SIERRA NEVADA CORPORATION MISSION SYSTEMS UK, LTD

TRAX as a Service

SNC’s Tactical Radio Application eXtension (TRAX)® has been developed to support Multi Domain C5ISR missions at the strategic, operational, and tactical levels, for enterprise and austere locations where network extension are needed to execute the mission. TRAX can be Enterprise or Tactical Cloud deployed to support a number of applications.

Features

• Cross Platform Application – Windows, Android, Linux, etc.
• Created by and for tactical users
• Backwards compatible with legacy systems
• Forward compatible with future systems
• Open architecture API/ICD eliminates proprietary Interfaces/protocols
• Built-In Communication Matrix routes/translates data
• Intuitive configuration and minimal setup
• Auto-Start available for all connections after configuration
• Non traditional ISR integration

Benefits

• Multi-domain integration
• Overcome vendor locked protocols and interoperability
• Tactical Data link integration
• Digitally assisted close air support
• TAK integration/visualisation
• Non-traditional ISR
• Easy to use with minimal training
• Cross domain message translation

• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Dan.Ridley@snc-ms.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

831213934788749

Contact

SNC Mission Systems UK
02921921237
Dan.Ridley@snc-ms.uk

About your service

• Service categories:

  Applications

  Production and operations

  • Other operations
• Multi cloud support: Yes

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Situational awareness, C2 software applications, sensor and effector integration
• Cloud deployment model:
  • Public cloud
  • Private cloud
• Service constraints: Software is installed, configured and optimised for the user, either on their own hardware or on hardware purchased through us. ; Any constraints which may have a tangible effect on users will be discussed during configuration and optimisation planning.
• System requirements: Android, Linux, or Windows OS licence

User support

• Email or online ticketing support: Yes
• Support response times: Within 24 hours
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes
• Support levels: Support levels provides are First, Second and Third line support. ; Support is included in the cost.; A Technical Account Manager will be provided.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: We make it easy for users to start using the service through thorough requirements analysis, solution development and implementation support. Our Field Service Representatives (FSRs) provide support direct to customers on their site(s) during system startup.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: Data does not rest on the platform. ; Any data will be sent via file transfer protocol.
• End-of-contract process: Each contract will be unique to the customer. ; We will agree end of contract requirements prior to the start of the contract.
• Documentation accessibility standard: None or don’t know
• How the documentation is accessible: Onboarding and offboarding documentation is emailed to the customer.

Using the service

• Web browser interface: No
• Application to install: Yes
• Compatible operating systems:
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
  • ChromeOS
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Mobile services provide very similar functionality to desktop services but are designed for ease of use when deployed with smaller devices and touchscreens.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: Users have a simple to use graphic user interface. This allows them to configure network parameters and filter by message site.
• Accessibility standards: None or don’t know
• Description of accessibility: Users access TRAX through an intuitive user interface.
• Accessibility testing: None
• API: Yes
• What users can and can't do using the API: Through the Restful API, users can:; - Create, modify and delete connectors for system, sensors and radios; - Control individual connectors for systems sensors and radios; - Configure inter connector routing; - Create and modify filter lists; - Receive message data.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: Users can:; - Create, modify and delete connectors for system, sensors and radios; - Control individual connectors for systems sensors and radios; - Configure inter connector routing; - Create and modify filter lists; - Receive message data.

Scaling

• Independence of resources: We work with the user to understand demand and capacity requirements and provide resource monitoring to ensure the service meets performance and capacity requirements.

Analytics

• Service usage metrics: Yes
• Metrics types: Service metrics options are agreed prior to contract
• Reporting types: Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
  • Other locations
• User control over data storage and processing locations: Yes
• Datacentre security standards: Supplier-defined controls
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest:
  • Physical access control, complying with another standard
  • Encryption of all physical media
  • Scale, obfuscating techniques, or data storage sharding
• Data sanitisation process: Yes
• Equipment disposal approach: A third-party destruction service
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Data Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase
  • Degaussing
  • Physical Destruction / Hardware containing data is completely destroyed

Data importing and exporting

• Data export approach: User defined
• Data export formats: Other
• Other data export formats: PDF
• Data import formats: Other
• Other data import formats:
  • Configuration data via XML
  • JSON

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection between networks: We can provide a cross domain solution, subject to user requirements.
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Other
• Other protection within supplier network: We can provide a cross domain solution, subject to user requirements.

