Bramble Hub Limited

Bramble Hub Xn Leisure - Leisure Management Systems

Xn Leisure is an innovative provider of comprehensive IT solutions for the public and private sport, leisure and fitness sectors. Cloud based front of house, on line, mobile, self service and business intelligence solutions reduce cost and positiveley change to way you connect with customers.


  • Complete self service solution, on line, mobile bookings and joining
  • Fast track and kiosk self service including payments
  • Concieige and front of house EPOS solutions
  • KPI, business intelligence and analytics including datahub integration
  • Membership, prospecting and direct debit amanagement modules
  • Payment solutions on line, front of house and self service
  • Comprehensive bookings management for courts, spaces, classes
  • Access control, turnstiles, door security - biometric and rfid options
  • Course management including hand held registers and online portal
  • Event ticketing, management, on line / mobile bookings and payments


  • Complete self service for customers reduces member and booking administration
  • Kiosk self service reduces staff costs and increases throughput
  • Modern welcoming front of house systems improve customer satisfaction
  • Integrated web based KPI, reports and marketing intelligence solutions
  • Accept any payment method including contactless and BACS
  • Fast bookings interface speed up processing and throughput
  • Secure access control by facial recognition, thumbprint or smartcard
  • Course reception, teacher and home portals digitaly link to customers
  • Modern ticketing platform, grows your business & reduces operating costs
  • Simple wizard based web membership and prospecting


£50 per user per month

Service documents


G-Cloud 11

Service ID

1 3 0 0 3 1 3 0 0 3 6 2 1 0 4


Bramble Hub Limited

Roland Cunningham

+44 (0) 2077350030

Service scope

Software add-on or extension
Cloud deployment model
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
Service constraints
Although a cloud platform Xn need to sign off all connected hardware to ensure
System requirements
  • Windows PC based - windows 10 onwards
  • Microsoft remote desktop web access will be used

User support

Email or online ticketing support
Email or online ticketing
Support response times
Priority 1 response withing an hour, Prority 2 has a 4 hour response, any general or non urgent question will be responded to within one working day
User can manage status and priority of support tickets
Phone support
Phone support availability
9 to 5 (UK time), 7 days a week
Web chat support
Yes, at an extra cost
Web chat support availability
9 to 5 (UK time), 7 days a week
Web chat support accessibility standard
WCAG 2.1 AA or EN 301 549
Web chat accessibility testing
Onsite support
Yes, at extra cost
Support levels
Xn provide a single software and hardware support service from 7.00am untill 22.00pm 7 days a week, 364 days a year. Priority 1 calls are progressed throughout the day Priority 2 and 3 calls are withn office hours 8.00am until 18.00pm. Team Support tickets and phone calls are accepted, email based tickets are not supported. Our hosting platform is supported 24 hours per day. The Team support portal allows customer issue tracking and management including customer portal. Support included in the service price allows email and phone support. On site support is charged at standard day rates.
Support available to third parties

Onboarding and offboarding

Getting started
Full on site or online training and full user documentation is available for eac client.
Service documentation
Documentation formats
End-of-contract data extraction
Xn will provide full database set to the client in the format and media prefered and secure dselivery method required by each client
End-of-contract process
Full off boarding is included within the contract and a contract end meeting will be held to agree final arrangements for end of closure taking inco account any changes that may have occurred during the contracted period.

Using the service

Web browser interface
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Chrome
  • Safari 9+
Application to install
Compatible operating systems
  • Android
  • IOS
  • MacOS
  • Windows
Designed for use on mobile devices
Differences between the mobile and desktop service
The solution is a responsive web site for customers and remote desktop web platform for users
Service interface
Description of service interface
Xn provide a full range of secure API's that are fully documented using Swagger.
Accessibility standards
WCAG 2.1 AA or EN 301 549
Accessibility testing
The latest web based solutions meets WCAG AA standards are are thoroughy tested to this standard. Normally, assitive technologies are User tested as part of any implementation. Additional testing may be required prior to implementetion should clinet require non standard assitive technology products.
What users can and can't do using the API
Our fully documented and detailed API provide most functionality currently available within the product set. The API's are ocumented using Swagger.
API documentation
API documentation formats
  • Open API (also known as Swagger)
  • HTML
  • PDF
API sandbox or test environment
Customisation available
Description of customisation
The branding of web facing intefaces are customisable and Xn can provide chargable branding services and the configuration of the solution is highly configurable according to the requirements of each client.


