PressArea

PressArea Digital Asset Management (DAM) Media/Press Centre Solution

A secure online digital asset management (DAM) and press centre platform for marketing and PR departments. Tools include press release creation and distribution (online+email), image, video and document asset distribution, press enquiry systems, bulk WeTransfer-like file sends, lines-to-take, social media integration, multi-language, and registered-users-only downloads.

Features

• Virtual Media Centre Press Office Content Management Digital Asset Management
• Online Media Centre For Online and Email Press Release Distribution
• Multimedia Asset (Video, Images, Document) Storage and Distribution
• Integrated Media Database and Media Customer Relationship Management CRM
• Press Enquiry Workflow Handling
• Lines-To-Take Frequently Asked Question (FAQ) Creation and Distribution
• Crisis Management, Lines to Take and Dark Site modules
• File send facility for Images/Videos/Documents
• Responsive Design For Mobile and Notepad Devices
• Unlimited Users (Admin and Press)

Benefits

• Publish, distribute and track Press Releases from a shared platform
• Integrated image library, video, document and PDF management
• Real-time tracking of press release response and coverage
• Incoming press enquiry module means you don't miss a deadline
• CRM tools to optimise your media relations and track contacts
• Manage and view communications from any device
• Restrict and embargo press releases/images/videos
• Restrict asset views/downloads depending on user type
• Sites built to match brand guidelines
• Switch to a reduced crisis management site In minutes

£700 to £1,900 a licence a month

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@pressarea.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

634345994595456

Contact

David Smith
0845 226 0435
sales@pressarea.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: The service offers unlimited users (press and admin), storage for images, videos and documents up to 1TB (additional storage is charged on a stepped basis after this), outbound press release sending up to 1000 email sends per month (additional emails are charged on a stepped basis after this), unlimited training and support. Telephone support is 8-6 Mon-Fri.
• System requirements:
  • Requires a modern browser (Internet Explorer is not supported)
  • Uploading images/video requires a good broadband connection

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Critical Issues - Telephone Hotline support for critical issues is available 24/7/365; ; For Non-critical issues - Phone support is offered Mon-Fri, 8am-8pm ; ; Email response time within the hour Mon-Fri, 8am-8pm; Email response time within the hour Sat-Sun, 8am-5pm. ; ; Outside of the above hours, the response time is the next day.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: No
• Support levels: A dedicated account manager is provided for each client.; Critical Issues - Telephone Hotline support for critical issues is available 24/7/365; For Non-critical issues - Phone support is offered Mon-Fri, 8am-8pm ; Email response time within the hour Mon-Fri, 8am-8pm; Email response time within the hour Sat-Sun, 8am-5pm. ; Outside of the above hours, the response time is the next day.; ; There is no extra charge for the above support level.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Sites are designed to blend in with the users current site. Depending on the level of customisation required and any need to import data from previous solutions this can take between 1-6 weeks. Once the site is built ; then the free initial training is provided, which can either be onsite for 3-4 or more individuals, or via online/phone training. ; Any new staff joining will be eligible to receive free online training. ; Note - Onsite training outside of the M25 area will be charged for at £250 per 1/2 day plus travel costs.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: We can arrange for data stored in PressArea (video/images/documents/contacts) to be exported to any open file format at the end of the contract.
• End-of-contract process: There are no end-of-contract costs. On termination, we will terminate access to the platform preventing further access to the services purchased.; ; We will extract the data as part of the service cost on exit.; ; If the buyer has specific needs then a custom service can be provided with a separate fee negotiated.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The system uses responsive-design and the admin and media content and functionality is same on a mobile device as it is on a desktop device. PressArea has been designed to be updatable/editable by PR teams using smartphones.
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: A web portal allows users to upload edit and delete images/videos/documents/press releases add new users etc
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: We are looking at implementing testing with assistive technology in the coming year
• API: No
• Customisation available: Yes
• Description of customisation: The service can be customised to the client's website to make the solution fit in with their current web look and feel. ; For examples of how we have customised the solution see www.pressarea.com and view the links to past and present sites. PressArea clients include British Airways/Heathrow/John Lewis/Waitrose/Iberia/London Luton Airport/DFS/Marriott.; We won the Digital Impact Award for the Best Online Newsroom ; in 2020, 2021, 2023 for our work on the Luton, DFS and John Lewis PressArea sites.; The majority of customisation is done by PressArea in the initial build. Once the site is delivered all day-to-day changes of content are handled by the end-user. Any subsequent small changes and tweaks to the design and functionality are delivered free of charge. ; Only major additions and changes - such as a redesign/refresh or new functionality - are charged on a set fee basis.

Scaling

• Independence of resources: The servers are constantly monitored to see that the service meets our agreed service levels. The service uses the CloudFlare worldwide Content Delivery Network to deliver images text and video worldwide.; Our system was real-world stress-tested by Thomas Cook going into administration. The worldwide interest - there were 200,000 customers abroad as well as thousands of media users - resulted in a huge traffic spike to their PressArea site. Additionally, another clients' .com site was unable to deliver any pages worldwide for a weekend, and our media centre was their only way of delivering content to their worldwide media network.