Availability and resilience

• Guaranteed availability: SLAs are agreed on a case by case basis in line with user requirements
• Approach to resilience: This information is available on request
• Outage reporting: Via email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Dedicated link (for example VPN)
  • Username or password
• Access restrictions in management interfaces and support channels: We use an identity and access management system
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Cyber Essentials Plus
• Information security policies and processes: SNC MS UK's information security policies and procedures are described in our Information Technology and Cyber Security Policy. They align with the Cyber Governance Code of Practice, ISO 27001 and Defence cyber security standards and guidelines. All employees are briefed on this policy and their responsibilities to ensure that they comply with the detailed SNC MS UK Security Instructions and current legislation, use IT resources in an acceptable way and do not create unnecessary business or security risk.; The policy also describes the roles and responsibilities within the business for IT and Cyber Security. The main three roles are the Chief Technical Officer, the Chief Engineer, and the IT Engineer. The reporting lines are: IT Engineer > Chief Engineer > Chief Technical Officer (for further reporting to Executive Board).
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Configuration and change management processes will be aligned to user requirements, including operational tempo.
• Vulnerability management type: Undisclosed
• Vulnerability management approach: Vulnerability management is tailored to user requirements, the environment and security requirements for operation.
• Protective monitoring type: Undisclosed
• Protective monitoring approach: Protective monitoring is tailored to user requirements, the environment and security requirements for operation.
• Incident management type: Undisclosed
• Incident management approach: Incident management processes are adapted to meet user requirements, subject to the environment, threat and use case of the system in question.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: Yes
• Description of free trial: Demonstration licences provide a demonstration/test of capability.

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 1%
• Between £2,500,001 and £5,000,000: 2%
• Over £5,000,001: 2.5%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: BSI
• ISO/IEC 27001 accreditation date: Tuesday 30 June 2026
• What the ISO/IEC 27001 doesn’t cover: Please note the declaration above will be accurate at the time of Framework Award. We are scheduled to have our ISO/IEC certification accredited by BSI in June 2026 and can provide a letter of confirmation of the same from BSI.; The scope of the certified ISMS covers all business processes, information assets, technologies, and personnel involved in delivering, supporting, and managing the SNC MS UK's services and digital products, including software development, data modelling and analytics, network and infrastructure management, and IT Service Management. It applies to all organisational sites, cloud environments, and authorised remote working locations, ensuring the confidentiality, integrity, and availability of information throughout its lifecycle. This scope covers all digital services and products offered through G-Cloud 15.
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: BSI
• ISO 9001 accreditation date: Saturday 14 December 2024
• What the ISO 9001 doesn’t cover: The ISO 9001 scope excludes corporate finance functions, which are governed through separate financial audit and assurance frameworks; all service delivery and operational activities are included within scope.
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: Dc002eca-9683-4af2-9cd8-4a95d16e19af
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: B24fa866-231d-4ab3-a44a-57ea24e73479
• Other security certifications: Yes
• Any other security certifications: We have an MOD accredited Facility Security Clearance (FSC) site

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
    • New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
    • Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
    • Plans to engage the contract workforce in deciding the most important workplace issues to address
    • Ensuring new workers are informed of their right to join a trade union
    • Monitoring of employee engagement rates (by protected characteristic) and, where necessary, the development of actions to ensure all voices are heard across the diversity of the workforce
    • Employment contracts that reflect actual hours worked; steps taken to ensure employees understand their contracts and have the ability to review and adjust them if actual hours regularly exceed contracted hours
    • Activities that support an environment where staff are educated about, and feel empowered to, address their physical wellbeing
    • Activities that support an environment where staff are educated about and feel empowered to report and address bullying and harassment
    • Activities to cascade good practice on fair working conditions throughout the supply chain
    • Offer a pay and leave entitlement to all eligible staff who become kinship carers, ideally equivalent to statutory adoption pay and leave
    • Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
    • Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
    • Measures to support in-work progression to help people in the contract workforce, to move into higher paid work by developing new skills relevant to the contract
    • Support for educational attainment relevant to the contract, including training schemes that address skills gaps and result in recognised qualifications
    • Volunteering opportunities for staff
    • Understanding of the modern slavery risks and issues affecting the market, industry, sector or country (of origin or of source) relevant to the contract, and the workforce in the supplier’s own organisation and those of its key subcontractors

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at Dan.Ridley@snc-ms.uk. Tell them what format you need. It will help if you say what assistive technology you use.