Software Development

Service scope

Software add-on or extension: Yes, but can also be used as a standalone service
What software services is the service an extension to: VE3 provide plugin development for current applications including tactical situational awareness tools on Android.
Cloud deployment model: Public cloud

Private cloud

Hybrid cloud
Service constraints: There are no specific constraints applied to the service. The buyer will be consulted with any constraints that arise from the requirements capture
System requirements: Android 8+

User support

Email or online ticketing support: Yes, at extra cost
Support response times: Response times are dependent on service level agreements as agreed with the buyer.
Flexible response times can be provided allowing users to ensure support is available when needed, including for operational purpures.
User can manage status and priority of support tickets: No
Phone support: Yes
Phone support availability: 9 to 5 (UK time), 7 days a week
Web chat support: No
Onsite support: Yes, at extra cost
Support levels: All support is co-ordinated by each dedicated customer technical account manager and levels are agreed on a customer-by-customer basis. We only charge a premium for 24/7 support and this at 200% of normal hours rates.
Support available to third parties: Yes

Onboarding and offboarding

Getting started: We will conduct a detailed and thorough assessment of the client’s requirements, including Key Performance Indictors (KPIs) enabling us to customise a tailored solution. The assessment phase will be continuous throughout the life of the service and an agile response to any client changes in requirements will be adopted.

An initial bedding-in period will be provided to ensure that users are able to exploit the services in full and as intended. Any changes will be made if required followed by a tailored onboarding process. This can include BYOD / CYOD or a mixture. Current IT/mobile infrastructure maybe incorporated into the implementation of the system.
Service documentation: Yes
Documentation formats: HTML

PDF
End-of-contract data extraction: VE3 respects that your data is your data. It can be removed by you at any time. All data at the termination of the service will be destroyed unless prior arrangement has been agreed. Depending on the nature of the service, the offboarding process will be tailored to the situation. In most cases, the cloud-based infrastructure will be deactivated, and data and cluster resources removed and/or destroyed in line with NCSC guidance.
End-of-contract process: At the end of the contract period the cloud hosted environment will be suspened for a period of 10 working days before all instances and data are deleted in line with NCSC guidance

Using the service

Web browser interface: Yes
Supported browsers: Microsoft Edge

Firefox

Chrome

Safari
Application to install: Yes
Compatible operating systems: Android

Linux or Unix

Windows
Designed for use on mobile devices: Yes
Differences between the mobile and desktop service: VE3 use modern software development and UI tools to ensure that the mobile and desktop user experience is matched. This reduces the training burden and provides a unified customer experience in some instances the UI or limited functionality is removed due to compatibility issues. This is discussed with the customer and mitigations presented.
Service interface: Yes
User support accessibility: None or don’t know
Description of service interface: N/A
Accessibility standards: None or don’t know
Description of accessibility: Our service is designed to enable both online and offline access to user data.
Offline data is cached securely until the customer is able to access online services.
The customer is able to access the service via public internet or though secure VPN access.
Accessibility testing: N/A
API: Yes
What users can and can't do using the API: VE3 believe in open architectures and as such provide a detailed set of APIs that can be used by the customer to modify data or services that are available.

The API is not generic and is adjusted to reflect the needs of the customer. Access to the API is via end to end encryption in most cases but niche deployments may provide reason to have a public API.
API documentation: Yes
API documentation formats: HTML

PDF
API sandbox or test environment: Yes
Customisation available: Yes
Description of customisation: VE3 do not believe that a single solution provides the flexibility the our users require.
We are able to customise our service across the whole stack. From front end re-design to adding additional service capabilities and hardware integration.

We also provide a platform to 3rd party or MOD / Government partners to contribute or customise the service. This enables evergreening and remove the potential for vendor lock-in

Scaling

Independence of resources: By offering a cloud based solution in multiple UK datacentres and working with users to understand the capacity and load baseline requirements we are able to scale independantly of other users.

Once in production, our expert network and hosting architecture staff will monitor and manage all service supporting components to ensure the service is maintained.

Analytics

Service usage metrics: Yes
Metrics types: VE3 provide a custom set of metrics that can be reported on either in real time or via scheduled reports.

