VALERANN UK LIMITED

Lanternn By Valerann (TM)

Safer, proactive decisions on all roads, globally: Valerann empowers road operators to respond faster to more critical incidents, by providing actionable insights into road traffic situation, driving a reduction in accidents and improvement to traffic flow.

Features

• Automated Road Incident Detection and Alerting
• Advanced Traffic Management System
• Computer Vision AI
• Atypical Traffic Detection
• Real-Time Risk Profile
• Advanced Analytics & KPI Reporting
• Event Prioritisation
• Event Validation and Response Planning
• Data Integration, Harmonisation and Warehousing
• Intuitive User-Interface

Benefits

• Proactively identify safety and traffic incidents
• Quickly and effectively monitor and respond to traffic incidents
• Connect your ITS assets into one intelligent system
• Increase network-wide situational awareness
• Reduce Killed or Seriously Injured (KSI) incidents
• Manage patrol cars and operator shifts
• Update Virtual Message Signs and other road assets
• Create and action incident response plans
• Integrate data from any existing assets or systems
• High customisation and whitelabelling to suit your operational needs

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at daniel.yakovich@valerann.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

528023605798101

Contact

Gabriel Jacobson
+44 7460 769487
daniel.yakovich@valerann.com

About the service

• Service categories:
  • Application Development and Deployment
    • AI platforms
      • AI software services
        • Computer Vision AI Software Services
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Any operator's IT, ITS, or asset management system, including traffic management or incident response systems
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
• Service constraints: No - Lanternn by Valerann is hardware agnostic (we will integrate with any pre-installed or new ITS equipment e.g. any CCTV camera, radar loop or sensor). However, integration/development effort may be required where the equipment is unfamiliar to us.
• System requirements:
  • Product is cloud-based, so requires a modern web browser (Chrome)
  • Appropriate data integration mechanisms required
  • Setup of a secure redundant VPN (if necessary)

User support

• Email or online ticketing support: Yes
• Support response times: Standard response time < 6 business hours (incl. of initial acknowledgement, incident triage and identification of next steps). ; ; Response times can be revised on request. An extra cost may apply.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes
• Support levels: We meet the following SLAs, all of which are included in our standard cost. Additional support can be discussed and negotiated to an agreed upon price between the client and Valerann. We can provide monthly incident reports via dashboard, as well as in-depth analytics, trend analysis, and SLA performance forecasting.; ; Incident resolution time for Lanternn by Valerann:; P1: <24 business hours for critical issues, such as complete system unavailability.; P2: <48 business hours for major issues, such as the unavailability of some core system functionality.; P3: <30 days within business hours for minor issues, such as errors related to specific functionality in the system.; P4: Reported issues that are considered cosmetic or non-impactful to the overall effective use of the system (i.e. minor, intermittent errors, usability issues, visual defects) will be logged and prioritised within a reasonable timeframe based on their ongoing continuous improvement cycles.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: We provide system users and operators with training as LbV is developed and deployed. This training process will include virtual or onsite sessions depending on customer preference. Throughout this process, Valerann will elicit feedback from users to further tune and configure system features to ensure accurate detection and operation, improve the user experience, and meet any additional needs not previously provided. Users will also be provided with a User Manual; however, Valerann’s team can also be contacted about any issues, concerns or needs. We will make ourselves available through project deployment, especially during the initial use stages, to ensure comfortability and access to the system.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• Documentation accessibility standard: EN 301 549
• End-of-contract data extraction: Migration plans will be agreed upon between Valerann and the client. All data will be migrated either to the client’s full custody on the existing cloud or transferred to an alternative cloud provider. At all times, the client will retain full governance and ownership of its proprietary data. This data will never be used by Valerann for any purposes other than fulfilment of its contract. The data will be stored in accordance with both organisations’ Data Security policies, precluding access by unapproved agents.
• End-of-contract process: At contract end, Valerann will devise a handover plan and work closely with the customer’s chosen provider to ensure that all documentation, data, and“know how” are carried over. Valerann will project manage handover to ensure a seamless transition for the customer and its users. If Valerann is required to delete or store data, it will carefully comply with the law and customer’s requirements. Valerann will provide “after care”, i.e. making its Customer Success Manager available for 3 months post-contract end to answer any questions and assist the customer and incumbent with getting up and running.

Using the service

• Web browser interface: Yes
• Supported browsers: Chrome
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Lanternn by Valerann's mobile version supports a reduced feature set for patrol vehicle drivers to log incidents they identify directly, or to view incidents they have been allocated to.
• Service interface: No
• User support accessibility: EN 301 549
• API: Yes
• What users can and can't do using the API: Through API integration, LbV can serve as the front end for users by ingesting data sources and fusing the data for display and insights through the provided dashboard. It is also possible for LbV to serve as the back end data fusion engine if a separate front end dashboard is preferred. Users are able to access LbV’s data insights through API to integrate with any external systems for further data ingestion or data sharing. Our API includes a detailed SWAGGER interface that provides the application developers an easy and intuitive way to discover the system's capabilities, try them out, and explore the various options to access the data.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Customers can customise the data sources used, the way data is presented on the dashboard, how many users have access, what permissions each user has, types of reporting provided in Grafana, level of automation, use of Machine Vision, level of camera integration, and which of the Lanternn modules and feature sets to implement.

Scaling

• Independence of resources: We load test all services for current users, i.e. we simulate and measure peak concurrent usage performance. All clients are also segmented off into their own cloud infrastructure environment.

