Airbox Systems Limited

Airbox ACANS (Aviation) and/or MOSAIC (Ground) situational awareness software

Airbox produces the most comprehensive suite of situational awareness tools available anywhere on desktop/mobile. Designed for planning, execution and after action review, and allowing operations to continue whilst no internet access is available, our software is trusted by law enforcement, military, special forces, search&rescue, fire and medical emergency services.

Features

• Connect and inform users regardless of location, platform or device
• Secure interoperability across permitted partner organisations
• Secure joint integration and interoperability within permitted user groups/levels
• Locally installed mapping/navigational charts ensuring availability regardless of connectivity
• Schematics/overlays for informed decision making and understanding of environment
• Annotations allowing clear, immediate information sharing with users within operation
• E-logging functionality for auditability and evidential purposes
• Creating and sharing navigational routes by road, sea and air
• Secure, real-time asset tracking, chat functionality and live video streaming
• FAA/NOTAMS, weather, airspace/obstacle overlays and warnings (ACANS)

Benefits

• Real-time information ensures faster decision making and response times
• Improved resource management and coordination (internal and multi-agency)
• Mitigate strategic risk and increase confidence in strategic decisions
• Single source of information- collated and accessed in one location
• Increased auditability and access to quality evidential information
• Reduced cost from using one system to collate information
• Secure collaboration and sharing of information with permitted user groups
• Geospatial awareness for mission planning and review
• Simple deployment through an app download
• Hosted or on-premise solutions available

£50 to £2,000 a user a year

• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at accounts@airboxsystems.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

666192046625306

Contact

Airbox Systems
01235 227360
accounts@airboxsystems.com

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
• Service constraints: None
• System requirements:
  • Driven by client requirements
  • Airbox will provide a recommended hardware guidance document

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Clients should submit tickets to the support desk. ; The support desks standard core hours are 09:00 to 17:00 (UK time) between Monday and Friday. ; Response times for tickets are 1 hour within these hours. Anything reported out of hours will be picked up during the next support desk working day. ; Customers can opt for 24/7/365 support at an additional cost, anything urgent (P1-high priority) outside of these hours should be reported separately via phone call and will have response times which will be defined in a separate document issued to clients in line with the client onboarding.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Airbox will offer standard remote support based on priority of support request submitted. Bug severity and timeframes to identify a resolution are defined as follows:; P1 : Actual/potential to cause operational failure/safety/security risk to Airbox Users. Fix: Reasonable endeavours - 2 hours target; P2 : Major fault, system remains available but with limited capability Fix: Reasonable endeavours - 8 business hours ; P3 : Hindrance or loss of minor functionality that does not impact on operational capability and system remains available ; P4 : Irritant but acceptable; 24/7/365 support or other enhanced support can be provided at an additional cost.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Airbox provides one remote or on-site train-the-trainer training session per contract dependent on client requirements, to be agreed in advance. Additional sessions can be quoted at an additional cost. ; User manuals and e-learning will be sent to the client upon activation of software.
• Service documentation: Yes
• Documentation formats:
  • PDF
  • Other
• Other documentation formats:
  • Word
  • Powerpoint
  • Excel
  • Video
• End-of-contract data extraction: The client contacts identified on the ISO 27001 and GDPR compliant Client Data Management form will be contacted by Airbox to confirm whether data should be extracted or deleted.
• End-of-contract process: On the day of contract termination, access to the server through the clients devices will be removed. ; Client contacts will be contacted by their Key Account Manager or Account Manager to confirm whether data should be extracted or deleted.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The desktop version is optimised for control room use, whilst the devices are optimised for operational use in the field.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: All devices provide a map/chart interface. Tools within the application enable the user to track other users, annotate the map itself, associate documents or icons with a geolocation and view relevant overlays or schematics. All changes are shared instantly across users within the operation and viewable within their UI. In essence, we provide a single pane of glass to all activities carried out by a geographically disparate and remote team. In the case of ACANS , and in addition to the interoperability outlined above, the focus is on providing pilots all information required to create and follow a flight plan.
• Accessibility standards: None or don’t know
• Description of accessibility: N/A
• Accessibility testing: None
• API: Yes
• What users can and can't do using the API: Microservice APIs are offered for integration to supported third party providers.
• API documentation: Yes
• API documentation formats: Open API (also known as Swagger)
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Buyers can engage with our Product Team regarding professional services for potential customisation.

