Buddi Ltd

Electronic Monitoring Security

Buddi features a small, lightweight GPS device with exceptional battery life and tracks indoors using Convergent Location Technology. With a highly customizable platform we support immediate installations, group features for efficiency, simultaneous multiple offender tracks and much more

Hardware and Software Products, Monitoring and Response
Field Services
Expert Witness Services

Features

• One-piece device
• RF/GPS/GSM and motion sensing technologies
• Proprietary Indoor Location Technology
• Remote configuration
• Buddi’s Safeguarding solution

Benefits

• Integrated GPS/GSM/RF and indoor locations tracking and curfew solution
• Multi-network roaming access for greater network coverage
• Compact RF home beacon with no set-up requirement
• Ease of installation
• Ergonomic and robust physical properties
• Wide range of reusable strap sizes
• Removal tool allowing field staff to avoid physical contact
• Long battery life of 72 hours
• Untethered On body fast charger

£30 to £275 a device a month

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@buddi.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

578354597954155

Contact

Customer Care
0800 978 8800
sales@buddi.co.uk

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: No
• System requirements: Modern browser required (Chrome, Firefox, IE)

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: 24/7 support
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: From the buddi website
• Web chat accessibility testing: None
• Onsite support: Yes, at extra cost
• Support levels: 24x7 telephone and email support provided to all users.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: The Buddi Smart Tag is extremely easy to fit. The simple fitting process minimises training time, and enables anyone with basic training to securely fit a tag. This supports customer self-fit programmes and temporary leave arrangements from secure facilities where daily operations are carried out at volume and with ease by frontline staff. ; The Buddi Smart Tag, works all the time, first time out of the box, no cutting or fasteners are involved. The only requirement prior to fitting the tag, is to ensure it is charged via the software. ; The instant and reliable operation of the Smart Tag means there is no need to send the wearer outside to stand around and wait for the device to acquire GPS in order to complete the installation. Because if the Tag is charged, it is communicating and receiving GPS, even when not assigned. ; 4 Steps to Fitting; MEASURE: Measure around the smallest part of the ankle. ; SELECT: Select the correct strap as indicated by the tape measurer; FIT: Connect both ends of the strap securely around the ankle. ; Listen for the loud click to confirm.; CHECK: Pull the tag at both ends to show the subject it is fitted securely.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: The reporting system allows data to be extracted to various formats including CSV and Excel.
• End-of-contract process: Access to the system is removed and the customer is contacted regarding their data retention or extraction requirements.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Mobile system provides limited read only access to data
• Service interface: No
• User support accessibility: WCAG 2.1 AAA
• API: No
• Customisation available: No

Scaling

• Independence of resources: The underlying hardware has been scaled to a level with a minimum of 50% spare capacity so no single customer can overload the system. Realtime monitoring is used on all systems to asses load.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Reporting system allows export to CSV and Excel formats.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: 99.9% SLA Is provided
• Approach to resilience: All systems are fully redundant at the primary data centre, in the event of failure of the primary data centre a realtime replica system is running at another site.
• Outage reporting: Email and telephone alerts

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: Network segregation is used within the system to stop access to management networks. Access to management networks can only be done with IPSEC VPN connections using keys.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Dedicated link (for example VPN)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 6 months and 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: Between 6 months and 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: NQA
• ISO/IEC 27001 accreditation date: 03/02/2021
• What the ISO/IEC 27001 doesn’t cover: None
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: Security Metrics
• PCI DSS accreditation date: 27/2/2018
• What the PCI DSS doesn’t cover: Only covers payments from public website
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: ISO27001 based approach
• Information security policies and processes: The following internal processes are used:; ; Secure development lifecycle; Secure software sourcing; Secure server setup process; ; Within the company the CTO is responsible for server and data security and the above processes are audited as part of the ISO 9001 process.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: All issues are tracked internally following ISO 9001 approved processes.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Normal server patch routine is monthly, however critical issues are patched as required. All patches are first tested on identical test systems before applying to live systems.; ; Subscription to key security notifications systems for products are used to keep up to date with patches that are released.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Realtime monitoring system is used to identify issues and report them to system administrators. Incidents are responded to within 24 hours.
• Incident management type: Supplier-defined controls
• Incident management approach: ISO 9001 incident management process is followed.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  We at buddi carefully develop products and services specifically designed to benefit people and our approach is to achieve this without harming our planet or exhausting its resources. We also believe that practicing Sustainable Development makes good business sense.; buddi is committed to continually improving our ecological performance as our product lines and manufacturing operations evolve. We will continue to monitor how our operations impact the environment and strive for continuous improvements.; We recognise that our day-to-day operations can impact both directly and indirectly on the environment. We aim to protect and improve the environment through good management and by adopting best practice wherever possible. We will work to integrate environmental considerations into our business decisions and adopt greener alternatives throughout our operations wherever possible.; ; Our objectives in this pursuit to consider the environmental impact of the total life cycle of our products and operations, including:; ; Comply with all relevant legislation and regulations.; Include the consideration of environmental issues in all business strategies and initiatives.; Prevent pollution, reduce waste and minimise the consumption of resources.; Recycle where possible.; Avoid unnecessary use of hazardous materials and products, seek substitutions when feasible, and take all reasonable steps to protect human health and the environment when such materials are used, stored and disposed of.; Consider the wider global impact of all our activities, including those of our suppliers, customer and other stakeholders.; Involve employees in our environmental programme.; Encourage the adoption of similar principles by our suppliers.

