BOXARR | Digital Twin | Cloud Global

BOXARR enables collaborative modelling, simulation, analysis and reporting of complex inter-dependent systems at scale. Combine your human-expertise, data and information-sources to build an evolve "DigitalTwin Models" of your organisations and systems: identifying risks; revealing opportunity; and optimising performance. Use BOXARR for Organisational/Operational Transformation; Process/Program/Transition-Planning; Systems-Engineering; Supply-Chain; Joint-Operations; and more.


  • Simple and intuitive Modelling - combining inter-dependency and data
  • Scale Models to reflect "real world" breadth/depth/fidelity
  • Visualise Models as networks of "Things" (Boxes) and "Relationships" (Arrows)
  • Visualise Models as tables of data and customisable pivot-reports
  • Visualise Models as multi-contextual swim-lanes
  • Visualise Models as Project Plans (Gantt Schedules)
  • Visualise Models overlaid on geographic maps
  • Visualise Models as dashboards of charts and graphs
  • Analyse, filter and compute Models with customisable Functions
  • "War-game" Models with what-if change scenarios


  • Create DigitalTwin Models of complex systems and challenges
  • Leverage and aggregate data from your disparate information-systems
  • Elicit and capture knowledge from Subject Matter Experts
  • Collaborate with colleagues across your enterprise, partners and allies
  • Make complex inter-dependent systems "human-readable" and usable
  • Identify/mitigate hidden risks. Reveal/exploit hidden opportunities
  • Simulate the propagating effects of proposed decisions/changes
  • Respond faster to the propagating effects of unforeseen events
  • Effectively manage risk and optimise your operational performance
  • "Systems-of-Systems" Engineering; Supply-Web; Program/Transition-planning; Process-Mapping; etc


£30 per person per month

  • Education pricing available
  • Free trial available

Service documents


G-Cloud 11

Service ID

7 4 6 5 2 2 7 4 2 0 9 3 7 7 5



Fraser Hamilton


Service scope

Service scope
Software add-on or extension No
Cloud deployment model Public cloud
Service constraints Users will be notified of any planned maintenance (typically undertaken outside normal business hours).

Users who wish to use the BOXARR nVision application as a local install on their machine (i.e. vs virtualised through a CloudConsole) will need to comply with minimum recommended hardware specification.
System requirements
  • Machine spec for running BOXARR nVision locally (optional)
  • HTML5 compatible web browser

User support

User support
Email or online ticketing support Email or online ticketing
Support response times Standard support is as per BOXARR Standard Software Support policy which can be reviewed at Normal operating hours at 09:00~17:30 GMT Mon-Fri (excluding holidays). Reasonable Endeavours SLA - typically same day with resolution by next business day. Custom enhanced SLAs are available on request.
User can manage status and priority of support tickets Yes
Online ticketing support accessibility None or don’t know
Phone support Yes
Phone support availability 9 to 5 (UK time), Monday to Friday
Web chat support Web chat
Web chat support availability 9 to 5 (UK time), Monday to Friday
Web chat support accessibility standard None or don’t know
How the web chat support is accessible BOXARR typically uses ZOOM ( for provisioning customers with web-chat support. Customers join the meeting by clicking on a URL issued to them by BOXARR. Users can see who is connected (i.e. Participants). Users can select to turn video on/off. Users can select to turn audio on/off. Users can connect to audio via their computer (VoIP), or toll-free dial-in telephone number. User can screen-share. Users can annotate in screen shares. Users can accept & enable remote-control.
Web chat accessibility testing This service is made available by BOXARR by ZOOM ( All "assistive technology" testing is done by ZOOM under a continuous improvement program with support for WAI-ARIA 1.1 and WCAG 2.0.
Onsite support Yes, at extra cost
Support levels Standard technical support is inclusive within the BOXARR Licence Fee. Standard technical support is as per BOXARR Standard Software Support policy which can be reviewed at Support is only provided for BOXARR Software and BOXARR Cloud solutions. Before contacting BOXARR Support, the customer should undertake pre-diagnostics to confirm that any perceived fault is actually relating to the BOXARR Software or BOXARR Cloud Solutions provided by BOXARR. Support is facilitated by BOXARR Solution Engineers. BOXARR Support is "Technical Support" - any requirement for "Training" should be procured via BOXARR Professional Services or via certified BOXARR Alliance Partner. Standard support operating hours are 09:00~17:30 GMT Mon-Fri (excluding holidays). Reasonable Endeavours SLA - typically same day with resolution by next business day. Custom and enhanced SLAs are available on request at additional cost.
Support available to third parties Yes

Onboarding and offboarding

Onboarding and offboarding
Getting started BOXARR provides customers with a resource of User Guides and Manuals which are available to view online or download.

