ESRI (UK) LIMITED

GIS Map and Data Services

Data as a Service (DaaS) comprises: Maps+ open GB Basemaps built from Ordnance Survey OpenData™ and premium data services including Ordnance Survey MasterMap data; TitleInfo: Land Registry Polygon Service with flood risk data; National Data Service: open data indicators from leading UK sources including demographics, environment, health and social care.

Features

  • Ready to use across the ArcGIS Platform
  • Fully managed services that are automatically and regularly updated
  • Free and premium services with full support
  • GB services in British National Grid
  • Integrate with external spatial data and ArcGIS Online
  • Scalable mapping services over Esri Geoservices REST API/OGC WMTS
  • Public Sector Geospatial Agreement (PSGA) bundled data
  • Land Registry Polygon Service including enriched attribution
  • Open data to provide key performance indicators for decision support
  • Ready to use reports for your area

Benefits

  • Cost-effective: Get GIS data without expanding your on-premise infrastructure
  • Managed Service: save time of managing the data yourself
  • Scalability: Meet short term demand for mapping and addressing data
  • Resilience: Leverage the cloud for resilience
  • Cost: Remove the cost of updating your own data
  • Flexibility: Choose from a wide range of products and services
  • Agile: Instantly get your data and mapping
  • Knowledge: Find where your assets and information are
  • Experience: Benefit from Esri UK’s cartographic knowledge
  • Quality: raise your profile with high quality pre-populated reports

Pricing

£1,194 a unit a year

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@esriuk.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

6 2 0 9 5 8 5 3 7 1 5 5 0 9 3

Contact

ESRI (UK) LIMITED Clare Bean
Telephone: 01296 745500
Email: info@esriuk.com

Service scope

Software add-on or extension
Yes, but can also be used as a standalone service
What software services is the service an extension to
GIS Map and Data Services are used in conjunction with ArcGIS Online and can be used with ArcGIS in the Cloud.
Cloud deployment model
Public cloud
Service constraints
Please see the Terms and Conditions document
System requirements
  • A standard broadband internet connection
  • Modern web browser such as Safari, Firefox, Chrome, Edge, IE11
  • Minimum term 12 months (21 day trial also available)
  • Compatibility View is not supported

User support

Email or online ticketing support
Email or online ticketing
Support response times
Target response times:
P1 - 2 hours - System inoperable. No users can run application.
P2 - 4 hours - Critical component inoperable preventing “full production” use of system although other areas of system can be used.
P3 - 8 hours - Elements of system not providing the functionality as expected or intermittent failures in system processing. In all cases, system can be used for “full production”.
P4 - 16 hours - Problem does not impact use or productivity of system but is frustrating to use, or there is an error in documentation.
09:00-17:30 GMT Monday-Friday excluding English Bank Holidays
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
None or don’t know
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
Please see the Esri UK Standard Support Policy in the Terms and Conditions document
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Esri UK sales, contactable at sales@esriuk.com, will handle order processing, account creation and set-up, account management and billing functions for your ArcGIS Online Subscription. User instructions, Help and extensive tutorial videos are available online.
Service documentation
Yes
Documentation formats
  • HTML
  • Other
Other documentation formats
Videos
End-of-contract data extraction
Data can be easily downloaded as CSV or Shapefile using the tools within ArcGIS Online. All uploaded data and generated data will be available for extraction.
End-of-contract process
All user content (data and maps) can be downloaded by permitted users from their user-specific content repository. Maps and layers created by users and uploaded to ArcGIS Online may be made “private” or deleted. Administrators may remove the accounts of users who are registered as members of their organisation. At least one Administrator account must be maintained whilst a subscription is active. Further information on administering an organisation is published online.

Using the service

Web browser interface
Yes
Supported browsers
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
Application to install
No
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
None
Service interface
Yes
User support accessibility
WCAG 2.1 AA or EN 301 549
Description of service interface
The customer accesses the service using a standard Web Browser as described in the Service Definition.
Accessibility standards
None or don’t know
Description of accessibility
We have an ongoing commitment to accessibility and are WCAG 2.0 AA, compliant with minor issues.
Accessibility testing
We test all our service interfaces with users of assistive technology, using the Voluntary Product Accessibility Template https://www.esri.com/en-us/legal/accessibility/vpats
API
Yes
What users can and can't do using the API
All features of the service are available via API
API documentation
Yes
API documentation formats
HTML
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
Web Application Templates used to access the service can be configured with customer's individual logos, colour schemes etc. Some templates are fully configurable to allow complete control of what functions you wish to make available to users.

