BUDDI LIMITED

Electronic Monitoring

Buddi delivers innovative, high-quality monitoring solutions backed by expertise and exceptional service. Our comprehensive technology suite provides reliable, secure, and user-focused tools for location tracking, alcohol monitoring, and emergency alerts, supporting authorities in achieving operational excellence and enhancing public safety.

Features

• All-in-one devices for location, alcohol and/or curfew monitoring.
• Remote configuration allows instant updates without field visits.
• Tamper-resistant strap detects removal attempts.
• Wireless on-body fast charging extends operational uptime significantly.
• Waterproof, ergonomic design ensures comfort and durability for wearers.
• Multi-network roaming guarantees reliable connectivity.
• Eagle platform provides real-time alerts, analytics, and case management.

Benefits

• Complete location monitoring indoors and outdoors for maximum supervision.
• Reliable coverage through multi-network roaming and Wi-Fi integration.
• Quick installation with one-piece design and minimal setup requirements.
• Comfortable, lightweight device improves compliance and user experience.
• Reduced field visits via remote management and wireless charging.
• Configurable zones and alerts enable tailored supervision strategies.
• Victim safeguarding features enhance protection in high-risk scenarios.
• Long battery life minimizes downtime and operational disruptions.
• Cloud-based platform offers reliability and scalability.

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bidadmin@buddi.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

938795104242699

Contact

Customer Care
0800 978 8800
bidadmin@buddi.co.uk

About your service

• Service categories:

  Applications

  Production and operations

  Service industry and public sector operations

  • Healthcare
  • Public Order and Safety
  • Police
  • Defence
  • Other
• Multi cloud support: No

Service scope

• Software add-on or extension: No
• Cloud deployment model: Public cloud
• Service constraints: No
• System requirements: Modern browser required (Chrome, Firefox, IE)

User support

• Email or online ticketing support: Yes
• Support response times: 24/7/365 support
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: None or don’t know
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: 24/7/365 telephone and email support provided to all users.
• Support available to third parties: No

Onboarding and offboarding

• Getting started: The Buddi Smart Tag is extremely easy to fit. The simple fitting process minimises training time, and enables anyone with basic training to securely fit a tag. This supports customer self-fit programmes and temporary leave arrangements from secure facilities where daily operations are carried out at volume and with ease by frontline staff.; The Buddi Smart Tag, works all the time, first time out of the box, no cutting or fasteners are involved. The only requirement prior to fitting the tag, is to ensure it is charged via the software.; The instant and reliable operation of the Smart Tag means there is no need to send the wearer outside to stand around and wait for the device to acquire GPS in order to complete the installation. Because if the Tag is charged, it is communicating and receiving GPS, even when not assigned.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: The reporting system allows data to be extracted to various formats including CSV and Excel.
• End-of-contract process: Access to the system is removed and the customer is contacted regarding their data retention or extraction requirements.
• Documentation accessibility standard: WCAG 2.2 AAA

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Mobile system provides limited read only access to data
• Service interface: No
• User support accessibility: WCAG 2.2 AAA
• API: No
• Customisation available: No

Scaling

• Independence of resources: The underlying hardware has been scaled to a level with a minimum of 50% spare capacity so no single customer can overload the system. Realtime monitoring is used on all systems to asses load.

Analytics

• Service usage metrics: No

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: No
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: ‘IT Health Check’ performed by a CHECK service provider
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: No
• Equipment disposal approach: A third-party destruction service

Data importing and exporting

• Data export approach: Reporting system allows export to CSV and Excel formats.
• Data export formats: CSV
• Data import formats: CSV

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

• Guaranteed availability: 99.9% availability
• Approach to resilience: All systems are fully redundant at the primary data centre, in the event of failure of the primary data centre a realtime replica system is running at another site.
• Outage reporting: Email and telephone alerts

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Username or password
• Access restrictions in management interfaces and support channels: Network segregation is used within the system to stop access to management networks. Access to management networks can only be done with IPSEC VPN connections using keys.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Dedicated link (for example VPN)

Audit information for users

• Access to user activity audit information: Users contact the support team to get audit information
• How long user audit data is stored for: Between 6 months and 12 months
• Access to supplier activity audit information: Users contact the support team to get audit information
• How long supplier audit data is stored for: Between 6 months and 12 months
• How long system logs are stored for: Between 6 months and 12 months

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: The following internal processes are used:; ; Secure development lifecycle; Secure software sourcing; Secure server setup process; ; Within the company the CTO is responsible for server and data security and the above processes are audited as part of the ISO 9001 process.
• Software Security Code of Practice: No

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: All issues are tracked internally following ISO 9001 approved processes.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: Normal server patch routine is monthly, however critical issues are patched as required. All patches are first tested on identical test systems before applying to live systems.; ; Subscription to key security notifications systems for products are used to keep up to date with patches that are released.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Normal server patch routine is monthly, however critical issues are patched as required. All patches are first tested on identical test systems before applying to live systems.; ; Subscription to key security notifications systems for products are used to keep up to date with patches that are released.
• Incident management type: Supplier-defined controls
• Incident management approach: ISO 9001 incident management process is followed.
• Post-quantum cryptography secure: Yes

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Non-mandatory Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: NQA
• ISO/IEC 27001 accreditation date: Monday 27 January 2025
• What the ISO/IEC 27001 doesn’t cover: NA
• ISO 28000:2022 certification: No
• ISO 9001 certification: Yes
• Who accredited the ISO 9001 certification: BSI
• ISO 9001 accreditation date: Friday 27 June 2025
• What the ISO 9001 doesn’t cover: NA
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: Yes
• Please provide your Cyber Essentials Certificate Number: B64bd6d4-cb12-4138-9388-2a3e85f49a2e
• Cyber essentials plus: Yes
• Please provide your Cyber Essentials Plus Certificate Number: D5e3aecd-9808-43bb-91a3-95e90862c20e
• Other security certifications: No

Social value

• Section B - Commitment for Future: Delivery:

  • Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.

    Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority

    • New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at bidadmin@buddi.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.