PressArea

PressArea Digital Asset Management (DAM) Press Centre Solution

A secure online digital asset management (DAM) and press centre platform for marketing and PR departments. Tools include press release creation and distribution (online+email), image, video and document asset distribution, press enquiry systems, bulk WeTransfer-like file sends, lines-to-take, social media integration, multi-language, and registered-users-only downloads.

Features

• Virtual Media Centre Press Office Content Management Digital Asset Management
• Online Media Centre For Online and Email Press Release Distribution
• Multimedia Asset (Video, Images, Document) Storage and Distribution
• Integrated Media Database and Media Customer Relationship Management CRM
• Press Enquiry Workflow Handling
• Lines-To-Take Frequently Asked Question (FAQ) Creation and Distribution
• Crisis Management, Lines to Take and Dark Site modules
• File send facility for Images/Videos/Documents
• Responsive Design For Mobile and Notepad Devices
• Unlimited Users (Admin and Press)

Benefits

• Publish, distribute and track Press Releases from a shared platform
• Integrated image library, video, document and PDF management
• Real-time tracking of press release response and coverage
• Incoming press enquiry module means you don't miss a deadline
• CRM tools to optimise your media relations and track contacts
• Manage and view communications from any device
• Restrict and embargo press releases/images/videos
• Restrict asset views/downloads depending on user type
• Sites built to match brand guidelines
• Switch to a reduced crisis management site In minutes

£700 to £1,900 a licence a month

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@pressarea.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

707866701494553

Contact

David Smith
0845 226 0435
sales@pressarea.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: The service offers unlimited users (press and admin), storage for images, videos and documents up to 1TB (additional storage is charged on a stepped basis after this), outbound press release sending up to 1000 email sends per month (additional emails are charged on a stepped basis after this), unlimited training and support. Telephone support is 8-6 Mon-Fri.
• System requirements:
  • Admin users require a modern browser to access service
  • 2 megabits per second broadband internet connection is recommended

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Critical Issues - Telephone Hotline support for critical issues is available 24/7/365; ; For Non-critical issues - Phone support is offered Mon-Fri, 8am-8pm ; ; Email response time within the hour Mon-Fri, 8am-8pm; Email response time within the hour Sat-Sun, 8am-5pm. ; ; Outside of the above hours, the response time is the next day.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: A dedicated account manager is provided for each client.; Critical Issues - Telephone Hotline support for critical issues is available 24/7/365; For Non-critical issues - Phone support is offered Mon-Fri, 8am-8pm ; Email response time within the hour Mon-Fri, 8am-8pm; Email response time within the hour Sat-Sun, 8am-5pm. ; Outside of the above hours, the response time is the next day.; ; There is no extra charge for the above support level.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Initial training is provided which can either be onsite for 3-4 or more individuals, or via online/phone training. Any new staff joining will be eligible to receive free online training. Note - Onsite training outside of the M25 area will be charged for at £250 per 1/2 day.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: We can arrange for data to be exported to any open file format at the end of the contract.
• End-of-contract process: There are no end-of-contract costs. On termination, we will terminate access to the platform preventing further access to the services purchased.; ; We will extract the data as part of the service cost on exit.; ; If the buyer has specific needs then a custom service can be provided with a separate fee negotiated.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: None, the system uses responsive design so content is same as the desktop version.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: A web portal allows users to upload edit and delete images/videos/documents/press releases add new users etc
• Accessibility standards: None or don’t know
• Description of accessibility: The service is designed to be as easy to use as possible and to follow the Web Content Accessibility Guidelines (WCAG) 2.0 guidelines. Portal is currently being redesigned and a new version will be available in 2023.
• Accessibility testing: No testing has been done with assistive technology
• API: No
• Customisation available: Yes
• Description of customisation: The service can be customised to the client's website to make the solution fit in with their current web look and feel. For examples of how we have customised the solution see www.pressarea.com and view the links to past and present sites. PressArea clients include British Airways/Heathrow/John Lewis/Waitrose/Iberia/London Luton Airport/DFS We won the Digital Impact Award ; in 2020 and 2021 for our work on the Luton and DFS PressArea sites.

Scaling

• Independence of resources: The servers are constantly monitored to see that the service meets our agreed service levels. The service uses the CloudFlare worldwide Content Delivery Network to deliver images text and video worldwide.; Our system was real-world stress-tested by Thomas Cook going into administration. The worldwide interest - there were 200,000 customers abroad as well as thousands of media users - resulted in a huge traffic spike to their PressArea site. Additionally, another clients' .com site was unable to deliver any pages worldwide for a weekend, and our media centre was their only way of delivering content to their worldwide media network.

