storm Cloud Contact Centre Solution (CCaaS)
Content Guru provides an Omni-Channel Cloud Contact Centre solution, known as storm®.
storm is a multi-channel CCaaS (Contact Centre as a Service) solution for inbound and outbound interactions, providing a range call center-related technologies for any size of organisation. These services can be layered over and integrated with existing technology.
Features
- Omni-Channel Contact Centre solution with Outbound Dialler and PCI-compliant payment-taking
- Advanced IVR - Natural Language Processing, Skills-Based Routing, Speech Recognition
- Intelligent Automation - Artificial Intelligence (AI), Data Capture and integration
- Record all communication, including Screen Recording: Data stored in UK
- Customer Relationship Management (CRM) - Fully integrated CRM capability
- Knowledge Management - Fully integrated into the agent desktop
- Real-time and Historical Reporting with bespoke Customer Satisfaction Surveys (CSAT)
- Workforce Optimisation (WFO) & Workforce Management (WFM)
- Unified Communications (UCaaS) - Fully integrated with the contact centre
- User Collaboration - Instant Messaging, Video, On-Demand Video, Softphone
Benefits
- Handle any voice or digital channel in a single interface
- Improve First Contact Resolution and service efficiency
- Seamless transition between channels (Web chat to Voice to Video)
- Optimise contact centre performance through reporting and management interfaces (MI)
- Extend value of existing systems through integration
- Handle any volume of simultaneous demand
- Work from Home (WFH) on any internet enabled device
- Future-proofed and highly scalable contact centre with Generative Artificial intelligence
- Automate interactions and support digital channel shift
- Take full control of your configuration and technology integration
Pricing
- Free trial available
Service documents
Request an accessible format
Framework
G-Cloud 15
Service ID
5 1 8 2 7 1 6 5 6 5 7 6 4 9 2
Contact
CONTENT GURU LIMITED
James Horsley
Telephone: +44 (0) 1344852350
Email: PSHteam@contentguru.com
About your service
- Service categories
-
Applications
Customer relationship management
- Marketing campaign management
- Digital commerce
- Sales force productivity and management
- Customer service
- Contact centre
- Multi cloud support
- Yes
Service scope
- Software add-on or extension
- Yes, but can also be used as a standalone service
- What software services is the service an extension to
-
The Content Guru storm Contact Centre solution is standalone solution but can be layered over existing technologies and integrated using variety of connection methods including APIs to create a seamless communication estate.
All of storms component services can be consumed separately and are fully integrated. - Cloud deployment model
-
- Public cloud
- Private cloud
- Service constraints
- Storm support extends to the entire customer experience across all services, including hardware, connectivity and applications. If storm services are purchased through a partner, then front-line support may be provided by the partner and additional support provided by Content Guru. storm is multi-sited across resilient data centres, and all hardware is modular and resilient at every level, meaning that upgrades can take place with no disruption to service. Upgrade notifications are issued regardless.
- System requirements
-
- Internet Access
- Minimum effective pixel width of 320 at a 100% zoom
- Microsoft Edge (minimum version 89)
- Mozilla Firefox (minimum version 88)
- Google Chrome (minimum version 89)
User support
- Email or online ticketing support
- Yes
- Support response times
- Tickets are categorised according to their impact (P1-P4) as defined in standard service level agreement please see terms and conditions standard response times are as follows. P1 : within 15 minutes P2 : within 30 Minutes P3 : within 1 working day P4 : within 1 working day
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- WCAG 2.2 AA
- Phone support
- Yes
- Phone support availability
- 24 hours, 7 days a week
- Web chat support
- Yes
- Web chat support availability
- 24 hours, 7 days a week
- Web chat support accessibility standard
- WCAG 2.2 AA
- Web chat accessibility testing
-
The storm WebChat solution has bene VPAT tested and supports the following:
- Keyboard navigation support (operate without a mouse)
- High contrast ratio support (improved readability for visually impaired users)
- Clear, consistent colour usage + distinct iconography (avoid colour-only meaning / improve recognition)
-Screen reader support (compatibility with assistive technologies)
- Responsive scaling of screen + text without loss of functionality (zoom/reflow support) - Onsite support
- Yes, at extra cost
- Support levels
- Standard and bespoke support levels are available (for instance, 9-5 Mon-Fri, 7-7 Mon-Sun, 24/7/365). Costs are agreed as part of the overall services package. Technical support is provided by the dedicated, UK-based NOC.
