Wavenet

8x8 XCaaS (eXperience Communications as a Service) Platform

8x8 XCaaS delivers UCaaS, CCaaS and CPaaS services from VoIP telephony (X-Series X1), full voice, chat, and video collaboration (X4) up to contact centre (X8). 8x8’s omnichannel contact centre includes skills-based routing, self-service automation, conversational AI, media recording, analytics and dashboard reporting, customisable wallboards, quality management and open API integration.

Features

• Business phone - enterprise-grade cloud PBX
• Team chat - persistent open/closed conversations with content sharing
• Video meetings to 500 participants, content sharing and moderator controls
• Omnichannel call routing with blended interaction of all channels
• Customer journey analytics from call initiation to completion and resolution
• Personalised user workspaces for users, supervisors and administrators

Benefits

• Communications quality and collaboration efficiency
• Productivity for all users
• Enable business continuity
• Robust security policies
• Embed agile working practices
• 99.999% Uptime

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsector@wavenet.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

698174452752780

Contact

Joe Ewins
0333 234 0011
publicsector@wavenet.co.uk

About your service

• Service categories:

  Applications

  Customer relationship management

  • Contact centre
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: 8x8 XCaaS is intended as a complete, single-sourced cloud communication and collaboration solution. Elements of the XCaaS solution can be deployed with third-party solutions, for example its Contact Centre is solution-certified for Microsoft Teams and its CPaaS capabilities for proactive outreach services.
• Cloud deployment model: Public cloud
• Service constraints: The services delivered via the 8x8 XCaaS platform are designed for scalability, reliability, security, global reach, and sustainability. This includes a 99.999% financially-backed SLA for end-to-end services availability. Successful implementation, operation, and ongoing management require adherence to technical prerequisites, especially regarding local network connectivity and compliance with voice over IP regulations and carrier interconnection. Planned maintenance by 8x8 is performed without disrupting customer operations. Customer-facing aspects, such as portals and user interfaces, are upgraded at the convenience of the customer, while non-facing elements are upgraded seamlessly without interrupting service continuity.
• System requirements:
  • Network interconnection and access (firewall settings)
  • Local network suitability for multimedia traffic (bandwidth, QoS settings)
  • Data centre network addresses (IP number whitelist)
  • Browser prerequisites for user, supervisor and admin portal access
  • User device hardware prerequisites for 8x8 client applications
  • User device software prerequisites for 8x8 client applications

User support

• Email or online ticketing support: Yes
• Support response times: The UK-based Technical Support team at Wavenet has a target response time to Critical and High priority issues within 30-minutes and to Medium and Low priority issues within one hour. Customer and technical support teams operate during core business hours, Monday to Friday from 08:00 to 18:30, for handling emails and phone calls. Customers on the 24x7x365-day support list will receive assistance beyond these hours.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Standard Care; Supported Mon to Fri 09:00 - 17:00 excluding public holidays; Wavenet will use all reasonable endeavours to respond to a request for Incident support received during the Working; Hours Mon to Fri, 09:00 - 17:00 hrs, excluding UK Public/Bank holiday and is based on the SLA Priority Response table.; ; Enhanced Care; Supported Mon to Fri 08:00 - 20:00 excluding public holidays; Wavenet will use all reasonable endeavours to respond to a request for Incident support received during the hours Mon; to Fri 08:00 - 20:00 hrs, excluding UK Public/Bank holidays and is based on the SLA Priority Response table.; ; Flex Care; Supported Mon to Fri 09:00 - 17:00 excluding public holidays; Wavenet will use all reasonable endeavours to respond to requests for Incident support received during Working Hours; of Mon to Fri 09:00 - 17:00 hrs, excluding UK Public/Bank holidays and is based on the SLA Priority Response table.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Upon signing the contract, services are provisioned, an account created, and your administrator will be provided with access instructions and credentials. Our Project Services teams will collaborate with you to facilitate the adoption of our service, providing guidance and training for setup, configuration, and efficient use. They adhere to PMI methodology and PRINCE2 principles, ensuring a structured approach from contract signing to transition to our Support teams. The onboarding process, guided by the Project Services team, implements project lifecycle processes and governance throughout.; Project stages include:; ; 1. Project kick-off: Introducing the team, explaining the process, and setting deliverables and timelines.; 2. Solution design (discovery): Assessing network, collecting user profiles, call flow details, and other requirements, including number porting prep.; 3. System configuration and admin training: Configuring the system, providing admin training, and activating phones.; 4. System test and user training: Testing and providing training materials for end-users.; 5. Go-Live: Making the system operational by forwarding calls.; 6. Number porting: Transferring current numbers to our system.; 7. BCD sign-off: Officially approving the Build Capture Document.; 8. Transition to support: Ensuring smooth operations post-implementation, with ongoing support as outlined in our agreement.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Data within 8x8 systems is automatically deleted within 24 hours of the contract's expiration. Customers must utilise the built-in product features or APIs to export necessary data elements before contract expiry to prevent data loss. Failure to do so renders the data irretrievable. Additional fees apply if data retrieval is requested beyond contract termination.; ; For Contact Centres:; - VCC CRM Data: Customers utilise the 8x8 Case and Contact Management API for email attachments.; - VCC Analytics: Customers access and download reports.; - Quality Management/Speech Analytics: Customers are responsible for downloading reports and related data.; - Call Recordings: Accessible via VCCs SFTP server.; ; For Back Office:; - Numbers Report: Admins generate PBX number lists.; - User Report: Admins create user reports for service setup.; - Device Report: Customers generate usage and assignment reports.; - Sites and Site Addresses: Admins access setup and physical address details.; - Call Recordings: Admins access current and archived call recordings.; - Work Groups: Admins view configurations, with detailed reports available on request.; - Auto-Attendants: Admins access lists of numbers and assignments.; - Contact Directory: Admins generate .csv format contacts reports.; - Analytics for 8x8 Work: Users with appropriate licences generate and download CDR records.
• End-of-contract process: Upon the expiration of the contract, all data within the 8x8 platform is processed for deletion and will be deleted within 60 days of contract expiry. Customers are responsible for extracting any data from 8x8 products using the provided tools and APIs prior to the contract expiring. Upon the contract expiring, any customer data remaining on the platform shall not be accessible and/or recoverable. Please refer to the exit management provision in the service description for more information.
• Documentation accessibility standard: WCAG 2.2 A

