MEDITATI LIMITED

Bundledocs

Enhance productivity with Bundledocs powerful document bundling software. Bundledocs effortlessly collates your documents (emails, PDF’s, word documents, images etc.) into a single PDF bundle. It automatically handles indexing, hyperlinking, page numbering, bookmarking and is fully searchable. Create, customise, print and securely share from any location, any device, at any time.

Features

Each PDF bundle is automatically indexed, numbered, hyperlinked and bookmarked
Each bundle is immediately available to save, share or send
OCR your bundle for complete search-ability
Secure email functionality. Email bundles directly from Bundledocs
Powerful Collaboration. Securely work with anyone inside/outside your organisation
Complete Mobility. Access on any device, any place, any time
Powerful integrations with leading case and document management systems
Effortlessly work on large complex bundles without issue
Ability to work with templates, volumes, document dates
Annotate your bundle with highlights, comments, redactions, labels, document-reference links

Benefits

Simple, intuitive and easy to use
Massively Efficient. Prepare bundles in minutes
Uploading is simple with our seamless integrations
Eliminate repetitive and laborious tasks
Effortlessly handles last minute changes and late inserts
Work with large complex bundles without issues or errors
Time Saving. Reduce bundle preparation time
Reduce Paper Waste. Create, collaborate and electronically share e-bundles
No Install Required - Just get going!

£225 a licence a month

Free trial available

Service documents

Pricing document

PDF
Skills Framework for the Information Age rate card

PDF
Service definition document

PDF
Terms and conditions

PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at brian@bundledocs.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 14

Service ID

Contact

MEDITATI LIMITED Brian Kenneally
Telephone: +353 21 203 1007
Email: brian@bundledocs.com

Service scope

Software add-on or extension: Yes, but can also be used as a standalone service
What software services is the service an extension to: Bundledocs integrates with a range of case management systems, document management systems, cloud solutions etc.

Integration Partners include: Actionstep, Box, Clio, Dropbox, Google Drive, iManage, Iken Cloud, NetDocuments, Microsoft OneDrive, Quill and many more.

At Bundledocs we are continually expanding our range of integration partners to better assist our customers.
Cloud deployment model: Public cloud
Service constraints: No, Bundledocs does not have any service constraints.

All Bundledocs customers have complete access to our entire range of features, depending of what plan they choose (see pricing document).

There is no support limitations and our customers can contact our dedicated support team if any queries arise. Furthermore, our complete training manual can be downloaded at any time directly within each account.
System requirements: Internet Connection

Web Browser

User support

Email or online ticketing support: Email or online ticketing
Support response times: Bundledocs target response times for us to make a first response to a new call are as follows:
Application Unavailable - Within 1 Hour;
Practice Affected By Issue - Within 4 Hours;
Other - Within 8 Hours;

Times may vary outside of business working hours. In all cases, Bundledocs is committed to continually improving our support service and endeavor wherever possible to better these response times.
User can manage status and priority of support tickets: Yes
Online ticketing support accessibility: None or don’t know
Phone support: Yes
Phone support availability: 9 to 5 (UK time), Monday to Friday
Web chat support: Web chat
Web chat support availability: 9 to 5 (UK time), Monday to Friday
Web chat support accessibility standard: None or don’t know
How the web chat support is accessible: Bundledocs offers real-time live support via our browser based chat console. Our live online support enables our clients to directly contact our support team and have any questions or queries answered as it happens. This is accessible via our website (www.bundledocs.com) and from each Bundledocs account (https://app.bundledocs.com/).
Web chat accessibility testing: We have not conducted web chat testing for assistive technology users.
Onsite support: Yes, at extra cost
Support levels: Bundledocs is committed to continually improving our support levels we provide to our customers. Support available includes: telephone, email, online ticketing system, online support. Support is available at no extra cost via these methods.

On-site training and support can be made available upon request. On-site support is an additional cost. This is available Monday to Friday during working hours 9.00am – 5.30pm, excluding public and bank holidays. Out of normal business hours support can be arranged by request.
Support available to third parties: Yes

Onboarding and offboarding

Getting started: To get started with Bundledocs, we provide a range of training support to suit every need and requirement. We consider training to be of paramount importance to the successful integration of Bundledocs into your organisation. The Bundledocs training department is dedicated to providing high quality effective training to all our client sites. Choose a training option that suits your organisation. Options include:

1. Online Training: Our training department conduct online training sessions that cater for users of all levels and groups of any size. These online training sessions are conducted at a date and time that are convenient for your team. Following the training session our team will provide all relevant support material and answer any queries or questions that may arise.

