HUBSTAR SYSTEMS LIMITED

HubStar Utilisation

HubStar Connect (formerly Smartway2) provides next-generation scheduling for booking meeting rooms, desks, parking, lockers. Boost attendance, collaboration and employee experience with hybrid working tools, including return to office (RTO), key events, visitor management, utilisation analytics, sensors and space management. Works with Outlook, mobile, Teams. ISO and WCAG 2.1AA accessibility compliant

Features

• Consolidate multiple data sources across the portfolio
• Space occupancy and utilisation analysis of the estate
• Interactive heat maps, analytics, dashboards and occupancy insights
• Descriptive, prescriptive and predictive analytics
• Integration with HubStar H20 and HubStar Connect
• KPI's such as workplace occupancy and adherence to RTO policy
• Deliver detailed and interactive insights into workplace performance
• SaaS solution for ease of scalibility
• Floor Plan Integration
• Integrate with sensors, access control and Wi-Fi

Benefits

• Improve Meeting Room, Desk Utilisation and Occupancy
• Agile and Hybrid Working, and return to office strategies
• Flexible and Scalable Cloud Solution
• Identify actual usage to reduce cost and carbon footprint
• Make smarter decisions on real estate spending and space design
• Can be deployed for short term surveys
• Integration with a number of leading sensor manufacturers
• Portfolio optimisation anticipates current and future workplace needs
• Predictive analytics delivers proactive ‘push’ alerts to stakeholders
• Create a more collaborative office environment

£0.04 to £0.16 a unit a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at mhiles@hubstar.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

572686872456759

Contact

Martin Hiles
01494 230039
mhiles@hubstar.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: No
• System requirements:
  • Internet Access
  • Access via any currently supported browser

