Clear Visual Communications Ltd

TriplePlay Digital Signage Cloud Service

Tripleplay’s TripleSign platform has a wide array of features including event triggers, integrated Workflow Management system, native IPTV solution – TripleTV, built-in Content Management System, Interactive Touchscreen capabilities, Digital Menu Board delivery, Samsung Smart Signage Platform (SSSP) and LG webOS integration and its own content creation software.

Features

• Control centrally via cloud-based user friendly interface
• Create multiple layouts, playlists and schedules
• Mix video, image and text for a more impacting message
• Remove reliance on network connectivity
• Landscape or portrait display mode
• High content compression rate

Benefits

• System_on_Chip (SOC) based solution means lower power consumption
• Cost-effective, easily deployed cloud solution
• Low start-up costs - per screen, per month
• High content compression rate keeps download time minimal
• SOC support means reduced cost plus less points of failure

£7 to £20 a licence a month

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@clearvc.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

598798479622373

Contact

Rebecca McCartney
033 0088 3984
sales@clearvc.co.uk

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Tripleplay may elect to undertake a service interruption or outage to facilitate improvements to its systems or for maintenance of the Service. Details are provided in the attached [EVP Signage Terms and Conditions.pdf]
• System requirements:
  • Management interface requires Windows,Mac,Linux with web browser.
  • Devices require access of specific IP addresses and ports (80,443,123.)

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: The service includes standard support over email and telephone during normal working hours. Out of hours support and site visits are available at additional cost.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: The service includes standard support over email and telephone during normal working hours. Out of hours support and site visits are available at additional cost.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: Onsite and / or offsite training. This can be arranged as part of the service agreement at the start or on request at an additional cost.; User Documentation; User videos
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: The digital signage application supports export of all digital signage data, including content. ; ; User data will typically only include a name and email address. A report can be run to return this user data in PDF or CSV format.
• End-of-contract process: The buyer will be notified on multiple occasions as the contract approaches expiry. Upon expiry, the contract will renew automatically for a period of one year unless the buyer opts out in advance.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • MacOS
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The desktop media portal offers more administrative functionality such as playlist and bookmark creation. Apart from this, the desktop service is very similar to the mobile service.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: A web management interface allows users to access applications through a web browser. From here, users can manage digital signage, upload content and perform various other application related tasks. This interface also allows users and devices to be managed on the system and presents analytics on system usage and health.
• Accessibility standards: None or don’t know
• Description of accessibility: The service is accessible via the Web Portal using a Desktop or Laptop with a compatible operating system and a compatible web browser.
• Accessibility testing: None available.
• API: Yes
• What users can and can't do using the API: Using the standard service API a user can achieve the following:; ; • Control the behaviour of client devices; • Query client device status and configuration; • Control internal services such as recording; • Retrieve information about services; • Provision data, eg EPG; • Trigger events for signage content change; • Trigger events for screen control; • Monitoring of the servers; • Pulling external data into signage layouts; • Reporting and alerting; • Client provisioning
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Many things can be customised regarding the look and feel of the interface (on the desktop app and web management interface). With assistance from Tripleplay, images and colours used in the interface can be changed on web pages.; ; Some things can be customised by the buyers themselves through the web interface. For example, the digital signage application allows users to restrict fonts and colours in signage layouts and change the way that information is presented in the interface

Scaling

• Independence of resources: A lot of work has gone into ensuring the system is dimensioned correctly and hardware resources are adequately distributed. Extensive load testing has been performed on the system to validate this. In addition, a variety of tools are used to limit and prioritise intensive processes where necessary.