Analytics

• Service usage metrics: Yes
• Metrics types: The service includes the ability to either use the clients own analytics or use the built-in Google Analytics and built-in email tracking provided by Campaign Monitor
• Reporting types:
  • Real-time dashboards
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest: Physical access control, complying with SSAE-16 / ISAE 3402
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Much of the data from reports etc in the application can be exported in either CSV, Microsoft Excel or PDF file format directly from the application, any other data can be arranged to be exported by the business in a CSV or ODF file format
• Data export formats:
  • CSV
  • ODF
• Data import formats:
  • CSV
  • ODF

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: SLA is base on site uptime and produces a reduction in the next invoiceable month ; ; Monthly Uptime % credit on following month ; >99.9% 0% ; 99.9-99.6% 10% ; 99.6-99.4% 20% ; 99.4-99.2% 40%; <99.20% 60%; ; We have never had to pay out in the 20+ years we have been operating.
• Approach to resilience: Full details are available on request; Key points of the infrastructure:; • Infrastructure has N+1 redundancy ; • A layered architecture to provide performance, resilience and redundancy.; • Traffic is load balanced.; • External Content Delivery Network (CDN) delivers the majority of the traffic for static pages and frequently viewed images/videos/releases to a local cached version.; • Incorporates DRaaS solution based on Microsoft Azure platform
• Outage reporting: Email alerts to clients. Reporting is managed internally via PressArea support staff.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Public key authentication (including by TLS client certificate)
  • Username or password
• Access restrictions in management interfaces and support channels: Management interfaces and support channels require username and a strong password over an SSL encrypted channel and requires a Captcha to be completed correctly. Access is prevented after three failed attempts to login.; ; The most sensitive management areas of the platform such as the database are controlled through 2FA.; ; A security policy is in place to control access to the areas and only staff who need access are granted access.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users receive audit information on a regular basis
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Christopher L Schellman cert number 1874249-2
• ISO/IEC 27001 accreditation date: 21/06/2021
• What the ISO/IEC 27001 doesn’t cover: This is the ISO certificate for the Aptum Technologies Data Centre at Langstone Technology Park, Building 5000, Havant, PO9 1SA, United Kingdom
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: Netitude
• PCI DSS accreditation date: 17/5/2019
• What the PCI DSS doesn’t cover: The PCI accreditation is Aptum Technologies (formerly Cogeco Peer 1) PCI certification, and it covers a shared responsibility in relation to PCI DSS, however the following requirements are out of scope its Attestation of Compliance; protect stored cardholder data, encrypted transmission of cardholder data across open, and public networks.
• Cyber essentials: No
• Cyber essentials plus: No
• Other security certifications: Yes
• Any other security certifications:
  • SOC 2 AICPA SSAE No18 & IAASB ISAE 3000
  • ISO/IEC 27001:2013

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: Protecting our client's data is paramount. But we are a small business so we have a chosen a hosting partner Aptum Technologies (formerly Cogeco Peer1) who monitor and maintain the business infrastructure and security on a 365/24/7 basis.
• Information security policies and processes: We are a small/micro business. We make sure data is secure and software is kept up to date with the latest security patches.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: All code and data changes are logged. Infrastructure changes are handled and tracked via our hosting partner Aptum Technologies (formerly Cogeco Peer1)
• Vulnerability management type: Undisclosed
• Vulnerability management approach: Patches for the infrastructure are first checked for reliability and are then deployed. Security patches are applied as they appear. ; ; We monitor sites like https://www.cvedetails.com for details about potential threats
• Protective monitoring type: Undisclosed
• Protective monitoring approach: The service is monitored 24/7 by Aptum Technologies (formerly Cogeco Peer1) and any potential compromises are flagged up within an hour. During working week 8-6 Mon-Fri we will respond within an hour. We have teams in India and US West coast who monitor the site outside of UK working hours enabling us to respond within a few hours during 6pm - 8am. Weekend response times are normally same day.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Users report incidents by email or phone. Incident reports are provided by email to all affected parties.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  We are a small business (7 employees) we try to do as much as we can to improve what we do towards climate change. We try to reduce our impact on the environment where we can. Our biggest change was from Feb 2020 when we moved to working 100% remotely thereby reducing emissions from commuting.
• Covid-19 recovery:

  Covid-19 recovery

  We are a small business (7 employees) and pre-covid we were working from home two days a week. We took the decision to close the office pre-covid and to move to working from home 5-days a week and this has made no change to the solution we provide.
• Tackling economic inequality:

  Tackling economic inequality

  We fully support tackling economic inequality.
• Equal opportunity:

  Equal opportunity

  We are a small business (7 employees) and we support equal opportunities for all.
• Wellbeing:

  Wellbeing

  We are a small business (7 employees) and we encourage staff to have a healthy work-life balance.

Pricing

• Price: £700 to £1,900 a licence a month
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: There are demo accounts available that provide access to the entire platform and all functionality to evaluate the platform

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@pressarea.com. Tell them what format you need. It will help if you say what assistive technology you use.