M2M TECH LIMITED

CCTV Enhancement & Stability System with CCTV Controller Units (CCU)

Cloud based CCTV management platform modernizing legacy systems via CCTV Controller Units with edge computing. Delivers wireless transformation, stability improvements, comprehensive AI analytics including audio detection, on demand streaming, multi agency collaboration, automated emergency response, and evidence management. Azure hosted with 99.9% uptime guarantee.

Features

• On demand video streaming with controlled session management
• Advanced audio AI detection of emergency noises; gunfire, collision, sirens
• Cross organizational access controls for multi agency collaboration
• Automated monitoring with email and SMS alerting capabilities
• Evidence management with secure time limited video sharing
• Remote device management with power cycling and remote diagnostics
• Video wall integration for multi camera gallery displays
• Privacy masking with automated face detection and number plate detection
• Comprehensive audit logging for all user activities and automated reporting
• Edge computing CCU device management with wireless camera transformation

Benefits

• Eliminate expensive server infrastructure through cloud based streaming model
• Enable instant multi agency collaboration with secure access controls
• Reduce emergency response times with automated real time alerting
• Share evidence securely using time limited codes for investigations
• Monitor multiple locations simultaneously through centralized web portal interface
• Automate incident detection reducing manual monitoring workload significantly
• Transform unreliable legacy cameras achieving 99.2 percent uptime improvements
• Centrally managed user permissions centrally across multiple organizations efficiently
• Detect audio incidents automatically including gunfire collision and emergency sirens
• Extend camera hardware lifecycles while adding advanced AI analytics capabilities

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@m2mtechltd.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

924177500175147

Contact

Mathew Sunderland
01235819890
info@m2mtechltd.com

About your service

• Service categories:

  Applications

  Content workflow and management

  • Media Services

  Content services

  • Content Sharing and Collaboration Applications

  Persuasive content management

  • Digital Asset Management Applications
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Hybrid cloud
• Service constraints: Standard support operates 9 AM to 5 PM Monday through Friday (24/7 emergency support available for critical security incidents). Response times vary by incident severity with priority given to security critical functions. Service continuity depends on cellular network coverage and power supply to CCU installations. Complex UTMC integration modifications require professional services assessment and development. Multi agency configurations may need extended security clearance and configuration periods. Advanced AI features and custom audio detection algorithms available through add on services. Feature changes have 60 day advance notice. Service requires existing IP enabled cameras and mains electricity for CCU installations.
• System requirements:
  • Modern web browser to access web portal
  • Standard internet connectivity minimum 10 Mbps for optimal streaming
  • Desktop or tablet device for web portal access functionality
  • Firewall configuration may be required for UTMC system integration
  • Mains electricity supply needed for CCU installation at sites
  • Secure physical locations required for CCU device installation protection
  • IP enabled cameras required for upgrading existing CCTV installations
  • Designated system administrator needed for user management and configuration
  • Technical liaison personnel required for traffic management system integration
  • Multiple monitors or projectors needed for optional video features

