Software AG - Smart Equipment IoT
Smart Equipment use cases can be fulfilled by Cumulocity IoT Platform ecosystem as Software AG solutions have a Digital Software suite including comprehensive Device Management, Application Enablement Management, Integration and Analytics platform. Cumulocity Internet of Things (IoT) platform enables ALL SMART EQUIPMENT Use Cases.
Features
- IoT compatible Hardware list
- Software libraries
- Mobile networking support
- Device Connectivity
- Device Management
- Visualization
- Remote Control
- Customisation
- APIs
- Analytics
Benefits
- Supports many IoT Devices Netcomm, Arduino, Cinterion boards, Tinkerforge
- Supports IoT devices with software libraries Java, JavaME, C/C++
- Supports Internet connectivity including Mobile networks in secure manner
- Mobile Internet connectivity supported natively for IoT applications
- Provides extensive IoT device management for fully certified devices
- Visualises sensor data centrally graphically through web user interface
- Common sensor, control types rendered correctly regardless of sensor data
- Provides custom visualisation, new control widgets, custom business logic
- Complete functionality exposed through programming interfaces (APIs)
- Allows users to run real-time IoT business logic inside Cumulocity
Pricing
£87 an instance a month
- Education pricing available
- Free trial available
Service documents
Request an accessible format
Framework
G-Cloud 13
Service ID
8 1 3 2 1 5 5 1 0 3 9 4 7 5 7
Contact
Software AG (UK) Limited
Steve McReavy
Telephone: 07584 337122
Email: steve.mcreavy@softwareag.com
Service scope
- Software add-on or extension
- No
- Cloud deployment model
-
- Public cloud
- Private cloud
- Hybrid cloud
- Service constraints
- Cumulocity IoT Application is based on OSGi stack and Web standards and runs on MS-Azure, Amazon AWS and Alibaba Cloud IaaS. Depending on the type of Operational SLAs required- Service Provider or Enterprise Editions are available for Customers.
- System requirements
-
- Apache Karaf as OSGI container for the core webservices
- Mongo DB as document oriented database
- APAMA streaming analytics engine
- Kubernetes cluster for Microservice hosting
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
- Response Times vary depending on the urgency/severity of the support required. The response time can be between 30 minutes to 1 working day. In case of Standard Cloud Hosted Enterprise Customers, support is provided Mon to Friday 9 am to 5pm. For Cumulocity On Premise or High Value Govt Customers , the Response Times can be uplifted after performing feasibility study and pricing per mutual agreement e.g. 24*7
- User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- None or don’t know
- Phone support
- No
- Web chat support
- No
- Onsite support
- Yes, at extra cost
- Support levels
- These are subject to continuous process improvements. Software AG provides Standard levels of support for Customers. For Cumulocity in the Cloud, SLA 1 : Critical Incidents, Initial Response Goal : 4 Business Hours, SLA 2 : Major Incidents, Initial Response Goal : 2 Business Days, SLA 3 : Minor Incidents : 2 Business Days. Support Available : 08:00 - 18:00 CET/CEST, Excluding German Weekends and German Public Holidays A Customer Success /technical account manager may be available subject to feasibility and at a mutually agreed price For Cumulocity On Premise, a discussion is required to determine the scope and is subject to feasibility. Enterprise Active Support for 24*7 is provided to Customers who have entered into an agreement.
- Support available to third parties
- No
Onboarding and offboarding
- Getting started
- https://cumulocity.com/training/ Module 1- Basics of the Internet of Things and Cumulocity Module 2- Cumulocity IoT Platform Power User Module 3- Cumulocity Developer Module 4- Internet of Things Challenges and Cumulocity Solutions Module 5- Cumulocity Operations
- Service documentation
- Yes
- Documentation formats
-
- HTML
- End-of-contract data extraction
- For Public Cloud Hosting in AWS (or equivalent) Access to the Cumulocity Hosting Services will be removed upon termination of the Agreement. Customer will be able to download a final backup of their Data within 90 days’ after termination of the Agreement (the “Exit Period”). After the Exit Period, the Customer's environment/tenant and Data will be deleted following industry-standard practices. This same policy also applies to dedicated environments.
