accounts, api connections, anti spam setting, stop commands, inbound keywords, database management, security and data retention settings including PII encryption.

Scaling

Independence of resources
Systems have been performance tested by a third party government department. Our Server monitoring tools show no capacity issues if volumes increase by 1,000% without additional system resources.

Analytics

Service usage metrics
Yes
Metrics types
Online Report Centre showing inbound and outbound message flows, volumes, delivery and network statistics
Reporting types
Real-time dashboards

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Conforms to BS7858:2019
Government security clearance
Up to Security Clearance (SC)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
No
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least every 6 months
Penetration testing approach
‘IT Health Check’ performed by a CHECK service provider
Protecting data at rest
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
Data sanitisation process
Yes
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
Downloads via the Report Centre within the User Account online UI
Data export formats
CSV
Data import formats
CSV

Data-in-transit protection

Data protection between buyer and supplier networks
TLS (version 1.2 or above)
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
MMG Service Level is documented within our SLA, Each Incident is given a priority level against response and fix times. MMG offers a 99.9 Service Availability Guarantee through a fully redundant , load balanced system.
Approach to resilience
MMG Systems were designed together with the technical teams of one of the largest UK Government departments for Resilience, Security and Capacity. Each Service is fully load balanced through multi servers. Load Testing is conducted inline with our ISO9001, and Security Testing through our third party network penetration testing every 3 months. Further information is available on request.
Outage reporting
APP Alerts, Email Alerts

Identity and authentication

User authentication needed
Yes
User authentication
Username or password
Access restrictions in management interfaces and support channels
Within MMG, Specific roles are associated to Staff. Each role requires necessary access requirements. Each access is subject to approval at director level
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
User-defined

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
BSI
ISO/IEC 27001 accreditation date
22/05/2019
What the ISO/IEC 27001 doesn’t cover
No Non-Conformities
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
Yes
Cyber essentials plus
Yes
Other security certifications
Yes
Any other security certifications
  • Secure Digital Transactions Kitemark
  • Cyber Essentials
  • Cyber Essentials Plus

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
  • ISO/IEC 27001
  • Other
Other security governance standards
Cyber Essentials, Cyber Essentials Plus, Secure Digital Transactions Kitemark, ISO 9001 , through UKAS Accredited organisations.
Information security policies and processes
MMG is UKAS Accredited ISO27001, ISO9001, Cyber Essentials, Cyber Essentials Plus, and Secure Digital Transactions Kitemark accredited. Security issues are alerted to users as per our ISO27001. Third party penetration testing on our api's, servers, website, UI, every 3 months inline within OWASP guidelines ensures MMG systems are continuously updated with the latest security patches. Continued third assessment to these guidelines every 3 months and monitored inline with our ISMS,

Operational security

Configuration and change management standard
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach
Our ISO-27001 Change Management Policy, includes description of change, test method through sandbox testing, approval, live status tracking, and roll back availability. All change requests must be approved by Senior Management.
Vulnerability management type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach
Third party testing is conducted by CREST Approved 30,000 hour testers independently and verified every 3 months. Tests are conducted to the latest OWASP Guidelines. Patch Management is conducted based on new releases and Pen test reports.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Firewall Rules, Server Monitoring through specialist monitoring tools triggering alerts. IP restricted access, automatic blocking of potential attacks.
Incident management type
Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach
Users can report incidents via our online platform, support ticketing system or telephone A ticket will be created and incidents will be updated throughout the incident through the ticketing system once and investigation is completed the ticket will be marked as closed.

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks
No

Social Value

Fighting climate change

Fighting climate change

We are committed to Climate Change, and since January 2022 have been working with SLR Consulting, to Map our Carbon Emissions. In Line with PPN 06/20 and associated guidance and reporting standard for Carbon Reduction Plans.

Although we currently have very low emissions we are working towards net zero emissions by 2025 , This is Documented within our Carbon Reduction Plan

Emissions have been reported and recorded in accordance with the published reporting standard for Carbon Reduction Plans and the GHG Reporting Protocol corporate standard and uses the appropriate Government emission conversion factors for greenhouse gas company reporting .
Scope 1 and Scope 2 emissions have been reported in accordance with SECR requirements, and the required subset of Scope 3 emissions have been reported in accordance with the published reporting standard for Carbon Reduction Plans and the Corporate Value Chain (Scope 3) Standard .

Pricing

Price
£0.02 to £0.02 a unit
Discount for educational organisations
No
Free trial available
Yes
Description of free trial
No Obligation Free Trial Credits.
Link to free trial
Www.mmg.co.uk

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@mmgrp.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.