AMX Solutions Ltd

Highways Asset Management Software

AMX for Highways Asset Management enables compliance with the Code of Practice for Well Managed Highway Infrastructure. It is a complete local authority highways asset inventory and system for inspection and maintenance programmes, incident management, reporting and data import-export. AMX Mobile supports remote inspections, inventory updates and defect recording.

Features

• Highways asset inventory for planning, management, valuation, budgeting
• Inspection and maintenance planning and management
• Capture, visualise, model and assess assets on map interfaces (GIS)
• Directly import assets from National Street Gazeteer (NSG) / LLPG
• Third-party connection and integration including EToN and Street Manager
• Remote/mobile inspection, maintenance, defect recording, inventory updates, customised surveys
• Carriageways, footways, public rights of way (PROW), pavements, bus shelters/stops
• Car parks, signs, bollards, gullies, drains, street furniture/lighting, kerbs
• Lifecycle Management in accordance with HMEP toolkit
• Risk management (floods road/bridge condition deterioration)

Benefits

• Better highways maintenance improves reputation and meets public expectation
• More efficient planning and management optimises budgets and resources
• Better management of ageing stock reduces expenditure
• Modelling, visualisation and KPI reporting improve decision-making
• Remote and mobile inspection and maintenance reduces costs
• Work scheduling tools save you time and money
• Programme and contractor management helps meet completion targets and SLAs
• Single, central, integrated solution reduces cost over multiple systems
• Compliance with legislation and codes of practice reduces risk
• Simple, intuitive user interface increases productivity and reduces training

£800 to £1,500 a licence a year

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@amxsolutions.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 12

Service ID

707950779388560

Contact

Karen King
0333 456 0768
gcloud@amxsolutions.co.uk

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: Other modules of AMX are available: AMX Mobile, AMX Streetlighting, AMX Structures, AMX PROW, AMX Bespoke. API provides integrations with third party systems including Sharepoint, Imagestore, Maximo, SAP, GIS etc.
• Cloud deployment model: Public cloud
• Service constraints: N/A
• System requirements:
  • AMX Web Application requires a web browser
  • AMX Mobile requires an Android or iOS device
  • The AMX Web Application requires a Microsoft SQL database
  • Web services require IIS (Internet Information Services) to operate

User support

• Email or online ticketing support: Email or online ticketing
• Support response times: A response will be issued usually within 2 hours during normal working hours. A resolution may take longer depending on the nature of the support enquiry.
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.1 AA or EN 301 549
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: Yes, at extra cost
• Support levels: AMX Solutions have a dedicated support site by which users can view the AMX knowledge base and raise support tickets that are tracked and answered by dedicated support team members. Users can also phone or email the AMX Solutions support team.; Support tickets are given a priority level of Low, Medium, High and Critical and outlined in full in our SLA.; Support is included within the Annual Subscription cost of the product.
• Support available to third parties: Yes

Onboarding and offboarding

• Getting started: AMX Solutions can provide training to new customers whereby they can attend classes at the AMX Solutions offices in Bristol, arrange on site training or access remote training delivered via Skype or MS Teams. AMX Solutions has a dedicated support site which features a knowledge base to allow users to get up and running quickly with the product.
• Service documentation: Yes
• Documentation formats: PDF
• End-of-contract data extraction: AMX Solutions will assist users in extracting their data in a format of their choosing from SQL, Excel, CSV, tab, shp including maps and images.
• End-of-contract process: Customers provide 2 months written notice to the AMX Account Manager who will work closely with the client to support a successful migration of data. Once the customer is satisfied that the required data has been provided to them the SQL server and database will be decommissioned after a 3 month period and all data deleted. There are costs associated with this process. There are no refunds for early termination of contract.

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Internet Explorer 7
  • Internet Explorer 8
  • Internet Explorer 9
  • Internet Explorer 10
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari 9+
• Application to install: No
• Designed for use on mobile devices: Yes
• Differences between the mobile and desktop service: The differences between the AMX web application and the AMX mobile applications (iOS and Android platforms) are:; ; AMX Web Application; Native Platform Web browser based application; Functionality Full AMX system functionality; Data Access Full access to data within the AMX database; User Interface Web based controls based on standard design guidelines; ; AMX Mobile Application; Native Platform Native iOS or Android Application; Functionality. Focused system functionality e.g. Inspection data capture; Data Access. Focused access to data. The mobile applications do not communicate with the primary AMX database; User Interface Native platform controls based on standard design guidelines
• Service interface: No
• API: Yes
• What users can and can't do using the API: Depending on what has been enabled an API user can do all CRUD (Create, Update, Delete) operations on any data within AMX. They can also interrogate any data that they have permission to retrieve.; ; Please see the points in regard to the functionality of the AMX API:; ; Report Data: Retrieves existing report data from the AMX database.; Report Summary: Retrieves the summary of a pre-existing report.; Report Summary Details: Retrieves the summary details of a pre-existing report.; Lookup Items: Retrieves multiple items from the AMX database.; Lookup Item: Retrieve a singular lookup item from the AMX database.; Entity Data: Retrieves entity data from the AMX database.; Add Entity Data: Creates or Adds records to the AMX database.; Update Entity: Updates existing entity data within the AMX database.; Delete Entity Data: Deletes entity data from the AMX database; Get Photo: Retrieves photographs from the AMX database.; Add Image: Add images to the AMX database using the AMX API.; ; Details regarding the AMX API are available upon request.
• API documentation: Yes
• API documentation formats: PDF
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: AMX is a highly customisable asset management product. AMX features a form designer that allows users with the appropriate system rights to perform form customisations putting the user in control. Users are also able to customise the AMX home area and system reports.

