Azimap

Azimap GIS Hosted Cloud Services

Azimap is a secure cloud hosted geographic information system (GIS) that connects maps, apps and data to people for decision marking and citizen engagement. Available as a SaaS or on premises instance Azimap makes GIS accessible and promotes sharing of maps from a desktop or device. On-boarding and consultancy provided.

Features

  • National address and gazetteer support (LLPG and AddressBase)
  • Cloud solution that can be hosted locally
  • Ensures INSPIRE compliance by storing metadata in a common way
  • Intuitive interface to support task completion
  • Consumes shp, kml, geodatabase, geotiff, Geocode and WMS data
  • GIS tools for both the power and novice gazetteer
  • Routing, DriveTime Analysis, measuring and polygon split tools available
  • Single logon via active directory authentication
  • Knowledge base, training and on-boarding support available
  • Dedicated project delivery and client management support team

Benefits

  • Secure GIS hosted in a cloud or on-premise instance
  • Promote collaborative team work throughout your organisation
  • Centralised spatial data repository
  • Cost Control, via the need for reoccurring user licenses
  • Integrates with existing databases
  • Customised address base search and active directory integration
  • Accessible on desktop, mobile or tablet device
  • Efficient dissemination of data for citizen engagement
  • Documented APIs for easy integration and customisation
  • Documented product roadmap

Pricing

£15,000 to £60,000 an instance a year

  • Education pricing available
  • Free trial available

Service documents

Framework

G-Cloud 12

Service ID

4 7 3 8 4 6 1 7 6 4 4 3 7 6 5

Contact

Azimap David McQuillan
Telephone: 02886760990
Email: david.mcquillan@cianad.com

Service scope

Service constraints
Not Applicable
System requirements
  • Spatial database
  • Modern Web Browser e.g. IE10 Above, Chrome, FireFox etc
  • JavaScript must be enabled on the browser
  • Cookies must be enabled

User support

Email or online ticketing support
Email or online ticketing
Support response times
Response times align with the companies SLA
User can manage status and priority of support tickets
Yes
Online ticketing support accessibility
None or don’t know
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
No
Onsite support
Yes, at extra cost
Support levels
Technical support will be available from 8:00am to 6:00pm Monday to Friday. Out of hours support is available based on client requirements.

The following levels of service is available:
Level 1: Response time 1 hour e.g. system unavailable
Level 2: Response time 3 - 4 hours e.g. defect in the system which is impacting workflow or publishing / sharing of maps
Level 3: Response time 24 hours e.g. issue which does not impact workflow, processes, publishing or sharing of data
Support available to third parties
Yes

Onboarding and offboarding

Getting started
To help customers get started we offer the following a onboarding support:
- onsite training
- virtual training
- online user guides
- online videos
- direct access to client support team
- dedicated account management
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
After the contract period the customer can export their data as a spatial CSV, tab, KML or Shape File from within their my account area.
End-of-contract process
At the end of the contractual period the customer can export their data for a further 30 days. This data can be exported as a spatial CSV, Shape, KML or tab file.

Using the service

Web browser interface
Yes
Using the web interface
Azimap is supported by all major browsers including IE 10+, Firefox, Chrome, Safari 9+, Opera and Microsoft Edge.

Users register for their Azimap account via azimap.com, this is double authentication process.

Users can sign up for a Free 30 day trial of Azimap professional, which is not limited by data or layers. Following the trial period users can proceed to a SaaS cloud hosted plan or migrate to an enterprise self hosted installation.
Web interface accessibility standard
None or don’t know
How the web interface is accessible
The application has not given consideration for accessibility standards.
Web interface accessibility testing
Not applicable.
API
Yes
What users can and can't do using the API
A JavaScript API, is available for enterprise customers.

The API offers customers with self hosted applications to connect and interact directly with a map via a secure browser postmessage protocol.