Scaling

• Independence of resources: Use of real time monitoring with parameter-based alarms.

Analytics

• Service usage metrics: Yes
• Metrics types: Number of users; Date/time of last log in
• Reporting types: Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest: Other
• Other data at rest protection approach: TLS 1.2 encryption at minimum
• Data sanitisation process: Yes
• Data sanitisation type: Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: A formal request for data extraction needs to be sent to the Account Manager and dependant on currently work flow is normally performed within 1 calendar month of receipt of a written (email) request from the customer.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Kml
  • Gpx
• Data import formats:
  • CSV
  • ODF
  • Other
• Other data import formats:
  • KML
  • PDF
  • JPG
  • PNG
  • API available for integration to supported third party systems

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: Web Application Firewall.; Security monitored through NPM Secure operations centre.

Availability and resilience

• Guaranteed availability: 99.9%
• Approach to resilience: Airbox uses dedicated Amazon Web Services (AWS) cloud server for storage, processing and management of its data. AWS is compliant with all 14 NCSC cloud security principles. Deployment is via Kubernetes clusters.
• Outage reporting: Email and SMS alerts to Airbox support team

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: Access to management interfaces is restricted to permitted Airbox staff. A regular review of users with these permissions is carried out as per ISO 27001.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Standards Institution (BSI)
• ISO/IEC 27001 accreditation date: 13/6/2021 (recertified) - recertified again in April 2024 and awaiting certificate
• What the ISO/IEC 27001 doesn’t cover: There are no exclusions in our statement of applicability.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications: PDS Cyber Assurance

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cyber Essentials.; Cyber Essentials Plus.; ITIL.
• Information security policies and processes: Airbox have an Information Security strategy which is reviewed annually and follow, and are accredited to, the ISO 27001 framework.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: Airbox aligns change and configuration management with ISO 27001 best practice.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: Conforms with ISO 27001. Airbox’s Cyber Essentials Plus certification requires that any patch labelled as Critical' or ‘High’ be patched within 14 days of release.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Airbox utilise the NMC Secure Operations Centre for pro-active security monitoring.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Incident management conforms to ISO27001 best practice. Incidents are aligned with a criticality and managed against SLA's. One hour updates are given to impacted clients.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Social Value:

  Social Value

  • Fighting climate change
  • Covid-19 recovery
  • Tackling economic inequality
  • Equal opportunity
  • Wellbeing

  Fighting climate change

  All Airbox employees have a hybrid contract; this allows for reduced travel for all colleagues and therefore reducing our carbon footprint. Our office has recently undergone some renovations and a large proportion of our furniture was purchased second-hand from a renovation company that is local in Oxford. They also removed any unrequired items for use elsewhere rather than using landfill. ; ; When in the office, we where possible have local and sustainable sundries; for example, our new coffee is from Dark Woods, a sustainable B Corporation. Our used coffee grounds can be taken by employees to add to their home composting units. We are also in the process of scoping out the most sustainable toilet roll and sanity product options for our bathrooms. We recently found we had an abundance of sundries that we weren't using and were unlikely to use before expiry, these items have been donated to a local community cafe whose charitable efforts support those experiencing poverty.; ; We have implemented an electric car salary sacrifice scheme through Octopus Energy, to promote the use of electric vehicles. Octopus also provide Green energy, which is energy that does not produce carbon emissions when you use it, typically from wind or solar. This is something that is available for the scheme users. At present we have 2 electric charging points for employees at our office in Wantage.; ; When purchasing gifts, merchandise etc. for the business we always strive for finding both eco-friendly and quality products that shouldn't need to be replaced often to prevent waste.; ; These are all supported by our policies including; Supplier, Environmental, Sustainable Procurement and Corporate & Social Responsibility.

  Covid-19 recovery

  Our products aid with the security of the country, which in turn supports the economic recovery of the UK due a strengthened investor confidence. ; In addition, the demand on the public services across the country rose during COVID-19 and is yet to fully recover. Our software, used primarily by the emergency services, enables them to provide a more efficient service. ; Following the changes that the business made to adapt during COVID-19, we have chosen to retain a fully hybrid workforce in order to support the employees at Airbox. This has broadened our workforce across the country whilst retaining a predominant presence in and around Oxfordshire. Allowing employees to work from home has allowed for a more supported workforce, particularly in regards to mental health. ; ; Wherever possible, we use suppliers local to the office and work with Oxfordshire based groups to understand strains in the local community; our HR team are due to attend an event with Oxfordshire Mind to discuss a host of topics including the human and economic benefits of a wellbeing culture. ; ; Employees encouraged to actively test for COVID-19 and supported to work from home until fully recovered from COVID-19. This applies to other illnesses or where they suspect they may be unwell. Video call actively used as an alternative for face to face meetings where people wish to use their discretion on being in the office as are unwell or supporting others who are unwell.