User support

• Email or online ticketing support: Yes
• Support response times: M2M Tech provides structured support response times based on issue severity levels. Critical P1 issues receive 1 hour response with 4 hour resolution target. High P2 issues get 4 hour response with 24 hour resolution target. Medium P3 issues receive 1 business day response with 5 business day resolution. Low P4 issues get 3 business days response with best effort resolution. Standard support operates 9 AM to 5 PM Monday through Friday. Emergency support available 24/7 for critical security incidents.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 AA
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: M2M Tech provides structured IT Service Management based on ITIL principles with severity based response times for critical security infrastructure. Service Level Agreements: Cloud platform 99.5% uptime; CCU devices 99.2% availability; emergency alerting 99.5% availability; video stream initiation maximum 10 seconds; AI alerts within 30 seconds; platform response maximum 10 seconds. Support levels include: Critical P1 issues (security system failures, emergency response disruptions) receive 4 hour response with 8 hour resolution target; High P2 issues (camera connectivity, multi agency access issues) get 8 hour response with 2 business day resolution target; Medium P3 issues (configuration adjustments, integration modifications) receive 1 business day response with 5 business day resolution; Low P4 issues (enhancement requests, routine maintenance) get 3 business days response with best effort resolution. Standard support operates 9 AM to 5 PM Monday through Friday with 24/7 emergency support available at additional cost. Professional services available at extra cost include onsite installation, site surveys, custom integration, specialized training, and enhanced emergency vehicle priority integration. Initial 30 day go live support period with dedicated technical assistance.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: M2M Tech provides comprehensive onboarding support to ensure successful platform adoption. The process begins with a dedicated kick off meeting with the technical team and key stakeholders to establish clear expectations and requirements. A dedicated Customer Success Manager is assigned during the first 90 days to provide go live support and guidance. The company delivers comprehensive training for all user types including cross organizational teams such as police, contractors, and emergency services. Role based training programs are provided with specialized sessions for operators, administrators, and emergency response teams. Multi agency training sessions facilitate coordination between different organizational stakeholders. Comprehensive 24 hours 7 days support documentation is available with search capabilities and step by step guides for ongoing reference. Platform configuration includes user account setup, access permissions, and system customization to meet specific operational needs. Implementation planning includes detailed deployment schedules coordinated with customer operational requirements to minimize disruption. Training delivery ensures all users understand system capabilities and operational procedures. The onboarding process includes comprehensive user training and documentation to support immediate operational readiness and long term success.
• Service documentation: Yes
• Documentation formats:
  • HTML
  • PDF
• End-of-contract data extraction: M2M Tech facilitates comprehensive data export for customers upon contract termination. Customer data export is provided in standard formats including CSV, JSON, and XML to ensure compatibility with alternative systems. Customers can export all configuration data, user settings, and available video content during the termination process. A 30 day data retention period following termination is maintained for recovery purposes, allowing customers additional time to complete data extraction if needed. Secure data deletion certification is provided upon request after the retention period expires. The company provides assistance with data migration to alternative systems as part of the transition support process. Technical assistance is available during the data export phase to ensure successful transfer of all relevant information. Knowledge transfer sessions are conducted to support continuity of operations with exported data. Post termination support remains available for 60 days specifically for transition queries and data extraction assistance. This comprehensive approach ensures customers maintain full access to their operational data and can seamlessly transition to alternative solutions without data loss.
• End-of-contract process: Under G-Cloud framework, buyers may terminate for any reason with 30 days written notice. For standard agreements, either party may terminate with 30 days written notice. Service renewals require agreement with comprehensive transition and continuity plans established at least 8 months prior to contract end. Upon termination notice, M2M Tech engages with the customer to formulate a comprehensive transition plan.; ; Included in Contract Price: Customer data export facilitated in standard formats (CSV, JSON, XML); 30 day data retention period for recovery purposes; secure data deletion certification upon request; technical assistance with data export and system migration; knowledge transfer sessions for continuity of operations; post termination support for 60 days covering transition queries; systematic removal of user access with comprehensive audit trails; complete documentation of system configuration and operational procedures; gradual service reduction to minimize operational disruption.; ; Equipment Recovery: CCU devices removed from site or transitioned to customer ownership as agreed. Pro rata refunds provided for unused prepaid services where applicable. No early termination penalties apply for termination for convenience.
• Documentation accessibility standard: WCAG 2.2 AA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
  • Other
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The CCTV System provides identical functionality across mobile and desktop platforms through responsive web design. Mobile users access the same unified management interface, real time monitoring, and CCTV management features as desktop users. The key difference is interface optimization: mobile displays adapt layouts for smaller screens while maintaining full feature access. Desktop users benefit from the recommended 1920x1080 resolution for enhanced visual experience, while mobile users on tablets and smartphones receive streamlined layouts optimized for touch interaction. All core functionality remains consistent across platforms.
• Service interface: Yes
• User support accessibility: WCAG 2.2 AA
• Description of service interface: The CCTV system features a unified web based interface accessible through modern browsers (Chrome 120+, Firefox 115+, Safari 16+, Edge 120+). Users access a comprehensive dashboard providing real time camera monitoring, alerts, support ticket system, and multi tenant collaboration tools. The interface supports role based permissions for different user types and includes automated fault detection with proactive alerting. Mobile responsive design ensures full functionality across desktop, tablet, and smartphone devices. The browser based interface requires no local software installation, providing secure cloud access with multi factor authentication and end to end encryption.
• Accessibility standards: WCAG 2.2 AA
• Accessibility testing: M2M Tech is committed to accessibility compliance with our CCTV web interface meeting WCAG 2.1 AA or EN 301 549 standards. We conduct continuous accessibility improvements based on user testing to ensure the management portal remains accessible to users of assistive technology. Our browser based interface is designed with accessibility considerations in mind, supporting modern web accessibility standards across Chrome 120+, Firefox 115+, Safari 16+, and Edge 120+. Specific testing methodologies and partnerships are continuously developed as part of our ongoing accessibility commitment and compliance framework.
• API: No
• Customisation available: Yes
• Description of customisation: Customers can request API features and abilities as required. Once agreed and implemented, API documentation would be presented in HTML and Open API, and if requested a sandbox and or test environment can be provided.