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • MacOS
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: There are no differences in features between 8x8 Work Desktop and 8x8 Work Mobile.
• Service interface: Yes
• User support accessibility: WCAG 2.2 A
• Description of service interface: 8x8’s application features two primary browser-based interfaces for service and administration. The Admin Console empowers customers to manage PBX features like users, hunt groups, and auto attendants. Configuration Manager serves as the platform for administering Contact Centre elements, including call flows, agent skills, omnichannel settings, and service levels.
• Accessibility standards: WCAG 2.2 A
• Accessibility testing: Not known
• API: Yes
• What users can and can't do using the API: 8x8 provides a comprehensive suite of APIs covering various functionalities, including Real Time Statistics, Historical Reporting, Call Recording Control, Contact Centre Status (Schedules), and Chat AI (manipulation and augmentation), Chat API (full headless server-to-server capability), and SCIM Provisioning API.; ; These APIs enable seamless integration with third-party systems, facilitating intelligent screen pops, configurable workflows, auto activity logging, and data syncing. Customisable workflows cater to individual business processes.; ; Our Contact Centre integrates seamlessly with leading CRM services like Salesforce, NetSuite, Microsoft Dynamics, and Zendesk, alongside support for other systems via Web Services or standard APIs. Our Professional Services team assists in customisation of existing integrations or creation of new ones based on project requirements. Custom integrations can encompass advanced functionalities like populating audio file links in CRM notes, custom inbound routing tables, advanced IVR features, and more.
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: 8x8’s XCaaS solution is highly adaptable to meet the specific needs of each customer. For example, individual requirements for Contact Centre operations - such as routing voice, chat, email, digital bot, or voice bot contacts, defining agent skill levels, determining in-queue treatments for end customers, and configuring real-time and historical reporting - are accommodated seamlessly.; ; Additionally, customisation extends to integration needs, whether for standard integrations or applications unique to a customer’s business. In Unified Communications (UC), customers can integrate 8x8’s capabilities into platforms such as MS Teams. Each user can have a tailored persona, ensuring their unique UC needs are addressed. For instance, users may opt for call recording or need to participate in hunt groups. Therefore, our solutions is customisable to meet the communications requirements of each customer.

Scaling

• Independence of resources: 8x8's cloud-based communication services offer unparalleled scalability, anticipating resource needs for deployment and growth. Our technology scales horizontally, unconstrained by limited resources, and leverages ML and AI algorithms to forecast bandwidth, carrier access, and hardware requirements. Systems automatically adjust resources based on load, with rigorous review by our architecture team to ensure reliability, availability, and security. Dedicated quality assurance teams conduct thorough testing against replica production platforms to uphold 8x8 standards, including load testing. This approach ensures seamless scalability and robust performance, guaranteeing our ability to support both existing and new customers effectively.