Scaling

Independence of resources
Customer environments are logically segregated to prevent users and customers from accessing resources not assigned to them.

Services which provide virtualized operational environments to customers (i.e. EC2) ensure that customers are segregated via security management processes/controls at the network and hypervisor level.

AWS continuously monitors service usage to project infrastructure needs to support availability commitments/requirements. AWS maintains a capacity planning model to assess infrastructure usage and demands at least monthly, and usually more frequently. In addition, the AWS capacity planning model supports the planning of future demands to acquire and implement additional resources based upon current resources and forecasted requirements.

Analytics

Service usage metrics
Yes
Metrics types
Current and historical health information of ArcGIS Online is available at http://status.arcgis.com/. In addition, detailed information is available on the subscriber’s ArcGIS Online account in the activity dashboard. This includes information on user activity, popular and unpopular content, and geographical extents of items.
Reporting types
  • API access
  • Real-time dashboards

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
None

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
User control over data storage and processing locations
Yes
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least every 6 months
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
Physical access control, complying with CSA CCM v3.0
Data sanitisation process
Yes
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
Data can be easily downloaded as CSV or Shapefile using the tools within ArcGIS Online. All uploaded data and generated data will be available for extraction.
Data export formats
  • CSV
  • Other
Other data export formats
  • Shapefile
  • File Geodatabase
Data import formats
  • CSV
  • Other
Other data import formats
  • Shapefile
  • File Geodatabase

Data-in-transit protection

Data protection between buyer and supplier networks
TLS (version 1.2 or above)
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
Esri uses commercially reasonable efforts to make the data, services and software hosted by Esri ArcGIS Online available with a quarterly uptime percentage of 99.9% as further detailed in Esri’s ArcGIS Online Service Level Agreement (SLA).
Approach to resilience
ArcGIS Online has a full Continunity Plan designed in alignment with FISMA securiy control requirements. ArcGIS Online cloud Infrastructure providers ensure their business continuity plans align with ISO 27001 standards.
Outage reporting
General site information for ArcGIS Online is available via the Status page of the Trust.ArcGIS.com website. Information about customer specific incidents can be viewed via the MyEsri Support portal.

Identity and authentication

User authentication needed
Yes
User authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
Access restrictions in management interfaces and support channels
Access to information systems audit tools are restricted to authorized personnel within ArcGIS Online. Access to information system diagnostic and configuration ports is restricted to authorized personnel within ArcGIS Online.
Access restriction testing frequency
At least every 6 months
Management access authentication
Other
Description of management access authentication
Less than 10 ArcGIS Online Administrators are responsible for managing ArcGIS instances and connect using X.509 certificates.

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
Users contact the support team to get audit information
How long supplier audit data is stored for
At least 12 months
How long system logs are stored for
At least 12 months

Standards and certifications

ISO/IEC 27001 certification
No
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
Yes
Cyber essentials plus
Yes
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
  • CSA CCM version 3.0
  • Other
Other security governance standards
ArcGIS Online has been granted FISMA (Federal Agency Production System Security Accreditation) Low Authority to Operate. FISMA Low controls align with NIST Special Publication 800-53 which maps to ISO controls. 
ArcGIS Online uses cloud infrastructure providers compliant with ISO 27001, FedRAMP and
SSAE16 SOC1 Type 2.
Information security policies and processes
As part of the overall FISMA accreditation, baseline security requirements are constantly being reviewed, improved and implemented as part of a Continuous Monitoring Program.
ArcGIS Online's ISMP is based upon NIST standards as part of FISMA accreditation. A mapping of FISMA security controls to ISO 27001 controls is available in NIST Special Publication 800-53 , Appendix H. Cloud infrastructure providers implement ISO 27001 certified ISMP's.