Analytics

• Service usage metrics: Yes
• Metrics types: User-specific monitoring/reporting; Latency monitoring; Event-specific insights; Event trends; System service metrics (e.g. uptime %); ; We utilise UX monitoring tools, such as Hotjar, to monitor user sessions and interactions. All data captured is anonymised i.e. we cannot link specific sessions to specific users. We maintain an audit trail of key actions carried out within the system (e.g. changing an event status) including the user that carried this out in order to support management reporting.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: No

Supplier type

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with SSAE-18 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: We work with users to configure data export mechanisms. They are able to view data through the dashboard as well as through customised reporting which allows for CSV export of specified data outputs.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: System availability of the hosting, network infrastructure, communications network and Hosting Centre is designed to be seven days per week and twenty-four hours per day, subject to the pre-notification of any scheduled downtime required for system maintenance. Outside of the scheduled downtimes outlined above, the Performance Target is for the system to be available 99.7% of the time measured over a period of one month.; ; Higher system availability can be provided on request.
• Approach to resilience: We are hosted by AWS who are certified for resilience and have verified that we have resilient infrastructure. The main plank of our resilience strategy is replicating our databases across three regions using managed services such as Kafka, Postgres, etc.
• Outage reporting: In the event of a service outage, our alert systems immediately notify our in-house team of product engineers. Our team responds as quickly as possible to resolve the issue and avoid disruption. If the outage is extended for any reason, users will be notified as we continue attempts to resolve the issue.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: Lanternn by Valerann uses a role and permission model, meaning some users have restricted access (read only) or may only be able to carry out certain actions within the system based on their user role.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
• Description of management access authentication: Username + Password, Whitelist IP addresses. Optional: identity federation from known providers (Google, Facebook), Optional: VPN, Optional: 2 factor

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: No
• Software Security Code of Practice: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: ISO 27017
• Information security policies and processes: Valerann takes the security and privacy of data extremely seriously. We intend to comply with our legal obligations in respect of data privacy and security under the General Data Protection Regulations (GDPR). We follow our Data Management and Information Security Policies. Information Security is overseen by our Chief Information Security Officer, Ran Katzir, with support from our Chief Operational Officer, Daniel Yakovich. Every Valerann device has MDM installed to ensure remote security management. Annual training on information security is provided to all staff and enforced via Valerann’s Disciplinary Procedure.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: We are using numerous microservices and databases. Every change involves automatic tool scanning for quality and security. Changes are logged and tracked and reported automatically. Every change is peer reviewed and QA tested approved.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Automatic scanning upon every software change using industry recognised tools. Migration and patching as part of the standard on going delivery process (sprints prioritisation and backlog management).
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We identify compromises through investigating of dashboard and logs when an anomalous behaviour / alert is detected.
• Incident management type: Supplier-defined controls
• Post-quantum cryptography secure: No
• Incident management approach: Employees report to IT+CTO. All employees are notified immediately on both Slack/Email. Incident / Retro reports are provided internally for major events.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks: Other
• Other public sector networks: Any

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 5%
• Between £500,001 and £1,000,000: 7.5%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 12.5%
• Over £5,000,001: 15%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: IQC
• ISO/IEC 27001 accreditation date: Wednesday 11 December 2024
• What the ISO/IEC 27001 doesn’t cover: The ISO/IEC 27001 certification does not cover activities, systems, or processes outside the defined scope of development of software as a service (SaaS) in the field of traffic information services, including any non-traffic-related products, services, or business functions not directly supporting this activity.
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber Essentials Certificate Number: Provided
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: Yes
• Any other security certifications: AWS Partner Network (APN) AWS Advanced Partner in good standing

Social value

• Mission: Kick start economic growth:

  To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

  Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

  • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
  • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
  • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
  • Activities to cascade good practice on fair working conditions throughout the supply chain
  • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
  • Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
  • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
  • Measures to identify, mitigate and manage modern slavery risks relating to the contract and how these will be implemented
  • Outline policies and practices to be applied to or put in place for the contract to mitigate and manage modern slavery risks, including: Pre-employment checks, recruitment practices. Workplace conditions, safeguarding plans and processes in place and regular monitoring with relevant groups considered, which may include sampling

  Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

  • Understanding of employment and relevant skills issues, and of the education and training issues relating to the contract. Illustrative examples: demographics, skills shortages, new opportunities in high growth sectors, geographic/local community and skills/employment challenges
  • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

  • Understanding of the types of businesses in the market and the level of participation by new businesses, entrepreneurs, start-ups, SMEs, VCSEs and mutuals
  • Measures to engage users and communities and build relationships to increase community integration build trust and influence how the contract is delivered
• Mission: Make Britain a clean energy superpower:

  To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

  Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

  • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
  • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
  • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement
• Mission: Break down barriers to opportunity:

  By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

  Policy Outcome 6: Employment and training: For those who face barriers to employment

  • Delivery of training schemes and programmes to address any identified skills gaps and under-representation in the workforce for the contract (e.g. prison leavers, care leavers, kinship carers, disabled people)
  • Understanding of the issues affecting the representation of disabled people in the workforce in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors
  • Understanding of the issues affecting inequality in employment, skills and pay in the market, industry or sector relevant to the contract, and in the supplier’s own organisation and those of its key sub-contractors. Measures to tackle inequality in employment, skills and pay in the contract workforce

  Policy Outcome 7: Creating a pipeline of opportunities: For the contract workforce, reducing barriers to entry for under-represented groups.

  • Understanding of the issues affecting the development of new skills by target cohort
• Mission: Build an NHS fit for the future:

  That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

  Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

  • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at daniel.yakovich@valerann.com. Tell them what format you need. It will help if you say what assistive technology you use.