Wonde

Wonde MyLogin

MyLogin is the evolution of Wonde Single Sign-On (SSO).

MyLogin provides students and teachers with an innovative and secure way of logging into their classroom apps at school and at home without the requirement of remembering complicated usernames and passwords.

Features

• Secure access
• Dedicated in-house, UK based customer support
• Single login for all applications
• API Integration
• Mobile app including parent access
• Flexibility to add custom tiles to access all websites, resources
• Works across all devices (and accessed using Google and Microsoft)

Benefits

• Innovative student logins
• Reduce friction and improve engagement in the classroom
• Schools get the most out of software they have purchased
• Extensive library of partner apps
• Developed in conjunction with education stakeholders and staff
• Removes friction of multiple usernames and passwords for students/teachers
• Easy access to learning and communication tools

£300.00 to £480.00 a licence a year

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

• Modern Slavery statement

  ODT

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ccs@wonde.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

767429447864868

Contact

Neil Roach
+44 1638 438094
ccs@wonde.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Private cloud
• Service constraints: MyLogin can only be utilised via desktop systems for the administration of the software. End users can access their app dashboard via mobile app.; ; Schools must be using an MIS supported by Wonde.
• System requirements:
  • Working internet connection
  • Compatible MIS providers; https://www.wonde.com/documents

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Within 1 working day.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: Web chat
• Web chat support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support accessibility standard: WCAG 2.1 AA or EN 301 549
• Web chat accessibility testing: N/A.
• Onsite support: No
• Support levels: Dedicated support from Wonde's in-house support team included with the service.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Wonde provide full service and API documentation, plus an extensive support service through our in-house customer and integrations support team.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: Schools can export their data via the Wonde API or create a support ticket for data to be provided via CSV download.; ; On revoking of the school-to-Wonde connection, school data will be deleted within 18-24 days. From the point of when the data is deleted, Wonde will hold the data for a further 17 days in backups at which point it is then permanently deleted.
• End-of-contract process: Data is deleted as per the given retention timescales.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: WCAG 2.1 AA or EN 301 549
• Description of service interface: Wonde provides schools with a simple to use login page. Schools can vary the login method available by class, choosing between emoji passwords, magic badges (QR codes) or a username/password. Users then have access to a web-based dashboard from which they can access their selected apps by simply clicking the app tile. Custom app tiles can be added for commonly used links/resources.; ; Further information available at https://www.wonde.com/school/
• Accessibility standards: WCAG 2.1 AA or EN 301 549
• Accessibility testing: N/A
• API: Yes
• What users can and can't do using the API: Approved third party applications can access authorised school data via the Wonde API for the provisioning of their service to the school. Third party applications can also write back data into the schools management system for specific datasets. Only data sets approved by the school can be read by a third party application.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
  • Other
• API sandbox or test environment: Yes
• Customisation available: No

Scaling

• Independence of resources: Wonde MyLogin is a cloud-based service utilising high-spec, high-capacity, fully-flexible cloud hosting services form Amazon Web Services. Any demand peaks placed on the MyLogin service automatically triggers a temporary expansion of our data processing capacity, ensuring no disruption to service users.

Analytics

• Service usage metrics: Yes
• Metrics types: Basic usage metrics are available via the platform, additional metrics available on request.
• Reporting types:
  • Real-time dashboards
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least every 6 months
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: In-house destruction process

