Bentley Systems (UK) Limited

Orbit 3DM Cloud

Orbit 3DM Cloud enables you to efficiently share massive amounts of point cloud, imagery, reality mesh, and GIS resources. It gives users a full 3D 360° view of the world by enabling the real-time fusion of various reality data resources of any size from any system.

Features

• Catalog and Manage Your Data and Publications
• In-Browser visualisation of 3D Mapping Data
• In-Browser measurements of objects in Reality Data
• Time as the Fourth Dimension
• Desktop applications to optimise and publish data
• SDK and Plug-ins to Integrate into Third-party Workflows

Benefits

• Share, view, and use 3D mapping data on the web
• Web, desktop and mobile 3D viewers
• Team members collaborate in web-based reality data viewer
• Generate digital context for digital twins

£4,860 an instance a year

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@bentley.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

456417515440667

Contact

Andy Bowles
+44 7919 892183
gcloud@bentley.com

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Bentley's offerings such as: ; - Reality Modeling Cloud Service; - Orbit 3DM Publisher; - Orbit 3DM Content Manager; - Orbit 3DM Feature Extraction; - Orbit 3DM Cloud-Lot 3; - OpenCities Planner; - iTwin services
• Cloud deployment model: Public cloud
• Service constraints: This service is offered as a hosted service, running on Bentley's Cloud, using Microsoft Azure and Amazon Web Service servers.
• System requirements: All requirements covered with the offered service

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Response times are covered by SLA and are based on priority. P1 - Availability Support 24x7 - Response 1 Hour - Resolution 4 Hours - Update Interval - 1 Hour P2 - Availability Support 24x5 - Response 2 Hours - Resolution 1 Day – Update Interval 4 Hours P3 - Availability Support 24x5 - Response 4 Hours - Resolution 10 Business Days - Update Interval 1 Day P4 - Availability Support 24x5 - Response 8 Hours - Resolution Mutually Agreed - Update Interval Mutually Agreed
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Our initial level is SELECT that, along licensing and content access benefits, gives access to the Support team and Product Upgrades.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Users can learn how to use the service through visualising online tutorials, and Bentley can deliver dedicated training sessions on the web or on-site at extra costs.
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: Users can download their data, including photos, point clouds and reality meshes, at any time during the duration of the agreement.
• End-of-contract process: Upon termination of your Orbit 3DM Cloud Service subscription, Bentley will keep user's data accessible for a short period (max 30 days) before discarding them. The User will be entitled to download all remaining data from the Orbit 3DM Cloud Repository before the termination, or during the 30 following days.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems: Windows
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: None or don’t know
• API: Yes
• What users can and can't do using the API: The API has everything you need to :; - Visualise resource footprints (where is data available?); - Visualise field-of-views (where are the views?); - Visualise measurements; - Use measurements (add them to your own layers for example); - Integrate with Viewer zoom-to-extent; - Integrate with Viewer position picking; - Open a View at a location; - Focus all views on a location; - Add your own objects to the Viewer
• API documentation: Yes
• API documentation formats: HTML
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: You can easily develop custom workflows and view integrations and integrate plug-ins for your workflows via the available API/SDK.

Scaling

• Independence of resources: Systems are logically separated in a virtual cloud environment. All systems are monitored in real-time for performance and availability. The system has automatic scaling capabilities which dynamically allocate resources based on the effective demand.

Analytics

• Service usage metrics: Yes
• Metrics types: Sessions, Throughput and Top Users.
• Reporting types: Real-time dashboards

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Other
• Other data at rest protection approach: Data at rest is encrypted via AES-256.
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: A free Orbit 3DM Import and Upload tool allows users to access their secure repository to upload, update, delete or download their data.
• Data export formats: Other
• Other data export formats:
  • Orbit Vector File (.ovf, .ovt)
  • ESRI Shapefile
  • Design Files (.dgn, .dwg, .dxf)
  • Orbit Multiresolution Image
  • Georeferenced images (.sid, .ecw, .jp2, .tif)
  • Orbit Point Cloud
  • Point Cloud files (.pod, .las, .e57)
  • Scalable Mesh (3SM)
  • 3MX
  • 3D Tiles (cesium)
• Data import formats: Other
• Other data import formats:
  • Orbit Vector File (.ovf, .ovt)
  • ESRI Shapefile
  • Design Files (.dgn, .dwg, .dxf)
  • Orbit Multiresolution Image
  • Georeferenced images (.sid, .ecw, .jp2, .tif)
  • Orbit Point Cloud
  • Point Cloud files (.pod, .las, .e57)
  • Scalable Mesh (3SM)
  • 3MX
  • 3D Tiles (cesium)