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Application support is provided Monday to Friday between 9:00 and 17:30 by telephone and email Users can log issues 24/7 on our portal. The customer also has access to a dedicated CSM (Client Service Manager) who is the same consultant who has specific experience with that clients system configuration. This means that issues can be resolved quicker than traditional ticketing systems. resolution can therefore be addressed in minutes. We continue to monitor our portal out of hours as we have three global support centers.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Onsite support
• Support levels: "Application support - Monday to Friday between 9:00 and 17:30 by telephone and email. Users can log issues 24/7 on our portal. ; HubStar will respond to Support requests from the Customer as soon as possible with a target of not more than 4 hours of receiving a request.; ; Level 1 - Resolution within 6 hours - An Error that: ; • Prevents the Services from processing a time-critical business process; • Completely prevents one or more users from accessing; • Customer Data or putting new Customer Data into the; • Services; • Causes loss or corruption of Customer Data.; Level 2 – Resolution within 3 working days - An Error that:; • Hinders a business process but is not necessarily time critical; Examples:; • Unable to generate a standard report for a non-time critical business process ; Level 3 – Resolution within 60 business days – An error that:; • Affects an important function of Services, but not vital for it to be resolved in the short term and/or where a reasonable work-around is available.; Examples:; • Unable to generate a standard report; Support is included within the annual subscription license."
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: HubStar employs a standard methodology across all projects. ; • Kick-off and Requirements Gathering; • Data Import; • System Configuration; • Testing; • Deployment; • Transition; ; Stakeholder Workshop – Remote or On-site; • Appointment of dedicated CSM and Account Team; • Agree Client representatives.; • Agree Scope of Implementation ; • Confirm Program and Timescales; • Define workflow ; • Identify users & roles ; • Discuss integrations; Data Collection:; • Client populates data collection template ; • Portfolio Hierarchy ; • Complete Wi-Fi questionnaire; • Space Types, Functions, Status, Grade Level ; • Floorplans and location data; • Discuss Data Migration Strategies; Implementation:; • Creation of AWS instance; • Remote configuration of database ; • Population of resource data ; • Import floorplans ; • Prepare Network Infrastructure; • Create Buildings and Floors ; • Create Zones for Wi-Fi ; • Zones released to dashboard ; • Review Zones and Capacity ; • Zone Modifications ; • Check Zones for 'noise' ; • Demonstrate configured system to stakeholders ; • Gain acceptance of configured system via UAT; Plan Go-Live:; • Training services can be provided remotely or on-site ; • Administrator and end-user training are provided ; Post Go-Live:; • Handover to support ; • Co-ordinate quarterly account reviews
• Service documentation: Yes
• Documentation formats:
  • PDF
  • Other
• Other documentation formats:
  • Word
  • Excel
  • Powerpoint
• End-of-contract data extraction: The customer has access to their data for the length of the relationship. This is available within the application and can be accessed anytime by the clients approved admin team, which may include members of Facilities, IT and HR.; The data can be exported to Excel and the client can define what parameters, events, triggers and activities they would like to export, all of which is entirely configurable to export requirements.; ; In addition and if necessary we will also support the customer in their migration strategy and once the database is destroyed, it will remain in our back-ups for a further 30 days.
• End-of-contract process: In addition to what has been described in the previous question, at the end of the term, and by prior agreement the database will be destroyed. The data remains available from termination via our back-ups, for 30 days until when access to the client’s data can still be made available upon request. Once removed from our servers the data is no longer available. There are no additional costs for these activities.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: HubStar Utilisation can be viewed though any currently supported web browser. It consolidates multiple occupancy data sources across the portfolio by unifying occupancy data from anywhere (WI-FI, sensors, badges, scheduling and more) into a single view. Understand when peak utilisation occurs, what were the previous trends and how is occupancy forecast going forward. Data can be filtered and reprocessed against multiple metrics and dimensions, and easily exported for sharing. Interactive dashboards offer three alternative metrics to be displayed: Opportunity, Utilisation Rate and Time-in-use Rate.
• Accessibility standards: None or don’t know
• Description of accessibility: Users can interact with visual floorplans, change layer data and represent data with different colours. They also have the ability to interact with configurable dashboards. Users have the ability to change personal settings, colours, light and dark mode and unit of measure.
• Accessibility testing: None
• API: Yes
• What users can and can't do using the API: We have an API framework consisting of a library of API endpoints that enable integration and extensions . We also have an API broker that allows us to call 3rd party tools directly which enables us to call for example a 3rd party work order system as a automated step in the booking process to generate WO for selected services
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
  • PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: HubStar Utilization Customisable Options:; • Configurable measured daily time span; • Configurable data fields; • Configurable portfolio hierarchy measurement view; • Configurable analyzed date time frame; • Configurable data grouping; • Configurable space classifications; • Configurable meta data tags; • Configurable Favorites; • Configurable Time Data Markers; • Configurable Building Settings; o Office Hours; o Holidays; o Excluded periods; o Core Hours; o Room sizes; ; The Customer has the ability to customise the service as well as HubStar personnel.

Scaling

• Independence of resources: HubStar is hosted internationally by Amazon Web Services (AWS) with EU location in Dublin. Load balancers and scaling groups are in place to allow for scalability. Ongoing performance monitoring is in place to ensure the suitability of the running stack to the observed load and activity and we have customer databases with over a hundred thousand users and tens of thousands of resources.