Data importing and exporting

• Data export approach: Schools export their data via the Wonde API or create a support ticket for data to be provided via CSV download.
• Data export formats:
  • CSV
  • Other
• Other data export formats: JSON
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: Wonde provides a 99.95% service availability.; ; Wonde MyLogin is a cloud-based service utilising high-spec, high-capacity, fully-flexible cloud hosting services form Amazon Web Services. Any demand peaks placed on the service automatically triggers a temporary expansion of our data processing capacity, ensuring no disruption to service users.; ; Service levels shall be agreed by us and service credits may be available under certain conditions.
• Approach to resilience: Available on request.
• Outage reporting: Reported via the online dashboard and email alerts to users.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Username or password
• Access restrictions in management interfaces and support channels: Employees are only given access to the systems/software required for them to perform their role.; ; 2 factor authentication is utilised for access to these systems.
• Access restriction testing frequency: At least every 6 months
• Management access authentication:
  • 2-factor authentication
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 6 months and 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: Between 6 months and 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BM Trada
• ISO/IEC 27001 accreditation date: 20/10/2020
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards:
  • ISO/IEC 27001
  • Other
• Other security governance standards: Cyber Essentials Plus
• Information security policies and processes: Wonde utilise the policies, processes and controls stipulated under the ISO 27001 Information Security Management framework, against which Wonde are independently audited and certified annually.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Wonde's configuration and change management approach utilises the policies, processes and controls stipulated under the ISO 27001 Information Security Management framework, against which Wonde are independently audited and certified annually.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Wonde's vulnerability management approach utilises the policies, processes and controls stipulated under the ISO 27001 Information Security Management framework, against which Wonde are independently audited and certified annually.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Wonde's protective monitoring approach utilises the policies, processes and controls stipulated under the ISO 27001 Information Security Management framework, against which Wonde are independently audited and certified annually.
• Incident management type: Supplier-defined controls
• Incident management approach: Wonde's incident management approach utilises the policies, processes and controls stipulated under the ISO 27001 Information Security Management framework, against which Wonde are independently audited and certified annually.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  Wonde is committed to the sustainable provision of goods and services and investing in low carbon, digital innovation. Our office building runs on renewable energy and we operate electric vehicles to help offset our carbon footprint on business travel. Wonde also operates a green procurement system; working with suppliers to ensure products are made from sustainable sources and are recyclable. ; ; In-line with government objectives to achieve ‘Net Zero’ carbon emissions by 2050, Wonde is actively committed to continuing our own in-house Net Zero journey. ; ; By the end of 2022, Wonde pledge to monitor and publish: ; ; - Savings in CO2 emissions.; - Savings from renewable energy measures in CO2 emissions.; - Car miles saved each year (cycle2work, card share, public transport, 4 days a week hybrid working).; ; Wonde also pledge to explore a carbon offsetting scheme making our business (as a cloud-based solution provider) carbon neutral.
• Covid-19 recovery:

  Covid-19 recovery

  Wonde understand that supporting impacted individuals and strengthening communities is a vital requirement for national Covid-19 recovery. Our Stakeholder Managers work directly with local communities, establishing priorities and requirements before co-developing a targeted Covid-19 Recovery Plans for review, approval and implementation. ; ; Aligned to our Sustainability Development Goals, we leverage our innovative technological capabilities to develop low cost, high impact solutions that respond to local needs, can be rapidly implemented and widely adopted.
• Tackling economic inequality:

  Tackling economic inequality

  Wonde support the National Living Wage. On average, we pay our employees 63% more than the prescribed threshold. ; ; Wonde work with local stakeholders in communities experiencing a significant digital divide to support the provision of digital skills, training and support through local competitions, workshops and support materials. Wonde are actively supporting the Kickstart and NetMatters Programme, as well as the Cambridge Norwich Tech Corridor. Wonde also provide advice and networking opportunities to organisations that need it the most. An example of this is our work with ‘Get with the Programme”; a charity that partners with schools and businesses to deliver exciting tech learning events for students. ; ; Wonde also provides apprenticeships and local employment opportunities, for example, actively working to improve the pathway to sustainable employment through apprenticeships and work experience (via the Government Apprenticeship scheme and our collaborative relationships with 40 local authorities), mainly supporting ethnic minority and disadvantaged groups.
• Equal opportunity:

  Equal opportunity

  Wonde Implement an inclusive recruitment practice, in line with the Public Sector Equality Duty Act, hiring employees across a broad spectrum of backgrounds and experience representing the communities and customers we work with. Wonde have a 50/50 male-female ratio, employ four military spouses as part of our Armed Forces Covenant pledge and support 10 employees requiring additional workplace adjustment.
• Wellbeing:

  Wellbeing

  Wonde strives to create a healthy, supported workforce; with staff and client wellbeing at the heart of everything we do. ; ; Wonde ensure the wellbeing of our clients by actively supporting, promoting and creating opportunities for social value within each contract that we undertake, regardless of geographic location. For example, Wonde works with Plymouth Children in Poverty (PCIP), part of the Plymouth Drake Foundation. Wonde also deliver unclaimed food vouchers to food banks; and have already delivered thousands of these (at our expense) to local food banks across our client areas. Wonde have also run our own unique local Covid Scholars program that rewards commitment to excellence in School/Community/Sport.; ; The wellbeing of our staff is supported by numerous employee benefits: ; 4 day working week for all employees, company sponsored wellness retreats, private healthcare, a free on-site gym, a wellbeing room, flexible, hybrid and remote working, private health and dental insurance, shopping vouchers, flexible working contracts, and training options for upskilling.

Pricing

• Price: £300.00 to £480.00 a licence a year
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Full access to all software features is included in the free trial, with no limited time period.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

• Modern Slavery statement

  ODT

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at ccs@wonde.com. Tell them what format you need. It will help if you say what assistive technology you use.