Asset Booker Power App Support and Consultancy

Service scope

Software add-on or extension: Yes
What software services is the service an extension to: The application itself is sits within Microsoft Teams as a Dataverse for Teams based application.
Cloud deployment model: Private cloud
Service constraints: The application sits within Microsoft Teams - therefore having Microsoft Teams is a pre-requisite.
System requirements: Microsoft Teams Software

Power Apps licensing (free)

Microsoft Teams Team

DLP policy restrictions lifted

Corporate use only

Creation of a separate AD User Account to run under

User support

Email or online ticketing support: Email or online ticketing
Support response times: If signed up to a support agreement, responses are within 2 hours.
User can manage status and priority of support tickets: No
Phone support: Yes
Phone support availability: 9 to 5 (UK time), Monday to Friday
Web chat support: No
Onsite support: Yes, at extra cost
Support levels: Our standard support hours are Monday - Friday 8am - 6pm.
Support available to third parties: No

Onboarding and offboarding

Getting started: Customers can effortlessly download the Asset Booker Power App, available completely free of charge at www.digpacks.co.uk/asset-booker.

Clear instructions for installation in PDF format are readily accessible. Should customers seek support from DigPacks for any aspect of application deployment, our dedicated assistance is readily available, although this service is subject to charge.
Service documentation: Yes
Documentation formats: HTML

PDF
End-of-contract data extraction: No data is held by DigPacks - this is installed directly into customer Office365 environments, where data also resides.
End-of-contract process: Opting for our optional support contract enhances your experience. In the event of its conclusion, we proactively inform you four weeks before expiry, seeking your preference for continuing annual support. If you opt not to renew, the application seamlessly persists, albeit without the associated support benefits.

Using the service

Web browser interface: Yes
Supported browsers: Internet Explorer 11

Microsoft Edge

Firefox

Chrome

Safari

Opera
Application to install: Yes
Compatible operating systems: Android

IOS

Linux or Unix

MacOS

Windows

Windows Phone
Designed for use on mobile devices: Yes
Differences between the mobile and desktop service: The application works on both desktop and mobile. There is another tab for the mobile specific version. The difference is, on the mobile device there is no visual maps/floorplans.
Service interface: Yes
User support accessibility: None or don’t know
Description of service interface: The service interface is a Dataverse for Teams Power App.
Accessibility standards: WCAG 2.1 AAA
Accessibility testing: Not applicable.
API: Yes
What users can and can't do using the API: There is not a specific API for our service, but as this sits within the Micorsoft Power Platform, the Power Platform has its own API allowing customers to perform CRUD operations using Microsoft API's.
API documentation: No
API sandbox or test environment: No
Customisation available: Yes
Description of customisation: The Asset Booker Power App stands as a comprehensive and feature-rich application. Recognising the dynamic nature of internal processes, we acknowledge the need for adjustments. Every aspect of the application is open to modification, ensuring seamless alignment with new requirements or necessary extensibility. These bespoke modifications are offered at a fixed, transparent price, providing flexibility while maintaining cost predictability.

Scaling

Independence of resources: As DigPacks doesn't host any services, each deployment of our solution takes place within the customer's Power Platform environment. Consequently, the solution remains exclusively accessible to the customer.

Analytics

Service usage metrics: No

Resellers

Supplier type: Not a reseller

Staff security

Staff security clearance: Conforms to BS7858:2019
Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom
User control over data storage and processing locations: No
Datacentre security standards: Managed by a third party
Penetration testing frequency: Never
Protecting data at rest: Physical access control, complying with CSA CCM v3.0
Data sanitisation process: No
Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach: Data is available via Dataverse for Teams tables - and can be exported directly through here.
Data export formats: CSV
Data import formats: CSV

Data-in-transit protection

Data protection between buyer and supplier networks: Other
Other protection between networks: N/A. Our expertise lies in crafting solutions within the Microsoft Power Platform. All our solutions are deployed directly to the customer's environment, ensuring that the solution seamlessly integrates within the confines of their network.
Data protection within supplier network: Other
Other protection within supplier network: N/A. Our expertise lies in crafting solutions within the Microsoft Power Platform. All our solutions are deployed directly to the customer's environment, ensuring that the solution seamlessly integrates within the confines of their network.