Analytics

• Service usage metrics: Yes
• Metrics types: HubStar consolidates data from WI-Fi, Sensor, Access Control and Hubstar Connect; • Real time Zone level utilisation versus capacity.; • Occupancy changes over time by replaying historical data with heatmaps. ; • The occupancy data can be ‘played’ to provide an interactive record ; • Understand previous trends and forecasting; • CAD floor plans provide a clear picture of utilisation at-a-glance. ; • Compare neighbourhood and zone usage visually ; • Stacking capability - actual space utilisation per neighbourhood ; • Dashboarda displaying: Opportunity, Utilisation Rate %, Time-in-use Rate %.; • Combining occupancy data with room and desk booking data from HubStar Connect
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
  • Other
• Other data at rest protection approach: Data is stored in an encrypted RDS instance in AWS to AES-256 standard. Databases and PII within the data is also encrypted
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: There is an API endpoint for data export.
• Data export formats:
  • CSV
  • Other
• Other data export formats: PDF
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Globally we use Amazon Web Services (AWS) for both production and DR. DR testing for both environments is performed annually. Minimum system uptime for Production Systems is 99.5%, measured monthly. ; Our continuity objectives are stated in terms of the amount of time it would take to resume normal operations in case of a major event. Note that minor events will have a much faster recovery time.; ; A major event is one which renders all of the systems at one site unusable. For a major event involving client-facing systems, our DR Recovery Time Objective (RTO) is 8 hours, while our Recovery Point Objective (RPO) is 24 hours. Note that client systems are also designed with local resilience so that no single component failure will cause a substantial outage or loss of data.; ; Service credits are available for failure to meet SLA. Service credits will be accumulated on a calendar-year basis, and any credit will be applied to the annual bill immediately following the end of the prior calendar quarter.
• Approach to resilience: We provide load balancing architecture - details can be made available upon request.; The application leverages AWS load balancing and dynamic routing components to ensure lowest latency and highest availability. ; Application servers are split between two (at least) availability zones within each region to ensure continuity of service should one availability zone become unavailable. ; Elastic load balancers distribute the traffic across the available servers. ; Servers are grouped under auto scaling groups which allows for the increase in processing capability if the application is put under stress.; Databases are backed up daily, with transaction log archiving allowing for point in time recovery in between these daily backups. ; Backups are encrypted (AES-256) and are kept for 7 days. They are stored in AWS.
• Outage reporting: Email alerts will be sent for Planned Maintenance Works, Upgrades and Outages. Email alerts are sent to Client Administrators and Technical contacts, to advise of plans, remedies, and general communications. if an unplanned Outage occurs or if, the client reports an Outage, an internal ticket will be raised to bring the service back online and a review of the Outage will be undertaken in compliance with our ISO 27001 processes and procedures. Depending on the severity, additional communications in writing or the creation of a Route, Cause and Analysis report (RCA) will be prepared for the customer.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Access is controlled as follows;; • Multi-factor authentication for named admin users to the hosted environment; • Support Portal - dedicated client users with username and password; • An email alert goes to the support agent with a unique ID; • Access levels are reviewed periodically
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau
• ISO/IEC 27001 accreditation date: 06/09/2019
• What the ISO/IEC 27001 doesn’t cover: No exclusions
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications:
  • ISO 27001:2017
  • Expect SOC 2 Type 2 accreditation by Q4 2024

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: We expect to obtain SOC 2 compliance by Q4 2024
• Information security policies and processes: HubStar is committed to the establishment and maintenance of the Information Security Management System (ISMS) described in our Information Security Policy and implemented to meet the requirements of BS EN ISO/IEC 27001:2017.; ; All members of staff within the ISMS impacted business areas shall strictly adhere to the policies and security procedures, which support the Information Security Policy.; The objectives of the ISMS are to:; • Meet legislative and regulatory requirements ; • Design, develop and run secure resilient applications ; • Identify and manage Information Security and Cyber Risks ; • Identify and manage risks within the supply chain; ; These intrinsically include: ; • Continual review and improvement of the ISMS and Controls ; • Comply with Customer security requirements ; • Report on the effectiveness of the ISMS and controls to the CEO ; • Provide assurance that Information Security is inherent within Business as usual activities

