GAMMA NETWORK SOLUTIONS LIMITED

Session Initiation Protocol (SIP) Telephony

SIP Trunking directly provided by Gamma, the UK’s market leader for SIP Trunks. The SIP service is designed as an ISDN replacement for the PSTN switch-off, compatible with all IP/SIP enabled telephone systems and Session Border Controllers (SBCs). Delivering enhanced cloud features; automatic failover (SIP PING) and flexible SIP channels.

Features

• ISDN replacement SIP technology for PSTN switch-off
• Keep existing telephone numbers/DDIs from ISDN to SIP
• Microsoft Teams integration and compatible with iPBX/SBCs
• Choose the outbound number you present (CLI Presentation)
• Instantly scalable channels for peak calling periods
• Business continuity as standard– Active/Standby, Loadshare or Resilient mesh
• Inclusive calls to 01/02/03/07 or PAYU for inbound SIP Trunking
• Optional cloud based inbound call control SIP Trunk Call Manager
• Optional PCI compliant payments service
• Directly managed by Gamma for quicker provisioning and fault fixing

Benefits

• Full business continuity solution so calls are never lost
• Keep your existing numbers and maintain continuity
• Inclusive SIP calls allowing budget and cost control
• Guard against fraudulent calls to minimise risk and bill shock
• Simplified architecture using SIP and Data infrastructure
• Flex channels and only pay for the SIP Trunking used
• Achieve cost effective PCI compliance for payments
• nvironmentally friendly and Carbon Neutral certified solution
• Caller access control allows inbound/outbound SIP Trunking call management
• Simple and fast provisioning and transition

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bidteam@gamma.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

686530665303392

Contact

Public Sector Sales Team
0333 043 7330
bidteam@gamma.co.uk

About your service

• Service categories:

  Applications

  Collaborative

  • Team collaboration
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Gamma's Inbound Service Cloud based or hosted iPBXs Session Border Controllers
• Cloud deployment model:
  • Public cloud
  • Private cloud
  • Hybrid cloud
• Service constraints: Gamma SIP services must be connected to a iPBX or Session Border Controller.
• System requirements:
  • Conformance tested PABX (Confirm with Gamma)
  • Compatible Session Border Controller (Confirm with Gamma)
  • Appropriately sized data access
  • IP Address Authentication
  • Sufficient SIP Licences on PABX

User support

• Email or online ticketing support: Yes
• Support response times: Gamma's Service Desk is 24x7 and any emails or online tickets are handled as per the below SLA. General questions are classified as a severity 4 and have an update SLA of 48 hours. However, other severity classifications have a response time as per below: Severity 1 -30 min, Severity 2 -60 min, Severity 3 - 4 hours, Severity 4 -12 hours.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Gamma provides one level of support for all SIP customers 24x7x365 - included free of charge as part of the service charge. The following service levels apply with target resolution times: Critical Fault - 60 minutes, High - N/A, Medium - 4 hours, Low - 48 hours. Service availability is 99.95% for UK SIP Standard build and 99.99% for UK SIP Resilient Build. Mean Average PESQ Score target of 4.1 for G.711 and 3.7 for G.729. We provide Service Desk and Account Management Teams. Support engineers answer the phones in the Gamma Service Desk and perform first stage fault analysis. If they are unable to resolve the incident will be escalated to Tier 2 and Tier 3 engineers.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Our SIP trunking product does not require specific user training, although we do provide comprehensive user acceptance and handover documentation. We also supply a customer support manual for all contact points and escalations. For an optional bolt on, SIP Trunk Call Manager, we provide comprehensive admin and user training for the web portal and App. This is offered via our tutorial videos, onsite training (additional cost), webinar online training, user documentation and a full help section on the web portal. We also provide online and webinar training for our web-based billing and reporting tool. A named Customer Advocate and/or Customer Executive will also be assigned to your account to support you and a project manager where required.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
  • Other
• Other documentation formats:
  • .mpg
  • .doc
• End-of-contract data extraction: Our Customer Portal is a secure online space giving customers complete visibility of the assets that we manage for them. We offer a complete view of their estate, including telephone numbers (CLIs), the product related to that number and its geographical location. All invoices are in one place and kept for 12 months for historical billing information on the services you have taken. This information can be easily downloaded for extraction into excel.
• End-of-contract process: At the end of the contract the customer moves onto a rolling 30 day contract on our standard rates. Through our online billing and reporting portal, customer can get their asset list, including numbers that can be ported away and details of the services they currently take with us. This will be provided at no additional cost. It is up to the new provider to port the numbers away.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Language used and document structure simple and easy to follow, any images used are described in the text.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Other
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • MacOS
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: We have a bolt on App (see pricing document) that can be added as an option to SIP Trunk Call Manager. Upon successful download from the relevant app store, the user is able to log in to access a subset of SIP Trunk Call Manager. Functionality as available at: www.siptrunkcallmanager.co.uk. The user has access to edit components of call routing for numbers provisioned on this service and in accordance with their user permissions. Functionality includes ability to route calls to an alternative destination number/voicemail/divert calls/invoke pre-configured call plan. Key reporting statistics are also available including performance graphs and call history.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: We have an optional bolt on - SIP Trunk Call Manager. Portal-based, the user is able to log in and has access to edit components of call routing for numbers provisioned on this service and in accordance with their user permissions. Functionality includes ability to route calls to an alternative destination number/voicemail/divert calls/invoke pre-configured call plan. Key reporting statistics are also available including performance graphs and call history.
• Accessibility standards: None or don’t know
• Description of accessibility: Standard web-browser access with standard accessibility options associated with those web-browsers.
• Accessibility testing: We are interface testing at present.
• API: No
• Customisation available: Yes
• Description of customisation: The design of the SIP service can be configured and customised for various designs (Active / Standby, Loadshare, Resilient+, Enhanced). Customer confirms design option during project kick off and then built by Gamma. The number of concurrent call channels required (subject to minimum number) can be customised subject to sufficient data bandwidth being available. Whether existing customer DDI numbers are ported from other services. Determined by administrators. Whether new DDI numbers are required for the service. These can be added by administrators of the service. If individual call control is required per DDI this can be achieved through a web based customer portal using SIP Trunk Call Manager. Where the option is taken, customer administrators can manage SIP Trunk Call Manager, a feature-rich, centralised inbound call management service via an easy-to-use web portal and App. The following are customisable: Call Queuing, Day/Time of Day Routing, Hunt Group, Voicemail, Date Routing, Increased resilience, Announcement Auto attendant, Set user access individually, Divert (on busy, on no reply, on failure), Access to full call statistics, Advanced Statistics