Most map functionality can be controlled using the API.
API automation tools
Other
API documentation
Yes
API documentation formats
  • HTML
  • PDF
Command line interface
No

Scaling

Scaling available
No
Independence of resources
A clustered infrastructure is in place that can be boosted to meet periods of increased customer demand.
Usage notifications
Yes
Usage reporting
Email

Analytics

Infrastructure or application metrics
No

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Staff screening not performed
Government security clearance
Up to Security Clearance (SC)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
European Economic Area (EEA)
User control over data storage and processing locations
No
Datacentre security standards
Supplier-defined controls
Penetration testing frequency
Less than once a year
Penetration testing approach
In-house
Protecting data at rest
  • Physical access control, complying with another standard
  • Other
Other data at rest protection approach
Other data at rest protection approach

Our datacentre OVH, has extensive onsite security measures in place. Their cloud offerings are ISO compliant.
Data sanitisation process
Yes
Data sanitisation type
Deleted data can’t be directly accessed
Equipment disposal approach
In-house destruction process

Backup and recovery

Backup and recovery
Yes
What’s backed up
  • Files
  • Databases
Backup controls
Depending on customer requirements we can process backups on a weekly, daily or hourly basis.
Datacentre setup
Multiple datacentres with disaster recovery
Scheduling backups
Supplier controls the whole backup schedule
Backup recovery
Users contact the support team

Data-in-transit protection

Data protection between buyer and supplier networks
  • TLS (version 1.2 or above)
  • Legacy SSL and TLS (under version 1.2)
Data protection within supplier network
TLS (version 1.2 or above)

Availability and resilience

Guaranteed availability
Access to technical support engineers is available Monday - Friday by telephone between 08:00 - 18:00. Customers can also raise issues via the online support desk which provides out of hours support. Incidents are classified into one of the following categories - * Level 1: Where a major fault occurs such that a business critical function is not operational and major user inconvenience is being caused. Response Time: 2 hours Resolution Time: 24 hours * Level 2: Where a fault occurs such that a function is not operational but a workaround is available and is causing significant user inconvenience. Response Time: 5 hours Resolution Time: 3 days * Level 3: Where a fault occurs such that a non-critical function is not operational and is causing an inconvenient problem but is not causing significant user inconvenience. Response Time: 1 day Resolution Time: 5 days * Level 4: Where a fault occurs such that a cosmetic, non-urgent problem is being caused, e.g. a field is in the wrong position. Response Time: 3 days Resolution Time: 10 days Refunds are made via a direct repayment.
Approach to resilience
Infrastructure and data is backed up and replicated from hosting datacentre to a second datacentre under a different service provider. Back ups take place 3 times daily and copies are made to Cianad's premises.
Outage reporting
If an outage occurs an email alert is scheduled, messages are sent via our social media channels and a holding page is put in place.

Identity and authentication

User authentication
Username or password
Access restrictions in management interfaces and support channels
System implements role based access and so certain levels of user only have access to specific areas of the application.
Access restriction testing frequency
At least every 6 months
Management access authentication
Username or password
Devices users manage the service through
  • Dedicated device over multiple services or networks
  • Directly from any device which may also be used for normal business (for example web browsing or viewing external email)

Audit information for users

Access to user activity audit information
No audit information available
Access to supplier activity audit information
No audit information available
How long system logs are stored for
Between 1 month and 6 months

Standards and certifications

ISO/IEC 27001 certification
No
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
No
Security governance approach
Whilst our security is not accredited we work in compliance to ISO 27001:2013 standards.
Information security policies and processes
Whilst our security is not accredited we work in compliance to ISO 27001:2013 standards.

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
Changes are logged and managed with JIRA our project management tool. A change control board meets weekly to asses and schedule approved change requests. The change control board will assess potential security impacts as part of this process.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
We monitor the industry for potential threats and we take appropriate measures to mitigate the risks. We ensure all operating system security patches are installed regularly. We use a number of online software resources to generate vulnerability reports against our software.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
Our service provider monitors and protects against DDOS attacks and will inform us immediately when such attack occurs. We work with our service provider to identify any compromises and will inform clients of any potential breaches.
Incident management type
Supplier-defined controls
Incident management approach
Users can report incidents via telephone, email or via our online helpdesk. A predefined process for major incidents involves switching on our failover servers and redirecting all traffic to the failover. Our backup strategy already ensures that failover is relatively up to date with current data.

Secure development

Approach to secure software development best practice
Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Separation between users

Virtualisation technology used to keep applications and users sharing the same infrastructure apart
No

Energy efficiency

Energy-efficient datacentres
No

Pricing

Price
£15,000 to £60,000 an instance a year
Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
Azimap Professional is available as a 30 day free trial. During this period user have access to unlimited data, 2000MB of vector data, 2000MB of attachments, can add 12 layers to a map, on boarding and account management support and all support materials.
Link to free trial
Www.azimap.com

Service documents