BOXARR

BOXARR | Digital Twin | Cloud UK-X (Secret)

BOXARR enables collaborative modelling, simulation, analysis and reporting of complex inter-dependent systems at scale. Combine your human-expertise, data and information-sources to build an evolve "DigitalTwin Models" of your organisations and systems: identifying risks; revealing opportunity; and optimising performance. Use BOXARR for Organisational/Operational Transformation; Process/Program/Transition-Planning; Systems-Engineering; Supply-Chain; Joint-Operations; and more.

Features

• Simple and intuitive Modelling - combining inter-dependency and data (Secret)
• Scale Models to reflect "real world" breadth/depth/fidelity
• Visualise Models as networks of "Things" (Boxes) and "Relationships" (Arrows)
• Visualise Models as tables of data and customisable pivot-reports
• Visualise Models as multi-contextual swim-lanes
• Visualise Models as Project Plans (Gantt Schedules)
• Visualise Models overlaid on geographic maps
• Visualise Models as dashboards of charts and graphs
• Analyse, filter and compute Models with customisable Functions
• "War-game" Models with what-if change scenarios

Benefits

• Create DigitalTwin Models of complex systems and challenges (Secret)
• Leverage and aggregate data from your disparate information-systems
• Elicit and capture knowledge from Subject Matter Experts
• Collaborate with colleagues across your enterprise, partners and allies
• Make complex inter-dependent systems "human-readable" and usable
• Identify/mitigate hidden risks. Reveal/exploit hidden opportunities
• Simulate the propagating effects of proposed decisions/changes
• Respond faster to the propagating effects of unforeseen events
• Effectively manage risk and optimise your operational performance
• "Systems-of-Systems" Engineering; Supply-Web; Program/Transition-planning; Process-Mapping; etc

£25 a person a month

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

• Modern Slavery statement

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at fraser.hamilton@boxarr.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

737463679216016

Contact

Fraser Hamilton
+447717846990
fraser.hamilton@boxarr.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: Users will be notified of any planned maintenance (typically undertaken outside normal business hours). ; ; Users who wish to use the BOXARR nVision application as a local install on their machine (i.e. vs virtualised through a CloudConsole) will need to comply with minimum recommended hardware specification.; ; Customers are responsible for enabling network connectivity to BOXARR Cloud UK-X via authorised network gateways and Authority to Operate.; ; Minimum contract value may apply.
• System requirements:
  • HTML5 compatible web browser (e.g. Chrome, Edge, Firefox)
  • Machine spec for running BOXARR nVision locally (optional)
  • Connectivity to UKCloud (Secret)
  • Authority to Operate

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Standard support is as per BOXARR Standard Software Support policy which can be reviewed at www.boxarr.com/standard-software-support. Normal operating hours at 09:00~17:30 GMT Mon-Fri (excluding holidays). Reasonable Endeavours SLA - typically same day with resolution by next business day. Custom enhanced SLAs are available on request.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: None or don’t know
• How the web chat support is accessible: BOXARR typically uses ZOOM (www.zoom.us) for provisioning customers with web-chat support. Customers join the meeting by clicking on a URL issued to them by BOXARR. Users can see who is connected (i.e. Participants). Users can select to turn video on/off. Users can select to turn audio on/off. Users can connect to audio via their computer (VoIP), or toll-free dial-in telephone number. User can screen-share. Users can annotate in screen shares. Users can accept & enable remote-control.
• Web chat accessibility testing: This service is made available by BOXARR by ZOOM (www.zoom.us). All "assistive technology" testing is done by ZOOM under a continuous improvement program with support for WAI-ARIA 1.1 and WCAG 2.0.
• Onsite support: Yes, at extra cost
• Support levels: Standard technical support is inclusive within the BOXARR Licence Fee. Standard technical support is as per BOXARR Standard Software Support policy which can be reviewed at www.boxarr.com/standard-software-support. Support is only provided for BOXARR Software and BOXARR Cloud solutions. Before contacting BOXARR Support, the customer should undertake pre-diagnostics to confirm that any perceived fault is actually relating to the BOXARR Software or BOXARR Cloud Solutions provided by BOXARR. Support is facilitated by BOXARR Solution Engineers. BOXARR Support is "Technical Support" - any requirement for "Training" should be procured via BOXARR Professional Services or via certified BOXARR Alliance Partner. Standard support operating hours are 09:00~17:30 GMT Mon-Fri (excluding holidays). Reasonable Endeavours SLA - typically same day with resolution by next business day. Custom and enhanced SLAs are available on request at additional cost.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: BOXARR provides customers with a resource of User Guides and Manuals which are available to view online or download. ; ; BOXARR provides Training Courses (available via BOXARR Professional Services) which can be provisioned remotely via web-meeting or onsite.; ; Training is also available from BOXARR certified Alliance Partners.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: BOXARR does not "proprietise" any customer data. All data can be exported by the customer within 7-days from termination of contract using the BOXARR Export Wizard. Additional data export services are available from BOXARR for database dumps.
• End-of-contract process: At the termination of the contract, the customer's BOXARR service will cease unless renewed. ; ; The customer will have 7-days to export any of their data before it is irrevocably deleted.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
• Application to install: Yes
• Compatible operating systems:
  • Linux or Unix
  • Windows
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: BOXARR nSight is designed to support web browsers on mobile devices. nSight dashboards can re-scale to mobile portrait/landscape formats.
• Service interface: No
• User support accessibility: None or don’t know
• API: No
• Customisation available: Yes
• Description of customisation: BOXARR provides a "blank canvas" modelling platform. Authorised users can collaboratively create and customise their own "Object Types" (i.e. 'Types' of 'Boxes' and 'Arrows' and associated 'Data Attributes') to form a range of 'Palettes' from which users can build and adapt their DigitalTwin Models. Authorised users can also collaboratively create and customise their own 'Functions' (i.e. much like formulas in spreadsheets) - which can be applied by users to Models to perform analyses. Likewise authorised users can collaboratively create customised BOXARR nSight 'Pages' & 'Dashboards' which can be assigned to various 'User-Groups' across the enterprise (i.e. for role-based use and reporting). All user customisation is stored within "Libraries" which effectively becomes a bank of intellectual property for the users. Customers can also procure pre-built Libraries from BOXARR to quick-start a range of modelling applications.