Scaling

• Independence of resources: We undertake a monthly Capacity Planning Forum whereby the utilisation of every network component is reviewed against planning rules and sales forecast to ensure that we have sufficient capacity and overhead to manage our customer's requirements. Additionally there is weekly planning review on capacity management adjustments. Each SIP customer's resource requirements are taken into account and sufficient network is allocated to them. We also manage our network to spread traffic during very busy periods.

Analytics

• Service usage metrics: Yes
• Metrics types: Gamma SIP Trunk Call Manager service provides a range of online call reporting on a per number basis. Full summary reports are provided; how many calls are getting through, where are my customers located, what are my call trends, when are my busy times. Detailed call analysis is available via the advanced statistics package.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type: Deleted data can’t be directly accessed / Cryptographic Erasure

Data importing and exporting

• Data export approach: Our Web Portal allows users access to their associated number ranges. Typically users will extract their applicable data in Excel or CSV format.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Excel
  • PDF
• Data import formats:
  • CSV
  • Other
• Other data import formats: Excel

Data-in-transit protection

• Data protection between buyer and supplier networks: Private network or public sector network
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: SIP trunk service availability is calculated as: Total number of minutes in the measurement period – Unplanned Downtime x 100 / Total number of minutes in the measurement period Note: If a Service is partially available then the Unplanned Downtime shall be calculated in equal proportion i.e. if a service is 50% available then the unplanned downtime will be calculated as 50% x elapsed period of the incident. Availability Measurement Period: 1 Calendar month Target availability for SIP Trunk Endpoint. Resilient Build: Core service: 99.99% Non-Core Services: 99.50%. Not included: - Outages which are deemed by us to be the result of matters outside of its direct control - Planned or emergency maintenance works - User error Notes: (1) Core functions are defined as Gamma Switching infrastructure, transmission equipment and core network, the service that supports call routing and termination. (2) Non-Core functions include Gamma Support Systems, access to any relevant portals and feature based services such as Call Plans, Call diverts, Auto Attendant, Call Recording, and Unified Messaging (3) A Resilient build SIP Trunking means a Gamma approved configuration such as dual Session Border Controllers offering geographic diversity. PESQ score target for G.711 is 4.1 and G.729 is 3.7
• Approach to resilience: We hold ISO 22301:2012 Business Continuity Management accreditation. As this information is sensitive, further specific information is available on request.
• Outage reporting: A public network status dashboard, Email alerts, Portal alerts, Text messages to opted in mobile numbers, Service desk verbal communication