Scaling

• Independence of resources: Please see the below points for how the AMX Solutions hosted web service responds to users demands:; Sized in relation to the number of concurrent licences; Dedicated Application Service Plans per client; Long running operations are scheduled during periods of low activity; Azure jobs for long running tasks e.g. report generation, bulk editing; Autoscaling configurations.

Analytics

• Service usage metrics: Yes
• Metrics types: AMX Solutions Ltd use the Microsoft Azure Application Insights for analysing service metrics. AMX Solutions also log client to server and server to database communication that is outside normal expected time parameters. Reports are available on request.
• Reporting types: Reports on request

Resellers

• Supplier type: Not a reseller

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Up to Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Managed by a third party
• Penetration testing frequency: At least once a year
• Penetration testing approach: In-house
• Protecting data at rest: Other
• Other data at rest protection approach: Sensitive data is encrypted. AMX Solutions also encrypt sensitive fields using obfuscation techniques.
• Data sanitisation process: No
• Equipment disposal approach: In-house destruction process

Data importing and exporting

• Data export approach: All data in the system can be exported to Excel/csv/xml as well as the most popular GIS (mapping) file format, shp. A local offline backup (in sqlite) can be created. Users can also create bespoke reports based upon the data fields within the AMX database and export the contents of the report to multiple formats including Microsoft Excel Format or PDF.
• Data export formats:
  • CSV
  • Other
• Other data export formats:
  • Excel
  • Shp
  • Tab
  • SQL
• Data import formats:
  • CSV
  • Other
• Other data import formats:
  • SQL
  • Excel
  • Access
  • Shp
  • Tab

Data-in-transit protection

• Data protection between buyer and supplier networks: TLS (version 1.2 or above)
• Data protection within supplier network: Other
• Other protection within supplier network: Username and Password

Availability and resilience

• Guaranteed availability: AMX Solutions guarantee a 99% availability of the AMX service if provided by AMX Solutions. This availability guarantee is based upon Microsoft Azures availability agreement.
• Approach to resilience: AMX Solutions use Microsoft’s SQL Server technology to facilitate the AMX database backup. The backup types performed include full, differential and transaction log backups to allow a Point-in-time restore (PITR). In the event of corruption or deletion, AMX Solutions can restore the AMX database to a specific point in time as Microsoft SQL Server can identify which of the full, differential or transaction log backups are required to achieve the restore.; AMX Solutions also use a tool that allows select users to pull down a local backup of the AMX database on a regular basis for use in emergency.
• Outage reporting: AMX Solutions use a monitoring tool which emails key people if there is an outage of the AMX system.

Identity and authentication

• User authentication needed: Yes
• User authentication: Other
• Other user authentication: 3 options:; 1) Authenticated with single sign on AAD if hosted on customers own azure; 2) Authenticated via a login page which then checks the user is registered in the system and then calls LDAP to authenticate the password.; 3) Authenticated via a login page which then checks the Username/Password stored in the system database. Note: Password is one way encrypted.
• Access restrictions in management interfaces and support channels: Role based, only specified users can access the relevant admin and customisation areas. Also, any section of data in the system can be locked down to specific roles.
• Access restriction testing frequency: At least every 6 months
• Management access authentication: Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Standards and certifications

• ISO/IEC 27001 certification: Yes
• Who accredited the ISO/IEC 27001: QMS UK
• ISO/IEC 27001 accreditation date: 24/09/2019
• What the ISO/IEC 27001 doesn’t cover: The Business have ISO 27001 accreditation, however the software itself is not accredited
• ISO 28000:2007 certification: No
• CSA STAR certification: No
• PCI certification: No
• Other security certifications: Yes
• Any other security certifications: Cyber Essentials

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: AMX are ISO 9001 and ISO 27001 compliant and have Cyber Essentials compliance. In general every precaution is taken within the workplace with regard to securing login details, encrypting storage devices and carrying out routine back-ups to retain privacy and prevent security breaches.

Operational security

• Configuration and change management standard: Supplier-defined controls
• Configuration and change management approach: Change requests are submitted through the online portal ticket system. Following ITIL Service Management processes changes are reviewed and where considered to be of value to the customer, incorporated into the AMX Solution. After testing these are released as part of an update package to ensure all customers have the best solution. All changes are subject to security policy reviews as part of the testing process.
• Vulnerability management type: Supplier-defined controls
• Vulnerability management approach: AMX Solutions perform regular penetration tests using Hewlett Packard’s Enterprise Web Inspect package and review all code changes to make sure they our secure.
• Protective monitoring type: Supplier-defined controls
• Protective monitoring approach: Potential compromises are identified through performing regular internal penetration tests and code reviews. If vulnerabilities are identified, AMX Solutions will endeavour to update the software and notify customers as soon as possible after discovering the vulnerability.
• Incident management type: Supplier-defined controls
• Incident management approach: Users can report any incidents to the dedicated AMX Solutions support email and phone channels as outlined in the service level agreement. Any incidents identified by AMX Solutions that impact normal service operation will be reported to the customers if necessary via the appropriate contact channel.

Secure development

• Approach to secure software development best practice: Supplier-defined process

Public sector networks

• Connection to public sector networks: No

Pricing

• Price: £800 to £1,500 a licence a year
• Discount for educational organisations: No
• Free trial available: No

Service documents

• Pricing document

  PDF

• Skills Framework for the Information Age rate card

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at gcloud@amxsolutions.co.uk. Tell them what format you need. It will help if you say what assistive technology you use.