Bliksund AS

Bliksund CRS (Crash Recovery System)

The Crash Recovery System is an advanced digital vehicle information system for supporting first responders during emergency response. After selection, an interactive and model-specific vehicle rescue sheet is displayed on the screen.

Features

• CRS is the industry-leading standard for digital rescue sheets
• World's largest database of digital rescue sheets for vehicle extrication
• Tailored to the needs of Fire & Rescue Services
• Multiple vehicle identification methods during emergency response
• Can be integrated with command & control software
• Standardised and intuitive digital rescue sheets
• Contains cars, vehicles, trucks, buses and other vehicle categories
• Available on all devices; web-browser, tablet & app (iOS/Android)

Benefits

• CRS empowers first responders to work quickly & safely
• Safe and effective way of extricating passengers from car crashes
• Time-saving, improves efficiency of vehicle extrication
• Vehicle identification services ensures accuracy of rescue sheets
• Integration with command & control improves efficiency

£293 to £367 a device a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at martin.kasseth@bliksund.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

526008369242163

Contact

Martin Kasseth
004794289460
martin.kasseth@bliksund.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Minimum System Requirements; ; Microsoft Windows 10, Android Version 8.0 or iOS Version 12.0; 2 GB RAM Memory; 32 GB Storage Space; True Color display with XGA resolution (1024×768)
• System requirements: No virtual machines are allowed

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Within the same business day.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: We offer standard support during our support hours. Support is available through online portal, email or phone. Support is available on business days between 09.00-17.00 (excl. bank holidays). Extended support packages, including technical account manager or cloud support engineer, can be agreed on a customer-by-customer basis
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Our dedicated Customer Success team guides new customers and power users throughout the entire onboarding process. Moreover, there is a lot of training material, eLearning and videos available to help end-users and power users to get onboard.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: N/A - customers do not create their own data in the system.; Bliksund's data on the customer can be provided on request.
• End-of-contract process: No extra costs related to the termination of a contract. Bliksund deletes all customer data according to UK GDPR standards upon termination of a contract.

Using the service

• Web browser interface: No
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: N/A
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: HubSpot(WCAG 2.1 AA)
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: N/A
• API: Yes
• What users can and can't do using the API: The Vehicle Identification Service (VIS) is designed by Moditech to retrieve the correct vehicle drawing based on the numberplate or VIN of a vehicle.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • Other
• API sandbox or test environment: No
• Customisation available: No

Scaling

• Independence of resources: The applications work standalone, for the numberplate requests the service is provided through Microsoft Azure, we monitor the demand and scale the capacity if necessary. This process works seamlessly, meaning that users won't be affected by the demand other users placing on the service.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Other
• Other data at rest protection approach: https://learn.microsoft.com/en-us/compliance/assurance/assurance-datacenter-security
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: N/A - users do not create their own data in the system.
• Data export formats: Other
• Other data export formats: N/A
• Data import formats: Other
• Other data import formats: N/A

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Our app services are running in Azure, Microsoft guarantees that Azure App Service will be available 99.95% of the time.; We are also dependent for the numberplate requests on the numberplate dataprovider of a specific country, those services have different SLAs.
• Approach to resilience: Available on request
• Outage reporting: Email alerts for outage reporting.; For Microsoft Azure there is also a public dashboard available.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Only authorised personnel from trusted locations have access to management interface and support channels.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Ongoing process to certify according to ISO/IEC 27001. Expected to be finalised within end of year 2024.
• Information security policies and processes: Bliksund is fully compliant with GDPR (Regulation (EU) 2016/679). Bliksund has an internal information security policy that adheres to the principles of ISO 27001.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: The process has 4 major steps:; - Identify the need; - Investigate the need; - Plan the change; - Implement the change; ; Configuration and changes are tracked in version control and verified in testing environments.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Continuously scan for known vulnerabilities in our own code, and on third party libraries.; Run external vulnerabilities scan. ; Patches are deployed within 5 minutes when needed.; Our security analysts continuously monitors and check for potential threats.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We monitor and keep logs using different tools, and we collect and analyse our data to give us the ability to detect and respond to potential security events.; If we find a threat we respond immediately.
• Incident management type: Supplier-defined controls
• Incident management approach: The product has an incident management tool for creating incident reports.; Users can report incidents through our support channels.; Incident reports can be provided on request.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Other
• Other public sector networks:
  • Further public sector network integrations developed on request
  • E.g. connected to National Vehicle Authority in Norway today

Social Value

• Social Value:

  Social Value

  Fighting climate change

  Fighting climate change

  Bliksund is committed to fighting climate change and achieving Net Zero emissions by 2050. We have included this as part of the strategy, culture and day-to-day operations of our company, and will engage in collaborative projects which advance and push for climate-friendly solutions. ; ; We are pleased to show commitment towards achieving this by having published our first carbon reduction plan based on our baseline emissions from 2021, and our targets towards achieving Net Zero emissions by 2050. Our carbon reduction plan is published on: https://bliksund.com/bliksund-bliksund-carbon-reduction-plan; ; On the delivery of CRS software on a G Cloud 14 contract, we would moreover focus on recommendations for hardware and hosting.; ; Hardware sourcing; End-customers provide their own hardware to run our software, typically latops, rough-books or tablets from Asia. We recommend reusing existing Trust-owned hardware. If new hardware is required, evaluating emissions from production and shipping throughout the entire hardware lifecycle should be part of the sourcing criteria.; ; Software servers and hosting sourcing; Regarding software servers and hosting, the Public Customers' own data centres typically emit more CO2 than cloud solutions from hyperscale providers (e.g., Orange, AWS, GCP, Azure). Hyperscale providers benefit from economies of scale, better energy efficiency, and efficient cooling systems. The Power Usage Effectiveness (PUE) is essential, in measuring energy used for computing devices. Location and energy source should be considered, favouring data centres in regions with cleaner energy mix such as the Nordics, UK, or Northern Europe to reduce emissions. Bliksund favours using hosting providers that help reduce emissions vis-a-vis traditional on-prem hosting.

Pricing

• Price: £293 to £367 a device a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Full access to a demo version of CRS for a limited time period.
• Link to free trial: Provided on request.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at martin.kasseth@bliksund.com. Tell them what format you need. It will help if you say what assistive technology you use.