Analytics

• Service usage metrics: Yes
• Metrics types: - Most played content and layouts across all devices in digital signage over a set period of time; - Most watched videos in the media portal over the last day; - % audience watched for videos; - Number of users using the system; - Number of devices registered; - Device status (online / offline); - Data consumption (if video is streamed); - Server CPU, memory and available storage
• Reporting types:
  • API access
  • Real-time dashboards

Resellers

• Supplier type: Reseller providing extra features and support
• Organisation whose services are being resold: TripplePlay

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: In-house
• Protecting data at rest: Other
• Other data at rest protection approach: All media data is stored on dedicated storage servers which form part of the overall OVH offering. Media is stored in per-customer folders on the storage server. Data is exported to the application servers using CIFS V3 with full user and group management protection.; The data is not accessible from any other location, all access to the data for client devices and users is provided by the application instance.
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Either through the digital signage application (for digital signage data) or by running a report in the reporting application (for user data).
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Pdf
  • Zipped up folder for digital signage content and data
• Data import formats: Other
• Other data import formats:
  • User data must be input through special forms
  • For media and content a variety of formats is supported

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: To protect the service availability the system has been designed so that in the event of a single VM host failure, access to all other instances is still available. This is achieved by having redundant servers and routing. This approach gives an expected availability of better than 99.999% or ‘five nines’, which equates to less than 5 minutes unplanned downtime per year.; ; Redundant routing is provided by the public Internet DNS.; ; To protect against the loss of one or more instances due to the failure of a VM host, there is the option for redundant operation of the core applications. This is provided by provisioning a clustered application instance. Again, this gives an expected availability of better than 99.999%.
• Approach to resilience: The redundancy described above contributes to the resilience of the service. Local and offsite data backups stretching back 30 days are also made to offer protection from accidental data loss and the ability to recover from a catastrophic event.
• Outage reporting: • Outages to components within the overall infrastructure are reported by email alert to the system administrators at Tripleplay.; • Outages to customer server instances or connected client devices are reported to both the customer and Tripleplay administrators by email and / or through a public user dashboard.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Details can be found in the attached [TN041 System Security.pdf].
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users receive audit information on a regular basis
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Tripleplay has been selected by the military across the globe, central government and by local government departments.; A cost effective and highly secure solution, the Tripleplay platform requires very little operational expertise and support to maintain; Used to deliver secure internal communications in many cases but also for entertainment and relaxation in others, the Tripleplay platform is multi-functional, multi-facet and multi-purpose.; ; Key features of our solution:; ; Active directory, SaML, LDAP integration.; User access controls.; Centralised management.; Integrated Digital Signage and IPTV.; Event triggers and overrides.; Live streaming.
• Information security policies and processes: Please refer to the attached [HR_ITSecurityPolicy_v1.pdf]

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: All new software components are approved by senior management prior to development and by senior developers through code review; during the development process. All new software releases are thoroughly tested and assessed for threats as part of a QA process.; ; More details can be found in the attached [TN041 System Security.pdf].
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Application vulnerability scanning is performed prior to every new major software release using tools that generate OpenVAS and OWSAP reports. Detected threats are analysed and dealt and fixd as part of the software release if deemed necessary ; ; Periodic scanning of the network and applications is also performed. If any new servere threats can be addressed as a patch, we have a process to address this.; ; More details can be found in the attached [TN041 System Security.pdf].
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Tripleplay are confident in the security of their system. The system is constantly monitored and Tripleplay would be immediately notified if it became unavailable or was compromised in any way.; Tripleplay would then act appropriately and promptly to contain, recover, fix, notify and prevent further similar incident.; ; More details can be found in the attached [TN041 System Security.pdf].
• Incident management type: Supplier-defined controls
• Incident management approach: Users have access to Tripleplay’s phone and email support service ; This includes access to a trouble ticket system where incidents can be logged, prioritised and tracked. Tickets can only be closed once the customer is satisfied that the issue / incident is resolved.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  Tripleplay delivers constant messaging across an organisation. This enables an organisation to drive climate change policies into the workforce and constantly reinforce reminders to act and work with climate change at the forefront of the mind.

Pricing

• Price: £7 to £20 a licence a month
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Unrestricted full access to the cloud service is provided for the duration of 14 days.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@clearvc.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.