QUICK SMS LTD

SMS Alerts

Messaging alert services. SMS, Email, Voice and HLR , Multi-Channel Campaign Manager

Features

  • SMS Messaging
  • Email Messaging
  • OTP / 2FA Messages
  • Smart Messaging
  • Advanced Messaging
  • International SMS Messaging
  • Omni Channel Messaging
  • Multi Channel Campaign
  • Multi-Channel Campaign
  • Voice Messaging

Benefits

  • UK Based
  • Secure Messaging
  • Send Messages Internationally
  • Connect via API
  • Web Interface
  • Premium SMS Routing
  • Fully Secure and Redundant System
  • 24 / 7 Support

Pricing

£0.02 a unit

  • Education pricing available
  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@quicksms.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

9 4 1 8 5 5 3 5 5 3 2 6 3 3 8

Contact

QUICK SMS LTD GCLOUDSALES
Telephone: 0203 740 8909
Email: sales@quicksms.com

Service scope

Software add-on or extension
No
Cloud deployment model
Private cloud
Service constraints
No Contraints
System requirements
Internet Access

User support

Email or online ticketing support
Email or online ticketing
Support response times
30 Minutes
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
WCAG 2.1 AAA
Phone support
Yes
Phone support availability
24 hours, 7 days a week
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
There is a standard Service Level agreement which details all response times, and fixes to issues based on priority. The SLA is available on request. Alternatively certain clients may require a more bespoke SLA, which can be arranged.
Support available to third parties
Yes

Onboarding and offboarding

Getting started
Online training is available via Skype, Webex or Google Hangouts. A userguide in pdf format is available for the UI, and API integration. Technical support is available for any help required with any service.
Service documentation
Yes
Documentation formats
PDF
End-of-contract data extraction
Clients can access their report centre via the online UI at any time, and delete any information held. Clients can also pause or disable their account. Clients have the ability to change data retention polices within their UI Account.
End-of-contract process
Data will be encrypted and removed from all systems including backups after 30 days of the final invoice date. The data is held for this period for audit purposes only.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
Application to install
No
Designed for use on mobile devices
No
Service interface
Yes
User support accessibility
WCAG 2.1 AAA
Description of service interface
Online UI, Dashboard, Reporting and Support Ticketing System
Accessibility standards
WCAG 2.1 AAA
Accessibility testing
Tested by CREST Approved 30,000 Hour Auditor
API
Yes
What users can and can't do using the API
Setup new API credentials through the Online UI to Manage multiple API connections. There is a single API for outbound and Inbound Messaging and connection types include HTTP, JSON, SMPP MMG's systems allow 70,000 API connections per second. API's are accredited with the Secure Digital Transactions Kitemark accreditation to OWASP guidelines.
API documentation
Yes
API documentation formats
PDF
API sandbox or test environment
Yes
Customisation available
Yes
Description of customisation
Through the online UI users can customise certain functionality including sub accounts, api connections, anti spam setting, stop commands, inbound keywords, database management, security and data retention settings including PII encryption

Scaling

Independence of resources
Systems have been performance tested by a third party government department. Our Server monitoring tools show no capacity issues if volumes increase by 1,000% without additional system resources.

Analytics

Service usage metrics
Yes
Metrics types
Online Report Centre showing inbound and outbound message flows, volumes, delivery and network statistics
Reporting types
Real-time dashboards

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Conforms to BS7858:2019
Government security clearance
Up to Security Clearance (SC)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
Yes
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least every 6 months
Penetration testing approach
‘IT Health Check’ performed by a CHECK service provider
Protecting data at rest
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
Data sanitisation process
Yes
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
Downloads via the Report Centre within the User Account online UI
Data export formats
CSV
Data import formats
CSV

Data-in-transit protection

Data protection between buyer and supplier networks
TLS (version 1.2 or above)
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
Service Level is documented within our SLA, Each Incident is given a priority level against response and fix times. a 99.9 Service Availability Guarantee through a fully redundant , load balanced system.
Approach to resilience
Load Testing is conducted inline with our ISO9001, and Security Testing through our third party network penetration testing every 3 months. Further information is available on request.
Outage reporting
APP Alerts, Email Alerts

Identity and authentication

User authentication needed
Yes
User authentication
  • 2-factor authentication
  • Username or password
Access restrictions in management interfaces and support channels
Specific roles are associated to Staff. Each role requires necessary access requirements. Each access is subject to approval at director level
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
At least 12 months
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
User-defined

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
BSI
ISO/IEC 27001 accreditation date
22/05/2019
What the ISO/IEC 27001 doesn’t cover
NO NON Comformities
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Cyber essentials
Yes
Cyber essentials plus
Yes
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
ISO27001, ISO9001, Cyber Essentials, Cyber Essentials Plus, Third party penetration testing on our api's, servers, website, UI, every 6 months inline within OWASP guidelines ensures systems are continuously updated with the latest security patches. Continued assessment to these guidelines every 3 months and monitored inline with our ISMS,

Operational security

Configuration and change management standard
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach
Our ISO-27001 Change Management Policy, includes description of change, test method through sandbox testing, approval, live status tracking, and roll back availability. All change requests must be approved by Senior Management.
Vulnerability management type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach
Third party testing is conducted by CREST Approved 30,000 hour testers independently and verified every 6 months. Tests are conducted to the latest OWASP Guidelines. Patch Management is conducted based on new releases and Pen test reports.
Protective monitoring type
Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach
Firewall Rules, Server Monitoring through specialist monitoring tools triggering alerts. IP restricted access, automatic blocking of potential attacks.
Incident management type
Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach
Users can report incidents via our online platform, support ticketing system or telephone A ticket will be created and incidents will be updated throughout the incident through the ticketing system once and investigation is completed the ticket will be marked as closed.

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks
No

Social Value

Fighting climate change

Fighting climate change

We are committed to Climate Change, and since January 2022 have been working with SLR Consulting, to Map our Carbon Emissions. In Line with PPN 06/20 and associated guidance and reporting standard for Carbon Reduction Plans.

Although we currently have very low emissions we are working towards net zero emissions by 2025 , This is Documented within our Carbon Reduction Plan

Emissions have been reported and recorded in accordance with the published reporting standard for Carbon Reduction Plans and the GHG Reporting Protocol corporate standard and uses the appropriate Government emission conversion factors for greenhouse gas company reporting .
Scope 1 and Scope 2 emissions have been reported in accordance with SECR requirements, and the required subset of Scope 3 emissions have been reported in accordance with the published reporting standard for Carbon Reduction Plans and the Corporate Value Chain (Scope 3) Standard .

Pricing

Price
£0.02 a unit
Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
1000 Free SMS Credits, no obligation Trial, no time limits

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at sales@quicksms.com. Tell them what format you need. It will help if you say what assistive technology you use.