  Covid-19 recovery

  Buddi’s Business Continuity plan enables the provision of our services in the event of another Covid wave or other global pandemic. Our manufacturing, supply and services have been fully tested in real-life sutuations and we have continued to deliver Business as Usual, supporting our customers and service users throughout the pandemic and aftermath.

  Tackling economic inequality

  Buddi ensures that our supply chain is fair, open to a diverse range of organisations and creates a wider benefit to society. We publish an annual modern slavery statement under our parent company, BIG Technologies, and ensure we fulfil the commitments made by continually auditing our organisation and supply chain. This statement is a very clear message to our investors, customers, suppliers, employees, contractors and prospective employees that everyone involved with the group has a personal duty to address the risks of modern slavery and human trafficking and understand that it will not be tolerated by the group. To support this commitment, Buddi:; ; · Adheres to a policy and procedural framework that supports the elimination of modern slavery.; · Implements and audits a supplier code of conduct requiring contractors and suppliers to avoid labour exploitation.; · Promotes clear guidelines and procedures to enable staff to report their concerns and whistle blow on modern slavery.; · Provides staff training on identifying and reporting modern slavery.; · Continuously considers how to improve our existing policies and practices.; ; We have chosen to purchase high-end, high-quality parts as opposed to cheaper, high-volume components. We maintain in-house manufacturing at our state-of-the-art Norwich facility to directly control production quality and risk.; ; Ethical trading - Buddi proactively works to ensure that all goods, works and services are sourced ethically; we expect and audit this standard from our suppliers, service providers and contractors. We always maintain awareness of our own personal responsibilities and demonstrate integrity. We evaluate potential suppliers for both environmental and social considerations, including issues such as the use of ‘conflict minerals’ in product parts, diversity, and human rights; we will only work with companies that have strong ethics and robust controls.

  Equal opportunity

  Buddi is committed to encouraging equality and diversity among our workforce, and eliminating unlawful discrimination. The company aims to create a working environment where colleagues feel respect and trust for each other, and that allows every individual to achieve their potential.; The aim is for our workforce to be representative of all sections of society and our customers, and for each employee to feel respected and able to give their best.; The organisation - in providing goods and/or services and/or facilities including digital applications - is also committed against unlawful discrimination of customers or the public.; Buddi is proud of our workplace culture, which is based on equality, inclusiveness, respect and recognition for the contributions people make to our ongoing success. Our founding principle is that everyone has unique talents to contribute, and it is our responsibility to ensure that they are given the support and encouragement to reach their full potential.; ; By treating our colleagues fairly and equally, we provide a culture of value which underpins the delivery of an even better service. We do not waver from this principle, and this strong ethos.; We believe equally that the same principles apply to our work with service users, whether this is through direct contact via our Field Officers and Customer Service Team, or through the design of our products and service.; ; Each of our staff, including our Customer Service Team and Field Officers, are deployed to suit the community or environment in which they operate. This means that we always reflect the community we are part of and respond to the specific needs of that community.; ; Respect, dignity and tolerance underpin our approach and in order to maintain our high standards, we provide our employees with training and support for them to notice discrimination and deal with it appropriately.

  Wellbeing

  Buddi applies Fair Work in practice across our organisation, our partners and all direct suppliers and participants in our supply chain. We apply the same approach in the delivery of all our contracts. Buddi’s understanding of Fair Work is that we and our partners:; ; recruit lawfully and responsibly, based on ability, from a wide pool of talent; do not apply any direct or indirect discrimination, including on the grounds of religious belief or political opinion; pay our staff a decent wage; value and reward each person’s contribution to the organisation; train and refresh our staff comprehensively from induction; actively assess and manage risk to ensure we are not a vehicle for modern slavery or human trafficking; ; Social support and cohesion; ; At recruitment and induction prospective employees and staff are made aware of Buddi’s commitment to staff welfare. As a minimum we provide induction on workforce rights, including rights to Trade Union membership and other means of representation, our Grievance Procedure and access to training on modern slavery. This is to ensure that staff fully understand related processes and internal and external reporting routes.; ; Health, safety and psychosocial wellbeing; ; Our current working conditions are safe and comfortable for all, both in terms of the physical and psychological environment, and it is important to us to ensure this standard is maintained. Each role and environment is subject to a risk assessment, and reasonable adjustments made where identified.; ; In our experience, staff who have worked for large corporate employers enjoy the different experience of working for a small company like Buddi where they can have a direct say in future planning and business decisions.

Pricing

• Price: £30 to £275 a device a month
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@buddi.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.