Clinked

Clinked Private Cloud

Clinked offers secure communication, collaboration & information sharing portal in a Private Cloud environment to meet your needs. Private Cloud is available to clients who want an extra level of security & improved performance compared to the standard public cloud platform.

Features

• Secure file sharing across any device, from any location
• Create workspaces for your teams or projects
• Advanced branding and customisation
• Upload and organise your files and folders.
• API integration
• Two Factor authentication (2FA)
• Full audit trail for Compliance
• E-signature and document approvals.
• Native white-label mobile apps with push notifications
• Integrated group chat and @mentions

Benefits

• Provide a professional service by using white-label portal
• Enhance your professional image
• Request approvals on the latest documents and versions
• Update clients with real-time information
• Automatically follow content that you have uploaded or commented
• Get automatic email notifications
• Store and organise all your files, access from any device
• UK based development and dedicated support
• High adoption and rapid deployment
• Data Encryption

£1.50 to £15 a user a month

• Education pricing available
• Free trial available

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tayfun.bilsel@clinked.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 13

Service ID

957228094504942

Contact

Tayfun Bilsel
01223 967444
tayfun.bilsel@clinked.com

Service scope

• Software add-on or extension: No
• Cloud deployment model:
  • Public cloud
  • Private cloud
• Service constraints: N/A
• System requirements:
  • Internet access
  • Internet Explorer 11 and above
  • Firefox (latest 2 versions)
  • Chrome (latest 2 versions)
  • Safari on Mac (latest 2 versions)
  • Windows 7 and above
  • MacOSX/MacOS (10.8 and above)
  • Ubuntu version 14.04 and above

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: Business day priority level/target response time:; CRITICAL: 1 hour response time, MAJOR: 3 hours response time, MINOR: 24 hour response time; ; - Enterprise customers get 24*7/365 dedicated email and telephone support
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 24 hours, 7 days a week
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: Support levels are universal for all Clinked customers.; Dedicated Customer Success Management
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: Clinked offers free online training and onboarding to all customers. Clinked team helps customers to setup and customise the service. Customers can also get free access to the Clinked engineering team when they need help with the API
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: Built-in data export feature
• End-of-contract process: Data export functionality enables the retrieval of all data.; ; When an account is de-activated, administrators have the option to permanently delete the data. Otherwise the data is stored for a limited period of time in case the customer wishes to continue using the service.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari
  • Opera
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: Clinked uses a responsive design and it works on mobile browsers. Clinked also offers native apps optimised for Apple IOS and Google Play (Android) platforms. Most features are available in native apps too.
• Service interface: No
• User support accessibility: WCAG 2.1 A
• API: Yes
• What users can and can't do using the API: Some examples include: Manage your users and groups, Upload and store files securely, Keep your events and tasks updated, Follow discussions and stay informed, Chat and connect with clients; ; You can get started using our Postman collection or jump right into the code.
• API documentation: Yes
• API documentation formats:
  • HTML
  • PDF
  • Other
• API sandbox or test environment: No
• Customisation available: Yes
• Description of customisation: Custom URL, Account branding, Group (Workspace) branding, terminology used (Naming of the feature), visual customisation such as colours and text . Users can also integrate/embed the login screen into their own website.; ; Clinked also offers white-label version of its native mobile app at additional cost

Scaling

• Independence of resources: 99.9% guaranteed uptime, calculated based on the last year data

Analytics

• Service usage metrics: Yes
• Metrics types: Clinked provides user adoption and usage metrics available to Enterprise customers.
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Conforms to BS7858:2019
• Government security clearance: Up to Developed Vetting (DV)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations:
  • United Kingdom
  • European Economic Area (EEA)
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest:
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Encryption of all physical media
• Data sanitisation process: Yes
• Data sanitisation type:
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Built-in data export functionality
• Data export formats:
  • CSV
  • ODF
  • Other
• Other data export formats: Zip
• Data import formats:
  • CSV
  • Other
• Other data import formats: Clinked supports all open data formats

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)
• Data protection within supplier network:
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

• Guaranteed availability: Less than 99.5% but more than 99% - 20% credit; ; Less than 99% but more than 98% - 40% credit; ; Less than 98% but more than 97% - 60% credit; ; Less than 97% but more than 96% - 80% credit; ; Less than 96% - 100% credit
• Approach to resilience: It is available on request
• Outage reporting: All planned outages are notified via email and/or the notification system within the platform to administrators.; ; Unplanned outages are reported via an independent 3rd party service (Pingdom) and social media and support portal.

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
• Access restrictions in management interfaces and support channels: Management and support channels are password protected and encrypted in transit. Access is audited and logged.
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: At least 12 months
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: At least 12 months
• How long system logs are stored for: At least 12 months

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: British Assessment Bureau
• ISO/IEC 27001 accreditation date: 25/04/2022
• What the ISO/IEC 27001 doesn’t cover: N/A
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: Yes
• Who accredited the PCI DSS certification: Self-certified
• PCI DSS accreditation date: 26/10/2011
• What the PCI DSS doesn’t cover: N/A
• Cyber essentials: Yes
• Cyber essentials plus: Yes
• Other security certifications: Yes
• Any other security certifications: Cyber Essentials

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: Other
• Other security governance standards: Cyber Essentials Plus
• Information security policies and processes: All processes and policies are detailed internally which is available for review on request.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Any configuration and changes shall be reviewed and approved by the Information Security Officer
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: All processes and policies are detailed within an internal system which is available for review on request
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: All processes and policies are detailed within an internal system which is available for review on request
• Incident management type: Supplier-defined controls
• Incident management approach: User can report incidents via support portal, email or social media. Incident reports can be provided on request

Secure development

• Approach to secure software development best practice: Conforms to a recognised standard, but self-assessed

Public sector networks

• Connection to public sector networks: No

Social Value

• Equal opportunity:

  Equal opportunity

  Clinked believes that freedom from discrimination and equality of opportunity are fundamental rights and all people should have the right to work and advance on the bases of merit and ability, regardless of their race, sex, color, religion, disability, national origin, or age

Pricing

• Price: £1.50 to £15 a user a month
• Discount for educational organisations: Yes
• Free trial available: Yes
• Description of free trial: Fully functioning 10-day free trial with all key features available
• Link to free trial: https://app.clinked.com/signup/organisation/collaborate_trial

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at tayfun.bilsel@clinked.com. Tell them what format you need. It will help if you say what assistive technology you use.