CriticalArc Ltd

SafeZone

Critical Arc, a global tech innovator, designs and delivers a distributed command and control solution, SafeZone™, which is revolutionising the way organisations manage day-to-day safety and security operations. SafeZone provides response teams with complete operational awareness, to enhance the protection of dispersed people, facilities, and assets, while delivering efficiency savings.

Features

  • SafeZone - Safety, Security and Emergency Management System
  • Omniguard - Real time response coordination
  • SafeTrans - Transport tracking for safety and security

Benefits

  • Reduces costs & increases efficiency
  • Eliminate capital costs
  • Enhances Security & Business Continuity
  • Improves Incident Response
  • Optimises Resources & Assets
  • Increases Staff Safety
  • Enables Collaboration
  • Ultra-Fast, Reliable and Highly-secure

Pricing

£11500 to £150000 per licence per year

  • Education pricing available
  • Free trial available

Service documents

G-Cloud 9

743118267001136

CriticalArc Ltd

Darren Chalmers-Stevns

07787410860

dcs@criticalarc.com

Service scope

Service scope
Software add-on or extension No
Cloud deployment model Public cloud
Service constraints No. SafeZone supports all main Mobile Operating Systems, Desktop Opearting Systems and Browsers. It utilises any available data network and IT infrastructure.
System requirements None

User support

User support
Email or online ticketing support Email or online ticketing
Support response times Monday to Friday 9-6 operating hours, with 24/7 support for customers
User can manage status and priority of support tickets Yes
Online ticketing support accessibility None or don’t know
Phone support Yes
Phone support availability 24 hours, 7 days a week
Web chat support No
Onsite support Onsite support
Support levels Two support offerings:

Standard - Monday to Friday 9-6
Premium - 24/7 (20% additional cost on the support / maintenance costs)

Both options include remote and onsite services at no additional cost aligned to our SLA and KPI's.
Support available to third parties No

Onboarding and offboarding

Onboarding and offboarding
Getting started Full support for design, deployment, training and support throughout the deployment and post go live.
Service documentation Yes
Documentation formats PDF
End-of-contract data extraction Numerous ways: Export of user data by spreadsheet and CSV formats. Also full export of database configuration available through support channels.
End-of-contract process Typically we work with our clients to determine the path they wish to undertake post contract. We support transiting of data to the client of approved third parties as exclusively directed by the client who remain the data controller.

Using the service

Using the service
Web browser interface Yes
Supported browsers
  • Internet Explorer 7
  • Internet Explorer 8
  • Internet Explorer 9
  • Internet Explorer 10+
  • Microsoft Edge
  • Firefox
  • Chrome
Application to install No
Designed for use on mobile devices Yes
Differences between the mobile and desktop service Fully mobile optimised. Omniguard, SafeZone and SafeTrans apps are all smartphone applications, and the SafeZone web service is also designed to work on mobile.
Accessibility standards None or don’t know
Description of accessibility SafeZone application for End Users is WCAG 2.0 A compliant through utilisation of standard accessibility features of Android and iOS Smartphone operating systems
Accessibility testing Testing in exercises with blind users.
API Yes
What users can and can't do using the API We operate both a fully documented and supported API and SDK for the solution.
API documentation Yes
API documentation formats HTML
API sandbox or test environment Yes
Customisation available No

Scaling

Scaling
Independence of resources Via automated tools using our Microsoft Azure infrastructure allowing for scaling to meet demand and load balancing to ensure continuity of service.

Analytics

Analytics
Service usage metrics Yes
Metrics types Real time server stats and history
Alert, users and performance real time and histroical
Reporting types
  • API access
  • Real-time dashboards
  • Reports on request

Resellers

Resellers
Supplier type Not a reseller

Staff security

Staff security
Staff security clearance Staff screening not performed
Government security clearance Up to Developed Vetting (DV)

Asset protection

Asset protection
Knowledge of data storage and processing locations Yes
Data storage and processing locations United Kingdom
User control over data storage and processing locations No
Datacentre security standards Managed by a third party
Penetration testing frequency At least every 6 months
Penetration testing approach In-house
Protecting data at rest Physical access control, complying with CSA CCM v3.0
Data sanitisation process Yes
Data sanitisation type
  • Explicit overwriting of storage before reallocation
  • Deleted data can’t be directly accessed
Equipment disposal approach Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data importing and exporting
Data export approach Interfaces are available via the administration web pages to export data. In addition, full database exports are available via support requests.
Data export formats
  • CSV
  • Other
Other data export formats Database exports in XML and CSV
Data import formats
  • CSV
  • Other
Other data import formats Single sign on (SAML 2.0)