Operational security

Configuration and change management standard
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach
Esri maintains separate non-production systems for testing and validating new development and systems infrastructure capabilities as outlined in the internal ArcGIS Online Configuration Management Plan, aligning with FISMA Low requirements.
Vulnerability management type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach
Cloud infrastructure providers virtualisation technologies are regularly evaluated internally and by independent assessments. A number of key security parameters are monitored to identify potentially malicious activity on the systems which includes the use anti-malware software on systems accepting customer datasets/information. Cloud infrastructure provider anti-virus controls align with ISO 27001 requirements. ArcGIS Online releases which include patches and bug fixes are performed quarterly. If security vulnerabilities are found or reported, they are assessed by security staff. Any vulnerabilities that have an assessed risk of high or critical are patched immediately outside of normal patching routines.
Protective monitoring type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach
Cloud infrastructure providers virtualisation technologies are regularly evaluated internally and by independent assessments. A number of key security parameters are monitored to identify potentially malicious activity on the systems which includes the use anti-malware software on systems accepting customer datasets/information. Cloud infrastructure provider anti-virus controls align with ISO 27001 requirements. ArcGIS Online releases which include patches and bug fixes are performed quarterly. If security vulnerabilities are found or reported, they are assessed by security staff. Any vulnerabilities that have an assessed risk of high or critical are patched immediately outside of normal patching routines.
Incident management type
Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach
Incident management is delineated within ArcGIS Online's Incident Response Plan documentation aligning with FISMA requirements.

Secure development

Approach to secure software development best practice
Conforms to a recognised standard, but self-assessed

Public sector networks

Connection to public sector networks
No

Social Value

Fighting climate change

Fighting climate change

For over 50 years, Esri has been committed to the conservation of our planet and invested in geographic information system (GIS) solutions that help protect it and advocate for its care. Esri UK echoes the corporate commitment. We are dedicated to using geography and mapping datasets to drive interactive applications across the public and private sector, many of which are contributing to environmental protection at national and local levels. To support Buyer initiatives in line with the Social Value Model Outcomes, we will:
• Deliver additional environmental benefits through our Environmental Policy and associated activity including maintaining ISO 14001 certification. In accordance with the UK Government’s Procurement Policy Note 06/21, Esri Holdings, which includes Esri UK, has published its 2021 Carbon Reduction Plan which details: emission reduction targets; carbon reduction projects (completed and future); forecast of reduction in carbon emissions to 2030; declaration and sign off by board. In our own right, Esri UK has signed up to the SME Climate Hub and has committed to halve greenhouse gas emissions and reach Net Zero emissions before 2030, against a baseline taken in 2019. To continue our progress to achieving Net Zero, we will: decrease carbon emissions by 34% over the next five years to 700 tCO2e; procure all electricity used at Esri UK from renewable resources; and move more company vehicles to be Electric Vehicles (EV) with only a small number of plug-in hybrid electric vehicle (PHEV) by the end of 2023.
• Influence environmental protection and improvement by educating our staff and supply chain partners. When engaging supply chain partners, we will assess their carbon reduction commitments, as appropriate to their size and the scope of work, and include relevant KPIs in their sub-contracts. We will assess performance at operational reviews and an annual audit.
Covid-19 recovery

Covid-19 recovery

Esri UK has proactively supported the nation with it COVID-19 programmes and will continue to do so in line with the Social Value Model Outcomes. We will:
• Support employment, training and return to work through our well-established recruitment and personal development processes that are designed to follow best practice equality, diversity and inclusivity. We support the Armed Forces Covenant, run graduate schemes, a black geographer scholarship and work placements for GIS or geography students.
• Support people and local recovery through our charity donations and volunteering activities. Our Non-Profit programme provides heavily discounted Esri software for charitable organisations.
• Support organisations and businesses to recover through our Coronavirus (COVID-19) | Maps, Resources & Insights (esriuk.com). Additionally, our Disaster Response Programme (DRP) provides a free six-month subscription to anyone responding to a disaster, such as COVID-19, and we offer free access to DRP data to help support disaster response including bespoke area reports for specific demographics.
• Optimise health and reduced demand on public services by supporting our staff to have minimal stress through good balance in their work and home lives. The company offers health insurance and an Employee Assistance Programme. To further support mental wellbeing and inclusion, especially during the pandemic, we run company events (virtually where necessary) and fortnightly sessions to raise awareness of a range of issues such as stress, resilience and meditation.
• Improve workplace conditions by adopting a ‘flexible-first’ approach allowing all staff to continue working from home some days of the week while gradually re-establishing our office presences in Aylesbury, Cambridge and Edinburgh. Within our offices, we continue to offer and respect social distancing and sanitise the facilities.
Tackling economic inequality

