Damibu Ltd

Damibu Feeds

Damibu Feeds is a cloud based platform to manage social, cultural and regional variations of national content. Organisations can share content, alleviating the burden of website updates for smaller teams, digitise and automate content validation workflows and employ 'Safe-AI' to adapt and curate targeted content from trusted, pre-validated sources.

Features

• Create and manage accessible digital content
• Share content across different websites
• Create 'mini-sites' for public sharing
• Update content AFTER it's been published
• Content validation workflows
• Analytics
• Training & engagement
• Content creation process development

Benefits

• Tailor information for a specific audience
• Manage social, cultural and regional variations of national content
• Access a library of approved information you can share
• Information you publish works on all devices and accessibility tools
• Reduce duplication by sharing information across multiple websites
• Know where content comes from, everything is accreditted
• Automate website updates to reduce workload for your team
• Measure what content is popular and where it's being read
• Supported by experts to implement for your organisation

£200 a licence a year

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@damibu.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

593407377424710

Contact

David Burrows
+441513240090
info@damibu.com

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Damibu Feeds can be used in conjunction with existing websites, mobile apps and other content management systems.
• Cloud deployment model: Hybrid cloud
• Service constraints: No constraints.
• System requirements:
  • Internet Connection
  • Web Browser

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Technical Support Priorities and Timescales; 1 (High) : Full system outage – no users at all can use the system. Response: 10 mins. Resolve 4 hours.; 2 (Medium) : Partial system outage – a significant number of users are affected. Response 10 mins. Resolve: 1 business day; 3 (Low) : Minor – a handful of users or a part of the system is not working to Specification. Response: 1 hour. Resolve 5 business days; 4 (Query) : Minimal impact. Response; 3 business days. Resolve 20 business days
• User can manage status and priority of support tickets: No
• Phone support: No
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: The web chat is available through our company website and accessible from inside the platform. Starting a chat will start a conversation directly with one of our team. At the end of a chat you will be asked to provide feedback on the interaction to help us improve our support.
• Web chat accessibility testing: The web chat feature is provided by Salesmate and has been tested with different browsers.
• Onsite support: No
• Support levels: GCloud customers are provided with an account manager available directly by email or telephone.; ; Self-service customers are limited to support email, tickets or chatbot interactions.; ; A license includes general support (e.g. tickets, email, chatbots). A growing library of help articles, videos and pre-recordings to address common support issues.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Damibu Feeds includes a setup period where the organisation will be supported to deploy Damibu Feeds within their organisation. Standard support via email, chatbot and user documentation is available.; ; Additional online training is available at additional cost, to be determined with the buyer to meet specific needs. This covers:; - Training for content creators on using the platform effectively; - Webinars to raise awareness of the platform across the organisation; - Training for website managers to access automation features
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Data is available upon request.
• End-of-contract process: At the end of the contract any content provided through Damibu Feeds will no longer be available through the SDK, API or official plugins. Users will still be able to log in and manage their account and can continue to add content but will not be able to share that content onto external websites.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: No
• User support accessibility: WCAG 2.1 AA or EN 301 549
• API: Yes
• What users can and can't do using the API: The API allows developers to create tools to access content but require an API key.; ; API functions:; - Fetch feeds available for the API key; - Fetch a feeds content pool; - Additional meta data related to that content; - Scheduled synchronisation
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Damibu Feeds was designed to work with existing organisational processes and practices, innovative new ways of working can be challenging which is why we offer varying levels of support to organisations particularly during deployment.; ; The organisational structure used by Damibu Feeds can be completely customised to match the desired structure for each organisation, this can be done by organisational administrators.; ; Additional services are available such as: Engagement & Training, Content Development & Reporting.

Scaling

• Independence of resources: Damibu Feeds is powered by Amazon Web Services using scalable technology. If any users place a significant demand on the service additional resource will be allocated to ensure the service remains usable.