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Other
• Other protection between networks: HTTPS
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Other
• Other protection within supplier network: Logging of service, user, file integrity monitoring, and network intrusion detection are logged and correlated to detect suspicious network behaviour. Bentley and Azure provide tools to protect against data leaks. IT tools such as CrowdStrike are used to detect suspicious activity and protect against data leaks.

Availability and resilience

• Guaranteed availability: The standard Bentley SLA for Cloud offerings has a service availability commitment of 99.9% 24/7.
• Approach to resilience: All services are deployed in a fully redundant configuration within fully redundant data centres meaning that any failure of equipment, service provider or software service will result in zero, or minimal, impact on the overall service.
• Outage reporting: Planned and unplanned outage notification emails are sent to registered users for affected systems.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
• Other user authentication: Bentley’s IMS authenticates through the users Identity Provider. If MFA is enabled by the user then by default it is utilised in the authentication process. Bentley currently supports federated identity via the OIDC, SAML2 protocol, so MFA is supported via your identity provider.
• Access restrictions in management interfaces and support channels: Bentley follows a role-based access (RBAC) process to approve and review all access to infrastructure and data. Bentley has controls in place to restrict access, provide separation of duties, enforce role-based access and has a least privilege access principle. Segregation of duties is split by tasks upon the individual responsible group.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Username or password
  • Other
• Description of management access authentication: Bentley follows a role-based access (RBAC) process to approve and review all access to infrastructure and data. Bentley has controls in place to restrict access, provide separation of duties, enforce role-based access and has a least privilege access principle. Segregation of duties is split by tasks upon the individual responsible group. In order for any Bentley administrator to access a system using this account, they must be on a Bentley network. Non-Bentley network access (via RDP) has Two Factor Authentication in place.

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Bentley's Data Security Architecture is designed using industry standards and best practices such as NIST. Various products and services are operated under ISO 27001, SOC, CSA Star, G Cloud, and others.
• Information security policies and processes: Information Security policies are designed utilising ISO 27001, SSAE16, ITIL and CSA frameworks. All Bentley colleagues are required to review and acknowledge Bentley's Information Security Policy upon hire and thereafter annually. The policies themselves are emailed out at least annually and reside permanently on Bentley's intranet site for quick retrieval.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Configuration and Change Management follow the ITIL framework and policies and procedures are documented with various security standards. All SaaS offerings go through a cloud approval process and are scanned for vulnerabilities prior to production.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Vulnerability management is conducted through various technologies internal and external to the Bentley network. Threats are identified using industry-standard listings and patches/updates are applied at least monthly, or as needed, based on criticality.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: IDS/IPS is active on the network perimeter and on selected systems under the scope for SOC2 certifications. Bentley has an Incident Management Service Plan that includes cybersecurity events.; Bentley can quarantine any system on demand and will do so based on its incident response process. In the event of an incident, Bentley's incident response plan is compliant with GDPR requirements. Information security events will be assessed and a decision will be made if the event should be considered a security incident. Reporting requirements shall align with the corporate Incident Response Plan.
• Incident management type: Supplier-defined controls
• Incident management approach: The Incident Management process covers all aspects of a potential incident from start to finish with defined procedures and colleague involvement. Common events are handled depending on severity, users have multiple methods of reporting and reports are provided as part of the incident management procedure.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  Bentley’s mission is to leverage our leading software and services to drive impact through the world’s infrastructure – advancing both the global economy and the environment for improved quality of life. As part of our Environmental, Social, & Governance (“ESG”) strategy, we are committed to managing our business in a way that enhances the environmental impacts of our products and mitigates environmental risks from our operations. Our Environmental Policy details our commitments to Environmental Responsibility and the ways in which we expect our colleagues to act to drive progress on our ESG strategy. Bentley expects all colleagues, visitors, vendors, and suppliers to follow the below practices in order to drive progress on Bentley’s ESG strategy. Bentley's Environmental Policy is here: https://prod-bentleycdn.azureedge.net/-/media/files/documents/miscellaneous/environmental_policy.pdf?la=en&modified=20211021075240
• Covid-19 recovery:

