Umbraco Content Management System (CMS) - education suppliers
Umbraco is a cloud-hosted CMS for websites and digital services. Our Azure-hosted, GDPR-compliant Umbraco CMS platform toolkit includes features for education audiences, including education-eCommerce and a Learning Management System. Integrates with CRM, SSO and marketing packages. Umbraco is open-source, easy to use, mobile responsive and data-driven.
Features
- Umbraco CMS consultancy, website development, configuration, design and deployment
- All site pages fully content manageable within Umbraco CMS
- Integrated Learning Management System (LMS) with white-labelled Moodle platform
- Integrated education sector database for registrations and account verification
- Separation of CSS and CMS meaning content management is non-technical
- Educational-based navigation and search tools including challenge and curriculum led
- Education-sector eCommerce system serving individuals, schools, MATs and LEAs
- In-built SEO tools and plugins to maximise performance
- Provides versioning of content, publishing to UAT and permissioning system
- Certified Umbraco partner with Umbraco-qualified website developers
Benefits
- Optimise performance with education sector audiences - LA Traded Services
- Separate CSS and CMS. Non-technical users publish beautiful content
- Manage multiple microsites from within one Umbraco CMS
- An intuitive interface that is easy to use and train
- Serve relevant content to visitors based on their profile
- Mobile responsive websites. Device previewing tools
- Attractive, expertly-designed customer-specific templates
- Seamless integration with third-party systems including CRM
- Azure-hosted which is scalable, ISO 27001 compliant
- UK-based agency using in-house skills for all aspects
Pricing
£650 to £750 a unit a day
Service documents
Request an accessible format
Framework
G-Cloud 13
Service ID
9 2 7 5 6 8 5 9 4 7 6 2 3 3 0
Contact
The Education Company Ltd
Jason Gould
Telephone: 01634 729888
Email: jason.gould@education.co.uk
Service scope
- Software add-on or extension
- Yes, but can also be used as a standalone service
- What software services is the service an extension to
- The Education Company also provides a CRM platform for organisations working with the education sector which integrates seamlessly with Umbraco CMS and enables a wider range of functionality and analytics. This includes access to a master database of educational organisations and contacts.
- Cloud deployment model
- Public cloud
- Service constraints
- No
- System requirements
- Umbraco should work with all modern browsers
User support
- Email or online ticketing support
- Email or online ticketing
- Support response times
-
Within 1 hour, if not sooner. Tickets requiring urgent attention should be telephoned through to ensure they are dealt with immediately.
Out of hours ticketing service available - 24/7/365 coverage. - User can manage status and priority of support tickets
- Yes
- Online ticketing support accessibility
- None or don’t know
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), Monday to Friday
- Web chat support
- No
- Onsite support
- Onsite support
- Support levels
-
A project manager is provided as a primary point of contact. Their role is to manage the strategic relationship with the client, to the scope and coordinate enhancements, train users and ensure the solution delivers ROI. They will deliver some system configuration, will troubleshoot issues, design solutions and work across our technical workforce.
The first line support team is always available during working hours for issue raising, user queries and any other questions that require quick answers. They will coordinate the delivery of raised tickets with second-line support where required.
The above services are included within your contract price.
For clients requiring an extended level of service, we can provide an out-of-hours service covering 24/7/365. A small additional cost will apply. - Support available to third parties
- Yes
Onboarding and offboarding
- Getting started
-
We provide onsite and online training, relative to customer requirements. During implementation, detailed face-to-face training will be delivered to users. Remote training can be provided when face-to-face is impractical or undesirable.
Our maintenance contracts include access to your project manager who can support with ongoing training and user adoption.
Documentation can be created for customer-specific processes. Umbraco has a wealth of documentation available. We will also produce small screen-share videos for the revisiting of pieces of training. - Service documentation
- Yes
- Documentation formats
-
- HTML
- ODF
- Other
- Other documentation formats
- Word
- End-of-contract data extraction
- We will provide full access to CMS software code. We will provide full access to the database and files on your server environment. We can extract this for you and securely transfer it via sFTP or ShareFile.
- End-of-contract process
-
Providing access to your data and files on your server is included.
Additional costs apply if liaison is required with your new partner.
Using the service
- Web browser interface
- Yes
- Supported browsers
-
- Microsoft Edge
- Firefox
- Chrome
- Safari
- Application to install
- No
- Designed for use on mobile devices
- Yes
- Differences between the mobile and desktop service
- Very little - the layout of content is optimised for mobile usage. The service is designed to the users requirements.
- Service interface
- No
- User support accessibility
- None or don’t know
- API
- Yes
- What users can and can't do using the API
-
Umbraco has many available open-source and configurable APIs for the recalling and consumption of data. This means that web content can be updated programmatically. Umbraco's API also allows content within the CMS to be accessed through third-party platforms.
Your in-house teams or our teams can support the integration of third-party systems, including CRM systems and SSO.
Our wider portfolio of products includes a CRM solution (SPIRIT) that seamlessly integrates with Umbraco, and provides access to a master database of educational organisations, contacts and profiling attributes. - API documentation
- Yes
- API documentation formats
- HTML
- API sandbox or test environment
- Yes
- Customisation available
- Yes
- Description of customisation
-
Umbraco's public-facing front end and administration screens can be entirely customised with very few limitations.
Subject to the nature of your CMS implementation, customisation includes:
• Modules and Plug-ins
• CMS software settings and pages
• Coding using HTML and CSS (and CMS dependent configurations)
We can provide full access to the Admin system, which we would advise where the client has the necessary skills to configure and customise the solution in place.
