TeamLogic Systems Ltd

GeDaP SEE Plus (Secure Email for Everyone)

GeDaP SEE+ S/MIME Service provides digitally signed and encrypted mail which is both simple for end users and easy to install. The system uses a Qualified Trust Service Provider (GlobalSign) and KeyTalk CKMS to provide a complete and packaged solution authenticating users and encrypting data in transit.

Features

  • Includes a Qualified Trust Service Provider Certificate for each User
  • Includes the KeyTalk Certificate and Key Management Software
  • Allows Secure Signed Email With Option for Encryption
  • Facilitates Secure Email When No S/MIME Certificate Held
  • Virtually Automatic Installation for Outlook/365 Users
  • Encryption Ensures Protection of Data in Transit
  • Email Option for Digital Signature
  • Ease of Use by End User, Intuitive Minimal Training
  • Low Running Cost Minimal Administration
  • Automated Certificate Renewal at Expiry

Benefits

  • Ensures Privacy of Email & Content
  • Digital Signature Proves Email Sender is Genuine
  • Greater Protection for Sender & Receiver
  • Facilitates Temporary Certificates for Non-certificated Recipients
  • Provides Flexibility Cloud Based or Hybrid Capability
  • Security Protection for Key Management from "4-ey principle"
  • Users Can Read Encrypted Email on Multiple Authorised Devices
  • Users Can Read Expired Certificated Email
  • Simple End User Capability Intuitive Requires Minimal Training
  • Eliminates risk from Spoofing, Phishing Spear Phishing Man-in-Middle

Pricing

£1.00 to £7.50 per user per month

  • Free trial available

Service documents

Framework

G-Cloud 11

Service ID

3 1 0 4 9 4 5 7 0 6 3 1 4 1 6

Contact

TeamLogic Systems Ltd

Ian Young

0151 342 4490

enquiries@gedap.co.uk

Service scope

Software add-on or extension
Yes
What software services is the service an extension to
The system is designed for use with an existing email system
Microsoft Outlook
Microsoft 365
Apple Mac Mail
Others following
Cloud deployment model
  • Public cloud
  • Private cloud
  • Community cloud
  • Hybrid cloud
Service constraints
Android/iOS may require some small user action (currently) configuring S/MIME certificates.
Conventionally the service would be hosted on a UKCloud Server providing an appropriate level of availability for the customer's needs. UKCloud provides high availability up to 99.9%
System requirements
  • S/MIME Certificate Required ) Supplied with Application
  • Certificate & Key Management Supplied with Application
  • End users will have been already created in IAM
  • Users may conventionally have upto a maximum of 10 devices
  • Users authenticate against the IAM (AzureAD, LDAP, Radius etc)
  • Can Operate in a Hybrid Envronment
  • The Application is Not Demanding on Cloud Resources
  • Requires no changes to email addresses in use

User support

Email or online ticketing support
Email or online ticketing
Support response times
As part of the support process GeDaP provides a specific email address to be used. The customer should supply all relevant detail together with a mobile number if possible.
During normal business hours (weekend by prior agreement) GeDaP will respond within 2 hours,
User can manage status and priority of support tickets
No
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
Web chat
Web chat support availability
9 to 5 (UK time), Monday to Friday
Web chat support accessibility standard
WCAG 2.1 AA or EN 301 549
Web chat accessibility testing
Under development
Onsite support
Yes, at extra cost
Support levels
Standard support is covered in the basic SaaS cost and is based on a maximum 2 hour response and we will endeavour to provide a solution or work-around within a further 2 hours maximum. If the problem is not resolved it will be escalated to the developers. During the incident support will use the appropriate medium and customers are advised of progress. On-site support is available by arrangement and is charged on a time and materials basis (see Rate Card)
Support available to third parties
Yes

Onboarding and offboarding

Getting started
KeyTalk is simple to install and has been designed to create a minimal administration overhead. GeDaP can provide web-based or on site services during the installation process.Full user/administrator documentation is readily available. Pre-installation consultancy advice and training is readily available at the relevant daily rate the S/MIME application is designed for simplicity of user use
Service documentation
Yes
Documentation formats
PDF
End-of-contract data extraction
KeyTalk works to authenticate access and encrypt data in transit. Any data is therefore most likely to be attributable to and part of one of the applications. Data accumulated by KeyTalk can be exported in an agreed format for input into the new system. KeyTalk is designed for security (authentication & encryption) there will therefore not be large quantities of data. Any extraction of Data or Certificates etc would be undertaken at Administrator level
End-of-contract process
The content required together with its format will be determined by your plans at the time. GeDaP will provide the appropriate quotation based on volumes and content required if you decide to migrate the data. As KeyTalk authenticates users and encrypts the data in transit, and the system holds S/MIME certificates volumes for export are likely to be small.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 7
  • Internet Explorer 8
  • Internet Explorer 9
  • Internet Explorer 10
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari 9+
  • Opera
Application to install
Yes
Compatible operating systems
  • Android
  • IOS
  • Linux or Unix
  • MacOS
  • Windows
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
KeyTalk is installed to secure a device and its applications with strong authentication and encryption. It is transparent to the end user regardless of the device in use. There is thus no difference in the operation of KeyTalk when accessing by the user for email etc
Service interface
Yes
Description of service interface
KeyTalk is built on LDAP Open Directory Service
Accessibility standards
WCAG 2.1 AA or EN 301 549
Accessibility testing
Under development
API
Yes
What users can and can't do using the API
The api is distributed to authorised users of the IAM and installs on the approved device. Thereafter the application is transparent to the end user who would be using their mail application e.g. Outlook
API documentation
Yes
API documentation formats
PDF
API sandbox or test environment
No
Customisation available
No