2. On-Site Training: Most training is conducted online, however our experienced training team also provide on-site training. On-site training sessions are available to groups of all sizes and abilities.

3. Train-the-Trainers: For clients that prefer to utilise an internal trainer this can be facilitated with our ‘train-the-trainers’ scheme. Our training department will train users on all aspects of Bundledocs.
Furthermore we will ensure your team is provided with all the relevant support information and resources required.
Service documentation: Yes
Documentation formats: PDF
End-of-contract data extraction: At Bundledocs we recognise that off-boarding is equally as important as on-boarding. Bundledocs enables our customers to remain as “data controllers” with the ability to download individual files and complete bundles. This can be done within the users account and details on this can be viewed within our complete training manual.

Following the expiration or termination of a client’s subscription, Bundledocs clients may access and extract data at any time, for up to 90 days.

Bundledocs clients can contact the Bundledocs team directly, following expiration or termination of their subscription and request that their account is deleted an all data extracted.

As customers are responsible for the extraction of their data, there are no additional charges for data extraction.

If users need any further help or assistance, the Bundledocs Support team can be contacted using our range of support channels.
End-of-contract process: At the end of the contract, Bundledocs clients can access and extract data at any time, up to 90 days. Bundledocs users can access Bundledocs and download individual files and complete bundles. As customers are responsible for the extraction of their data, there are no additional charges for data extraction.

Using the service

Web browser interface: Yes
Supported browsers: Microsoft Edge

Firefox

Chrome

Safari

Opera
Application to install: No
Designed for use on mobile devices: Yes
Differences between the mobile and desktop service: There is no difference between the mobile and desktop version of Bundledocs. For those that utilise Bundledocs on their smartphone or tablet device, Bundledocs responsive design is available on iOS and Android devices.
Service interface: Yes
User support accessibility: WCAG 2.1 A
Description of service interface: Bundledocs is provided to our users through a User Interface accessible via a secure web browser. Bundledocs targets WCAG 2.1 A during development and may be operated using a screen reader. We are active in improving the accessibility of our service. We are currently investigating WCAG 2.1 AA compatibility and hope to have a plan in place to achieve compliance with the WCAG 2.1 AA guidelines by year end.
Accessibility standards: WCAG 2.1 A
Accessibility testing: We have not conducted testing for assistive technology users to date.
API: Yes
What users can and can't do using the API: At Bundledocs we provide our API (Application Programming Interface) to any third party looking to integrate with us. Access to our API enables you to integrate all of the features and functionality of our document bundling solution into your own application.
Any potential integration partner must first request approval to register their application with Bundledocs to gain access to the API.
Bundledocs follows the OAuth2 spec for authorization and Authorisation Code and Implicit authorisation grant flows are supported.
Interactive documentation for the API is available.
A full Swagger definition file describing the API is available to allow our integration partners generate a wrapper for the API in a wide variety of development languages.
API documentation: Yes
API documentation formats: Open API (also known as Swagger)

HTML

Other
API sandbox or test environment: No
Customisation available: No

Scaling

Independence of resources: Bundledocs is a cloud based solution hosted in the Microsoft Azure network of worldwide servers. Utilising Microsoft Azure provides us with resource flexibility to ensure each user experiences the same service levels, regardless of the demand placed on our service. Bundledocs has the ability to divide the work load across a number of secure servers, each of which are responsible for processing a job or set of jobs. Our cloud architecture allows computational resources to be added and subtracted automatically inline with demand. We routinely review our automation schedules to ensure they have adequate scope to deal with demand.