Scaling

• Independence of resources: Our CCTV web portal operates on Microsoft Azure UK regions with redundant infrastructure across multiple cloud availability zones, ensuring user isolation through our multi tenant architecture. We implement proactive capacity management and automated scaling based on usage patterns to prevent resource contention. Our web portal platform maintains 99.5% uptime with automated health checks, predictive analytics, and real time performance monitoring ensuring early issue identification before users are affected. Each tenant operates in isolated environments with dedicated resources and role based permissions that scale independently based on their specific demand patterns, supporting growth from pilot projects to enterprise deployments.

Analytics

• Service usage metrics: Yes
• Metrics types: The CCTV system provides comprehensive reporting and analytics dashboard monitoring system availability (99.5% uptime target), response times, and user activity. Performance metrics include API response times, data feed processing latency, and camera connectivity status. User engagement metrics track login frequency, feature utilization, and session duration across the multi tenant platform. Infrastructure metrics monitor Azure resource utilization, bandwidth consumption, and storage capacity. Security metrics include failed login attempts, access patterns, and compliance status. Service quality metrics encompass incident response times, resolution rates, and customer satisfaction scores through monthly performance reports and quarterly business reviews for continuous service improvement.
• Reporting types:
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: No
• FOCUS resource tagging: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest:
  • Physical access control, complying with CSA CCM v4.0
  • Physical access control, complying with another standard
• Data sanitisation process: Yes
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001
• Data sanitisation type:
  • Deleted data can’t be directly accessed / Cryptographic Erasure
  • Explicit overwriting of storage before reallocation / Secure Erase

Data importing and exporting

• Data export approach: Users can export their personal data through their profile account editing page using an "Export My Data" button. The personal data export is provided in CSV format. This self service approach allows users to directly access and download their personal information at any time during the contract period. The document does not provide additional details about the specific personal data categories included in the export or the processing timeframe for generating the export file.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • UTMC Compliant Asset Configuration Files in XML Format
  • Microsoft Excel Spreadsheet .xlsx
  • JSON, format to be agreed
  • XML, format to be agreed
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • UTMC Compliant Asset Configuration Files in XML Format
  • Microsoft Excel Spreadsheet .xlsx
  • JSON, format to be agreed
  • XML, format to be agreed