Scaling

Independence of resources
GeDaP work closely with UKCloud whose resources are highly scalable. The application is itself highly scalable, capable of handling demands for over 1,500,000 certificates and potentially much more

Analytics

Service usage metrics
Yes
Metrics types
A range of standard reports is provided together with a range of audit reports to help meet the requirements of the EUGDPR. Customized reports can be readily provided and GeDaP are happy to quote based on the standard rates.
Reporting types
  • Real-time dashboards
  • Regular reports
  • Reports on request

Resellers

Supplier type
Reseller providing extra features and support
Organisation whose services are being resold
GeDaP is the KeyTalk distributor for the UK & Ireland

Staff security

Staff security clearance
Conforms to BS7858:2012
Government security clearance
Up to Developed Vetting (DV)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
User control over data storage and processing locations
Yes
Datacentre security standards
Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency
At least every 6 months
Penetration testing approach
‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
Protecting data at rest
Physical access control, complying with SSAE-16 / ISAE 3402
Data sanitisation process
Yes
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
As KeyTalk is authenticating and encrypting data belonging to applications; users are highly unlikely to have data to export. Data maintained is logs on activity which would be the administrators responsibility, whilst the S/Mime Certificates are held in a file.
Data export formats
  • CSV
  • ODF
  • Other
Other data export formats
  • ASCII
  • XML
Data import formats
  • CSV
  • ODF
  • Other
Other data import formats
XML

Data-in-transit protection

Data protection between buyer and supplier networks
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Bonded fibre optic connections
  • Legacy SSL and TLS (under version 1.2)
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

Guaranteed availability
GeDaP uses the computing power of UKCloud which provides a guaranteed 99.90% availability for its users
Approach to resilience
GeDaP uses UKCloud Service which is designed for deployment across a number of sites, regions and zones. Each zone is designed to eliminate single points of failure (like power, network & hardware). GeDaP encourages customers to ensure that their solution spans multiple sites, regions or zones to ensure continuity of service even if a failure occurs.
Outage reporting
All outages will be reported via the Software Service Status page and the notifications service within the UKCloud portal. Outages are identified as Planned Maintenance, Emergency Maintenance and platform issues. In addition the GeDaP Technical Support Manager will contact the designated customer contact,

Identity and authentication

User authentication needed
Yes
User authentication
  • Public key authentication (including by TLS client certificate)
  • Other
Other user authentication
KeyTalk authenticates using the existing system (LDAP, Radius, Active Directory etc). In addition to the user name and password, it uses the device footprint. This footprint consists of a unique identifier constructed from a number of components, hashed and salted to a formula selected by the installation.
Access restrictions in management interfaces and support channels
KeyTalk is integrated to the appropriate system in use (LDAP, Radius Active Directory etc). The system which is currently in use will be controlling the user access.
Access restriction testing frequency
At least every 6 months
Management access authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password

Audit information for users

Access to user activity audit information
You control when users can access audit information
How long user audit data is stored for
User-defined
Access to supplier activity audit information
You control when users can access audit information
How long supplier audit data is stored for
User-defined
How long system logs are stored for
User-defined

Standards and certifications

ISO/IEC 27001 certification
No
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
Though an SME, GeDaP has its own security policies in place and regularly reviews its capability against both the current Data Protection requirements and EUGDPR. Customer data is processed on UKCloud which is dedicated to customer processing and which is regularly assessed against ISO20000, ISO27002, and ISO27018 by LRQA a UKAS certified audit body.

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
GeDaP works closely with the developers of KeyTalk, who operate a system which tracks changes and provides the input to GeDaP's own change management. If sites require, a test bed can be provided allowing a short period of testing and approval prior to the update's incorporation in the production system.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
GeDaP provides their service based on UKCloud servers which offer a high degree of security. As KeyTalk is an internal application and sits between the user application and the devices to verify authentication and encryption it is not an application. GeDaP is established in Cyber Security and are members of Cyber Exchange
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
GeDaP has a documented approach based on ISO20000 and ISO27001. Any potential incidents identified by staff or customers are monitored, controlled and resolved as high priority.
Incident management type
Supplier-defined controls
Incident management approach
GeDaP has an incident management and reporting system based on the requirements of ISO20000 and ISO 27001. Any incident raised is resourced, tracked, and reso

Secure development

Approach to secure software development best practice
Conforms to a recognised standard, but self-assessed

Public sector networks

Connection to public sector networks
Yes
Connected networks
  • Public Services Network (PSN)
  • NHS Network (N3)
  • Joint Academic Network (JANET)
  • Health and Social Care Network (HSCN)
  • Other
Other public sector networks
  • Those available through UK Cloud
  • RLI

Pricing

Price
£1.00 to £7.50 per user per month
Discount for educational organisations
No
Free trial available
Yes
Description of free trial
GeDaP provide a 30 day "Proof of Concept" to allow customers to evaluate the software against established and agreed criteria. On completion of the POC there would be a review with GeDaP

Service documents

Return to top ↑