CriticalArc Ltd

SafeZone

Critical Arc, a global tech innovator, designs and delivers a distributed command and control solution, SafeZone™, which is revolutionising the way organisations manage day-to-day safety and security operations. SafeZone provides response teams with complete operational awareness, to enhance the protection of dispersed people, facilities, and assets, while delivering efficiency savings.

Features

  • SafeZone - Safety, Security and Emergency Management System
  • Lone Worker Management
  • Emergency Response
  • Travel Security
  • Omniguard - Real time response coordination
  • SafeTrans - Transport tracking for safety and security
  • Active Threat Management
  • Indoor Positioning
  • Mass and Targeted Communications

Benefits

  • Reduces costs & increases efficiency
  • Eliminate capital costs
  • Enhances Security & Business Continuity
  • Improves Incident Response
  • Optimises Resources & Assets
  • Increases Staff Safety
  • Enables Collaboration
  • Ultra-Fast, Reliable and Highly-secure

Pricing

£15000 to £150000 per instance

  • Education pricing available
  • Free trial available

Service documents

G-Cloud 11

174186434350257

CriticalArc Ltd

Darren Chalmers-Stevns

07787410860

dcs@criticalarc.com

Service scope

Service scope
Software add-on or extension No
Cloud deployment model Public cloud
Service constraints No. SafeZone supports all main Mobile Operating Systems, Desktop Operating Systems and Browsers. It utilises any available data network and IT infrastructure.
System requirements None

User support

User support
Email or online ticketing support Email or online ticketing
Support response times SLA's are listed within the SafeZone Security Software Agreement

Two support offerings:

Standard - Monday to Friday 9-6
Premium - 24/7 (20% additional cost on the support / maintenance costs)

Both options include remote and onsite services at no additional cost aligned to our SLA and KPI's.
User can manage status and priority of support tickets Yes
Online ticketing support accessibility WCAG 2.1 A
Phone support Yes
Phone support availability 24 hours, 7 days a week
Web chat support No
Onsite support Onsite support
Support levels Two support offerings:

Standard - Monday to Friday 9-6
Premium - 24/7 (20% additional cost on the support / maintenance costs)

Both options include remote and onsite services at no additional cost aligned to our SLA and KPI's.
Support available to third parties Yes

Onboarding and offboarding

Onboarding and offboarding
Getting started Onsite consultation, configuration, training and ongoing support.

Full marketing campaign / templates provided to customers at no additional cost

Ongoing product training, knowledge transfer from other users and an annual conference bringing together all customers for best use case sharing of ideas and vision for the platform
Service documentation Yes
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction Interfaces are available via the administration web pages to export data. In addition, full database exports are available via support requests.
End-of-contract process Various services are available at the end of the contract for repatriating/transitioning or destroying data all subject to GDPR / Data Protection Laws.

Using the service

Using the service
Web browser interface Yes
Supported browsers
  • Internet Explorer 7
  • Internet Explorer 8
  • Internet Explorer 9
  • Internet Explorer 10
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari 9+
Application to install Yes
Compatible operating systems
  • Android
  • IOS
  • Windows
  • Windows Phone
Designed for use on mobile devices Yes
Differences between the mobile and desktop service Fully mobile optimised. Omniguard, SafeZone and SafeTrans apps are all smartphone applications, and the SafeZone web service is also designed to work on mobile.
Accessibility standards WCAG 2.1 A
Accessibility testing Testing in exercises with blind users.
API Yes
What users can and can't do using the API We operate both a fully documented and supported API and SDK for the solution.
API documentation Yes
API documentation formats HTML
API sandbox or test environment Yes
Customisation available No

Scaling

Scaling
Independence of resources Via automated tools using our Microsoft Azure infrastructure allowing for scaling to meet demand and load balancing to ensure continuity of service.