There is a vast set of metrics that can be reported on, as an example
Geo Spatial location
Number of Active users
Security violations
User separation data
User interaction data
Crash reports
UI interactions
Reporting types: API access

Real-time dashboards

Regular reports

Reports on request

Resellers

Supplier type: Not a reseller

Staff security

Staff security clearance: Conforms to BS7858:2019
Government security clearance: Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom
User control over data storage and processing locations: Yes
Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency: Less than once a year
Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
Protecting data at rest: Physical access control, complying with CSA CCM v3.0

Physical access control, complying with SSAE-16 / ISAE 3402

Encryption of all physical media

Scale, obfuscating techniques, or data storage sharding
Data sanitisation process: Yes
Data sanitisation type: Deleted data can’t be directly accessed
Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach: VE3 respects that your data is your data. It can be removed by you at any time. Depending on the customers needs Rowden will either automate the process or provide user access to date.
Often there is a requirement to transform the data to enable further exploitation this is a service that is provided.
Data export formats: CSV

Other
Other data export formats: Raw database export

Source Code
Data import formats: CSV

Data-in-transit protection

Data protection between buyer and supplier networks: Private network or public sector network

TLS (version 1.2 or above)

IPsec or TLS VPN gateway
Data protection within supplier network: TLS (version 1.2 or above)

IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability: We will provide the user with compensation in the form of a service extension if through the fault of the Supplier the service has been degraded to such a level as to prevent the user from gaining access.

All UK datacentres used have a 99.9% uptime. As part of the on boarding process specific buisness critical SLAs can be requested including the ability to specify critical events that will require additional support or resource.
Approach to resilience: We build our public cloud solutions to utilise the redundant and fault tolerance features of the cloud. Servers can be distributed across multiple availability zones and regions and duplicated where appropriate to provide fault tolerance across all disaster scenarios.

Using the latest clustering techniques we are able to provide elastic scaling on demand ensuring high performance is maintained across all traffic demands.

We utilise the latest DevOps and Infrastructure-As-Code practices to create dynamic, scalable and resilient applications that are easy to maintain, cost efficient and reliable.
Outage reporting: In the event of an outage, the Service Delivery Manager contacts the the user to inform them. The User also has full access to a management dashboard with configurable email alerts. Further updates are then communicated using a combination of methods, including the dashboard, phone, or email in accordance with the severity of the outage as documented in our Incident Management process.

Identity and authentication

User authentication needed: Yes
User authentication: 2-factor authentication

Public key authentication (including by TLS client certificate)

Dedicated link (for example VPN)
Access restrictions in management interfaces and support channels: Azure Active Directory (Azure AD) has been incorperated to identity and access management interfaces. Azure AD is a multitenant, cloud-based directory and identity management service from Microsoft. It combines core directory services, application access management, and identity protection into a single solution.
Access restriction testing frequency: At least once a year
Management access authentication: 2-factor authentication

Public key authentication (including by TLS client certificate)

Limited access network (for example PSN)

Dedicated link (for example VPN)

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: User-defined
Access to supplier activity audit information: Users have access to real-time audit information
How long supplier audit data is stored for: User-defined
How long system logs are stored for: User-defined

Standards and certifications

ISO/IEC 27001 certification: Yes
Who accredited the ISO/IEC 27001: Staunchly Management and system service limited
ISO/IEC 27001 accreditation date: 06/01/2024
What the ISO/IEC 27001 doesn’t cover: N/A
ISO 28000:2007 certification: No
CSA STAR certification: No
PCI certification: No
Cyber essentials: Yes
Cyber essentials plus: Yes
Other security certifications: Yes
Any other security certifications: ISO 9000-1

ISO 20000-1

ISO 14000-1

ISO 22301

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: ISO/IEC 27001
Information security policies and processes: VE3 utilise a bespoke Information Security Policy which is governed at board level and tailored to support individual project

Operational security

Configuration and change management standard: Supplier-defined controls
Configuration and change management approach: All changes to component configuration are submitted to a Minor or Major change management process with the aim of maintaining operational service whilst incorperating the change as quickly as possible. All changes are technically reviewed, risk-assessed, scheduled and then re-reviewed post-implementation.
Vulnerability management type: Supplier-defined controls
Vulnerability management approach: Security reviews are performed every quarter and discussed at service review meetings. We also offer automated security testing thoughout the life of the service and specific security testing after any system level change has be implemented.

