BOXARR | Digital Twin | Cloud UK-X (Secret)

Service scope

Software add-on or extension: No
Cloud deployment model: Public cloud
Service constraints: Users will be notified of any planned maintenance (typically undertaken outside normal business hours).

Users who wish to use the BOXARR nVision application as a local install on their machine (i.e. vs virtualised through a CloudConsole) will need to comply with minimum recommended hardware specification.

Customers are responsible for enabling network connectivity to BOXARR Cloud UK-X via authorised network gateways and Authority to Operate.

Minimum contract value may apply.
System requirements: HTML5 compatible web browser (e.g. Chrome, Edge, Firefox)

Machine spec for running BOXARR nVision locally (optional)

Connectivity to UKCloud (Secret)

Authority to Operate

User support

Email or online ticketing support: Email or online ticketing
Support response times: Standard support is as per BOXARR Standard Software Support policy which can be reviewed at www.boxarr.com/standard-software-support. Normal operating hours at 09:00~17:30 GMT Mon-Fri (excluding holidays). Reasonable Endeavours SLA - typically same day with resolution by next business day. Custom enhanced SLAs are available on request.
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: None or don’t know
Phone support: Yes
Phone support availability: 9 to 5 (UK time), Monday to Friday
Web chat support: Web chat
Web chat support availability: 9 to 5 (UK time), Monday to Friday
Web chat support accessibility standard: None or don’t know
How the web chat support is accessible: BOXARR typically uses ZOOM (www.zoom.us) for provisioning customers with web-chat support. Customers join the meeting by clicking on a URL issued to them by BOXARR. Users can see who is connected (i.e. Participants). Users can select to turn video on/off. Users can select to turn audio on/off. Users can connect to audio via their computer (VoIP), or toll-free dial-in telephone number. User can screen-share. Users can annotate in screen shares. Users can accept & enable remote-control.
Web chat accessibility testing: This service is made available by BOXARR by ZOOM (www.zoom.us). All "assistive technology" testing is done by ZOOM under a continuous improvement program with support for WAI-ARIA 1.1 and WCAG 2.0.
Onsite support: Yes, at extra cost
Support levels: Standard technical support is inclusive within the BOXARR Licence Fee. Standard technical support is as per BOXARR Standard Software Support policy which can be reviewed at www.boxarr.com/standard-software-support. Support is only provided for BOXARR Software and BOXARR Cloud solutions. Before contacting BOXARR Support, the customer should undertake pre-diagnostics to confirm that any perceived fault is actually relating to the BOXARR Software or BOXARR Cloud Solutions provided by BOXARR. Support is facilitated by BOXARR Solution Engineers. BOXARR Support is "Technical Support" - any requirement for "Training" should be procured via BOXARR Professional Services or via certified BOXARR Alliance Partner. Standard support operating hours are 09:00~17:30 GMT Mon-Fri (excluding holidays). Reasonable Endeavours SLA - typically same day with resolution by next business day. Custom and enhanced SLAs are available on request at additional cost.
Support available to third parties: Yes

Onboarding and offboarding

Getting started: BOXARR provides customers with a resource of User Guides and Manuals which are available to view online or download.

BOXARR provides Training Courses (available via BOXARR Professional Services) which can be provisioned remotely via web-meeting or onsite.

Training is also available from BOXARR certified Alliance Partners.
Service documentation: Yes
Documentation formats: PDF
End-of-contract data extraction: BOXARR does not "proprietise" any customer data. All data can be exported by the customer within 7-days from termination of contract using the BOXARR Export Wizard. Additional data export services are available from BOXARR for database dumps.
End-of-contract process: At the termination of the contract, the customer's BOXARR service will cease unless renewed.

The customer will have 7-days to export any of their data before it is irrevocably deleted.

Using the service

Web browser interface: Yes
Supported browsers: Microsoft Edge

Firefox

Chrome
Application to install: Yes
Compatible operating systems: Linux or Unix

Windows
Designed for use on mobile devices: Yes
Differences between the mobile and desktop service: BOXARR nSight is designed to support web browsers on mobile devices. nSight dashboards can re-scale to mobile portrait/landscape formats.
Service interface: No
User support accessibility: None or don’t know
API: No
Customisation available: Yes
Description of customisation: BOXARR provides a "blank canvas" modelling platform. Authorised users can collaboratively create and customise their own "Object Types" (i.e. 'Types' of 'Boxes' and 'Arrows' and associated 'Data Attributes') to form a range of 'Palettes' from which users can build and adapt their DigitalTwin Models. Authorised users can also collaboratively create and customise their own 'Functions' (i.e. much like formulas in spreadsheets) - which can be applied by users to Models to perform analyses. Likewise authorised users can collaboratively create customised BOXARR nSight 'Pages' & 'Dashboards' which can be assigned to various 'User-Groups' across the enterprise (i.e. for role-based use and reporting). All user customisation is stored within "Libraries" which effectively becomes a bank of intellectual property for the users. Customers can also procure pre-built Libraries from BOXARR to quick-start a range of modelling applications.