Scaling

• Independence of resources: Each BOXARR CloudSpace is an independent instance i.e. multiple customers do not share the same CloudSpace. The UKCloud upon which the BOXARR Cloud-UK operates employs a capacity planning team to ensure that connectivity usage in terms of all resources are constantly monitored and increased accordingly to demand.

Analytics

• Service usage metrics: Yes
• Metrics types: Usage hours are measured in order to define compliance with licensing and to support billing.
• Reporting types: Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest: Physical access control, complying with CSA CCM v3.0
• Data sanitisation process: Yes
• Data sanitisation type: Explicit overwriting of storage before reallocation
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: All data can be exported from BOXARR using the "Export Wizard". There is no "proprietisation" of any customer data.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Images: JPEG; PNG; GIF; EMF; EPS; SWF
  • PDF
  • MS Project
  • BOXARR JSON API
  • Database Extract
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • MS Project
  • BOXARR JSON API

Data-in-transit protection

• Data protection between buyer and supplier networks: Other
• Other protection between networks: Customers can choose from a range of connectivity options to BOXARR Cloud UK-X on UKCloudX, including - via IPSec or TLS VPN; Private Leased Line; MPLS; or Public Sector Networks. Connectivity to BOXARR Cloud UK-X on UKCloudX is the sole responsibility of the Customers and falls outside of the scope of this Service. Connectivity services may already be available to Customers, or may be procured via other services available on the Digital Marketplace. Please contact us for further information and advice.
• Data protection within supplier network: Other
• Other protection within supplier network: BOXARR Cloud UK-X operates on UKCloudX which provides dedicated CAS-T circuits between each of its sites to ensure the protection of customer data in-flight. Additionally data is encrypted within the UKCloudX platform. All data flows are also subject to UKCloudX protective monitoring service.

Availability and resilience

• Guaranteed availability: BOXARR Cloud-UK operates on UKCloudX which supports 99.95% availability.
• Approach to resilience: Available upon request.
• Outage reporting: All outages will be reported via the BOXARR website. Outages are identified as 'Planned Platform Upgrade', 'Planned Platform Maintenance', 'Emergency Platform Maintenance', 'Platform Issues'. In addition, the BOXARR Operations Team can proactively contact customers via email under Custom SLA.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: Customers have the option to raise a support request via telephone or email. UKCloud will always authenticate the identity of the user by validating known phone numbers and asking them for specific characters within their pre-agreed memorable word. The management interfaces are only available on the UKCloud network.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 1 month and 6 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: Between 1 month and 6 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: Lloyds Register for UKCloud
• ISO/IEC 27001 accreditation date: 08/05/2012
• What the ISO/IEC 27001 doesn’t cover: The ISO/IEC 227001 certification only applies to UKCloud (i.e. UKCloudX) upon which the BOXARR Cloud UK-X operates. BOXARR does not carry ISO/IEC 227001 certification.
• ISO 28000:2007 certification: No
• CSA STAR certification: Yes
• CSA STAR accreditation date: 28/10/2016
• CSA STAR certification level: Level 1: CSA STAR Self-Assessment
• What the CSA STAR doesn’t cover: The CSA STAR certification applies to UKCloud only (i.e. UKCloudX) upon which the BOXARR Cloud UK-X operates. BOXARR does not carry CSA STAR certification.
• PCI certification: No
• Cyber essentials: No
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications:
  • Cyber Essentials Plus (IASME-CEP-004943)
  • SC certified personnel.