An annual independent 3rd party vulnerability and security testing audit is avaliable sure the user request, this will be condcted using an independent ISO27001 security testing company.
Protective monitoring type: Supplier-defined controls
Protective monitoring approach: Events can be configured both by the users and the Service Delivery team to trigger alerts. If an attack is detected, alerts will be raised and outputs from the logging platform used to create a mitigation response. These alerts are integrated into our support service. All incidents and security events are resolved under SLA.
Incident management type: Supplier-defined controls
Incident management approach: All incidents are reported into a central monitoring dashboard, which ensures that each is promptly assigned to an appropriate resource, and its progress tracked (and escalated, as required) to resolution. VE3 operates to a robust Incident Management process that can be tailored to the users requirements

Secure development

Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

Connection to public sector networks: Yes
Connected networks: Public Services Network (PSN)

Social Value

Fighting climate change
Covid-19 recovery
Tackling economic inequality
Equal opportunity
Wellbeing

Fighting climate change

Our G-Cloud service provision is deeply committed to fighting climate change, recognizing the urgent need for collective action to address environmental challenges. Here's how our services deliver against this social value theme:

Environmental Sustainability in Operations:

We prioritize running efficient operations to reduce emissions and minimize environmental impacts. This includes implementing energy-efficient practices, optimizing resource usage, and adopting renewable energy sources wherever possible within our data centers and infrastructure.

Promoting Sustainable Practices:

VE3 actively engages with our suppliers and clients to promote sustainable business practices. Through our services, we advocate for the adoption of environmentally friendly technologies, responsible sourcing, and waste reduction strategies, thereby reducing carbon footprints across the supply chain.

Responsible by Design Framework:

Our G-Cloud services adhere to a 'Responsible by Design' framework, ensuring that environmental considerations are integrated into the development and deployment of digital solutions. By prioritizing environmental protection and minimizing negative impacts, we strive to deliver sustainable outcomes for our clients.

Training and Education:

VE3 invests in training and education programs focused on environmental sustainability. Through initiatives like the Sustainability Quotient (SQ) training, we equip our teams with the knowledge and skills to adopt climate-smart behaviors and implement environmentally conscious practices in their work.

Community Engagement:

We actively engage with communities to support environmental objectives and promote climate action. By partnering with local organizations and stakeholders, we contribute to initiatives aimed at addressing climate change, such as tree planting programs, clean energy projects, and environmental education campaigns.

Covid-19 recovery

Our G-Cloud service provision plays a crucial role in supporting the COVID-19 recovery effort by facilitating resilience, adaptation, and innovation in the face of unprecedented challenges. Here's how our services contribute to the recovery process:

Remote Work Enablement:

VE3's digital solutions empower organizations to transition to remote work seamlessly. By providing secure and reliable cloud-based infrastructure, collaboration tools, and remote access solutions, we enable businesses to maintain productivity while ensuring the safety and well-being of their employees.

Business Continuity Planning:

We assist organizations in developing and implementing robust business continuity plans to mitigate disruptions caused by the pandemic. Our services include data backup and recovery solutions, disaster recovery planning, and resilience testing to ensure operational continuity in the face of unforeseen events.

Digital Transformation Acceleration:

VE3 accelerates digital transformation initiatives to help organizations adapt to the new normal. By modernizing legacy systems, implementing cloud-based technologies, and digitizing processes, we enable businesses to optimize efficiency, improve agility, and remain competitive in a rapidly evolving landscape.

Healthcare Support Solutions:

We provide specialized healthcare support solutions to assist frontline workers and healthcare organizations in responding to the COVID-19 crisis. This includes telemedicine platforms, patient management systems, and data analytics tools to enhance patient care, streamline operations, and support decision-making processes.

Economic Stimulus through Innovation:

VE3 fosters innovation and entrepreneurship to stimulate economic recovery in the aftermath of the pandemic. Through our G-Cloud services, we support startups, small businesses, and enterprises in developing and deploying innovative solutions that address emerging challenges, create new opportunities, and drive economic growth.

Tackling economic inequality

We recognize the importance of tackling economic inequality and are committed to leveraging our G-Cloud service provision to address this pressing social issue. Here's how our services contribute to tackling economic inequality:

Access to Affordable Technology:

We strive to make cutting-edge technology accessible and affordable to all, regardless of economic status. By offering scalable and cost-effective cloud-based solutions, we enable organizations, including small and medium-sized enterprises (SMEs) and underserved communities, to access the tools and resources they need to compete in the digital economy.