- End-of-contract process
- End-of-contract process- The date for end of the Contract will be based on sufficient notice by providing notification from either party and the procedure will be by mutual consent and as documented. Due to the specific needs of Govt organizations, this end-of-contract activity will be documented mutually at the time of drafting the Contract so that there is accountability on both sides for completing tasks and progressing towards graceful closure of the Contract including extraction of Data owned by the Customer. The commercials for this part of the Contract will have to be pre agreed prior to commencement of the project.
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Internet Explorer 11
- Microsoft Edge
- Firefox
- Chrome
- Application to install
- No
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
- Cumulocity Supports HTML5, rendering done by Browser "Cumulocity visualizes your sensor data centrally and graphically through its modern web user interface. The user interface automatically adapts itself to the devices you connect -- no configuration required. It also adapts itself to the web browser that you use. For example, if you use a mobile phone or tablet with limited screen size, it will change user interface controls to use less screen estate."
- Service interface
- No
- User support accessibility
- None or don’t know
- API
- Yes
- What users can and can't do using the API
- Cumulocity exposes its complete functionality through programming interfaces (APIs). This means that all of Cumulocity’s functionality is available to use in different contexts outside of what Cumulocity directly provides – in your own applications, in your own devices. In contrast to many other M2M and IoT platforms, Cumulocity uses the same APIs and the same interface technology for all use cases. As a consequence, you have a wider range of choices in putting intelligence into your IoT devices, depending on how powerful they are. You also have to use only one set of APIs and one technology to build a complete solution from device to application on your own. Cumulocity uses HTTP and REST which is today the most widely used interfacing technology and which works on any Internet-connected device ranging from small embedded microcontrollers up to desktop PCs. The secure variant, HTTPS, is used for the most security critical applications and will give you the best possible security. The plugin concept of Cumulocity enables you to write new user interface functionality that will seamlessly extend the existing Cumulocity application http://cumulocity.com /guides/reference/rest-implementation/ In addition, we provide a Microservice API for developing and deploying Microservices to Cumulocity IoT.
- API documentation
- Yes
- API documentation formats
- HTML
- API sandbox or test environment
- No
- Customisation available
- Yes
- Description of customisation
- Cumulocity is based on W3C Web Standards and supports Open Source. Cumulocity allows extensibility of the IoT Device management functionality through implementing customised Microervices. The Web user Interface can be customised using widgets and HTML5, Angular Java Script. The Cumulocity functionality already provides a wide range of device management, visualization and control options. Furthermore it produces custom visualization, new control widgets and custom business logic. Cumulocity has extensive customization options, for example: *Write alarm rules to reprioritize or suppress alarms and to define your SLA parameters. *Use real-time to implement real-time business rules. For example, get an email when critical events happen, or trigger automated actions on devices in that case. *Set up a graphical dashboard with your most important KPIs. * Subscribe to plugins that contribute new functionality to the Cumulocity application
Scaling
- Independence of resources
- Most relevant Cumulocity scaling variables are: Transaction per seconds Less relevant: “Aways-on” (device push) concurrently connected devices Number and complexity of CEP rules Even less relevant: Number of tenants (unless < few hundreds) Number of devices Number of users Cumulocity Scales horizontally by instantiating more nodes High-Availability uses load balancer and NoSQL features All external traffic inbound terminates on Load balancer, Client affinity required Cumulocity Application Tier is mostly stateless. Database Tier uses sharding where the Sharding is based on device id
Analytics
- Service usage metrics
- Yes
- Metrics types
- Metrics types http://status.cumulocity.com/ Cumulocity API Response Cumulocity MQTT Response
- Reporting types
-
- API access
- Real-time dashboards
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Other security clearance
- Government security clearance
- Up to Security Clearance (SC)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
- European Economic Area (EEA)
- User control over data storage and processing locations
- Yes
- Datacentre security standards
- Managed by a third party
- Penetration testing frequency
- Less than once a year
- Penetration testing approach
- Another external penetration testing organisation
- Protecting data at rest
- Other
- Other data at rest protection approach
- Cumulocity from Software AG is a telcom grade / service provider IoT platform and has been designed, developed and deployed following Industry Best practices and Supplier-defined controls. As the requirements of Govt are Specific to each project, Software AG is happy to provide details upon request to meet compliance for bespoke solutions.
