Xenario UK Limited

FotoWeb as a Service

FotoWeb as a Service provides a secure environment and infrastructure to in Microsoft Azure. Digital assets including video, images, documents and audio can be centrally stored, catalogued and shared.
The SaaS platform is flexible and easy to set up and administer.


  • API Integration
  • Support any digital asset type (Video, Images, Audio, Documents)
  • SaaS Platform on Microsoft Azure
  • Scaleable solution
  • Connect with Adobe CC apps
  • Connect with MS Office apps
  • SSO with SAML2.0 and OAuth
  • Mobile and Tablet Apps
  • Taxonomy and Metadata schemas
  • Web based UX


  • Take control over your digital assets
  • GDPR compliant
  • Customisation of Workflows
  • Publish assets on multiple channels
  • Collaborate with your colleagues
  • Approvals workflow
  • Powerful search engine
  • Integrate with CMS and databases
  • Integrate with MS Cognitive services (AI and ML)
  • User roles and automation


£750 to £1000 per instance per month

Service documents


G-Cloud 11

Service ID

3 5 5 1 6 2 9 4 4 5 4 3 5 8 2


Xenario UK Limited

Nigel Abbott

+44 1 293 434 995


Service scope

Service scope
Software add-on or extension No
Cloud deployment model Private cloud
Service constraints No
System requirements
  • Windows Server 2016, 64 bit versions
  • Microsoft .NET Framework 3.5 minimum
  • Local Administrator privileges for service account
  • Microsoft SQL Server Express 2008 minimum or existing SQL
  • Internet Explorer 11, Edge, Firefox 34, Safari 8, Chrome

User support

User support
Email or online ticketing support Email or online ticketing
Support response times Support is available Monday to Friday 09:00 -17:00
Maximum 4 hour response time once a ticket has been raised. Usually most cases are responded to within minutes
User can manage status and priority of support tickets Yes
Online ticketing support accessibility WCAG 2.1 A
Phone support Yes
Phone support availability 9 to 5 (UK time), Monday to Friday
Web chat support Web chat
Web chat support availability 9 to 5 (UK time), Monday to Friday
Web chat support accessibility standard None or don’t know
How the web chat support is accessible From the website www.xenario.co.uk the chat box is opened automatically after 10 seconds. The user can also click on the icon in the bottom right hand corner and select one of three options General, Sales or Technical Support. The user may also attach a document or image.
Web chat accessibility testing None
Onsite support Yes, at extra cost
Support levels For our SaaS solution we provide technical support but we expect customers to nominate support representatives and provide a 1st line service to their internal users.

Subscription pricing includes telephone and email support during UK business hours. Extended support (7.00am to 8.30am and 5.30pm to 10pm) can be provided for an extra fee.

Our helpdesk is available to all our customers and a Technical Support Engineer is allocated to problem solve.
Support available to third parties Yes

Onboarding and offboarding

Onboarding and offboarding
Getting started Xenario UK provide on-boarding services for configuration, consultancy, data migration and integration possibilities.

We provide on-site training to the needs of the customer and are subject to an additional one-off cost.
Service documentation Yes
Documentation formats PDF
End-of-contract data extraction We would be sorry to see you go, naturally. But we'll do our best to make your data migration as smooth as possible. We will help you move your data to a server of choice. Typically, this involves setting up an FTP connection or other means of transfer. After transferring your data, we will delete the tenant and erase all the data you had on our servers.
End-of-contract process We would be sorry to see you go, naturally. But we'll do our best to make your data migration as smooth as possible. We will help you move your data to a server of choice. Typically, this involves setting up an FTP connection or other means of transfer. After transferring your data, we will delete the tenant and erase all the data you had on our servers.

Using the service

Using the service
Web browser interface Yes
Supported browsers
  • Internet Explorer 8
  • Internet Explorer 9
  • Internet Explorer 10
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari 9+
Application to install Yes
Compatible operating systems
  • Android
  • IOS
  • MacOS
  • Windows
Designed for use on mobile devices Yes
Differences between the mobile and desktop service The design of the HTML5 UX is agile and scales to work on all mobile and tablet devices.
Service interface Yes
Description of service interface The Service interface is called Operations Centre which is a browser based administrators console. The console provides the user with control over the administration of Users,Groups archives and reporting.
Accessibility standards None or don’t know
Description of accessibility Using Windows Accessibility tools
Accessibility testing No
What users can and can't do using the API The API service is enabled by a license key and is fully documented at learn.fotoware.com.
API functionality can be used to pull assets from the system, modify metadata and create new workflows for the publication and sharing of assets with third party systems.
API documentation Yes
API documentation formats PDF
API sandbox or test environment Yes
Customisation available Yes
Description of customisation The UX can be branded with company logo's and colors. Terms and conditions can be changed and displayed before log in and also before download of assets.