Scaling
- Independence of resources
- Services use an Azure-hosted public cloud-based virtual machine. Azure provides scalability of resources to ensure web performance is not affected by demand elsewhere. Clients have their own instance of Umbraco CMS. Client environments are logically separated.
Analytics
- Service usage metrics
- Yes
- Metrics types
-
Our recommendation would be the Google Analytics packages:
• Google Analytics 360 Suite
• Google Analytics
• Google Tag Manager
• Google Optimize
• Google Data Studio
If you prefer an alternate package, we can work with that. - Reporting types
-
- API access
- Real-time dashboards
- Regular reports
- Reports on request
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Staff screening not performed
- Government security clearance
- Up to Baseline Personnel Security Standard (BPSS)
Asset protection
- Knowledge of data storage and processing locations
- Yes
- Data storage and processing locations
-
- United Kingdom
- European Economic Area (EEA)
- User control over data storage and processing locations
- Yes
- Datacentre security standards
- Managed by a third party
- Penetration testing frequency
- At least once a year
- Penetration testing approach
- Another external penetration testing organisation
- Protecting data at rest
-
- Physical access control, complying with CSA CCM v3.0
- Physical access control, complying with SSAE-16 / ISAE 3402
- Encryption of all physical media
- Data sanitisation process
- Yes
- Data sanitisation type
- Deleted data can’t be directly accessed
- Equipment disposal approach
- In-house destruction process
Data importing and exporting
- Data export approach
- A request is made to the project manager/support team who will arrange for the full extraction of data and securely transfer, as per client preferences.
- Data export formats
-
- CSV
- Other
- Other data export formats
-
- XML
- SQL
- Data import formats
-
- CSV
- Other
- Other data import formats
- XLS
Data-in-transit protection
- Data protection between buyer and supplier networks
-
- TLS (version 1.2 or above)
- IPsec or TLS VPN gateway
- Data protection within supplier network
-
- TLS (version 1.2 or above)
- IPsec or TLS VPN gateway
Availability and resilience
- Guaranteed availability
-
The Umbraco CMS platform is hosted with Azure, which guarantees 99.95% uptime.
We provide a 99.5% uptime guarantee, excluding planned downtime for maintenance and upgrades. This is conducted outside of core business hours where possible, or within an agreed window with the client.
Failure to meet this SLA will enable clients to claim a percentage of their monthly subscription fee against future invoices. The percentage is dependent on the severity of the downtime. - Approach to resilience
- Everything is hosted in Microsoft Azure and is globally resilient.
- Outage reporting
-
Direct email alerts to customers.
We can provide access to a public dashboard.
Identity and authentication
- User authentication needed
- Yes
- User authentication
- Username or password
- Access restrictions in management interfaces and support channels
- Only users with access to the software are able to raise support tickets.
- Access restriction testing frequency
- Less than once a year
- Management access authentication
-
- 2-factor authentication
- Username or password
Audit information for users
- Access to user activity audit information
- Users have access to real-time audit information
- How long user audit data is stored for
- User-defined
- Access to supplier activity audit information
- Users have access to real-time audit information
- How long supplier audit data is stored for
- User-defined
- How long system logs are stored for
- User-defined
Standards and certifications
- ISO/IEC 27001 certification
- No
- ISO 28000:2007 certification
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Cyber essentials plus
- No
- Other security certifications
- No
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
-
- CSA CCM version 3.0
- ISO/IEC 27001
- Information security policies and processes
-
Our services are broadly aligned to ISO27001 and our hosting provider and major software partners are accredited.
Our privacy policy (https://www.educationcompany.co.uk/privacy-policy/) explains how we capture and maintain our data, what information is stored, and how our customers use it. This is sent to any new data subjects that are added to our database.
As part of our commitment to transparency, we also include a list of the organisations that have access to the data that we capture.
We regularly review customer usage of our data to ensure our clients are acting in a compliant and respectful manner.
Data that is not relevant is removed from the relevant client database to minimise the risk of accidental errors.
We only capture corporate subscriber data, i.e. never any personal (consumer) data. We have processes that automatically identify any bad data (e.g. an @gmail.com email address), remove it from the database and flag to the research team manager that additional training may be required.
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
- Everything is employed to UAT and signed off prior to release.
- Vulnerability management type
- Supplier-defined controls
- Vulnerability management approach
-
We used the Microsoft Azure security centre to monitor and alert for potential threats.
Critical patches are deployed immediately upon availability. - Protective monitoring type
- Supplier-defined controls
- Protective monitoring approach
- We use the Microsoft Azure security centre to monitor and alert for potential threats. Critical patches are deployed immediately upon availability.
- Incident management type
- Supplier-defined controls
- Incident management approach
-
All incidents are reported through our helpdesk and categorised for severity.
Monitoring systems alert key users outside of hours.
Incident reports are sent to the customer and internally as necessary.
Secure development
- Approach to secure software development best practice
- Supplier-defined process
Public sector networks
- Connection to public sector networks
- No
Social Value
- Wellbeing
-
Wellbeing
Our CMS platforms are designed to support organisations and their employees to invest their time in the most productive activities by limiting the amount of time they have to invest in low-value administration tasks and workload. By providing a system that provides accurate data, and insightful reporting that can integrate into other sales, marketing and finance tools we hope to ease the administrative burdens and support better workplace wellbeing.
Pricing
- Price
- £650 to £750 a unit a day
- Discount for educational organisations
- No
- Free trial available
- No