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: HubStar operate a thorough Change Request Process, and once a change request has been raised, it is documented and discussed as part of weekly triage. The request is placed on our CR system. The enhancement is addressed as follows;; • Evaluation ; • Development ; • Code Review ; • Quality Assurance ; • Deploy; ; Security needs to be considered at various stages. This translates into security gates throughout the process, as follows;; • Secure Requirement Review; • Risk Test Planning; • Secure Design Review; • Code Review; • Penetration testing; Changes are deployed as part of our normal deployment methodology.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: This is part of the Hosting team duties, key team members are subscribed to relevant patch notifications, and depending on the severity and feasibility will deploy patches during the next maintenance windows after internal testing to ensure no adverse effect to the application.; Key members of the Security Office and engineering team are subscribed or follow security bulletins and release notes as well as the OWASP top 10 threats list. ; Depending on the nature of the patch/vulnerability, mitigations may be put in place until the patch can be deployed (through Web application firewall, or some other mechanism).
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Automated alerts go to relevant parties in HubStar. In the case of an availability or performance metric alert, the support team will be notified. In the case of an intrusion or intrusion attempt, the security officer and team will be notified. A triage will take place to classify, prioritise and assign the incident. Classification will fall into one of four categories.; Critical, Significant, Minor, Negligible; Checks are performed automatically on the application, and automated alerts are dispatched to the team in case of availability events.; Non critical are patched within next maintenance window. Critical within 30 days following successful testing
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Application Issue - ; For every incident a ticket is always raised via the Portal, Email or Telephone. These tickets are categorised – Critical, Medium or Low. The issue is addressed as per our SLA. A Root cause analysis is carried out for critical issues and communicated back to the customer.; ; Hardware Issues:; Hardware supplied by Smartway2 will be covered by their subscription plan. Faulty units should be returned to Smartway2 for assessment. Where appropriate, replacements will be returned to client within 5 working days of receipt of faulty unit, subject to availability.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  Buildings account for 37% of global carbon emissions [Source: UN 2022 Global Status Report for Buildings and Construction] and approximately half of commercial real estate is underutilised. HubStar helps improve utilisation by up to 30% and reduce annual carbon emissions by 270kg per desk, by identifying which spaces across the office real estate portfolio are underutilised; and by identifying opportunities to reduce energy consumption by ‘soft closing’ zones, floors or buildings, sometimes on specific days of the week where attendance is low. ; ; By leveraging HubStar’s scheduling capabilities to match employees with the most efficient spaces, organisations can influence the flow of people in order to reduce enable soft closing or repurposing of space, to support decarbonisation goals, while improving workplace experience ; HubStar’s ability to predict occupancy also support waste reduction efforts in other areas, for example ordering the correct amount of food on any given day for the cafeteria.

  Covid-19 recovery

  HubStar solutions supported many organisations during the pandemic by enabling social distancing and health checks, leveraging its rules engine to automatic compliance, perform contact tracing and support cleaning schedules. ; ; Albeit there is less demand now for such stringent health and safety features today, HubStar equips organisations to rapidly adapt to future health and safety concerns, via existing, highly configurable functionality that includes the ability to configure booking rules, policies and workflows, as well as audit trail reporting. ; ; HubStar’s utilisation insight also enables a data-driven approach to designing safer public and work spaces, to reduce the chance of infection and provide employees with peace of mind.

  Tackling economic inequality

  HubStar supports employers to build learning cultures that foster education, skills development and training, by ‘advertising’ learning events to attract attendance, providing the ability to measure attendance and by ensuring learning happens in environments that are conducive to success.

  Equal opportunity

  HubStar is committed to encouraging equality, diversity and inclusion among our workforce, and eliminating unlawful discrimination.The aim is for our workforce to be truly representative of all sections of society and our customers, and for each employee to feel respected and able to give their best. ; The organisation - in providing goods and/or services - is also committed against unlawful discrimination of our clients and their staff members.

  Wellbeing

  Those who are responsible for caring for others, those who live further away from city centres and those who suffer from disabilities can achieve greater flexibility by using HubStar to determine when they should come into the office; as well as using the technology to find an appropriate space that caters to their individual requirements. ; Wellbeing ; ; Loneliness is now considered a greater threat to health than smoking or alcohol, while numerous studies by organisations like Gallup find that work is typically the greatest source of friendship; while having a friend at work improves performance, productivity and health. ; ; HubStar helps organisations rebuild social connection by making it easy to find friends and arrange in-person meet-ups, whether team get-togethers or social events. HubStar also provides data to inform the re-design of spaces that better support collaboration and socialising. ; ; As well as helping to foster friendships by bringing people together face-to-face, HubStar enables regular contact with ‘weak ties’ that have been shown to improve mental health and Wellbeing. ; ; Wellbeing is further supported by managing hybrid occupancy to ensure the appropriate level of social ‘buzz’, in order that the experience of visiting the office is worthwhile and revitalising; or for those who visit for quiet focus time, meets that requirement effectively.

Pricing

• Price: £0.04 to £0.16 a unit a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: We offer trials as part of a Proof of Concept
• Link to free trial: We offer a Proof of Concept for eligible opportunities

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at mhiles@hubstar.com. Tell them what format you need. It will help if you say what assistive technology you use.