Idox Software Limited

groundMapper Cloud GIS & Project Solution (a thinkWhere solution)

groundMapper is a cloud GIS mapping application that lets you view, query and present location data, both in-house and from third parties (Ordnance Survey, Environment Agency and Forestry Commission). Interactive and up-to-date, your location data comes to life: allowing your staff and stakeholders in partner organisations to collaborate more effectively.

Features

• Easy to use, intuitive and responsively-designed interface
• Access your project information – maps, reports, photos, drawings etc
• Load your data quickly, configure your project Table of Contents
• Identify map features, query, view and analyse datasets
• Extensive suite of data editing tools
• Measure lines, distances and areas, add annotations and labels
• Print maps and export data in a variety of formats
• Secure, fully hosted data environment
• Maintained suite of Ordnance Survey dataserts/third party data
• Access to first-class support and training

Benefits

• Quick to set up - no local system installation required
• Eases collaboration, data sharing and improves communication
• Simplifies data management - common view of your geospatial information
• Access to maintained Open Data and free-to-use data products
• Access information on or off-site
• Works with PCs, laptops and tablet technologies
• Active product development roadmap
• Managed data, software and infrastructure services
• Reduced costs
• Reduced business risk

£4,995 a unit a year

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at frameworks@idoxgroup.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

869125099682092

Contact

Jen.roberts@idoxgroup.com
0333 011 1200
frameworks@idoxgroup.com

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: We will carry out planned maintenance on a regular basis. Where possible, maintenance will be performed outwith the period of Service Desk availability listed above and we will inform the customer with details of the planned maintenance and timescales for completion with a minimum of 5 working days notice.; ; Unplanned maintenance will be immediately communicated to the customer along with the action to be taken and an impact assessment where required.
• System requirements: Latest version of Google Chrome, Edge, Firefox or Safari

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: We provide a monitored Service Desk available from 08:30 to 17:30 Monday to Friday with the exception of Christmas Day, Boxing Day and New Year’s Day public holidays. Our target response time in within 1 hour during these times. A case number and a priority will be allocated to the call by a member of our Service Desk team. Target resolution timescales are set relative to priority as detailed in our Service Level Agreement.
• User can manage status and priority of support tickets: No
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: We will provide a monitored Service Desk to support users for the duration of the contract. Requests for support can be logged by any of the nominated support contacts with the Service Desk as follows:; ; A fixed number of named support contacts can be specified by the customer and these users will be provided with accounts for our support portal. These named administrators will provide first line support for Location Centre users within the organisation. Where the administrators cannot resolve a request for support, they will then log the request with the Service Desk. Calls are managed using our support portal through which Administrators can raise and track service requests.; ; The Service Desk is available from 08:30 to 17:30 Monday to Friday with the exception of Christmas Day, Boxing Day and New Year’s Day public holidays.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: We provide administrator and user training. This is undertaken remotely, not on-site. The system contains a help guide for users.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: The off boarding process includes the full extraction and removal of all customer generated data – all customer data is purged and destroyed and the service instance removed. If a customer requires any of their data to be returned, off boarding costs will be agreed on a case by case basis according to customer preferences.
• End-of-contract process: The off boarding process includes the full extraction and removal of all customer generated data – all customer data is purged and destroyed and the service instance removed. A formal Service Desk cancellation process ensures any relevant user information is removed from the service and all user data is deleted in line with GDPR. If a customer requires any of their data to be returned, off boarding costs will be agreed on a case by case basis according to customer preferences.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: GroundMapper is responsively designed to work on tablets. ; ; Some elements of map navigation vary between desktop and tablet versions.
• Service interface: Yes
• User support accessibility: None or don’t know
• Description of service interface: GroundMapper provides a browser-based user interface will tools for map navigation, data visualisation, analysis and editing and reporting. Advanced users can access a suite of configuration tools to set up projects, data, users, templates etc. The system is designed to be highly intuitive, interactive and easy to use.
• Accessibility standards: None or don’t know
• Description of accessibility: Where possible the user interface conforms to W3C AAA accessibility guidelines. The visual nature of map content and the style of map data outwith our control mean some conformance to the AAA standard may not be possible. This is in line with W3C guidance which states that “it is not recommended that Level AAA conformance be required as a general policy for entire sites because it is not possible to satisfy all Level AAA Success Criteria for some content”.
• Accessibility testing: N/a
• API: Yes
• What users can and can't do using the API: GroundMapper delivers fast and secure industry standard data services through Restful WMS APIs. This gives you the flexibility to serve your data to a range of clients including desktop GIS applications, internal systems or custom web mapping applications.
• API documentation: No
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Individual customer branding can be applied and have full control over data permissions and roles. Customers can upload their own business data, define symbology to be used and create custom project and print templates.