- Support available to third parties
- Yes
- AI chatbot
- No
Onboarding and offboarding
- Getting started
-
New users are provided with dedicated training by specialised platform experts. This can be delivered either face-to-face or online. Face-to-face training sessions are delivered either on customer premises or at the Content Guru headquarters in Bracknell. Online training sessions are delivered via live instructor-led webinars.
You will be supported through the life of your contract by both the 24/7 sector specific Support team and your dedicated Account Manager who will hold periodic service reviews and innovation sessions specific to your service. These sessions are designed to evaluate how the solution has performed over the previous period and identify what improvements can be made to help optimise your service. As part of the innovation session, new product updates will be highlighted and demonstrated to ensure you are up to date on the latest capabilities and assist in facilitating continuous improvement in your service, as well as offer you the ability to feed directly back into our product roadmap. - Service documentation
- Yes
- Documentation formats
-
- HTML
- End-of-contract data extraction
- There are several different options available to customers for extracting data at the end of the contract. Most customers will regularly extract data themselves using their storm logins for reporting CDR data (using storm VIEW - into formats such as CSV, XLS and PDF) and interaction recordings (using storm RECORDER - into formats such as MP3/4, WAV, MKV, CSV, WebM). However, all data can be manually extracted by storm's engineering team and delivered to the customer at the end of the contract, should this be required.
- End-of-contract process
- This varies based on the contract. Services can be decommissioned as part of the agreement, and there may be additional costs involved in decommissioning or transferring to other systems subject to the pre-agreed exit provisions. All customer data (CDRs and Recordings) and configuration will be available to clients with appropriate storm logins and can be downloaded by those with appropriate user rights.
- Documentation accessibility standard
- WCAG 2.2 AA
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Application to install
- No
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
-
None.
In product Mobile App(s) can vary in functionality to the browser interfaces. - Service interface
- Yes
- User support accessibility
- WCAG 2.2 AA
- Description of service interface
-
All interfaces are browser-based.
Agent Desktop: Single interface for channel management
Supervisor Interface: Single interface for channel management, agent monitoring (listen, whisper and barge in) and access to reports and recordings
Admin Interface: Access to contact centre configuration and service scripts
Access rights can be best set to match your operational goals. - Accessibility standards
- WCAG 2.2 AA
- Accessibility testing
- VPAT testing
- API
- Yes
- What users can and can't do using the API
-
API documentation can be provided covering all elements of the storm solution. Documentation outlines all SOAP and REST APIs available.
API 'key' is required per customer.
Bespoke and off-the-shelf API's are available, subject to agreed specification. - API documentation
- Yes
- API documentation formats
-
- Open API (also known as Swagger)
- HTML
- API sandbox or test environment
- Yes
- Customisation available
- Yes
- Description of customisation
-
Features and functionality can be fully customised, either by using the FLOW tool to amend service flows (by the user), or by bespoke development (by the supplier).
The storm solution is an 'off the shelf' solution allowing customisation through deep levels of configuration capability down to the user and service.
Scaling
- Independence of resources
-
As Europe’s largest cloud-based Communications Integration platform, storm provides users with access to massive capacity. The platform can be scaled to accommodate services for any size of business. With sufficient capacity to accommodate in excess of 150,000 additional users, live storm services can be instantly scaled up when required without impacting service for other users.
storm provides user organisations with access to an effectively unlimited number of ports in the cloud, with the platform able to accommodate tens of thousands of simultaneous calls across TDM and VoIP, with a voice capacity in excess of 60 million minutes per day.