Tackling economic inequality

Esri UK will proactively tackle economic inequality in line with the Social Value Model Outcomes. We will:
• Support entrepreneurship, growth and business creation through our network of over 100 partners including start-ups who specialise in adding value to ArcGIS through technology and industry or function expertise.
• Manage every partner in accordance with our robust Supply Chain Management Policy (Annex L of our ISO-certified Integrated Management System) which includes regular relationship reviews, information sharing to upskill their teams and management mentoring where appropriate. This will also increase supply chain resilience and capacity.
• Support diverse employment through our recruitment policy based on equality and inclusivity from job advert to appointment. This involves unconscious bias training and screening candidates according to their skills and experience and not personal characteristics. We will target deprived areas and under-represented groups through specialist forums. Where appropriate, we allow additional time to complete candidate recruitment tasks, change the interview format and/or location and/or present information differently.
• Provide a flexible and progressive workplace that aligns to the five foundational principles of quality work: fair pay (all staff are paid above the Living Wage); participation; progression; voice; and autonomy.
• Provide education and training by investing in learning, development and progression opportunities for our employees.
• Maintain our Schools Programme providing free GIS software, data and lesson materials for every school in the UK to support teaching of the national curriculum. We have a similar programme giving universities access to ArcGIS software.
• Offer school and student placements to encourage more people into the technology industry to address skills shortages.
• Ensure robust cyber security on our projects through implementation of best practice and Government-backed certification schemes. We will cascade this through our supply chain by assessing, monitoring and auditing.
Equal opportunity

Equal opportunity

Esri UK is an equal opportunity employer and we proactively create an inclusive working environment. We embrace diversity and disability with zero tolerance towards inequality or discriminatory behaviour. On every contract, to align with the Social Value Model Outcomes, we will:
• Advertise job opportunities widely, targeting specific areas and under-represented groups.
• Promote equal opportunity for careers in GIS through our schools programme and graduate intake, boosted by our Scholarships Programme for black and mixed black heritage students.
• Remove unconscious bias by training interviewers and screening candidates according to their skills and experience and not personal characteristics.
• Support disabled candidates by allowing additional time to complete candidate recruitment tasks, changing the interview format and/or location and/or presenting information differently.
• Provide a flexible and progressive workplace that aligns to the five foundational principles of quality work: fair pay (all staff are paid above the Living Wage); participation; progression; voice; and autonomy.
• Provide education and training by investing in learning, development and progression opportunities for all employees.
• Remove barriers to development or progression by, for example, running formal Occupational Health assessments; supplying suitable technology; giving subsidies for visual impairment.
• Offer our flexible-first working model, specifically allowing disabled staff to work from home. We conduct a thorough risk assessment and provide equipment and training where required.
• Support our active Diversity, Equity and Inclusion Group that comprises staff and senior leaders from across the business and oversees a comprehensive programme to be an equitable and inclsive place to work. Part of this group’s remit is to run a series of companywide awareness sessions including topics such as racial equity, allyship, neurodiversity, and mental health.
• Maintain our Modern Slavery Statement.
• Support the Armed Forces Covenant.
Wellbeing

Wellbeing

Esri UK fosters a culture which supports people’s wellbeing, creating an environment of psychological safety in which people are actively encouraged to come forward if they need help. On every contract, to align with the Social Value Model Outcomes, we will:
•Set clear objectives and expectations, then agree with the appointed employee or contractor their work location, hours, ways of working, training, equipment and any other requirements that will make their work-life balance as stress-free as possible.
•Promote a remote-first working model and provide full flexibility for staff to fulfil their roles, tasks and hours to suit their personal lifestyle and responsibilities such as child or other family care.
•Encourage a ‘work in working hours’ culture and encourage everyone to take their annual leave.
•Train everyone in the workforce to understand the importance of recognising and sharing their own and others’ physical and mental challenges.
• Offer Vitality health insurance and Medicash to all staff, as well an Employee Assistance Programme.
• Support the community with two volunteering days per employee per annum for a charity of their choice and an additional three volunteering days for company-backed schemes such as canal-clearing and tree-planting.
• Run company events (virtual and in person) and fortnightly awareness sessions covering topics such as stress management, resilience and meditation.
• Maintain a partnership with Mind (the mental health charity) who run regular webinars for employees, contractors and line managers, covering how to recognise that someone is struggling with mental health, how to have a conversation around someone's mental health and resources for anyone suffering.
• Address actual mental or physical health issues quickly and sensitively to surface the cause beneath any outward symptoms.
• Run a comprehensive annual survey to check staff satisfaction with inclusion, belonging, mental health, physical, psychological safety, managerial support and wellbeing.

Pricing

Price
£1,194 a unit a year
Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
Please contact sales@esriuk.com for further details
Link to free trial
https://www.esriuk.com/en-gb/arcgis/products/arcgis-online/trial

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@esriuk.com. Tell them what format you need. It will help if you say what assistive technology you use.