Independence of resources
The solution uses separate virtial machines for each client and provides responsive scalling of the solution so that performance is never affected by any increases in usage. This is activeley monitored at our data centre.


Service usage metrics


Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance

Asset protection

Knowledge of data storage and processing locations
Data storage and processing locations
United Kingdom
User control over data storage and processing locations
Datacentre security standards
Supplier-defined controls
Penetration testing frequency
At least once a year
Penetration testing approach
‘IT Health Check’ performed by a CHECK service provider
Protecting data at rest
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
Data sanitisation process
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
Data is collectd via a series of configurable wen forms for membership, bookings and courses management together with a user inteface for configuration and on site data collection. Data is alos collected from mobile web pages, access control, self service kiosks and tablets as required by each client.
Data export formats
Data import formats

Data-in-transit protection

Data protection between buyer and supplier networks
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

Guaranteed availability
Xn Leisure’s hosting services offer both high end security and resilience across all solutions. Our hosting ISO 27001 certified data centre based in the Midlands guarantee 100% uptime, ensuring that its clients benefit from a secure and highly efficient hosting service at all times.
Approach to resilience
Xn Leisure provide Virtual Private Servers (VPS) hosting and dedicated Virtual Machine (VM) Servers (Cloud Computing), whereby multiple operating systems and applications run on one or more clustered physical servers, giving the same delivery as a physical server but with fewer running costs and improved resilience. Virtualisation is extremely cost effective for clients, due to savings on equipment costs and hardware updates. This option also protects the Council from hardware failure and provides a more robust and flexible option for backup and disaster recovery.
Outage reporting
Xn Leisure uses a highly efficient and proactive monitoring solution which delivers complete visibility into the performance and availability of business systems and applications. Xn Leisure monitors and produces real-time alerts on customers’ backup status, server health, Service Level Agreement compliance reports and performance trends. This unique service allows the service desk to deal proactively with network and system issues, spotting potential problems before they occur. RMS perfectly complements its hosting and data centre solutions by efficiently monitoring and optimising the performance of the infrastructure, from physical and virtualised servers through to databases, applications and networks.

Identity and authentication

User authentication needed
User authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
Access restrictions in management interfaces and support channels
All channels are limited to secure authorised access via authenticated user Id and Passwords
Access restriction testing frequency
At least once a year
Management access authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
Access to supplier activity audit information
Users have access to real-time audit information
How long supplier audit data is stored for
How long system logs are stored for

Standards and certifications

ISO/IEC 27001 certification
Who accredited the ISO/IEC 27001
Alcumus ISOQAR
ISO/IEC 27001 accreditation date
What the ISO/IEC 27001 doesn’t cover
ISO 28000:2007 certification
CSA STAR certification
PCI certification
Other security certifications

Security governance

Named board-level person responsible for service security
Security governance certified
Security governance standards
ISO/IEC 27001
Information security policies and processes

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
Our security governence covers policies, procedures, processes, tools and traning. A top level policy, which sets out the information security objectives, has been designed by the Senior Management Team. This has been defined at a high level, making the Senior Management Team accountable for information security and ensuring that all staff are fully trained and aware of their personal roles and responsibilities.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
Critical and important updates are applied automatically upon release. Other updates are checked for relevance to the software and operating systems and are installed where required or on a monthly basis if they are deemed to be relevant. The service runs on a Microsoft platfoem on a Tier 4 data centre and Xn consults Microsoft, its clients and its data hosting partners SW Direct Limited for key sources of vulnarability mangement infomation.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Access to all Xn instances are restricted to authorised personnel only.
Incident management type
Supplier-defined controls
Incident management approach
Users may contact support and raise via secure self service support portal or telephone 364 days a year, from 07.00am until 22.00pm. Priority 1 - One Hour response / 4 Hour Fix, Priority 2 - four hour response / 8 hour fix, Priority 3 - next update.

Secure development

Approach to secure software development best practice
Conforms to a recognised standard, but self-assessed

Public sector networks

Connection to public sector networks
Connected networks
Public Services Network (PSN)


£50 per user per month
Discount for educational organisations
Free trial available

Service documents

Return to top ↑