Analytics
- Service usage metrics
- Yes
- Metrics types
- Fully flexible and customisable real-time and historical reporting across any channel within the platform, with real-time notification alerts on service performance, trend analytics and service levels. Recording and Screen Recording capabilities with transcription and speech analytics alongside scorecards and associated reporting. Example service metrics include: - Average speed to answer - SLA % (configurable) - Average handle time - Real-time queue metrics (e.g. number of calls in queue, wait time, abandoned number, etc) - + many more Redwood will provide the following service metrics in regular service reviews: - Service Availability - Ticket review and analysis - MoS scores
- Reporting types
-
- API access
- Real-time dashboards
- Regular reports
- Reports on request
- Resource tagging
- No
- FOCUS resource tagging
- No
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- Developed Vetting (DV)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
-
- United Kingdom
- European Economic Area (EEA)
- User control over data storage and processing locations
- Yes
- Datacentre security standards
- Complies with a recognised standard (for example CSA CCM version 4.0)
- Penetration testing frequency
- At least every 6 months
- Penetration testing approach
- NCSC approved service provider
- Protecting data at rest
-
- Physical access control, complying with CSA CCM v4.0
- Physical access control, complying with SSAE-18 / ISAE 3402
- Encryption of all physical media
- Scale, obfuscating techniques, or data storage sharding
- Data sanitisation process
- Yes
- Equipment disposal approach
- A third-party destruction service
- Data sanitisation type
-
- Deleted data can’t be directly accessed / Cryptographic Erasure
- Data Erasure
- Explicit overwriting of storage before reallocation / Secure Erase
Data importing and exporting
- Data export approach
-
Users can export all data via the VIEW reporting dashboard. VIEW has the facility for manual exports or for regular exports via FTP or email, and can be used to extract multiple different areas of data based on customisable criteria such as time periods.
Recordings can also be imported / exported via .WAV file format. - Data export formats
-
- CSV
- Other
- Other data export formats
-
- .WAV
- API
- Data import formats
-
- CSV
- Other
- Other data import formats
-
- .WAV
- API
Data-in-transit protection
- Data protection between buyer and supplier networks
-
- Private network or public sector network
- TLS (version 1.2 or above)
- IPsec or TLS VPN gateway
- Data protection within supplier network
-
- TLS (version 1.2 or above)
- IPsec or TLS VPN gateway
Availability and resilience
- Guaranteed availability
- The storm platform is wholly owned by Content Guru, with all components of the platform being fully delivered in house with no reliance on any third parties. Content Guru are a UK critical National Infrastructure provider, hence have architected the platform to deliver 99.999% core platform availability, delivered from two highly available active/active data tier three data centres.
- Approach to resilience
- The storm platform is maintained across multiple secure data centre sites in every territory where it is deployed to provided optimum availability and resilience. To this end, it is of paramount importance that all data centre sites and the data stored therein is synchronized. All constituent data centres supporting the platform are connected by resilient 1GB links, which are continuously subject to monitoring. All data centres and servers are kept in active-active configuration, with the resilient connections between them enabling the ongoing synchronization of all services and data. Furthermore, Redwood is certified under ISO22301 - Business Continuity Standard alongside the following security certifications: - SOC 2 Type 2 - ISO27001 - ISO27701 - Cyber Essentials Plus - TICKIT Plus
- Outage reporting
- The support team provides email alerts.
Identity and authentication
- User authentication needed
- Yes
- User authentication
-
- Multi-Factor Authentication (MFA)
- Public key authentication (including by TLS client certificate)
- Identity federation with existing provider (for example Google Apps)
- Limited access network (for example PSN)
- Dedicated link (for example VPN)
- Access restrictions in management interfaces and support channels
- Each organisation’s storm solution requires the purchase of one or two administrator licences. Administrators require these separate licences to access admin privileges. As with all users, these require RSA-secured login, storm's two-factor authentication, or Single Sign On (SAML2.0 based). Administrator seats are assigned to named users. Supervisors can be given restricted access to above-standard features, and this is fully-configurable by administrators. All user access and changes to the platform are auditable, including from Redwood staff.