Analytics

• Service usage metrics: Yes
• Metrics types: The service includes the ability to either use the clients own analytics or use the built-in Google Analytics and built-in email tracking provided by Campaign Monitor
• Reporting types:
  • Real-time dashboards
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest: Physical access control, complying with SSAE-16 / ISAE 3402
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Much of the data from reports etc in the application can be exported in either CSV, Microsoft Excel or PDF file format directly from the application, any other data can be arranged to be exported by the business in a CSV or ODF file format
• Data export formats:
  • CSV
  • ODF
• Data import formats:
  • CSV
  • ODF

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: SLA is base on site uptime and produces a reduction in the next invoiceable month ; ; Monthly Uptime % credit on following month ; >99.9% 0% ; 99.9-99.6% 10% ; 99.6-99.4% 20% ; 99.4-99.2% 40%; <99.20% 60%; ; We have never had to pay out in the 20+ years we have been operating.
• Approach to resilience: Full details are available on request; Key points of the infrastructure:; • Infrastructure has N+1 redundancy ; • A layered architecture to provide performance, resilience and redundancy.; • Traffic is load balanced.; • External Content Delivery Network (CDN) delivers the majority of the traffic for static pages and frequently viewed images/videos/releases to a local cached version.; • Incorporates DRaaS solution based on Microsoft Azure platform
• Outage reporting: Email alerts to clients. Reporting is managed internally via PressArea support staff.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Public key authentication (including by TLS client certificate)
  • Username or password
• Access restrictions in management interfaces and support channels: Management interfaces and support channels require username and a strong password over an SSL encrypted channel and requires a Captcha to be completed correctly. Access is prevented after three failed attempts to login.; ; The most sensitive management areas of the platform such as the database are controlled through 2FA.; ; A security policy is in place to control access to the areas and only staff who need access are granted access.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users receive audit information on a regular basis
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: https://servicetrust.microsoft.com/viewpage/ISOIEC
• ISO/IEC 27001 accreditation date: 20/03/2024
• What the ISO/IEC 27001 doesn’t cover: PressArea infrastructure is hosted on Microsoft Azure in the UK all certificates are available here https://servicetrust.microsoft.com/viewpage/ISOIEC
• ISO 28000:2007 certification: No
• CSA STAR certification: Yes
• CSA STAR accreditation date: 12/6/2023
• CSA STAR certification level: Level 3: CSA STAR Certification
• What the CSA STAR doesn’t cover: See https://cloudsecurityalliance.org/star/registry/microsoft/services/microsoft-azure
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications: Seehttps://learn.microsoft.com/en-us/azure/compliance/

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Protecting our client's data is paramount. ; We use solutions from CloudFlare and we use Alert Logic's Fortra Extended Detection and Response solution to alert us to any threats to the infrastructure. Additionally, the infrastructure is also managed by Aptum Technologies (formerly Cogeco Peer1) who monitor and maintain the business infrastructure and security on a 365/24/7 basis.
• Information security policies and processes: We are used and trusted by some of the largest businesses in the UK (British Airways/John Lewis/Heathrow/M&S/Next/TK Maxx) and we have been working with some of those organisations for over 20 years. We are pen tested on a regular basis by our clients and any security warnings are acted on and mitigated within days. Our software is 100% built in-house, rather than based on any off-the-peg DAM solution - so reducing attacks using known attack vectors - and runs on tried and tested platforms. In addition, we make sure all software and hardware is kept up to date with the latest security patches.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: All code and data changes are logged. Infrastructure changes are managed via our hosting partner Aptum Technologies (formerly Cogeco Peer1) and hosted on Microsoft's Azure platform.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Patches for the infrastructure are first checked for reliability before they are deployed to the infrastructure. Security patches are applied as they appear. Hardware is managed by Microsoft Azure. ; ; Our sites are monitored for threats by CloudFlare and Alert Logic's Fortra Extended Detection and Response (XDR).
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Sites are monitored 24/7/365 for threats by Alert Logic's Fortra Extended Detection and Response (XDR). If any critical threats are detected our development teams are alerted by a phone call from Alert Logic.; ; Additionally the service is also monitored 24/7 by Aptum Technologies (formerly Cogeco Peer1) and any potential compromises are flagged up within an hour. ; During the working week and during the day on a weekend we will respond within minutes to threats. We have teams in India and US West coast who monitor the site outside of UK working hours enabling us to respond within the hour.
• Incident management type: Supplier-defined controls
• Incident management approach: Users report incidents by email or phone. Incident reports are provided by email to all affected parties.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  Wellbeing

  Wellbeing

  We are a micro-business <10 employees. All of our employees have worked for the business for more than six years. All employees work from home and are encouraged to maintain a good work-life balance.

Pricing

• Price: £700 to £1,900 a licence a month
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: There are demo accounts available that provide access to the entire platform and all functionality to evaluate the platform

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@pressarea.com. Tell them what format you need. It will help if you say what assistive technology you use.