Analytics

Analytics
Service usage metrics Yes
Metrics types Real time server stats and history
Alert, users and performance real time and historical
Reporting types
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

Resellers
Supplier type Not a reseller

Staff security

Staff security
Staff security clearance Conforms to BS7858:2012
Government security clearance None

Asset protection

Asset protection
Knowledge of data storage and processing locations Yes
Data storage and processing locations United Kingdom
User control over data storage and processing locations No
Datacentre security standards Supplier-defined controls
Penetration testing frequency At least once a year
Penetration testing approach Another external penetration testing organisation
Protecting data at rest Physical access control, complying with CSA CCM v3.0
Data sanitisation process Yes
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
Equipment disposal approach Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data importing and exporting
Data export approach Interfaces are available via the administration web pages to export data. In addition, full database exports are available via support requests.
Data export formats
  • CSV
  • Other
Other data export formats
  • Single sign on (SAML 2.0)
  • API
Data import formats CSV

Data-in-transit protection

Data-in-transit protection
Data protection between buyer and supplier networks TLS (version 1.2 or above)
Data protection within supplier network TLS (version 1.2 or above)

Availability and resilience

Availability and resilience
Guaranteed availability We offer a 99.9% up time aligned to Microsoft Azure's up time SLA. We have a structured support and maintenance agreement which provides SLA and KPI's to include penalties for non performance.
Approach to resilience SafeZone utilizes the Microsoft Azure cloud platform for its Command, Web, Messaging and Database components as well as data backups. Each geographical region has a primary datacentre where data is processed, stored and served for the region, as well as a secondary datacentre where backups are persisted. Architecture within the primary datacentre is redundant, with any hardware failure having no impact on uptime. The secondary datacentre can be promoted to primary during a disaster recovery scenario. Customers are assigned to a region based on both their regulatory data protection requirements and geography. All sensitive and personally identifiable information is kept within region except in cases where expressed permission is given by the customer to allow data to be transferred out of region.
Outage reporting Email alerts and a public dashboard shows real time and historical service status: http://status.criticalarc.com/

API available also

Identity and authentication

Identity and authentication
User authentication needed Yes
User authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password
Access restrictions in management interfaces and support channels Numerous tools, at a basic level user name and passwords, in addition two factor authentication and single sign on (we have standardised on SAML 2.0), this is flexible and can support other types of identity management systems.
Access restriction testing frequency At least every 6 months
Management access authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password

Audit information for users

Audit information for users
Access to user activity audit information Users have access to real-time audit information
How long user audit data is stored for User-defined
Access to supplier activity audit information Users have access to real-time audit information
How long supplier audit data is stored for User-defined
How long system logs are stored for User-defined

Standards and certifications

Standards and certifications
ISO/IEC 27001 certification No
ISO 28000:2007 certification No
CSA STAR certification No
PCI certification No
Other security certifications No

Security governance

Security governance
Named board-level person responsible for service security Yes
Security governance certified No
Security governance approach Governance is managed by the CEO and CTO of our business. All risks to the infrastructure and data is continually assessed with thorough active use of our policies and procedures which are scrutinised on a continuous basis. This is also a board topic covered at each board meeting.
Information security policies and processes CTO responsible for day to day management and enforcement of policies / procedures with CEO providing scrutiny and assessment reporting to the board

Operational security

Operational security
Configuration and change management standard Supplier-defined controls
Configuration and change management approach All development is managed and controlled using software development tools to include JIRA our cloud based solution. All software releases are released through a thorough release process which includes testing of back end and user GUI elements. Once completed, we typically issue a beta version to a customer who is in the beta program and then made available to all customers.
Vulnerability management type Supplier-defined controls
Vulnerability management approach Continuous threat assessments
Patches can be deployed same day once discovered
Customers, security partners and own working knowledge (keeping up to date with local, national and international threats)
Protective monitoring type Supplier-defined controls
Protective monitoring approach Continuous assessments
Patches can be deployed same day once discovered
Customers, security partners and own working knowledge (keeping up to date with local, national and international incidents)
Incident management type Supplier-defined controls
Incident management approach Continuous assessments
Patches can be deployed same day once discovered
Customers, security partners and own working knowledge (keeping up to date with local, national and international incidents)

Secure development

Secure development
Approach to secure software development best practice Conforms to a recognised standard, but self-assessed

Public sector networks

Public sector networks
Connection to public sector networks Yes
Connected networks Joint Academic Network (JANET)

Pricing

Pricing
Price £15000 to £150000 per instance
Discount for educational organisations Yes
Free trial available Yes
Description of free trial Full use of the solution for a 30 day period. Services are chargeable to set-up the solution / provide training.

Service documents

pdf document: Pricing document pdf document: Service definition document pdf document: Terms and conditions
Service documents
Return to top ↑