- Access restriction testing frequency
- At least once a year
- Management access authentication
-
- Multi-Factor Authentication (MFA)
- Public key authentication (including by TLS client certificate)
- Identity federation with existing provider (for example Google Apps)
Audit information for users
- Access to user activity audit information
- Users have access to real-time audit information
- How long user audit data is stored for
- User-defined
- Access to supplier activity audit information
- Users contact the support team to get audit information
- How long supplier audit data is stored for
- At least 12 months
- How long system logs are stored for
- At least 12 months
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
-
- CSA CSM version 4.0
- ISO/IEC 27001
- Other
- Other security governance standards
- ISO27701, Cyber Essentials Plus, SOC2 Type2
- Information security policies and processes
- Adheres to ISO 27001. All data centres are accredited to IL3 standard and certified to IL27001. The building is protected by physical security barriers and card access points, visitors are logged. User logins are RSA-authenticated, requiring PINs followed by an RSA SecurID that refreshes every 60 seconds. VPN access is restricted to the necessary employees. All successful or failed accesses to certain areas, such as audit trails or cardholder data, are logged. System logs are reviewed several times daily by engineers. Errors or exceptions are logged. Items are assigned owners according to expertise, and investigated. This file is reviewed by an Engineering Manager, ensuring all investigated items are progressed or closed. Access to the raw data is restricted to the Engineering Manager, ensuring a copy of the audit cannot have been tampered with. All servers within the CDE are time-synchronised to ensure consistency, and synchronised every 15 mins. A security manager, the point of contact for all security incidents, ensures all policies are adhered to. All employees are given security policy with compulsory security training. Heads of departments attend ISMS reviews. Security incidents are recorded in the Security Audit Report maintained by the Security Manager.
- Software Security Code of Practice
- Yes
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
- Requests for hardware and software changes are in the first instance submitted to the Change Control team to audit. The test platform ‘Ministorm’ has fixed managers who assess change requests. Application engineers ensure all changes conform to release notes. All work is undertaken on Ministorm primarily, and must be tested and signed-off by a senior engineer and the Change Control team. Affected clients are notified in advance. Any issues encountered are logged in the ECO database, using JIRA and GIT. Those that could affect security are flagged when the change request is first submitted and special documentation is needed.
- Vulnerability management type
- Supplier-defined controls
- Vulnerability management approach
- The vendor employs an approved third party scanning vendor to perform internal and external vulnerability scanning. Based on the information provided on a regular basis by the third party, the vendor's security team review and action the necessary patching. All patches are tested in the lab environment prior to live roll-out. Frequency of deployments are based on criticality of patches and schedule of planned work.
- Protective monitoring type
- Supplier-defined controls
- Protective monitoring approach
- The platform is monitored continuously day and night, on a 24/7 basis. The processes include interrogation of data logs and real-time alerts based on system performance. Potential compromises are actioned immediately by the support team, using established processes.
- Incident management type
- Supplier-defined controls
- Incident management approach
- The vendor has standard documented procedures for incident management. User reports incidents to the Engineering Services team as part of the standard ticketing procedure. Incident reports are issued as per the agreed SLA's.
- Post-quantum cryptography secure
- Yes
Secure development
- Approach to secure software development best practice
- Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)
Public sector networks
- Connection to public sector networks
- Yes
- Connected networks
- Health and Social Care Network (HSCN)
Pricing
- Discount for educational organisations
- No
- Free trial available
- Yes
- Description of free trial
- Base trial version available subject to contract.