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: We guarantee 99.5% uptime for our cloud security platform with 99.2% availability for individual CCU edge devices, backed by our proven 12 year track record delivering reliable solutions. Our cloud hosted platform operates on Microsoft Azure UK regions with redundant infrastructure across multiple availability zones, ensuring robust resilience and business continuity.; ; Our comprehensive Service Level Agreement includes automated real-time availability monitoring with 5 minute granularity and monthly performance reports with detailed incident analysis. We implement proactive outage prevention through automated health checks, predictive analytics for early issue identification, and comprehensive disaster recovery procedures.; ; Critical support response includes 4 hour response time for P1 security system failures with 8 hour resolution targets. Emergency alerting systems maintain 99.5% availability. This availability guarantee is supported by our multi-tenant cloud architecture, automated capacity management, and continuous infrastructure monitoring, ensuring your CCTV security platform remains accessible when emergency response capabilities are needed most.
• Approach to resilience: Our CCTV web portal is designed with comprehensive resilience through redundant infrastructure across multiple Microsoft Azure availability zones in UK regions. The service architecture implements automated health checks, predictive analytics for early issue identification, and proactive capacity management to prevent outages before they occur.; ; Key resilience features include real-time performance monitoring with 5 minute granularity, automated scaling based on usage patterns, and disaster recovery procedures. Our cloud-hosted platform eliminates single points of failure through distributed computing resources and automated failover mechanisms.; ; The datacenter setup leverages Azure's enterprise-grade infrastructure with geographically separated availability zones, ensuring service continuity even during regional incidents. We implement comprehensive data protection with automated backup systems, encrypted data transmission, and multi-layer security controls aligned with government security standards.; ; Our resilience approach includes continuous infrastructure monitoring, load testing during peak usage periods, and regular performance reviews with capacity planning. Emergency response procedures are supported by 24/7 monitoring capabilities and rapid deployment systems for urgent requirements. This design has delivered our proven 99.5% web portal uptime over 12 years of operation, ensuring reliable access to passenger information management capabilities when transport services need them most.
• Outage reporting: Our CCTV web portal service includes comprehensive outage reporting through multiple channels. We provide 24 hours 7 days automated monitoring with proactive alerting for service issues, ensuring customers are immediately notified when problems are detected. Monthly service performance reports are delivered with detailed availability, incident, and resolution metrics, providing comprehensive visibility into service performance.; ; The service includes real-time availability monitoring with 5 minute granularity. Change notification processes keep customers informed of planned maintenance and updates to minimize service disruption. Emergency response procedures are supported by our 24/7 emergency response team with structured escalation procedures for urgent issues requiring immediate attention. We implement proactive outage prevention through automated health checks, predictive analytics for early issue identification.; ; While the document does not specify details about a public dashboard or specific API endpoints for outage reporting, our comprehensive monitoring system provides continuous improvement based on incident learnings and delivers transparent reporting on service performance. Quarterly business reviews assess service performance and identify improvement opportunities. All outage information and performance metrics are documented through our structured service desk processes, ensuring customers have complete visibility into service availability and any incidents affecting the web portal.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Management access is restricted through multi-factor authentication, role-based access controls, and comprehensive audit logging. Cross-organizational access controls ensure users only access data necessary for their role and organizational requirements. Fine-grained permissions are implemented for different user types including administrators, operators, and multi-agency stakeholders. All management interface access includes automated tracking of data access, modification, and sharing activities with comprehensive audit trails for compliance and accountability purposes.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: No
• Security governance approach: M2M Tech operates within a structured governance framework ensuring services are delivered with commercial focus, financial efficiency, and proactive risk management. Accountability rests with the Board, specifically the Director and Head of Software Development, who maintains direct oversight of security governance with regular review of information security risks. We conduct regular compliance testing against established baselines including Cyber Essentials certification, GDPR compliance, and Government Security Classification Policy standards. System configuration reviews occur systematically with continuous monitoring and quarterly business reviews. We are prepared to obtain ISO/IEC 27001 certification for any contract where deemed necessary by the customer.