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Relevant only to SIP Trunk call manager services. Customer administrators can set permissions for other users to give them access to certain areas of the portal. They are able to restrict access to certain areas of the management and support interfaces.
• Access restriction testing frequency: At least once a year
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cyber Essentials, Cyber Essentials Plus
• Information security policies and processes: Gamma has deployed an Information Security Management System Manual (ISMS) which meets and is certified to ISO 27001:2013, Cyber Essentials and Cyber Essentials Plus. It is supported by numerous policies and processes including but not limited to the following: Information Security Policy, Information Security Incident Policy, Acceptable use policy, Access Control Procedure Backup Plan, Business Continuity Plan, Confidential Data Policy, Data Protection Policy. The Reporting structure is from employees or customers to the Information Security Manager to the Information security Forum which is attended by several Directors and heads of departments. The Information Security Forum meets monthly to review all security incidents and events and corrective actions are agreed and tracked at this forum. To raise awareness, Gamma uses a computer based training platform for Security Awareness which is repeated annually. Line Managers have a responsibility to ensure their staff are aware of and follow these policies.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: Change Control Process covers changes made to operational systems, to mitigate the risks and impacts that any change has and ensures good communication at all stages. Change Management ensures changes to core infrastructure and services are performed and implemented correctly. Best practice guidance, aligned to ITIL (OGC), recommends that the starting point for any change should be a review of generic questions or the ‘seven Rs’. A risk and impact assessment is carried out for each change this involves detailing the assets under change. The Change Advisory Board (CAB) has a representative from each impacted business area.
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: We use failure mode effects analysis process, conducting regular, systematic assessments of vulnerabilities to determine the necessity of safeguards, countermeasures and controls, monitoring for changes to maintain an acceptable level of risk. Includes identifying key information assets and subjecting them to specific risk assessments, assessing exposure to a list of common threats and vulnerabilities, maintaining risk registers, implementing technical, policy, business continuity and management initiatives; Each patch is assessed and deployed accordingly: High - Urgently. Medium - ASAP. Low - as time permits. Gamma utilise many Vendor sources and industry RSS feeds, CERT, Ubuntu and Debian. Member of CiSP.
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Gamma utilises GPG 13 guidance. Gamma has built a Security Information & Event Management Solution (SIEM) to identify potential compromises. If a compromise is found it is investigated. A Security Incident is raised to track the investigation, root cause and solutions if required to rectify or improve the situation. We respond to incidents as close to real time as practicable.
• Incident management type: Complies with a recognised standard, for example, CSA CCM v4.0 or ISO/IEC 27035:2011 or SSAE-18 / ISAE 3402
• Incident management approach: Gamma has an Incident Management process which has numerous pre-defined sub groups of staff designated for particular products or scenarios. It can be initiated by any member of staff and is managed by the 24/7 Network Operations Centre (NOC). Any incident is reported by the customer to the Service Desk, it is recorded in a customer relationship management tool (CRM) and an Incident report is produced after root cause analysis has taken place. Any Incident reports are made available to end users via pdf.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks:
  • Joint Academic Network (JANET)
  • Health and Social Care Network (HSCN)

Pricing

• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Please contact Gamma - we have various free options available dependent on requirements.
• Link to free trial: N/A

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 2%
• Between £500,001 and £1,000,000: 5%
• Between £1,000,001 and £2,500,000: 10%
• Between £2,500,001 and £5,000,000: 12.5%
• Over £5,000,001: 15%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Alcumus ISOQAR
• ISO/IEC 27001 accreditation date: Wednesday 2 July 2025
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: Alcumus ISOQAR
• ISO 9001 accreditation date: Monday 17 June 2024
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: A-LIGN
• PCI DSS accreditation date: Friday 12 September 2025
• What the PCI DSS doesn’t cover: N/A
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: C4531076-493b-4813-a761-c80d933ad97c
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 4f2547da-4b2d-4057-bfd9-b6553ac0faee
• Other security certifications: Yes
• Any other security certifications:
  • ISO22301
  • CREST SOC

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Break down barriers to opportunity: By reforming our childcare and education systems, to make sure there is no class ceiling on the ambitions of young people in Britain

    Policy Outcome 6: Employment and training: For those who face barriers to employment

    • Other measures to provide equality of opportunity for disabled people and those with health conditions into employment, including becoming a Disability Confident employer and inclusion of supported businesses in the contract supply chain

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bidteam@gamma.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.