Scaling

Independence of resources: Each BOXARR CloudSpace is an independent instance i.e. multiple customers do not share the same CloudSpace. The UKCloud upon which the BOXARR Cloud-UK operates employs a capacity planning team to ensure that connectivity usage in terms of all resources are constantly monitored and increased accordingly to demand.

Analytics

Service usage metrics: Yes
Metrics types: Usage hours are measured in order to define compliance with licensing and to support billing.
Reporting types: Reports on request

Resellers

Supplier type: Not a reseller

Staff security

Staff security clearance: Conforms to BS7858:2019
Government security clearance: Up to Security Clearance (SC)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom
User control over data storage and processing locations: Yes
Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency: At least every 6 months
Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
Protecting data at rest: Physical access control, complying with CSA CCM v3.0
Data sanitisation process: Yes
Data sanitisation type: Explicit overwriting of storage before reallocation
Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach: All data can be exported from BOXARR using the "Export Wizard". There is no "proprietisation" of any customer data.
Data export formats: CSV

Other
Other data export formats: Images: JPEG; PNG; GIF; EMF; EPS; SWF

PDF

MS Project

BOXARR JSON API

Database Extract
Data import formats: CSV

Other
Other data import formats: MS Project

BOXARR JSON API

Data-in-transit protection

Data protection between buyer and supplier networks: Other
Other protection between networks: Customers can choose from a range of connectivity options to BOXARR Cloud UK-X on UKCloudX, including - via IPSec or TLS VPN; Private Leased Line; MPLS; or Public Sector Networks. Connectivity to BOXARR Cloud UK-X on UKCloudX is the sole responsibility of the Customers and falls outside of the scope of this Service. Connectivity services may already be available to Customers, or may be procured via other services available on the Digital Marketplace. Please contact us for further information and advice.
Data protection within supplier network: Other
Other protection within supplier network: BOXARR Cloud UK-X operates on UKCloudX which provides dedicated CAS-T circuits between each of its sites to ensure the protection of customer data in-flight. Additionally data is encrypted within the UKCloudX platform. All data flows are also subject to UKCloudX protective monitoring service.

Availability and resilience

Guaranteed availability: BOXARR Cloud-UK operates on UKCloudX which supports 99.95% availability.
Approach to resilience: Available upon request.
Outage reporting: All outages will be reported via the BOXARR website. Outages are identified as 'Planned Platform Upgrade', 'Planned Platform Maintenance', 'Emergency Platform Maintenance', 'Platform Issues'. In addition, the BOXARR Operations Team can proactively contact customers via email under Custom SLA.

Identity and authentication

User authentication needed: Yes
User authentication: Username or password
Access restrictions in management interfaces and support channels: Customers have the option to raise a support request via telephone or email. UKCloud will always authenticate the identity of the user by validating known phone numbers and asking them for specific characters within their pre-agreed memorable word. The management interfaces are only available on the UKCloud network.
Access restriction testing frequency: At least every 6 months
Management access authentication: Username or password

Audit information for users

Access to user activity audit information: Users contact the support team to get audit information
How long user audit data is stored for: Between 1 month and 6 months
Access to supplier activity audit information: Users contact the support team to get audit information
How long supplier audit data is stored for: Between 1 month and 6 months
How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

ISO/IEC 27001 certification: Yes
Who accredited the ISO/IEC 27001: Lloyds Register for UKCloud
ISO/IEC 27001 accreditation date: 08/05/2012
What the ISO/IEC 27001 doesn’t cover: The ISO/IEC 227001 certification only applies to UKCloud (i.e. UKCloudX) upon which the BOXARR Cloud UK-X operates. BOXARR does not carry ISO/IEC 227001 certification.
ISO 28000:2007 certification: No
CSA STAR certification: Yes
CSA STAR accreditation date: 28/10/2016
CSA STAR certification level: Level 1: CSA STAR Self-Assessment
What the CSA STAR doesn’t cover: The CSA STAR certification applies to UKCloud only (i.e. UKCloudX) upon which the BOXARR Cloud UK-X operates. BOXARR does not carry CSA STAR certification.
PCI certification: No
Cyber essentials: No
Cyber essentials plus: Yes
Other security certifications: Yes
Any other security certifications: Cyber Essentials Plus (IASME-CEP-004943)

SC certified personnel.

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: Other
Other security governance standards: BOXARR Cloud UK-X: Cyber Essential Plus (IASME-CEP-004943).

The UKCloudX upon which BOXARR Cloud UK-X operates is certified CSA STAR, ISO27001, ISO27017, ISO27018 and ISO20000.

Further details available on request.
Information security policies and processes: BOXARR is certified for Cyber Essentials Plus (IASME-CEP-004943) and operates an internal security policy.