- Data sanitisation process
- No
- Equipment disposal approach
- A third-party destruction service
Data importing and exporting
- Data export approach
- With Cumulocity's open REST API, data can be easily exported for data analysis or monitoring.
- Data export formats
-
- CSV
- Other
- Other data export formats
- JSON
- Data import formats
-
- CSV
- Other
- Other data import formats
-
- JSON
- MQTT
Data-in-transit protection
- Data protection between buyer and supplier networks
- Other
- Other protection between networks
- Networking is outside of scope of Software AG deliveries. Cumulocity is a telcom grade service provider IoT platform and has been designed, developed and deployed following Industry Best practices and Supplier-defined controls. As the requirements of Govt are Specific to each project, Software AG is happy to provide details upon request to meet compliance to protect Data. Software AG is a software engineering company and so secure networking requirements are to be designed and implemented by the Customer / Govt agencies to ensure protection to their standards, as networking is outside the scope of Software AG.
- Data protection within supplier network
- Other
- Other protection within supplier network
- Cumulocity is a telcom grade service provider IoT platform and has been designed, developed and deployed following Industry Best practices and Supplier-defined controls. As the requirements of Govt are Specific to each project, Software AG is happy to provide details upon request to meet compliance to protect Data. Software AG is a software engineering company and so secure networking requirements are to be designed and implemented by the Customer / Govt agencies to ensure protection to their standards, as networking is outside the scope of Software AG.
Availability and resilience
- Guaranteed availability
- Service Availability 99.90% based on Web Services availability measured over 5 minute intervals per calendar month (excluding standard scheduled maintenance). This excludes the Availability of the underlying Cloud /AWS Infrastructure Option for Users to be refunded may be feasible if a separate agreement had been exclusively drawn up mutually for a Bespoke Uplifted Service. This is when the Cumulocity IoT platform - could not meet the mutually agreed guaranteed levels of availability of Cumulocity software due to unforeseen circumstances.
- Approach to resilience
- Cumulocity runs on AWS, Azure and Alibaba as cloud providers. Cumulocity IoT installs only on virtual machines, Cumulocity support VMWare and OpenStack and the service is designed to be resilient. More details available on request. Cumulocity can be deployed with bespoke High Availability architectures and Geographic Resiliency- as required for specific projects by Govt Customers
- Outage reporting
- Service report ( outages) * Planned outages for maintenance are informed in advance to Customers. Operational Details of day-to-day running status of Cumulocity is published on the web / public dashboard. http://status.cumulocity.com/
Identity and authentication
- User authentication needed
- Yes
- User authentication
-
- 2-factor authentication
- Public key authentication (including by TLS client certificate)
- Username or password
- Access restrictions in management interfaces and support channels
- Cumulocity is a telcom / service provider grade IoT platform and has been designed, developed and deployed following Industry Best practices and Supplier-defined controls. As the requirements of Govt are likely to be Specific to each project, Software AG is happy to provide details upon request to meet compliance for Access restrictions in management interfaces and support channels.
- Access restriction testing frequency
- At least once a year
- Management access authentication
-
- 2-factor authentication
- Public key authentication (including by TLS client certificate)
- Username or password
- Other
- Description of management access authentication
- For Cumulocity, all of the operations for each environment are done via the management tenant. For public cloud customers, we restrict access to this management tenant. For dedicated cloud customers, access is granted to this management tenant.