Analytics

• Service usage metrics: Yes
• Metrics types: We equip our end users with comprehensive metrics spanning all solution facets. From network call quality to AI-driven content analytics, insights cover voice calls, chat, email, live web, chat, and AI bot technology. Our customisable report templates empower users to highlight relevant KPIs in preferred formats, tailoring reports to their specific needs. This flexibility ensures visibility onto critical metrics, facilitating informed decision-making and optimisation. Whether monitoring call quality or analysing AI interactions, our solution enables effective data utilisation for enhanced performance.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: 8x8

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Physical access control, complying with SSAE-18 / ISAE 3402
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Via a secure web-portal. Portal address to be provided by engineering upon commencement of the service.
• Data export formats:
  • CSV
  • Other
• Other data export formats: XLS
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: We strive to maintain our services available to customers 24x7 and offer a Service Level Agreement (SLA) covering system availability and call quality. 8x8 ensures a consistent and reliable end-user experience through a highly available architecture supported by a platform-wide uptime SLA of 99.999%. All service availability calculations and determinations are based on 8x8's records and data. We make commercially reasonable efforts to respond to Unplanned Service Interruptions reported through any of 8x8's Customer Support channels, 24x7.
• Approach to resilience: A dedicated 8x8 Architecture team conducts thorough reviews of all significant changes to service definitions and products before their release, as part of 8x8's New Product Introduction (NPI) process. This review involves scrutinising design and implementation to identify potential service risks. System components undergo systematic evaluation and risk assessment using the "Failure Mode and Effects Analysis" methodology. Risks are scored based on factors such as methods of failure detection, automation of failover, failover duration, severity of failure impact, and likelihood of occurrence. If a component or system poses an unacceptable risk, the proposed solution is rejected, and engineers are tasked with refining the solution or providing mitigations. Mitigations may include implementing faster detection methods, adding redundancy, reducing recovery times, or making lower-level software changes to enhance resilience against failure modes.
• Outage reporting: We have a process to communicate with customers in the event of a major service outage and provide a Reason for Outage report. This is based through emails from the support team. Once an outage is noted then regular hourly emails are sent detailing progress to resolution.; We operate a real time network monitoring tool that allows us to see in real - time any issues on our network.

Identity and authentication

• User authentication needed: Yes
• User authentication: Multi-Factor Authentication (MFA)
• Access restrictions in management interfaces and support channels: 8x8 maintains stringent access controls by assigning unique user IDs with robust passwords, adhering to the latest NIST guidelines. Multi-Factor Authentication (MFA) is mandatory for all access, leveraging a well-known Single Sign-On (SSO) provider. Access by 8x8 employees is meticulously logged, including IP addresses, and is under constant monitoring by both IT and Security Information Event Management teams.
• Access restriction testing frequency: At least once a year
• Management access authentication: Multi-Factor Authentication (MFA)

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: Wavenet is an ISO27001 certified company and we adhere to the standard, we are audited on this standard annually, Wavenet is also a CE+ certified company
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Wavenet conform to ISO2000
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Wavenet conform to and follow the NIST standard and ISO27002
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: We have continual monitoring with EDR solution feeding into a SIEM that is monitored 24/7 that is monitored by SOC
• Incident management type: Supplier-defined controls
• Incident management approach: Wavenet is ISO27001 certified and we follow the playbook as part of our certification.
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks:
  • Public Services Network (PSN)
  • Police National Network (PNN)
  • Joint Academic Network (JANET)
  • Scottish Wide Area Network (SWAN)
  • Health and Social Care Network (HSCN)

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 1%
• Between £500,001 and £1,000,000: 2%
• Between £1,000,001 and £2,500,000: 3%
• Between £2,500,001 and £5,000,000: 4%
• Over £5,000,001: 5%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: United Registrar of Systems
• ISO/IEC 27001 accreditation date: Thursday 18 July 2024
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: United Registrar of Systems
• ISO 9001 accreditation date: Monday 12 August 2024
• What the ISO 9001 doesn’t cover: N/A
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: 39aabf05-4ab8-4ee7-adcd-3318af1f9d2f
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: 6cc5c85d-03f1-446c-9e9d-7338dfb9f0ce
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 2: Skills for growth: Supporting growth sectors and addressing skills gaps.

    • Delivery of apprenticeships, supported internships and T Level industry placement opportunities (Level 2, 3 and 4+) in relation to the contract

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 3: Resilient, innovative and flexible supply chains: Support economic growth through enabling resilient businesses, opportunities for small businesses and voluntary, community and social enterprises

    • Plans for positive actions with community groups.

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Collaborative ways of working with the supply chain to deliver additional environmental benefits in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Delivery of additional environmental benefits through the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at publicsector@wavenet.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.