Scaling

• Independence of resources: We proactively monitor the groundMapper infrastructure. We provide monthly reports on customer usage levels and proactively manage the infrastructure to cope with demand. These are formed from a combination of internal monitoring and hosting provider monitoring. Real-time monitoring is also in operation across the groundMapper application to ensure a performant user experience. Longer term usage and performance trends inform infrastructure management.

Analytics

• Service usage metrics: Yes
• Metrics types: Service management reports are provided detailing number of users, number of projects, map transactions and data storage. We report on a range of KPIs as set out in our SLA including system availability, OS and third party data management, system performance, service desk performance etc. Users can also access key metrics on project usage and printing within the application.
• Reporting types:
  • Real-time dashboards
  • Regular reports

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
• Protecting data at rest: Physical access control, complying with CSA CCM v3.0
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Users can export their business datasets in a range of formats directly from the application UI.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Shapefile
  • Geopackage
• Data import formats: Other
• Other data import formats:
  • Shapefile
  • Geopackage
  • KML
  • GeoTiff

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Other
• Other protection between networks: HTTPS in an option for groundMapper sites.
• Data protection within supplier network: Other
• Other protection within supplier network: Hosting infrastructure provided by Amazon Web Services (AWS) provides security groups which are applied to all servers in the network.

Availability and resilience

• Guaranteed availability: Uptime availability is >99.5%.
• Approach to resilience: GroundMapper is hosted in Amazon Web Services employing the Multi-Zone capability, meaning we have resilience fail-over to another physical data centre location if required.
• Outage reporting: Online 24/7 real-time monitoring systems are implemented upon groundMapper to instantly notify Idox staff in the unlikely event of unforeseen downtime. Any downtime is then communicated to customers via email.

Identity and authentication

• User authentication needed: Yes
• User authentication: Username or password
• Access restrictions in management interfaces and support channels: GroundMapper is secured with username and password authentication. Further to this various roles with associated privileges exist within groundMapper meaning functions can be restricted to appropriate users. Access to our support desk is restricted via username and password.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users receive audit information on a regular basis
• How long supplier audit data is stored for: Between 1 month and 6 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: QMS International
• ISO/IEC 27001 accreditation date: 27/05/2021
• What the ISO/IEC 27001 doesn’t cover: Certification covers all functions and services of Idox Software Ltd.
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Cyber essentials plus: No
• Other security certifications: No

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: All divisions of Idox, follow the ISO27001 accredited Information Security Management System of Idox Software Ltd. This ISMS covers all business functions including but not limited to, information systems, networks, physical environment, incident/threat management, project & contract management and personnel management. Information security awareness training is conducted to ensure policies are communicated and ongoing annual internal reviews and auditing is conducted to ensure processes are followed. The system and controls are also externally verified an certified annually as part of the ISO 27001 certification process. Risks raised through internal and external audits are reviewed at management meetings by the information security manager, the appropriate head of business and a board representative.

Operational security

• Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Configuration and change management approach: IT change management processes are carried out using Change Requests and records are maintained within the Change Management system. All concerned parties are informed of the status of the request as changes or progress is made as applicable.
• Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Vulnerability management approach: We monitor OWASP and various vendor alert sources for emerging vulnerability intelligence and patching data. A combination of web application scanning, host vulnerability scanning, and external perimeter proactively identifies any design, configuration, or patching weaknesses. When identified, any threats are assessed in context and where warranted, mitigations are implemented in accordance with their severity. These controls and processes are monitored as part of our ongoing ISMS/ISO27001 auditing programme.
• Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
• Protective monitoring approach: Monitoring tools are used to measure server performance metrics as well as storage and network/bandwidth utilisation and unusual server/network/perimeter activity. The alerts from these systems are actively monitored and reviewed and any potential intrusion attempt is raised in line with our security incident reporting procedure for further investigation.
• Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
• Incident management approach: Incidents or suspected incidents are raised to internal service desk and reviewed by the information security manager. They are allocated a risk reference, entered into the information security risk log and tracked until closure. In the case of major incidents, an Incident Response Team will be formed as required with key personal required to investigate and take necessary actions, and a major incident report will be produced.