  Covid-19 recovery

  When the world locked down to combat the COVID-19 virus, we took immediate action to ensure our colleagues had the equipment and resources they needed to work from home, which also enabled success for our users. Our global taskforce provided continuous communication, education, and support services to our colleagues. Their well-being fueled our response plan, and we created learning resources to support them throughout the pandemic. These resources included guides and practices for managers to lead virtually with empathy, tips for maintaining team collaboration, and resources and support for colleagues to maintain a healthy work-life balance.; As the pandemic continues, and work flexibility is seen as the key to success for the business and our colleagues’ wellbeing, we’ve introduced the Infrastructure Empowered Workforce Plan (IEWP). The IEWP is built on a solid foundation of trust. Colleagues are empowered to make responsible and effective choices on the right balance between working from the office and remotely. This plan does not require colleagues to come into the office at any specific frequency. Rather, it provides colleagues the flexibility to make these choices with their manager and within their teams to achieve business success and maintain a high level of productivity and engagement.
• Tackling economic inequality:

  Tackling economic inequality

  As a global company with colleagues of different cultures, backgrounds, and perspectives based in more than 40 countries worldwide, our diversity is what makes us successful. We have developed strategies and programs focused on increasing diversity and equity, as well as fostering a culture of inclusion and wellbeing in the workplace. These initiatives include building a pipeline of diverse candidates by recruiting at and partnering with Historically Black Colleges and Universities. ; We also partner with educational and professional organisations to provide internships, scholarships, grants, and projects that support groups underrepresented in technology. ; Bentley has active and engaged colleague resource groups within the Inclusion, Diversity, and Equity Alliance (IDEA) that have allowed colleagues, during this pandemic, to join their peers from all regions and departments with the goals of building community and fostering diversity and inclusion. IDEA currently has four focus groups open to all global colleagues: OpenPride, OpenAbilities, People of Color in the U.S., and Women at Bentley. IDEA has been a platform for education and a place to securely have difficult discussions about racism, discrimination, and bias through book clubs, panel discussion, speakers, and global awareness events. Members of executive management are key sponsors of each focus group and have been instrumental as sounding boards and in providing access to resources and the executive team.; We have implemented robust training with topics focused on respect in the workplace, identifying and overcoming bias, and anti-discrimination. We have held interactive sessions with our executives, emerging leaders, and talent acquisition in fostering diversity, equity, and inclusion and eliminating unconscious bias, and have implemented training for hiring managers to ensure fairness in the interview process.; You can find additional information, including our commitment to anti-slavery on our ESG website: https://www.bentley.com/en/esg/data-center
• Equal opportunity:

  Equal opportunity

  Bentley is an equal opportunity employer and considers all qualified applicants for employment without regard to race, colour, sex, sexual orientation, gender identity, disability, protected veteran status, religion, national origin, age, or any other protected characteristic. This commitment extends to all aspects of employment, including, but not limited to, hiring, placement, promotion, compensation, and training. EEO is the Law and EEO is the Law Supplement documents provide additional information about your rights as an applicant under the law.
• Wellbeing:

  Wellbeing

  As a company, it is our goal to ensure our colleagues know they are supported and valued as the first order of business.; Therefore, our Talent Management strategy puts colleagues at the centre of the workplace at Bentley. We focus on enriching colleague experience and creating memorable, meaningful, and purposeful connections. We invest in developing an impactful experience that reflects the company’s mission and values. We build practices and programs that deliver on engagement, recognition, communication, and development while rewarding colleagues through our robust total rewards package.

Pricing

• Price: £4,860 an instance a year
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: The free trial is granted for 30 days, with full access to our cloud service, with full capabilities. To take advantage of it the user must contact Bentley Systems to set up the test environment.
• Link to free trial: Access to the test environment will be setup to meet the requirements of each user.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@bentley.com. Tell them what format you need. It will help if you say what assistive technology you use.