Classlink Inc.

ClassLink

A leading provider of cloud-based education products that connect educators and students with their classroom, curriculum and each other in richer, more powerful ways. As advocates for open data standards, we offer instant access to apps/files with single sign-on, streamline class rostering, automate account provisioning, and provide actionable analytics.

Features

  • Single Sign-On Platform for all digital resources and files
  • Real-time analytics and reporting of application usage and engagement
  • Rostering to all digital resources using open data standards
  • Account Provisioning Create and manage Google/Azure and Active Directory accounts
  • Microsoft Teams and Google Classroom provisioning
  • MIS & API integration
  • Secure access
  • 24/7 Support & Training
  • Multi Factor Authentication -wide range of options for authentication
  • Parent account provisioning

Benefits

  • ClassLink creates a single point of access to all files/resources
  • Customisable launchpad and notifications for each school, user & group
  • Access cloud digital learning anytime, on any device, anywhere
  • Automated user provisioning, de-provisioning and management in real time
  • Only pay for students and full time teachers
  • Publish and manage content for all users easily (Management Console)
  • ClassLink Analytics gives administrators access to specific usage reports
  • Full & Unlimited Support and Training
  • Roster-Server delivers class rosters to your digital learning resources securely
  • OneSync automatically imports MIS users into AD, Google, and Office365

Pricing

£2.00 to £2.95 a licence a year

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at andrew.aitchison@classlink.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

4 3 3 1 3 5 7 2 8 4 5 6 9 1 6

Contact

Classlink Inc. Andrew Aitchison
Telephone: +447801235248
Email: andrew.aitchison@classlink.com

Service scope

Software add-on or extension
Yes, but can also be used as a standalone service
What software services is the service an extension to
Browser extension
Cloud deployment model
Private cloud
Service constraints
ClassLink does not have scheduled maintenance windows and all updates are performed while the system is live.
System requirements
  • ClassLink is a cloud-based system that includes various modules.
  • The overall infrastructure is hosted at Amazon Web Services (AWS).
  • Certain modules require individual VMs that can be installed on-premises

User support

Email or online ticketing support
Email or online ticketing
Support response times
ClassLink online Help and Training Center at www.classlink.com/help is available 24/7
Issue response times are as follows: ClassLink will respond to service-related incidents and/or requests submitted and prioritized by the Customer within the following time frames:
0-2 hours (during business hours) for issues classified as high priority.
0-12 hours (outside of business hours) for issues classified as high priority
Within 24 hours for issues classified as medium priority.
Within 3 working days for issues classified as low priority.
System-wide incidents trigger instant alerts to ClassLink staff who respond immediately 24/7/365.
User can manage status and priority of support tickets
No
Phone support
Yes
Phone support availability
24 hours, 7 days a week
Web chat support
Web chat
Web chat support availability
24 hours, 7 days a week
Web chat support accessibility standard
WCAG 2.1 AA or EN 301 549
Web chat accessibility testing
Further details provided upon request.
Onsite support
Yes, at extra cost
Support levels
ClassLink provides unlimited live technical services 24 hours a day, seven days a week, except ClassLink observed holidays. The cost for unlimited technical support is included in the subscription license.

This support is in the form of human contact either by phone or through our website/helpdesk. - https://help.classlink.com/s/
Support available to third parties
Yes

Onboarding and offboarding

Getting started
ClassLink has a proven strategy for successful implementations which includes experienced implementation leadership and team members, a thorough implementation strategy, and the use of project management tools that track activities to an agreed-upon timeline.
ClassLink employs Implementation Specialists on our Educational Success teams. All specialists have extensive educational technology experience and are PMI certified. ClassLink’s project approach and plan are rooted in educational foundation and experience then enhanced and monitored through PMI philosophies and workflows. We utilize an online project management system on all new implementations that includes a client’s view of all goals, objectives, tasks, details, resources, and timelines. The first step of the project is to create a project team with appropriate representation from invested parties from the organization. A project plan will be developed, referenced, and modified throughout the course of the project. Any changes to the scope will be clearly stated.

Our implementation model allows for all different types of training and different mediums: webinars, onsite training, user groups, user conferences, ClassLink academy, videos and anything else necessary to ensure your end users are knowledgeable and successful. We customize a training solution based on the needs, desires and culture of the organization.
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
  • Other
Other documentation formats
  • Live and recorded webinars
  • On-demand training videos
End-of-contract data extraction
The ClassLink system stores very little historical data. Rostering data is all stored on the clients Roster Server, which is under complete control by the district.

ClassLink permanently deletes personal data after the termination of a contract, when no longer needed, or when advised to do so by the customer.
End-of-contract process
Included in full purchase contract -

24/7 support and training - unlimited
Launchpad & Analytics - providing Single Sign-On platform and usage/engagement analytics
Roster Server - Permitting safe and secure rostering for all digital resources
One Sync Server - Ability to create and manage accounts in AD/Azure and Google
Parental Portal - Platform from which all parents can access their digital resources too.