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

• Connection to public sector networks: No

Social Value

• Fighting climate change:

  Fighting climate change

  Idox has adopted the metrics set out in the 3 scopes of the Greenhouse Gas Protocol. We have a target to achieve net zero carbon emissions for these scopes by 2040 by eliminating, reducing or offsetting carbon emissions.; ; In Scope 1: we will eliminate all equipment in offices which produce direct emissions and replace these with energy efficient, electric alternatives. We will eliminate emissions from company owned vehicles by replacing these with electric alternatives. ; ; In Scope 2: we will reduce electricity usage through Energy Savings Opportunity Scheme audits and will eliminate the purchase of electricity which does not come from renewable sources. ; ; In Scope 3: we will reduce business travel through remote working and on line collaboration tools. We will eliminate travel by private vehicles which produce emissions and we will offset emissions from public transport used for business travel and from hotel stays either by choosing operators offering direct offset or by engaging in a compensating carbon offset programme. We will eliminate waste by removing single use plastic products and reduce waste from our offices by ensuring effective recycling of waste, including paper and will offset any non-recyclable waste by engaging in a compensating carbon offset programme. We will eliminate waste from surplus equipment by passing this on for re-use in support of our social contribution wherever possible, where this is not possible we will reduce waste by fully recycling the equipment and we will offset residual emissions in a compensating carbon offset programme.; ; We are strengthening Idox’s performance as an all-round responsible business that makes a valuable contribution to society, has good governance embedded in its culture and processes, and is on target to achieve net zero carbon emissions.; ; Our gross GHG emissions of CO2 (tCO 2e) are reported yearly in our published Annual Report.
• Tackling economic inequality:

  Tackling economic inequality

  Idox is focused on building a sustainable business that will benefit its customers, employees, shareholders, wider society and the environment. We take our environmental, social and governance (ESG) responsibilities very seriously. We have implemented substantial changes across our business to create a more diverse, transparent and sustainable business. In future, we will do more to measure and drive our performance. ; ; How we will deliver social and economic benefits to Buyers and the wider community: We will address the social value requirements and the delivery of social and economic benefits to Buyers and their communities on a contract by contract basis. We understand that social value forms part of contract commitments to our public sector Buyers. We work collaboratively with customers to support the specific targets and outcomes that are a priority with their boundaries. ; ; Examples of social value we can deliver to our Buyers: We can: facilitate skills workshops; make financial donations to fund places on training courses, fund community projects that work to tackle economic inequality, reduce the digital skills gap and create training opportunities for those who face barriers to employment and/or who are located in deprived areas, and support educational attainment; donate used IT equipment to VCSEs to support people in deprived areas; provide work experience placements in some localities. ; ; We have a robust social value process and methodology which includes an annual review meeting where we can review our social value delivery performance with the Buyer. This annual review ensures we can understand the customer’s priorities and set appropriate targets for the year ahead, and continuously improve how we deliver social value, based on customer and community feedback and collaboration.
• Equal opportunity:

  Equal opportunity

  Diversity, Equality and Inclusion (DEI) are more than just words for us. They’re the hard-and-fast principles guiding how we build our teams, cultivate leaders and create a company that’s the right fit for every person inside of it. Our values and culture underpin our commitment to putting our people first. ; ; At Idox we foster both a top-down and grassroots approach where we strive to create workplaces that reflect the communities we serve, and where everyone feels empowered to bring their full, authentic self to work.; ; Our guidance to our employees and suppliers concerned with recruitment, training, promotion and service delivery is outlined in our Equality and Diversity Policy which covers our responsibilities under the Equalities Act and how we deliver them. We are happy to provide a full copy of the policy upon request.; ; Idox has established clear goals to get to a gender balanced workforce by 2027. In order to tackle the issue of under representation in leadership, Idox is particularly focused on increasing the proportion of women in the people-leader tiers of the business to both correlate with the gender ratio of the company in general and to support the overall reduction of the gender pay gap specifically. ; ; Our policies and initiatives that support Diversity, Equality and Inclusion include: Flexible working policy; Family friendly policies; Idox Elevate - a programme sponsored by Idox plc board members, committed to championing a truly inclusive culture; Pay Gap reporting - We publish our gender pay gap report annually on our website; Fair Pay - Idox is an accredited Living Wage Employer.

Pricing

• Price: £4,995 a unit a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at frameworks@idoxgroup.com. Tell them what format you need. It will help if you say what assistive technology you use.