Discount percentage by annual call-off contract value (excluding VAT)
- Less than £250,000
- 5%
- Between £250,000 and £500,000
- 10%
- Between £500,001 and £1,000,000
- 15%
- Between £1,000,001 and £2,500,000
- 20%
- Between £2,500,001 and £5,000,000
- 20%
- Over £5,000,001
- 30%
Non-mandatory Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- BSI
- ISO/IEC 27001 accreditation date
- Saturday 13 April 2024
- What the ISO/IEC 27001 doesn’t cover
- N/A - This certificate covers the provision and maintenance of cloud communications and contact centre solutions delivered via the storm platform.
- ISO 28000:2022 certification
- No
- ISO 9001 certification
- Yes
- Who accredited the ISO 9001 certification
- BSI
- ISO 9001 accreditation date
- Sunday 21 September 2025
- What the ISO 9001 doesn’t cover
- N/A
- Quality management systems (QMS)
- Yes
- CSA STAR certification
- No
- PCI certification
- Yes
- Who accredited the PCI DSS certification
- BSI Professional Servics (Ireland) Limited
- PCI DSS accreditation date
- Thursday 27 March 2025
- What the PCI DSS doesn’t cover
- The scope of the assessment includes the system components hosted within the data centres that are involved in the capture and transmission of cardholder data within the storm UK platform using the "LOCK" or "PADLOCK" solutions. The scope extends to all business processes, people and supporting documentation that relate to ensuring a consistent and secure approach to the deployment and management of administrative, physical and technical controls.
- Cyber essentials
- No
- Cyber Essentials Alternative
- None of the criteria
- Cyber essentials plus
- Yes
- Please provide your Cyber Essentials Plus Certificate Number
- 4df00343-8d3d-4212-a55f-cf45b571aa62
- Other security certifications
- Yes
- Any other security certifications
-
- SOC2 Type2
- ISO22301
- ISO27701
- ISO20000
Social value
- Section B - Commitment for Future: Delivery
-
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority
- New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
- Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
- Plans to engage the contract workforce in deciding the most important workplace issues to address
- Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
- Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
- Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
- Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
- Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Volunteering opportunities for staff
- Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors
- Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
- Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.
- Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
- Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
- Activities to support relevant sector related skills growth and sustainability in the contract workforce. Illustrative examples: careers talks, curriculum support, literacy support, safety talks and volunteering
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises
- Activities to identify opportunities to open up sub-contracts under the prime contract to a diverse range of businesses, including new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
- Plans for engaging a diverse range of businesses in engagement activities prior to appointing subcontractors (including activities prior to award of the main contract and during the contract term)
- Activities that demonstrate a collaborative way to work with a diverse range of businesses as part of the supply chain
- Structuring of the supply chain selection process to ensure fairness (e.g. anti-corruption) and encourages participation by a diverse range of businesses, including with regard to new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutual
- Understanding of local demographics, needs and opportunities for the co-design of the goods, services and works to be delivered under the contract
- Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
- Support for community-led initiatives relevant to the contract. Illustrative examples: improving transport links; reducing loneliness; helping with English language proficiency; and facilitating social mixing among people with different backgrounds
- Collaborating with anchor institutions and community groups to make facilities available for education, training or community events
-
Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero
Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.
- Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
- Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
-
Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 6: Employment and training: For those who face barriers to employment
- Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
- Inclusive and accessible recruitment practices, and retention-focused activities, including those provided in the Guide for line managers on recruiting, managing and developing people with a disability or health condition
- Working conditions which promote an inclusive working environment and promote retention and progression
- Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce
- Inclusive and accessible development practices, including guidance for line managers on recruiting, managing and developing people with a disability or health condition
-
Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain
Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.
- Understanding of issues relating to entering the contract workforce
- Creation of outreach activities to create a pipeline of employees for the future contract delivery
- Content of the outreach activity is designed to suit the target cohort
-
Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.
Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.
- Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
- Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
- Actions to invest in the physical and mental health and wellbeing of the contract workforce
-