Skills Development and Training:

VE3 invests in skills development and training programs to empower individuals with the knowledge and expertise needed to thrive in the digital age. Through initiatives like online courses, certifications, and workshops, we equip people from diverse backgrounds with the skills required for high-demand roles in technology and innovation, thereby enhancing their employability and economic prospects.

Support for Minority-Owned Businesses:

We actively support minority-owned businesses and entrepreneurs by providing access to mentorship, networking opportunities, and resources to help them grow and succeed. Through initiatives like supplier diversity programs and partnerships with minority business organizations, we promote inclusion and diversity in the technology sector and contribute to creating more equitable economic opportunities.

Digital Inclusion Initiatives:

VE3 is committed to promoting digital inclusion and bridging the digital divide by ensuring that everyone has access to essential digital services and technologies. We collaborate with governments, nonprofits, and community organizations to implement initiatives such as digital literacy programs, affordable internet access schemes, and community technology centers, thereby empowering underserved populations and promoting economic equity.

Equal opportunity

We recognize the importance of tackling economic inequality and are committed to leveraging our G-Cloud service provision to address this pressing social issue. Here's how our services contribute to tackling economic inequality:

Access to Affordable Technology:

We strive to make cutting-edge technology accessible and affordable to all, regardless of economic status. By offering scalable and cost-effective cloud-based solutions, we enable organizations, including small and medium-sized enterprises (SMEs) and underserved communities, to access the tools and resources they need to compete in the digital economy.

Skills Development and Training:

VE3 invests in skills development and training programs to empower individuals with the knowledge and expertise needed to thrive in the digital age. Through initiatives like online courses, certifications, and workshops, we equip people from diverse backgrounds with the skills required for high-demand roles in technology and innovation, thereby enhancing their employability and economic prospects.

Support for Minority-Owned Businesses:

We actively support minority-owned businesses and entrepreneurs by providing access to mentorship, networking opportunities, and resources to help them grow and succeed. Through initiatives like supplier diversity programs and partnerships with minority business organizations, we promote inclusion and diversity in the technology sector and contribute to creating more equitable economic opportunities.

Digital Inclusion Initiatives:

VE3 is committed to promoting digital inclusion and bridging the digital divide by ensuring that everyone has access to essential digital services and technologies. We collaborate with governments, nonprofits, and community organizations to implement initiatives such as digital literacy programs, affordable internet access schemes, and community technology centers, thereby empowering underserved populations and promoting economic equity.

Fair and Transparent Procurement Practices:

We adhere to fair and transparent procurement practices to create opportunities for businesses of all sizes and backgrounds to participate in government contracts and procurement processes.

Wellbeing

Environmental Sustainability: We are committed to environmental sustainability as a core component of wellbeing. By prioritizing eco-friendly practices, resource conservation, and carbon reduction efforts in our operations and services, we contribute to creating a healthier and more sustainable environment. We prioritize the wellbeing of individuals and communities in all aspects of our G-Cloud service provision.

User-Centric Design: VE3 designs our G-Cloud services with a user-centric approach, prioritizing usability, accessibility, and intuitive design. By focusing on the needs and preferences of users, we create digital experiences that enhance overall wellbeing by reducing frustration, stress, and cognitive load.

Health and Safety Protocols: We implement robust health and safety protocols to protect the wellbeing of employees, clients, and partners. This includes adherence to strict security standards, data privacy regulations, and compliance with industry best practices to ensure the safety and integrity of our digital infrastructure and services. Promotion of Work-Life

Balance: VE3 recognizes the importance of work-life balance in maintaining overall wellbeing. Through our G-Cloud services, we enable remote work, flexible scheduling, and collaboration tools that empower individuals to achieve a healthy balance between their professional and personal lives, leading to greater job satisfaction and wellbeing.

Mental Health Support: We prioritize mental health support for our employees and clients by offering resources, programs, and initiatives aimed at promoting mental wellbeing. This includes access to counseling services, mindfulness training, stress management workshops, and employee assistance programs designed to support individuals in times of need. Community

Engagement and Social Impact: VE3 actively engages with communities to address social determinants of health and promote holistic wellbeing. Through partnerships, philanthropic initiatives, and volunteer efforts, we support local organizations and projects focused on improving access to healthcare, education, housing, and other essential services that contribute to overall community wellbeing.

Pricing

Price: £175 to £850 a unit
Discount for educational organisations: Yes
Free trial available: No

Features

Benefits

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Pricing

Service documents

Cookies on Digital Marketplace

Software Development

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Social Value

Pricing

Service documents