If data needs to be purged or destroyed, at the termination of a contract for example, the Roster Server instance is destroyed, and any rostering data on the server is destroyed along with the server. ClassLink will end access to the system in the event of termination.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
Application to install
Yes
Compatible operating systems
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
  • Windows Phone
  • Other
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
None.
Service interface
Yes
User support accessibility
WCAG 2.1 AA or EN 301 549
Description of service interface
The ClassLink Management Console enables school administrators to synchronise users with the school’s authentication engine, create and assign single sign-on applications to users, and manage all other aspects of the ClassLink environment. The Management Console is feature-rich and easy to use, and school administrators receive training in its use. The development of new features and functionality are on-going with the ClassLink Management Console.
https://support.classlink.com/hc/en-us/articles/115002773193-Management-Console
Accessibility standards
WCAG 2.1 AA or EN 301 549
Accessibility testing
Details provided upon request.
API
Yes
What users can and can't do using the API
Tbd
API documentation
Yes
API documentation formats
  • HTML
  • PDF
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
Yes, ClassLink has customization features included with the platform. Schools can change the branding, theme, background images, welcome/login text, login options, favicon and portal name. The ClassLink user experience can be personalised to fit user needs by selecting themes, colour preferences, icon shape and size, avatars, and organizing icons to suit each user while preventing them from deleting key applications.

Scaling

Independence of resources
ClassLink uses a variety of tools for redundancy and security
Load balancing
Clustering
Dynamic system scalability
Datacenter and regional failover
Hot spares for emergency replacement of faulty clusters
Distributed content delivery for speed and security
Advanced DDOS and malicious traffic protection

It is understood, however, that a complete failure of the AWS infrastructure would cause the ClassLink system to become unavailable.

A comprehensive redundancy/failover/security group discussion is available upon request.

Analytics

Service usage metrics
Yes
Metrics types
ClassLink allows users to measure and view the digital resources they are accessing through ClassLink providing detailed usage and engagement metrics. This is visable to users, teachers and admin/leaders on a permission based approach.

In addition, ClassLink allows users at admin level to see at group/school user level :

Custom dashboard for all of your connected educational apps, showing a summary of logins, users, and apps.

View reports by building, grade level, classroom, and individual.
See which apps are your strongest, most frequently used.
Search for underutilised products to inform training and communications.
Reporting types
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Conforms to BS7858:2019
Government security clearance
None

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
No
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least every 6 months
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
  • Physical access control, complying with CSA CCM v3.0
  • Encryption of all physical media
Data sanitisation process
Yes
Data sanitisation type
Deleted data can’t be directly accessed
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
ClassLink Roster Server has the ability to create custom export file(s) as defined by the customer in .CSV format as well as through the ClassLink API.
Data export formats
  • CSV
  • Other
Other data export formats
  • API data exchange
  • OneRoster data standard
  • PDF
Data import formats
  • CSV
  • Other
Other data import formats
  • OneRoster data standard
  • API data exchange
  • ODBC
  • Microsoft Excel
  • Google Sheets
  • Active Directory

Data-in-transit protection

Data protection between buyer and supplier networks
TLS (version 1.2 or above)
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
Please refer to the full ClassLink Service Level Agreement available upon request. In the event that the System Uptime is below 99.99% in a month, ClassLink will provide Customer with credits in the amount set forth below (Credit for Unscheduled Downtime).
Monthly system uptime from 99.80% to 99.98% - credit of 4% of the prorated portion of the annual ClassLink license fee attributable to the affected ClassLink product and month for which Unscheduled Downtime occurred.

For example, November having 30 days represents 30/365 or 8.2% of the annual ClassLink license fee for a given ClassLink product. Credit for November would be computed as (.04) x (.082) x (annual ClassLink license fee attributable to the affected ClassLink products).
Monthly system uptime from 99.50% to 99.79% - credit of 6% of the prorated portion of the annual ClassLink license fee attributable to the affected ClassLink product and month for which Unscheduled Downtime occurred.
Monthly system uptime from 0.00% to 99.49% - credit of 8% of the prorated portion of the annual ClassLink license fee attributable to the affected ClassLink product and month for which Unscheduled Downtime occurred.
Approach to resilience
ClassLink uses a variety of tools for redundancy and security
Load balancing
Clustering
Dynamic system scalability
Datacenter and regional failover
Hot spares for emergency replacement of faulty clusters
Distributed content delivery for speed and security
Advanced DDOS and malicious traffic protection

It is understood, however, that a complete failure of the AWS infrastructure would cause the ClassLink system to become unavailable.

A comprehensive redundancy/failover/security group discussio
Outage reporting
ClassLink is committed to trust and transparency in reporting system status and uptime. Current and historical Information on system disruptions or outages can be found at https://status.classlink.com/.