Analytics

• Service usage metrics: Yes
• Metrics types: Anonymised usage data tracks how content is being used across the websites where it is being displayed indicating the number of 'reads' and 'users' (unique reads).
• Reporting types:
  • Real-time dashboards
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Staff screening not performed
• Government security clearance: None

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest: Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Data export is available upon request, it is not accessible by default to users.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Service Availability : 99.99% during work days, 99.9% for nights/weekends.; Unplanned Outages : Refunded at a pro-rata percentage
• Approach to resilience: Damibu Feeds is powered by Amazon Web Services leveraging the cutting edge resiliency services such as intelligent caching, regular backups and scalable architecture to prevent down-time.
• Outage reporting: In the event of any outages license holders will be informed via email.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: All staff are trained to maintain security practices when engaging with customers. Any sensitive activities will require users to confirm appropriate security through a validated email address or telephone number. Permissions are managed with appropriate user roles.
• Access restriction testing frequency: At least once a year
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: You control when users can access audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: You control when users can access audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications: NHS England Digital Security Protection Toolkit: Registration Number - ZA276533

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Damibu complies with NHS England Digital Security Protection Toolkit: Registration Number - ZA276533
• Information security policies and processes: Any security issues reported to Damibu will be escalated to Damibu's SIRO and addressed inline with the Data Security & Protection Toolkit guidelines. The toolkit is reviewed and updated annually to ensure internal processes are aligned with toolkit recommendations.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: All tasks are tracked through a Jira project management system, before being thoroughly assessed for Data Security Protection compliance. Once the task is completed, its progress is tracked through a cloud-based version control system. A template table, according to Section 1.1 of DSPT (Information Asset Register and Record of Processing Activities) is used for monitoring changes.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Risk assessments to identify and mitigate issues are carried out to ensure compliance with DSP Section 7 (Continuity Planning). An annual review is conducted of all active accounts to ascertain whether access controls are being governed appropriately and access will be restricted if necessary to prevent vulnerabilities in data security (DSPT Section 4 - Managing Data Access).
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: As specified in the DSP documentation (Section 6 - Responding to Incidents), all incidents and near-misses which arise must be reported. This is done via the Incident Report Form sent to the Data Protection Officer (DPO) followed by a management meeting, from which appropriate action is taken. All staff have received training on how to find, fill out and submit the Form. Incidents must subsequently be submitted through the Incident Reporting Tool by the DPO.
• Incident management type: Supplier-defined controls
• Incident management approach: As specified in the Information Governance documentation, section 14.1 - 320 (Incident management and reporting), all incidents and near-misses which arise must be reported. This is done via the Incident Report Form sent to the IG lead, followed by a management meeting, from which appropriate action is taken. All staff have received training on how to find, fill out and submit the Form. Incidents must subsequently be submitted through the Incident Reporting Tool by the IG lead.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Covid-19 recovery
  • Equal opportunity
  • Wellbeing

  Covid-19 recovery

  Covid-19 recovery; ; Damibu Feeds has been used extensively by NHS Primary Care organisations to improve how important information is delivered to citizens quickly whilst reducing the effort required for frontline NHS staff.; ; Damibu Feeds helps citizens get access to accurate, up-to-date information on their local GP website.

  Equal opportunity

  Equal opportunity; ; The mission of Damibu Feeds is to improve the availability and accessibility of information for everyone. Existing methods for sharing information such as PDF documents, exclude portions of the population because these documents are created for desktop computers. The experience is poor for those who may only have access to a mobile device, and accessibility tools often don’t work with PDFs. Damibu Feeds uses a plain html format meaning it offers an equal experience across all digital devices and works with accessibility tools such as screen readers, colour contrast modes, font size adaptation and even automatic translation tools such as Google Translate.

  Wellbeing

  Wellbeing; ; Improving the health and wellbeing of citizens is a core tenet of the Damibu Feeds platform. Damibu Feeds was developed in partnership with NHS organisations to improve how self-care information is created, managed and shared with citizens. Damibu Feeds is used by hundreds of NHS organisations to share expert-crafted content with citizens on websites that are already known and trusted to them.

Pricing

• Price: £200 a licence a year
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: 1 month limited dashboard access to evaluate the platform. Distribution limited to a single website.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@damibu.com. Tell them what format you need. It will help if you say what assistive technology you use.