Audit information for users
- Access to user activity audit information
- You control when users can access audit information
- How long user audit data is stored for
- Between 1 month and 6 months
- Access to supplier activity audit information
- You control when users can access audit information
- How long supplier audit data is stored for
- Between 1 month and 6 months
- How long system logs are stored for
- Between 1 month and 6 months
Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- DQS GmbH
- ISO/IEC 27001 accreditation date
- 26/01/2021
- What the ISO/IEC 27001 doesn’t cover
- Software AG has certification for compliance with ISO/IEC 27001:2013, ISO/IEC 27017:2015, and ISO/IEC 27018:2019. Software AG Standard and Managed Cloud Services as listed in the certification scope statement delivered by Cloud Operations and PS Managed Services including supporting operation functions. https://www.softwareag.com/en_corporate/company/iso-certified.html
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- No
- Cyber essentials plus
- No
- Other security certifications
- Yes
- Any other security certifications
-
- ISO/IEC 27001:2013, ISO/IEC 27017:2015, ISO/IEC 27018:2019
- Complies with SOC 2 standards
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
- ISO/IEC 27001
- Information security policies and processes
- REPORTING STRUCTURE: Head of Cloud Security, Compliance and Certifications Cloud Compliance and Certification Manager Cloud Security Technical Manager Cloud Security and Compliance Sales Support Manager SECURITY POLICIES: Cumulocity Standard Edition Tenants can be hosted at Microsoft Azure and Amazon Web Services (AWS). AWS has been certified according to ISO 27001, DSS and other standards (http://aws.amazon.com/compliance/). It features extensive physical security measures and is independently audited. Audit reports can be obtained directly at AWS Compliance (http://aws.amazon.com/compliance/contact/). Cumulocity ensures that Customer data stays confidential and cannot be tampered with through an end-to-end implementation of HTTPS from devices to applications. It uses up-to-date encryption technology that has been independently rated "A" by SSLlabs (https://www.ssllabs.com/). Any communication with Cumulocity is subject to individual authentication and authorization All functionality of Cumulocity is coherently implemented with the same set of publicly documented, sessionless REST APIs. This means that none of the popular "session stealing" techniques will work with Cumulocity. To capture security-relevant events, Cumulocity offers an auditing interface which enables applications and agents to write audit logs, which are persistently stored and cannot be externally modified after being written. Cumulocity also writes own audit records related to login and device control operations.
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
- Cumulocity is a telco grade IoT platform and has been designed, developed and deployed following Industry Best practices and Supplier-defined controls. As the requirements of Govt are Specific to each project, Software AG is happy to provide details upon request to meet compliance
- Vulnerability management type
- Supplier-defined controls
- Vulnerability management approach
- As part of the Software AG Cloud Information Security Program and in compliance with the Technical Vulnerability Management Policy, we have developed a high-level Vulnerability Management process which aims to outline the main activities performed related to identification, evaluation, remediation and prevention of system vulnerabilities. Further details available upon request from the Software AG Cloud Security Operations team
- Protective monitoring type
- Supplier-defined controls
- Protective monitoring approach
- Software AG supplier-defined controls have been used for protective monitoring processes. These include the required procedures to address protective monitoring. Cumulocity is a telco grade IoT platform and has been designed, developed and deployed following Industry Best practices and Supplier-defined controls. As the requirements of Govt are Specific to each project, Software AG is happy to provide details upon request to meet compliance.
- Incident management type
- Supplier-defined controls
- Incident management approach
- Cumulocity is a telco grade IoT platform and has been designed, developed and deployed following Industry Best practices and Supplier-defined controls. As the requirements of Govt are Specific to each project, Software AG is happy to provide details upon request to meet compliance for bespoke projects for Incident Management.
Secure development
- Approach to secure software development best practice
- Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)
Public sector networks
- Connection to public sector networks
- No
Social Value
- Fighting climate change
-
Fighting climate change
Software AG aims to be a reliable partner delivering high-value, individually customizable software solutions for its customers. The Company supports the digital transformation with its services, even more so since this transformation can help to mitigate or even reverse the consequences of climate change. Software AG wants to actively help people and the planet with its solutions by enabling its customers to create the conditions for doing business sustainably.