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: BOXARR Cloud UK-X: Cyber Essential Plus (IASME-CEP-004943).; ; The UKCloudX upon which BOXARR Cloud UK-X operates is certified CSA STAR, ISO27001, ISO27017, ISO27018 and ISO20000.; ; Further details available on request.
• Information security policies and processes: BOXARR is certified for Cyber Essentials Plus (IASME-CEP-004943) and operates an internal security policy.; ; UKCloudX upon which BOXARR Cloud UK-X operates has documented configuration and change management policies and processes, which have been implemented, maintained and assessed in accordance with the guidance from ITIL v.3 and the current ISO20000 standard.; ; Further details available on request.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Application: BOXARR operates its configuration and change management in line with its internal best-practice policy and CyberEssentialsPlus. All patches and upgrades undergo a testing process prior to general release. Infrastructure: UKCloud operates configuration and change management in line with its protective monitoring and vulnerability processes as detailed below. Customers: customers are responsible for configuration and change management within the utility of their BOXARR platform.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Application: BOXARR employs best practice methodologies in software development and CyberEssentiasPlus to minimise vulnerability. Assigned personnel have responsibility for regularly reviewing technical forums and specialist groups to identify/evaluate any emerging threats requiring attention. Infrastructure: UKCloud has a documented vulnerability management policy and process in accordance with ITIL v.3 and current ISO20000/ISO27001 standards guidelines. Where technically possible, real-time updates and status reports are identified and sourced from credible vendor sources, covering a significant proportion of UKCloud’s assets. For other systems and software, assigned personnel have responsibility for regularly reviewing technical forums and specialist groups to identify/evaluate any emerging threats requiring attention.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Application: BOXARR is consistently testing for vulnerability in line with best-practice and CyberEssentialsPlus for its ongoing development. Non-critical patches are incorporated in planned releases. Critical patches are deployed in coordination with Customers. Infrastructure: UKCloud (Elevated) employs 24x7 enhanced protective monitoring services, vulnerability scanning and assessment - at minimum meeting Protective Monitoring Controls (PMC 1-12) outlined in NCSC document GPG13 (Protective Monitoring for HMG ICT Systems). Includes checks against systems events (SIEM) and network traffic analysis, including time sources, cross-boundary traffic, suspicious activities at a boundary, network connections and status of backups. Any alerts generated are logged and investigated 24x7.
• Incident management type: Supplier-defined controls
• Incident management approach: Application: BOXARR operates incident management in accordance with Cyber Essentials Plus and its internal incident management policy. Incidents are reported to a central ticketing system which ensures that each is promptly assigned to an appropriate resource, and its progress tracked (and escalated, as required) to resolution.; Infrastructure: UKCloudX operates incident management in accordance with ITILv3 and current ISO20000/27001 standards. Incidents are reported to a central ticketing system which ensures that each is promptly assigned to an appropriate resource, and its progress tracked (and escalated, as required) to resolution.

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: Yes
• Connected networks:
  • Public Services Network (PSN)
  • Police National Network (PNN)
  • Other
• Other public sector networks:
  • RLI
  • Connectivity to networks is additional to this service

Social Value

• Fighting climate change:

  Fighting climate change

  BOXARR software can enable customers to effectively map/model and analyse their sustainability across a range of criteria and KPIs. This capability enables organisations to better understand their sustainability impact and how organisational/operational change can improve their sustainability performance.
• Covid-19 recovery:

  Covid-19 recovery

  BOXARR software can enable customers to effectively map/model and analyse their organisation and operations across a range of criteria and KPIs. This capability enables organisations to better understand the impacts of Covid-19 across their organisation, and how organisational/operational change can improve their ability to recover from Covid-19 impacts.
• Tackling economic inequality:

  Tackling economic inequality

  BOXARR software can enable customers to effectively map/model and analyse their supply-webs across a range of criteria and KPIs. This capability enables organisations to better understand the balance of economics across their supply and customer bases and how proactive and collaborative effort can be made to initiate positive change to tackle economic equality.
• Equal opportunity:

  Equal opportunity

  BOXARR software can enable customers to effectively map/model and analyse their organisational demographics across a range of criteria and KPIs. This capability enables organisations to better understand the balance of demographic opportunity across their organisation and how proactive and collaborative effort can be made to initiate positive change to assure equal opportunity.
• Wellbeing:

  Wellbeing

  BOXARR software can enable customers to effectively map/model and analyse their organisational demographics across a range of criteria and KPIs. This capability can enable organisations to better understand the balance of health and wellbeing of personnel across their organisation and how proactive and collaborative effort can be made to initiate positive change to assure the promotion and sustainment of wellbeing.

Pricing

• Price: £25 a person a month
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Free Trials are available for a maximum of 30 (thirty) Days. Trials are facilitated on BOXARR Cloud Global (AWS) only.
• Link to free trial: https://www.boxarr.com/demo

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

• Modern Slavery statement

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at fraser.hamilton@boxarr.com. Tell them what format you need. It will help if you say what assistive technology you use.