UKCloudX upon which BOXARR Cloud UK-X operates has documented configuration and change management policies and processes, which have been implemented, maintained and assessed in accordance with the guidance from ITIL v.3 and the current ISO20000 standard.

Further details available on request.

Operational security

Configuration and change management standard: Supplier-defined controls
Configuration and change management approach: Application: BOXARR operates its configuration and change management in line with its internal best-practice policy and CyberEssentialsPlus. All patches and upgrades undergo a testing process prior to general release. Infrastructure: UKCloud operates configuration and change management in line with its protective monitoring and vulnerability processes as detailed below. Customers: customers are responsible for configuration and change management within the utility of their BOXARR platform.
Vulnerability management type: Supplier-defined controls
Vulnerability management approach: Application: BOXARR employs best practice methodologies in software development and CyberEssentiasPlus to minimise vulnerability. Assigned personnel have responsibility for regularly reviewing technical forums and specialist groups to identify/evaluate any emerging threats requiring attention. Infrastructure: UKCloud has a documented vulnerability management policy and process in accordance with ITIL v.3 and current ISO20000/ISO27001 standards guidelines. Where technically possible, real-time updates and status reports are identified and sourced from credible vendor sources, covering a significant proportion of UKCloud’s assets. For other systems and software, assigned personnel have responsibility for regularly reviewing technical forums and specialist groups to identify/evaluate any emerging threats requiring attention.
Protective monitoring type: Supplier-defined controls
Protective monitoring approach: Application: BOXARR is consistently testing for vulnerability in line with best-practice and CyberEssentialsPlus for its ongoing development. Non-critical patches are incorporated in planned releases. Critical patches are deployed in coordination with Customers. Infrastructure: UKCloud (Elevated) employs 24x7 enhanced protective monitoring services, vulnerability scanning and assessment - at minimum meeting Protective Monitoring Controls (PMC 1-12) outlined in NCSC document GPG13 (Protective Monitoring for HMG ICT Systems). Includes checks against systems events (SIEM) and network traffic analysis, including time sources, cross-boundary traffic, suspicious activities at a boundary, network connections and status of backups. Any alerts generated are logged and investigated 24x7.
Incident management type: Supplier-defined controls
Incident management approach: Application: BOXARR operates incident management in accordance with Cyber Essentials Plus and its internal incident management policy. Incidents are reported to a central ticketing system which ensures that each is promptly assigned to an appropriate resource, and its progress tracked (and escalated, as required) to resolution.
Infrastructure: UKCloudX operates incident management in accordance with ITILv3 and current ISO20000/27001 standards. Incidents are reported to a central ticketing system which ensures that each is promptly assigned to an appropriate resource, and its progress tracked (and escalated, as required) to resolution.

Secure development

Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

Connection to public sector networks: Yes
Connected networks: Public Services Network (PSN)

Police National Network (PNN)

Other
Other public sector networks: RLI

Connectivity to networks is additional to this service

Fighting climate change: Fighting climate change

BOXARR software can enable customers to effectively map/model and analyse their sustainability across a range of criteria and KPIs. This capability enables organisations to better understand their sustainability impact and how organisational/operational change can improve their sustainability performance.
Covid-19 recovery: Covid-19 recovery

BOXARR software can enable customers to effectively map/model and analyse their organisation and operations across a range of criteria and KPIs. This capability enables organisations to better understand the impacts of Covid-19 across their organisation, and how organisational/operational change can improve their ability to recover from Covid-19 impacts.
Tackling economic inequality: Tackling economic inequality

BOXARR software can enable customers to effectively map/model and analyse their supply-webs across a range of criteria and KPIs. This capability enables organisations to better understand the balance of economics across their supply and customer bases and how proactive and collaborative effort can be made to initiate positive change to tackle economic equality.
Equal opportunity: Equal opportunity

BOXARR software can enable customers to effectively map/model and analyse their organisational demographics across a range of criteria and KPIs. This capability enables organisations to better understand the balance of demographic opportunity across their organisation and how proactive and collaborative effort can be made to initiate positive change to assure equal opportunity.
Wellbeing: Wellbeing

BOXARR software can enable customers to effectively map/model and analyse their organisational demographics across a range of criteria and KPIs. This capability can enable organisations to better understand the balance of health and wellbeing of personnel across their organisation and how proactive and collaborative effort can be made to initiate positive change to assure the promotion and sustainment of wellbeing.

Pricing

Price: £25 a person a month
Discount for educational organisations: Yes
Free trial available: Yes
Description of free trial: Free Trials are available for a maximum of 30 (thirty) Days. Trials are facilitated on BOXARR Cloud Global (AWS) only.
Link to free trial: https://www.boxarr.com/demo

BOXARR | Digital Twin | Cloud UK-X (Secret)

Features

Benefits

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Pricing

Service documents

Cookies on Digital Marketplace

BOXARR | Digital Twin | Cloud UK-X (Secret)

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Social Value

Pricing

Service documents