Identity and authentication

User authentication needed
Yes
User authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
Access restrictions in management interfaces and support channels
Permission based system with access limited to users/roles/groups.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
Users contact the support team to get audit information
How long supplier audit data is stored for
At least 12 months
How long system logs are stored for
At least 12 months

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
BSI Group
ISO/IEC 27001 accreditation date
03/03/2021
What the ISO/IEC 27001 doesn’t cover
.
ISO 28000:2007 certification
No
CSA STAR certification
Yes
CSA STAR accreditation date
20/06/2019
CSA STAR certification level
Level 1: CSA STAR Self-Assessment
What the CSA STAR doesn’t cover
None
PCI certification
No
Cyber essentials
No
Cyber essentials plus
No
Other security certifications
Yes
Any other security certifications
  • AICPA, SOC2
  • FERPA, COPPA & GDPR Compliance

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
Information Technology & Data Access Policy v1.5 - August 2021
Security Awareness Training v1.4 - December 2021
Information Security Management System v1.4 - December 2021
Information Security Policy v1.9 - March 2022
ClassLink has over 50 full time, direct, U.S. based employees in our software development department. Additionally, there are ~10 indirect full time consultants and an equal number of part time consultants as part of software development.

Development teams are organized by product, each with a product leader, scrum manager, front-end, back-end, user experience, and quality assurance staff members. Each of these roles have cross-product leaders responsible for process quality and staff development.

We maintain security and infrastructure teams responsible for development operations, product interoperability, cloud operations, maintaining uptime, system security, internal and external security audits, etc.

Operational security

Configuration and change management standard
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach
ClassLink maintains the following processes and procedures for the regular update and maintenance of the ClassLink application and infrastructure. System Configuration Standards v1.4 - April 2021, Business Continuity Plan v2.0 - November 2021, Environmental Policy v1.4 - August 2021, Demand and Capacity Management Procedure v1.0 - March 2022, Systems Development Life Cycle Policy v1.6 - October 2021
Vulnerability management type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach
ClassLink’s technical architecture is modular in that different areas within the system act as independent but integrated applications. T

ClassLink conducts security testing using:
1. Testing protocols are built into ClassLink whereby security testing tools are perpetually running providing ongoing logs that are monitored by ClassLink.
Testing tools used are the following:
○ Insight VM
○ Rapid 7
○ NetSparker

43

○ Burp Suite
○ Custom SQL/XSS testing-scripts
○ Jenkins
○ Amazon GuardDuty
○ Amazon Cloudwatch
○ Amazon WAF
2. ClassLink hires outside security experts to conduct penetration, vulnerability and intrusion testing and provides reports of their findings and recommendations."
Protective monitoring type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach
ClassLink maintains a Discovery of Unauthorized Access Process that includes the following procedures:
Through ongoing monitoring of IP addresses that access the ClassLink system and regular review of database transaction logs, a determination is made that unusual access has occurred. Other forms of detection may involve outside indicators that information stored in ClassLink may have accessed. These detections may manifest soon after unusual access has occurred or long afterward.

Identify potential security gaps. Close any existing security gaps that still exist.

Fully investigate the scope of unauthorized release of data with the help of forensic experts.
Incident management type
Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach
ClassLink maintains an Incident Investigation Process that includes the following procedures:

1. Detection of system anomaly: Through ongoing monitoring of system logs, server performance, application performance, customer feedback, and certain other factors, a determination is made that an anomaly has occurred.
2. Evaluate and isolate the anomaly.
3. Initial notice to affected customers.
4. Take corrective action, if immediately possible.
5. Gather more facts.
6. Cooperation and further investigation. Fully cooperate with stakeholders and fully investigate the scope of the issues.
7. Take action on investigation results.

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks
No

Social Value

Fighting climate change

Fighting climate change

We care deeply about the planet and protecting our environment for future generations. That’s why ClassLink has partnered with One Tree Planted to plant a tree for every school around the globe that purchases ClassLink.

One Tree Planted is a nonprofit dedicated to global reforestation. Their mission is to make it simple for anyone to help the environment by planting trees.
Covid-19 recovery

Covid-19 recovery

ClassLink is the perfect portal from which users can easily access any digital resources/learning platforms to aid Covid-19 recovery.

These platforms can be allocated to any user/group/role or year group easily and through our analytics can be monitored to measure use and engagement.
Equal opportunity

Equal opportunity

ClassLink is committed to equality in all that we do and we support this through our Equal Opportunities Statement

We will take every possible step to ensure that no person working at ClassLink, seeking employment with us, or any member our team of Associates will receive less favourable treatment (direct discrimination) or will be disadvantaged by requirements or conditions that cannot be shown to be justifiable (indirect discrimination) on the grounds of their:
Age
Disability
Gender Reassignment
Marriage and civil partnership
Pregnancy and maternity
Race
Religion or belief
Sex
Sexual Orientation
Wellbeing

Wellbeing

ClassLink is a platform from which users can easily access all their digital resources. ClassLink also provides analytics to ensure that users can be monitored and any patterns observed which could lead to further conversations around engagement and wellbeing.

Pricing

Price
£2.00 to £2.95 a licence a year
Discount for educational organisations
No
Free trial available
No

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at andrew.aitchison@classlink.com. Tell them what format you need. It will help if you say what assistive technology you use.