We are working to keep our environmental footprint as small as possible. To reduce the impact of our business activities on the planet, we are preparing to become climate neutral as quickly as possible. With the help of our technology and our solutions, we will join forces with our customers and partners to tackle significant environmental challenges and help shape a more sustainable future. - Covid-19 recovery
-
Covid-19 recovery
The COVID-19 pandemic has been affecting the global economy for two years. Multiple lockdowns in most countries of the world initially had a negative impact on the global economy. Many companies froze, postponed or extended investment activities. Nearly all organizations placed extensive restrictions on business travel. These circumstances make contract negotiations with customers difficult because nearly all meetings can only be conducted online. The absence of customer events and meetings places a burden on generating new project opportunities. Product training for Software AG customers is only possible online, which can result in delayed installation and rollout thereby hindering new business for Software AG. The effects on business operations were minor in 2021. Generally speaking, though, employees of the Software AG Group and of customer organizations have gotten used to working online. The positive effect of this is that the initially feared risk of a pandemic-related decline in business did not manifest. Software AG is generally not affected by disruptions in supply chains thanks to its business model. The pandemic has forced a large share of companies’ and government agencies’ administrative work to be carried out in employees’ homes. The crisis has shed light on the lack of digitalization in business processes, which has had and continues to have an accelerating effect on digitalization. This is resulting in new business opportunities for Software AG, particularly in the Digital Business segment, which could compensate, or even overcompensate, for the negative effects of a global economic recession. - Tackling economic inequality
-
Tackling economic inequality
Software AG can only succeed over the long term if it acts responsibly and sustainably. As a globally active technology provider, Software AG has drafted a sustainability strategy that it plans to implement in five action areas.
1. Value for Society: Software AG India has launched the SoftwareAGain program. This program focuses on women in India who left the workforce temporarily and would like to re-enter the working world again.
2. Leadership & Governance: Software AG aims to promote education and innovation, support employees’ ongoing growth, steadily improve the standards of products and processes, and thereby remain a reliable long-term partner for customers.
3. Our Employees: People and their unique personalities, experiences and perspectives are at the heart of the Our Employees action area, which aims to foster a corporate culture of respect, transparency and inclusion as well as to attract and retain the best talent.
4. Customers & Technology: Working in an open and creative environment leads to large-scale sharing of experiences and innovative ideas. Customers and Technology requires that approach. Our solutions and services intrinsically drive the digital transformation and help mitigate the impact of climate change.
5. Impact on Environment: We want to minimize our environmental footprint as much as possible. Software AG plans to deploy state-of-the-art technologies and innovations across the Company to achieve this objective. - Equal opportunity
-
Equal opportunity
Software AG promotes a corporate culture based on diversity, equality and inclusion. Corporate culture plays a decisive role in the implementation of the Helix transformation growth strategy. Since corporate culture, employee satisfaction and engagement are mutually supportive, Software AG has implemented a variety of initiatives to better understand the correlations and to positively impact the Company's culture.
The commitment shown by Software AG's employees paired with their professional and personal skills all contribute decisively to the Company's success. Therefore, ignoring employee concerns poses a fundamental risk of—generally indirect—negative impacts on business performance. Examples of this include situations when low employee satisfaction leads to attrition and a loss of company-specific expertise, or when a lack of diversity in the corporate culture leads to weak innovation. For this reason, Software AG deploys a variety of measures that contribute to high employee satisfaction, and an innovative and diverse corporate culture. - Wellbeing
-
Wellbeing
At Software AG, we are passionate about motivating employees to adopt a healthy lifestyle and supporting their mental and physical health. A successful corporate health management program helps improve the health of employees, reduces physical and mental strain from work, prevents disease, and increases employee satisfaction and commitment.
We are committed to fostering our corporate culture grounded in respect, transparency, and inclusion. We continue to focus on attracting and retaining the best talent for Software AG, nurtured through employee engagement and an inclusive and equitable working environment— where all employees can thrive and unleash their full potential.
Pricing
- Price
- £87 an instance a month
- Discount for educational organisations
- Yes
- Free trial available
- Yes
- Description of free trial
- Cumulocity IoT free trial edition enables basic IoT solutions to be created quickly who can use everyday office productivity apps. This allows your business to adopt a low-effort and agile approach to IoT solution creation. https://signup.softwareag.cloud/#/?product=cumulocity Account for a free trial of Cumulocity IoT is available for 30 days
- Link to free trial
- https://signup.softwareag.cloud/#/?product=cumulocity