Independence of resources Demand


Service usage metrics No


Supplier type Reseller providing extra support
Organisation whose services are being resold Installation and Configuration, Technical Support, API integration, Training and

Staff security

Staff security
Staff security clearance Other security clearance
Government security clearance Up to Developed Vetting (DV)

Asset protection

Asset protection
Knowledge of data storage and processing locations Yes
Data storage and processing locations European Economic Area (EEA)
User control over data storage and processing locations No
Datacentre security standards Managed by a third party
Penetration testing frequency At least every 6 months
Penetration testing approach ‘IT Health Check’ performed by a CHECK service provider
Protecting data at rest Physical access control, complying with CSA CCM v3.0
Data sanitisation process Yes
Data sanitisation type Deleted data can’t be directly accessed
Equipment disposal approach Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data importing and exporting
Data export approach Data held in a FotoWare SaaS is exported using FTP to a nominated server at the end of the subscription period.
Data export formats Other
Other data export formats
  • JPEG or TIFF
  • Original Format
Data import formats
  • CSV
  • ODF
  • Other
Other data import formats PDF

Data-in-transit protection

Data-in-transit protection
Data protection between buyer and supplier networks TLS (version 1.2 or above)
Data protection within supplier network TLS (version 1.2 or above)

Availability and resilience

Availability and resilience
Guaranteed availability The SLA for FotoWeb as a service can be https://www.fotoware.com/company/legal/service-level-agreementfound here
Approach to resilience In Microsoft Azure a virtual machine can expect 99.9% availability.
Outage reporting Microsoft Azure Cloud services can be accessed from the portal dashboard with email alerts to nominated accounts

Identity and authentication

Identity and authentication
User authentication needed Yes
User authentication
  • 2-factor authentication
  • Username or password
Access restrictions in management interfaces and support channels Access to management consoles is restricted to individuals or groups using the access control settings in the system.
Access restriction testing frequency At least every 6 months
Management access authentication
  • 2-factor authentication
  • Dedicated link (for example VPN)
  • Username or password

Audit information for users

Audit information for users
Access to user activity audit information No audit information available
Access to supplier activity audit information No audit information available
How long system logs are stored for User-defined

Standards and certifications

Standards and certifications
ISO/IEC 27001 certification No
ISO 28000:2007 certification No
CSA STAR certification No
PCI certification No
Other security certifications No

Security governance

Security governance
Named board-level person responsible for service security Yes
Security governance certified Yes
Security governance standards
  • CSA CCM version 3.0
  • ISO/IEC 27001
Information security policies and processes In the first instance any security issues should be addressed to FotoWare a.s. and email privacy@fotoware.com

The document below https://www.fotoware.com/company/legal/how-fotoware-protects-your-data

Operational security

Operational security
Configuration and change management standard Supplier-defined controls
Configuration and change management approach These processes are handled by FotoWare a.s and Microsoft Azure
Vulnerability management type Supplier-defined controls
Vulnerability management approach This is controlled by FotoWare and Microsoft Azure.
Protective monitoring type Supplier-defined controls
Protective monitoring approach This is managed by FotoWare and Microsoft Azure
Incident management type Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach This is managed by FotoWare and Microsoft Azure

Secure development

Secure development
Approach to secure software development best practice Supplier-defined process

Public sector networks

Public sector networks
Connection to public sector networks No


Price £750 to £1000 per instance per month
Discount for educational organisations Yes
Free trial available Yes
Description of free trial A free trial period of 30 days with full system capabilities which includes the API and on-boarding time.
Our Cloud DAM solution scales from team solutions to enterprise deployments.
Link to free trial https://azuremarketplace.microsoft.com/en-us/marketplace/apps/fw.digital-asset-management

Service documents

Return to top ↑