Bramble Hub Limited

Bramble Hub Xn Leisure - Leisure Management Systems

Xn Leisure is an innovative provider of comprehensive IT solutions for the public and private sport, leisure and fitness sectors. Cloud based front of house, on line, mobile, self service and business intelligence solutions reduce cost and positiveley change to way you connect with customers.

Features

  • Complete self service solution, on line, mobile bookings and joining
  • Fast track and kiosk self service including payments
  • Concieige and front of house EPOS solutions
  • KPI, business intelligence and analytics including datahub integration
  • Membership, prospecting and direct debit amanagement modules
  • Payment solutions on line, front of house and self service
  • Comprehensive bookings management for courts, spaces, classes
  • Access control, turnstiles, door security - biometric and rfid options
  • Course management including hand held registers and online portal
  • Event ticketing, management, on line / mobile bookings and payments

Benefits

  • Complete self service for customers reduces member and booking administration
  • Kiosk self service reduces staff costs and increases throughput
  • Modern welcoming front of house systems improve customer satisfaction
  • Integrated web based KPI, reports and marketing intelligence solutions
  • Accept any payment method including contactless and BACS
  • Fast bookings interface speed up processing and throughput
  • Secure access control by facial recognition, thumbprint or smartcard
  • Course reception, teacher and home portals digitaly link to customers
  • Modern ticketing platform, grows your business & reduces operating costs
  • Simple wizard based web membership and prospecting

Pricing

£50 per user per month

Service documents

G-Cloud 11

130031300362104

Bramble Hub Limited

Roland Cunningham

+44 (0) 2077350030

contact@bramblehub.co.uk

Service scope

Service scope
Software add-on or extension No
Cloud deployment model
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
Service constraints Although a cloud platform Xn need to sign off all connected hardware to ensure
System requirements
  • Windows PC based - windows 10 onwards
  • Microsoft remote desktop web access will be used

User support

User support
Email or online ticketing support Email or online ticketing
Support response times Priority 1 response withing an hour, Prority 2 has a 4 hour response, any general or non urgent question will be responded to within one working day
User can manage status and priority of support tickets No
Phone support Yes
Phone support availability 9 to 5 (UK time), 7 days a week
Web chat support Yes, at an extra cost
Web chat support availability 9 to 5 (UK time), 7 days a week
Web chat support accessibility standard WCAG 2.1 AA or EN 301 549
Web chat accessibility testing None
Onsite support Yes, at extra cost
Support levels Xn provide a single software and hardware support service from 7.00am untill 22.00pm 7 days a week, 364 days a year. Priority 1 calls are progressed throughout the day Priority 2 and 3 calls are withn office hours 8.00am until 18.00pm. Team Support tickets and phone calls are accepted, email based tickets are not supported. Our hosting platform is supported 24 hours per day. The Team support portal allows customer issue tracking and management including customer portal. Support included in the service price allows email and phone support. On site support is charged at standard day rates.
Support available to third parties Yes

Onboarding and offboarding

Onboarding and offboarding
Getting started Full on site or online training and full user documentation is available for eac client.
Service documentation Yes
Documentation formats PDF
End-of-contract data extraction Xn will provide full database set to the client in the format and media prefered and secure dselivery method required by each client
End-of-contract process Full off boarding is included within the contract and a contract end meeting will be held to agree final arrangements for end of closure taking inco account any changes that may have occurred during the contracted period.

Using the service

Using the service
Web browser interface Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Chrome
  • Safari 9+
Application to install Yes
Compatible operating systems
  • Android
  • IOS
  • MacOS
  • Windows
Designed for use on mobile devices Yes
Differences between the mobile and desktop service The solution is a responsive web site for customers and remote desktop web platform for users
Accessibility standards WCAG 2.1 AA or EN 301 549
Accessibility testing The latest web based solutions meets WCAG AA standards are are thoroughy tested to this standard. Normally, assitive technologies are User tested as part of any implementation. Additional testing may be required prior to implementetion should clinet require non standard assitive technology products.
API Yes
What users can and can't do using the API Our fully documented and detailed API provide most functionality currently available within the product set. The API's are ocumented using Swagger.
API documentation Yes
API documentation formats
  • Open API (also known as Swagger)
  • HTML
  • PDF
API sandbox or test environment Yes
Customisation available Yes
Description of customisation The branding of web facing intefaces are customisable and Xn can provide chargable branding services and the configuration of the solution is highly configurable according to the requirements of each client.

Scaling

Scaling
Independence of resources The solution uses separate virtial machines for each client and provides responsive scalling of the solution so that performance is never affected by any increases in usage. This is activeley monitored at our data centre.