  Tackling economic inequality

  Airbox is a Living Wage employer and strives to ensure all colleagues receive a fair compensation package. Our annual salary increases in April 2024 were a minimum of 1% higher than the National average. Our benchmarking is done using a reputable provider, as a minimum 2 times per year. ; ; We subscribe to the Armed Forces Covenant. We commit to interviewing any ex-services applicants whose experience is relevant to our vacancies - with around 10% of our employees with backgrounds in military, aviation, and law enforcement.; ; Due to the sensitive nature of some clients it is often difficult to provide short term placements however where possible we do, including a recent summer placement for a university student - the was a paid placement held for around 2 months.; ; We are committed to developing our colleagues, this is done with internal knowledge sharing alongside a learning and development budget each year. We are keen to progress this into wider development opportunities such as an early years programme supporting local school and college leavers into employment.

  Equal opportunity

  One of our values is Humanity. We treat our colleagues, customers and all those we interact with respect, sympathy, fairness and understanding of their strengths, limitations and diversity as human beings. We’ve made changes to our office spaces; our meeting room, now named Humanity, is a multi-use space, designed for various private needs from prayer and reflection to returning mothers who continue their breastfeeding journey. We're updating the lighting to accommodate those sensitive-to-light, enhancing comfort and accessibility. Other spaces offer a range of other accessibility features including walking-pads; providing a wellbeing offering to all whilst helping our neurodiverse members who benefit from keeping their bodies moving.; Our flexible working offering is utilised by both male and female colleagues to provide and work/life balance predominantly around caring responsibilities.; We diversify where candidates/employees are recruited to ensure a wide pool of people from different backgrounds, education and abilities. Our hybrid approach supports finding the best candidates whilst reaching a broad geographical span. All candidates are supported with adjustments needed to best achieve a successful interview.; To solidify this we’ve been Disability Confident Committed since 2022. This has resulted in an increased number of colleagues with long-standing health conditions over recent years.; We understand that technology companies are often male-dominated and this will continue to be something that requires effort to ensure a balanced workforce. We have an above average number of female line-managers and members of our Executive however we know that this number isn't driven by the tech part of the business. We've recently started a relationship with TechSheCan and hope to grow this in the future building both our female employees and supporting the next generation.; Airbox has policies and processes in order to protect our company/employees including Modern Slavery, Equal Opportunities, Menopause, Lone Worker and Pre-employment checks.

  Wellbeing

  Internally we regularly poll our employees to understand a number of factors, including their wellbeing. In our most recent review our average ENPS score was 78%. These polls allow us to identify where we can improve including greater promotion of support options already in place whilst also allowing us all to celebrate our successes. This feedback is anonymous and is reviewed by our Executive team on a monthly basis.; ; We have previously made a range of updates to our office space following feedback from employees which have resulted in positive changes in relation to accessibility and wellbeing, all previously mentioned. We have also changed our offering of snacks available in the office to ensure they're healthy and nourishing for employees. ; ; We do offer a 24/7/365 offering to some of our clients which results in a number of our employees being on an on-call rota. This is managed/setup to ensure that any employees having to work for a large portion of time during the evening/night use their time flexibly to recover. This is a compensated rota for those involved in both Line 1 and Line 2. ; ; We understand that everyone at some point will struggle with their mental health and that will fluctuate in severity. We have a number of Mental Health First Aiders who also offer support to all across the business and will escalate concerns to our People team if they feel it's appropriate to. Staff are supported by our Mental Health and Wellbeing policy.

Pricing

• Price: £50 to £2,000 a user a year
• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Trials may be available to new customers that meet specific criteria, in consultation with the Airbox business development team. Trials are time bound and details of the service offering included in the trial would be provided in the quote following initial consultation meeting.

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at accounts@airboxsystems.com. Tell them what format you need. It will help if you say what assistive technology you use.