• Information security policies and processes: M2M Tech follows a comprehensive information security framework aligned with Cyber Essentials Plus certification requirements, GDPR compliance, and Government Security Classification Policy standards. Our policies encompass multi factor authentication, end to end encryption, role based access controls, and continuous security monitoring across all services hosted on Microsoft Azure UK regions.; ; Reporting Structure: The Directors and Head of Software Development maintains board level responsibility for security governance with direct oversight of all security policies. Regular third party security assessments provide independent validation of our compliance framework, with findings reported directly to senior management.; ; Policy Enforcement: We ensure policy adherence through automated monitoring systems, continuous compliance tracking, and documented audit trails. Our structured approach includes regular privacy impact assessments for new features, annual disaster recovery exercises with documented results, and proactive alerting for security incidents.; ; Process Management: Security policies are integrated into our development lifecycle with automated testing and deployment procedures. We maintain transparent reporting through monthly availability reports including security metrics, quarterly business reviews assessing security performance, and continuous improvement based on incident learnings. All staff receive regular security training aligned with public sector data handling standards and transport security best practices.
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: M2M Tech implements structured change management based on ITIL principles for critical security infrastructure. All CCU deployments, camera configurations, AI analytics settings, and cross-organizational access permissions are tracked through their lifetime with comprehensive configuration management. Changes are assessed for potential security impact through controlled change processes to minimize disruption to security monitoring and ensure continuity of emergency response capabilities. Our change management includes 60-day advance notice for any feature deprecation, structured escalation procedures, and automated configuration backup before any system modifications.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Our vulnerability management includes regular penetration testing, automated security monitoring, and proactive threat assessment for security services. We conduct annual penetration testing through external organizations, implement continuous security patching for critical vulnerabilities, and monitor threat intelligence sources for potential risks to CCTV infrastructure. Critical security updates are deployed immediately with comprehensive validation, while routine security patches follow structured deployment processes. Our Azure UK hosting provides additional vulnerability protection through Microsoft's security framework and automated threat detection capabilities.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: M2M Tech implements comprehensive protective monitoring with 24/7 security monitoring across all services hosted on Microsoft Azure UK regions. We identify potential compromises through automated monitoring systems, continuous compliance tracking, and documented audit trails. When potential compromises are found, we respond through structured escalation procedures with priority given to security-critical functions. Critical security incidents receive immediate response through our 24/7 emergency support team, while routine security events follow structured incident management processes with rapid deployment capabilities for urgent security coverage during incidents.
• Incident management type: Supplier-defined controls
• Incident management approach: Our incident management follows structured ITIL-based processes with pre-defined procedures for common security events including camera failures, CCU device issues, and AI analytics disruptions. Users report incidents through our specialized service desk processes for security-specific support including emergency response coordination. We provide incident reports through monthly service performance reports and quarterly business reviews. Critical P1 security incidents receive 1 hour response with comprehensive incident analysis.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: No
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: IMSM (IASME)
• ISO 9001 accreditation date: Friday 17 October 2025
• What the ISO 9001 doesn’t cover: Certification covers all functions and services of M2M Tech Ltd
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: Bde0fb7f-95b2-4381-9bc4-933bc329e708
• Cyber essentials plus: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials Plus certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials Plus certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Make Britain a clean energy superpower: To cut bills, create jobs and deliver security with cheaper, zero-carbon electricity by 2030, accelerating to net zero

    Policy Outcome 4: Sustainable procurement practices: Reducing carbon footprints, minimising waste, and promoting the use of clean energy and green technologies.

    • Understanding of opportunities for additional environmental benefits delivery in the performance of the contract, including working towards net zero carbon emissions and use of clean energy and green technologies
    • Understanding of how to influence staff, suppliers, customers, communities and/or any other appropriate stakeholders through the delivery of the contract to support climate and nature protection and improvement

  • Mission: Build an NHS fit for the future: That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

    Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

    • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at info@m2mtechltd.com. Tell them what format you need. It will help if you say what assistive technology you use.