Analytics

Analytics
Service usage metrics No

Resellers

Resellers
Supplier type Not a reseller

Staff security

Staff security
Staff security clearance Other security clearance
Government security clearance None

Asset protection

Asset protection
Knowledge of data storage and processing locations Yes
Data storage and processing locations United Kingdom
User control over data storage and processing locations No
Datacentre security standards Supplier-defined controls
Penetration testing frequency At least once a year
Penetration testing approach ‘IT Health Check’ performed by a CHECK service provider
Protecting data at rest
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Physical access control, complying with another standard
  • Encryption of all physical media
Data sanitisation process No
Equipment disposal approach Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data importing and exporting
Data export approach Data is collectd via a series of configurable wen forms for membership, bookings and courses management together with a user inteface for configuration and on site data collection. Data is alos collected from mobile web pages, access control, self service kiosks and tablets as required by each client.
Data export formats CSV
Data import formats CSV

Data-in-transit protection

Data-in-transit protection
Data protection between buyer and supplier networks
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

Availability and resilience
Guaranteed availability Xn Leisure’s hosting services offer both high end security and resilience across all solutions. Our hosting ISO 27001 certified data centre based in the Midlands guarantee 100% uptime, ensuring that its clients benefit from a secure and highly efficient hosting service at all times.
Approach to resilience Xn Leisure provide Virtual Private Servers (VPS) hosting and dedicated Virtual Machine (VM) Servers (Cloud Computing), whereby multiple operating systems and applications run on one or more clustered physical servers, giving the same delivery as a physical server but with fewer running costs and improved resilience. Virtualisation is extremely cost effective for clients, due to savings on equipment costs and hardware updates. This option also protects the Council from hardware failure and provides a more robust and flexible option for backup and disaster recovery.
Outage reporting Xn Leisure uses a highly efficient and proactive monitoring solution which delivers complete visibility into the performance and availability of business systems and applications. Xn Leisure monitors and produces real-time alerts on customers’ backup status, server health, Service Level Agreement compliance reports and performance trends. This unique service allows the service desk to deal proactively with network and system issues, spotting potential problems before they occur. RMS perfectly complements its hosting and data centre solutions by efficiently monitoring and optimising the performance of the infrastructure, from physical and virtualised servers through to databases, applications and networks.

Identity and authentication

Identity and authentication
User authentication needed Yes
User authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password
Access restrictions in management interfaces and support channels All channels are limited to secure authorised access via authenticated user Id and Passwords
Access restriction testing frequency At least once a year
Management access authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Identity federation with existing provider (for example Google Apps)
  • Limited access network (for example PSN)
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

Audit information for users
Access to user activity audit information Users have access to real-time audit information
How long user audit data is stored for User-defined
Access to supplier activity audit information Users have access to real-time audit information
How long supplier audit data is stored for User-defined
How long system logs are stored for User-defined

Standards and certifications

Standards and certifications
ISO/IEC 27001 certification Yes
Who accredited the ISO/IEC 27001 Alcumus ISOQAR
ISO/IEC 27001 accreditation date 05/04/2019
What the ISO/IEC 27001 doesn’t cover Nothing
ISO 28000:2007 certification No
CSA STAR certification No
PCI certification No
Other security certifications No

Security governance

Security governance
Named board-level person responsible for service security Yes
Security governance certified Yes
Security governance standards ISO/IEC 27001
Information security policies and processes ISO27001

Operational security

Operational security
Configuration and change management standard Supplier-defined controls
Configuration and change management approach Our security governence covers policies, procedures, processes, tools and traning. A top level policy, which sets out the information security objectives, has been designed by the Senior Management Team. This has been defined at a high level, making the Senior Management Team accountable for information security and ensuring that all staff are fully trained and aware of their personal roles and responsibilities.
Vulnerability management type Supplier-defined controls
Vulnerability management approach Critical and important updates are applied automatically upon release. Other updates are checked for relevance to the software and operating systems and are installed where required or on a monthly basis if they are deemed to be relevant. The service runs on a Microsoft platfoem on a Tier 4 data centre and Xn consults Microsoft, its clients and its data hosting partners SW Direct Limited for key sources of vulnarability mangement infomation.
Protective monitoring type Supplier-defined controls
Protective monitoring approach Access to all Xn instances are restricted to authorised personnel only.
Incident management type Supplier-defined controls
Incident management approach Users may contact support and raise via secure self service support portal or telephone 364 days a year, from 07.00am until 22.00pm. Priority 1 - One Hour response / 4 Hour Fix, Priority 2 - four hour response / 8 hour fix, Priority 3 - next update.

Secure development

Secure development
Approach to secure software development best practice Conforms to a recognised standard, but self-assessed

Public sector networks

Public sector networks
Connection to public sector networks Yes
Connected networks Public Services Network (PSN)

Pricing

Pricing
Price £50 per user per month
Discount for educational organisations No
Free trial available No

Service documents

pdf document: Pricing document pdf document: Skills Framework for the Information Age rate card pdf document: Service definition document pdf document: Terms and conditions
Service documents
Return to top ↑