Availability and resilience

Guaranteed availability: Service Level Agreements are customarily established in collaboration with the customer, with our core operating hours set from 8 am to 6 pm, Monday to Friday, excluding Public Holidays. For specific needs, we can provide extended support, tailored and addressed on a case-by-case basis.
Approach to resilience: Our service relies on the Microsoft Power Platform, resilience information is here;

https://techcommunity.microsoft.com/t5/healthcare-and-life-sciences/resiliency-and-recoverability-in-microsoft-365-what-you-need-to/ba-p/3752321
Outage reporting: This is done through Microsoft Office 365 dashboard.

Identity and authentication

User authentication needed: Yes
User authentication: 2-factor authentication
Access restrictions in management interfaces and support channels: Access to management interfaces and support channels is restricted through stringent measures. Authentication mechanisms, including multi-factor authentication, are enforced for personnel accessing these interfaces. Role-based access controls limit privileges, ensuring only authorized individuals can perform specific actions. Additionally, secure communication protocols, such as encrypted connections, are employed to protect data during interactions with management interfaces and support channels. Regular audits and reviews of access logs help monitor and track usage, promptly identifying any anomalies or unauthorized access attempts. This layered approach ensures a robust restriction of access, safeguarding sensitive systems and data.
Access restriction testing frequency: At least once a year
Management access authentication: 2-factor authentication

Audit information for users

Access to user activity audit information: Users have access to real-time audit information
How long user audit data is stored for: User-defined
Access to supplier activity audit information: Users have access to real-time audit information
How long supplier audit data is stored for: User-defined
How long system logs are stored for: User-defined

Standards and certifications

ISO/IEC 27001 certification: No
ISO 28000:2007 certification: No
CSA STAR certification: No
PCI certification: No
Cyber essentials: Yes
Cyber essentials plus: No
Other security certifications: No

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: No
Security governance approach: In addressing security governance, our approach is comprehensive and meticulous. We prioritise the establishment and enforcement of robust security measures throughout our operations.
Information security policies and processes: Access Controls
Data Encryption
Continuous Monitoring
Incident Response
Security Awareness Training
Vendor Management
Data Backups
Compliance
Security Audits
Collaboration with Clients

Operational security

Configuration and change management standard: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach: We utilise an internal change management Power App designed for the seamless initiation and evaluation of change requests. This application undergoes a bi-weekly review during the Change Advisory Board (CAB) meetings, where decisions of approval or rejection are made. The app meticulously outlines the necessary steps for change implementation, including comprehensive details on back-out plans, supported by relevant information. Following the implementation, the system is promptly updated to accurately reflect the actual outcomes of the change, ensuring a thorough and transparent change management process.
Vulnerability management type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach: We systematically assess potential threats through regular risk assessments and vulnerability scans. Swift patch deployment is a priority, with rigorous testing in a controlled environment before live implementation. We stay informed through security advisories, threat intelligence feeds, and industry forums. Continuous improvement is integral to our process, ensuring a resilient and secure service environment.
Protective monitoring type: Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach: We proactively identify potential compromises through continuous behavioural analytics and real-time monitoring. Clear response protocols guide our dedicated incident response team to swiftly investigate and mitigate incidents. Our commitment ensures a rapid and coordinated approach, prioritizing the security of our systems.
Incident management type: Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach: Our incident management includes pre-defined processes for common events. Users report incidents through our dedicated reporting system. Following resolution, we provide detailed incident reports, outlining the event, actions taken, and preventive measures.

Secure development

Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

Connection to public sector networks: No

Social Value

Covid-19 recovery

As an organisation deeply committed to social value, we actively contribute to the NHS Solutions store, providing all NHS Trusts access to purpose-built Power Apps for the greater benefit of the NHS. Amidst the challenges posed by COVID, we collaborated with Microsoft and NHS England to develop and enhance an asset booking application. This application, available for download by every NHS Trust and Local Government organisation, facilitates a phased return to work. The Power App empowers users to upload floorplans, seamlessly book assets such as meeting rooms, desks, showers, and cars, supporting a coordinated and efficient workplace allocation.

Pricing

Price: £6,500 to £10,000 a unit a year
Discount for educational organisations: No
Free trial available: Yes
Description of free trial: The application is available free of charge, the only items that are chargeable are:

Annual Support (£6,500 + VAT)
Power Bi report (£2,500 + VAT)
Consultancy Days (£800 + VAT per day) - This is used for application modifications or management on behalf of the organisation.
Link to free trial: https://www.digpacks.co.uk/asset-booker

Asset Booker Power App Support and Consultancy

Features

Benefits

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Pricing

Service documents

Cookies on Digital Marketplace

Asset Booker Power App Support and Consultancy

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Social Value

Pricing

Service documents