Analytics

Service usage metrics: Yes
Metrics types: We provide a means of accessing on-demand exports of user information which include, but are not limited to, the number of users associated with a license, the last log in date for each active user, the number of bundles each user currently has active in the system, and the created dates for each live bundle. Further information related to collaboration is also available by way of these reports. In addition, our API can be leveraged to retrieve account information in aggregate and our support team are available to assist with data queries as needed.
Reporting types: API access

Reports on request

Resellers

Supplier type: Not a reseller

Staff security

Staff security clearance: Other security clearance
Government security clearance: Up to Baseline Personnel Security Standard (BPSS)

Asset protection

Knowledge of data storage and processing locations: Yes
Data storage and processing locations: United Kingdom

European Economic Area (EEA)

Other locations
User control over data storage and processing locations: Yes
Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency: At least once a year
Penetration testing approach: ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
Protecting data at rest: Physical access control, complying with CSA CCM v3.0

Physical access control, complying with SSAE-16 / ISAE 3402

Encryption of all physical media

Scale, obfuscating techniques, or data storage sharding

Other
Other data at rest protection approach: Bundledocs uses Advanced Encryption Standard (AES) in order to encrypt data - specifically Cipher Block Chaining (CBC) mode with AES. Bundledocs Encryption Keys are managed and maintained in the Microsoft Azure Key Vault Service.

Access to Bundledocs Encryption Keys are securely provided by Microsoft Azure Active Directory through a secure token exchange mechanism. Furthermore, Multi Factor Authentication is also used to restrict access to Azure Active Directory.

See also, http://download.microsoft.com/download/0/D/D/0DD8FB12-6343-4A50-80B2-545F2951D7AE/MicrosoftAzureDataProtection_Aug2014.pdf , and https://docs.microsoft.com/en-us/azure/storage/storage-service-encryption
Data sanitisation process: Yes
Data sanitisation type: Explicit overwriting of storage before reallocation

Deleted data can’t be directly accessed
Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach: Each bundle produced in Bundledocs is immediately available in PDF format. Every PDF bundle can be downloaded for printing or can be saved to a CD or USB.

Alternatively, our customers have the option to export all source documents as a zip file or securely share the completed bundle with team members or third parties.

Furthermore, as “data controllers” our users have the ability to download individual files directly from Bundledocs in PDF format or their original source format.
Data export formats: Other
Other data export formats: PDF

Source

Zip Archive
Data import formats: Other
Other data import formats: Word Documents and Adobe (.doc, .docx, .pdf)

Email (.msg, .eml)

Text Files (.txt, .xml)

HTML (.html, .htm)

Images (.png, .gif, .tiff, .tif, .jpg, .jpeg)

Excel (.xls, .xlsx)

Rich Text Format Documents (.rtf)

Video (.avi, .mp4, .webm, .mov, .ogg, .hecv)

Audio (.mp3, .m4a, .wav, .aac)

Powerpoint (.ppt, .pptx)

Data-in-transit protection

Data protection between buyer and supplier networks: TLS (version 1.2 or above)
Data protection within supplier network: TLS (version 1.2 or above)

IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability: The Bundledocs development process allows for the deployment of service updates, without the need for a scheduled downtime. We guarantee all customer subscriptions will be available 99.95 of the time. Should Bundledocs suffer a service degradation below the scope of our SLA, a service credit can be applied to the users account on request. No SLA is provided for those utilising our free trial.
Approach to resilience: Bundledocs is designed for high availability and disaster recovery.

1. High availability is the ability of the application to keep running in a healthy state, without significant downtime. By "healthy state," we mean the application is responsive, and users can connect to the application and interact with it.

2. Disaster recovery is the ability to recover from rare but major incidents: Non-transient, wide-scale failures, such as service disruption that affects an entire region. Disaster recovery includes data backup and archiving, and may include manual interventions, such as restoring a database from backup.
Outage reporting: Bundledocs uses active monitoring to continuously evaluate the health of the service. If an outage occurs in Bundledocs, a notice is placed on the Bundledocs website in order to keep our users informed and up-to-date. Similarly, if the outage relates to a Microsoft Azure service, outside of our control, we also inform users via our website. A direct link to the Microsoft Azure status page is included which will allow users to access the current service status. Following an outage, a root cause analysis is undertaken and the results published on the Bundledocs website.

Identity and authentication

User authentication needed: Yes
User authentication: 2-factor authentication

Identity federation with existing provider (for example Google Apps)

Username or password

Other
Other user authentication: Bundledocs can be configured to authenticate a user against any SAML2 based identity provider such as Okta, Active Directory, or Azure Active Directory.
Access restrictions in management interfaces and support channels: Bundledocs does not include a global management interface.
Access restriction testing frequency: At least every 6 months
Management access authentication: 2-factor authentication

Public key authentication (including by TLS client certificate)

Identity federation with existing provider (for example Google Apps)

Username or password

Other
Description of management access authentication: Bundledocs can be configured to authenticate a user against any SAML2 based identity provider such as Okta, Active Directory, or Azure Active Directory.