Data-in-transit protection

Data-in-transit protection
Data protection between buyer and supplier networks
  • TLS (version 1.2 or above)
  • Other
Other protection between networks Fully encrypted end to end including at rest data.
Data protection within supplier network
  • TLS (version 1.2 or above)
  • Other
Other protection within supplier network All data is encrypted at rest. Access control and physical security is as per Microsoft Azure infrastructure and best practices. See here: https://azure.microsoft.com/en-us/support/trust-center/

Availability and resilience

Availability and resilience
Guaranteed availability We offer a 99.9% up time aligned to Microsoft Azure's up time SLA. We have a structured support and maintenance agreement which provides SLA and KPI's to include penalties for non performance.
Approach to resilience SafeZone utilizes the Microsoft Azure cloud platform for its Command, Web, Messaging and Database components as well as data backups. Each geographical region has a primary datacentre where data is processed, stored and served for the region, as well as a secondary datacentre where backups are persisted. Architecture within the primary datacentre is redundant, with any hardware failure having no impact on uptime. The secondary datacentre can be promoted to primary during a disaster recovery scenario. Customers are assigned to a region based on both their regulatory data protection requirements and geography. All sensitive and personally identifiable information is kept within region except in cases where expressed permission is given by the customer to allow data to be transferred out of region.
Outage reporting Email alerts and a public dashboard shows real time and historical service status: http://status.criticalarc.com/

Identity and authentication

Identity and authentication
User authentication needed Yes
User authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password
Access restrictions in management interfaces and support channels Numerous tools, at a basic level user name and passwords, in addition two factor authentication and single sign on (we have standardised on SAML 2.0), this is flexible and can support other types of identity management systems.
Access restriction testing frequency At least every 6 months
Management access authentication
  • 2-factor authentication
  • Public key authentication (including by TLS client certificate)
  • Username or password

Audit information for users

Audit information for users
Access to user activity audit information Users have access to real-time audit information
How long user audit data is stored for User-defined
Access to supplier activity audit information Users have access to real-time audit information
How long supplier audit data is stored for User-defined
How long system logs are stored for User-defined

Standards and certifications

Standards and certifications
ISO/IEC 27001 certification No
ISO 28000:2007 certification No
CSA STAR certification No
PCI certification No
Other security accreditations No

Security governance

Security governance
Named board-level person responsible for service security Yes
Security governance accreditation No
Security governance approach Governance is managed by the CEO and CTO of our business. All risks to the infrastructure and data is continually assessed with thorough active use of our policies and procedures which are scrutinised on a continuous basis. This is also a board topic covered at each board meeting.
Information security policies and processes CTO responsible for day to day management and enforcement of policies / procedures with CEO providing scrutiny and assessment reporting to the board

Operational security

Operational security
Configuration and change management standard Supplier-defined controls
Configuration and change management approach All development is managed and controlled using software development tools to include JIRA our cloud based solution. All software releases are released through a thorough release process which includes testing of back end and user GUI elements. Once completed, we typically issue a beta version to a customer who is in the beta program and then made available to all customers.
Vulnerability management type Supplier-defined controls
Vulnerability management approach Continuous threat assessments
Patches can be deployed same day once discovered
Customers, security partners and own working knowledge (keeping up to date with local, national and international threats)
Protective monitoring type Supplier-defined controls
Protective monitoring approach Continuous assessments
Patches can be deployed same day once discovered
Customers, security partners and own working knowledge (keeping up to date with local, national and international incidents)
Incident management type Supplier-defined controls
Incident management approach Continuous assessments
Patches can be deployed same day once discovered
Customers, security partners and own working knowledge (keeping up to date with local, national and international issues)

Secure development

Secure development
Approach to secure software development best practice Conforms to a recognised standard, but self-assessed

Public sector networks

Public sector networks
Connection to public sector networks Yes
Connected networks Joint Academic Network (JANET)

Pricing

Pricing
Price £11500 to £150000 per licence per year
Discount for educational organisations Yes
Free trial available Yes
Description of free trial Software can be provided free of charge for a limited period to evaluate the software typically for a maximum of 90 days. Any services required to support evaluation maybe chargeable.

Documents

Documents
Pricing document View uploaded document
Service definition document View uploaded document
Terms and conditions document View uploaded document
Return to top ↑