Audit information for users

Access to user activity audit information: Users contact the support team to get audit information
How long user audit data is stored for: User-defined
Access to supplier activity audit information: Users contact the support team to get audit information
How long supplier audit data is stored for: User-defined
How long system logs are stored for: User-defined

Standards and certifications

ISO/IEC 27001 certification: Yes
Who accredited the ISO/IEC 27001: NQA
ISO/IEC 27001 accreditation date: 15/6/2023
What the ISO/IEC 27001 doesn’t cover: Our ISO27001:2013 certification relates to our information security management system (ISMS) and not to our products or services.

Our certification is only applicable to the design, development and support of document bundling software in accordance with Statement of Applicability Version 4 Dated 26th September 2022.
ISO 28000:2007 certification: No
CSA STAR certification: No
PCI certification: No
Cyber essentials: No
Cyber essentials plus: No
Other security certifications: Yes
Any other security certifications: ISO/IEC 27001:2013 (Microsoft Azure)

FACT (Microsoft Azure)

NHS IG Toolkit (Microsoft Azure)

Security governance

Named board-level person responsible for service security: Yes
Security governance certified: Yes
Security governance standards: ISO/IEC 27001

Other
Other security governance standards: Bundledocs is also compliant with: CSA CCM v1.2
Information security policies and processes: System Level: Best practices for data security are followed to ensure that only authorized access to Bundledocs data is provided.

Bundledocs application and database servers are hosted in Microsoft data centers. Connections to the database are always encrypted, and unencrypted connections are disabled.

Note: Microsoft Azure Achieves IS0 27001 Certification from the British Standards Institute.

Application Level: We have procedural measures in place, such as access restrictions on service operations to prevent any possibility of unauthorized access to your data and documents. Bundledocs is the only service that can retrieve your documents in an unencrypted way. In the unlikely event of any data being maliciously retrieved from Microsoft’s data storage services, the data would never be readable due to the data encryption measures we have in place.

Operational security

Configuration and change management standard: Supplier-defined controls
Configuration and change management approach: Version control is provided through Azure DevOps.

We utilize both unit testing and manual testing before deploying to our live environment for small changes. Larger changes require deployment to a staging area first before being released into the live environment. Issues and vulnerabilities are identified early and resolved as soon as possible.
Vulnerability management type: Supplier-defined controls
Vulnerability management approach: We follow OWASP Top 10 principles of application security. When vulnerabilities are discovered they are logged in our ALM Solution Azure DevOps. Work for serious vulnerabilities is prioritized and carried out immediately. Our team utilize a range of online resources to keep up to date with the latest information regarding potential threats that may cause issues for our solution.
Protective monitoring type: Supplier-defined controls
Protective monitoring approach: We routinely review access and activity logs to identify potential and unwanted activity. If a vulnerability is discovered immediate action is taken to mitigate the issue.
Incident management type: Supplier-defined controls
Incident management approach: Users can initiate an incident via our support channels. Incidents are tracked with a unique ID. Incident Reporting is available upon request.

Secure development

Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Connection to public sector networks: No

Pricing

Price: £225 a licence a month
Discount for educational organisations: No
Free trial available: Yes
Description of free trial: At Bundledocs we believe that the best way to understand how Bundledocs works is by utilising our free trial service. Our trial is available for 30-days and provides complete access to all our features, our support resources and support team - at no extra cost.

Service documents

Pricing document

PDF
Skills Framework for the Information Age rate card

PDF
Service definition document

PDF
Terms and conditions

PDF

Request an accessible format

Cookies on Digital Marketplace

Bundledocs

Features

Benefits

Pricing

Service documents

Framework

Service ID

Contact

Service scope

User support

Onboarding and offboarding

Using the service

Scaling

Analytics

Resellers

Staff security

Asset protection

Data importing and exporting

Data-in-transit protection

Availability and resilience

Identity and authentication

Audit information for users

Standards and certifications

Security governance

Operational security

Secure development

Public sector networks

Social Value

Pricing

Service documents