BOXARR provides Training Courses (available via BOXARR Professional Services) which can be provisioned remotely via web-meeting or onsite.

Training is also available from BOXARR certified Alliance Partners.
Service documentation Yes
Documentation formats PDF
End-of-contract data extraction BOXARR does not "proprietise" any customer data. All data can be exported by the customer within 7-days from termination of contract using the BOXARR Export Wizard. Additional data export services are available from BOXARR for database dumps.
End-of-contract process At the termination of the contract, the customer's BOXARR service will cease unless renewed.

The customer will have 7-days to export any of their data before it is irrevocably deleted.

Using the service

Using the service
Web browser interface Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari 9+
Application to install Yes
Compatible operating systems
  • Linux or Unix
  • Windows
Designed for use on mobile devices Yes
Differences between the mobile and desktop service BOXARR nSight 6.0 is designed to support web browsers on mobile devices. nSight dashboards can re-scale to mobile portrait/landscape formats.
Service interface No
Customisation available Yes
Description of customisation BOXARR provides a "blank canvas" modelling platform. Authorised users can collaboratively create and customise their own "Object Types" (i.e. 'Types' of 'Boxes' and 'Arrows' and associated 'Data Attributes') to form a range of 'Palettes' from which users can build and adapt their DigitalTwin Models. Authorised users can also collaboratively create and customise their own 'Functions' (i.e. much like formulas in spreadsheets) - which can be applied by users to Models to perform analyses. Likewise authorised users can collaboratively create customised BOXARR nSight 'Pages' & 'Dashboards' which can be assigned to various 'User-Groups' across the enterprise (i.e. for role-based use and reporting). All user customisation is stored within "Libraries" which effectively becomes a bank of intellectual property for the users. Customers can also procure pre-built Libraries from BOXARR to quick-start a range of modelling applications.


Independence of resources Each BOXARR CloudSpace is an independent instance i.e. multiple customers do not share the same CloudSpace. Each cloudspace can be load balanced to guarantee the SLA. The majority of the processing on the server happens on the client, allowing the users to be unaffected by reduced services.


Service usage metrics Yes
Metrics types Usage hours are measured in order to define compliance with licensing and to support billing.
Reporting types Reports on request


Supplier type Not a reseller

Staff security

Staff security
Staff security clearance Other security clearance
Government security clearance Up to Baseline Personnel Security Standard (BPSS)

Asset protection

Asset protection
Knowledge of data storage and processing locations Yes
Data storage and processing locations
  • European Economic Area (EEA)
  • EU-US Privacy Shield agreement locations
  • Other locations
User control over data storage and processing locations Yes
Datacentre security standards Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency At least once a year
Penetration testing approach Another external penetration testing organisation
Protecting data at rest
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
Data sanitisation process Yes
Data sanitisation type Explicit overwriting of storage before reallocation
Equipment disposal approach Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data importing and exporting
Data export approach All data can be exported from BOXARR using the "Export Wizard". There is no "proprietisation" of any customer data.
Data export formats
  • CSV
  • Other
Other data export formats
  • Images: JPEG; PNG; GIF; EMF; EPS; SWF
  • PDF
  • MS Project
Data import formats
  • CSV
  • Other
Other data import formats
  • MS Project
  • Data ingestion tools for information systems such as SAP.

Data-in-transit protection

Data-in-transit protection
Data protection between buyer and supplier networks TLS (version 1.2 or above)
Data protection within supplier network Other
Other protection within supplier network All customers instances are in isolated VPC

Availability and resilience

Availability and resilience
Guaranteed availability BOXARR Cloud Global operates on AWS which supports 99.95% availability.
Approach to resilience Available upon request.
Outage reporting All outages will be reported via the BOXARR website. Outages are identified as 'Planned Platform Upgrade', 'Planned Platform Maintenance', 'Emergency Platform Maintenance', 'Platform Issues'. In addition, the BOXARR Operations Team can proactively contact customers via email under Custom SLA.

Identity and authentication

Identity and authentication
User authentication needed Yes
User authentication Username or password
Access restrictions in management interfaces and support channels Management interface access can be set per user and by the customer
When using the support channels, the contacts details of the user will be checked by BOXARR
Access restriction testing frequency At least every 6 months
Management access authentication Username or password

Audit information for users

Audit information for users
Access to user activity audit information Users contact the support team to get audit information
How long user audit data is stored for Between 1 month and 6 months
Access to supplier activity audit information Users contact the support team to get audit information
How long supplier audit data is stored for Between 1 month and 6 months
How long system logs are stored for Between 1 month and 6 months

Standards and certifications

Standards and certifications
ISO/IEC 27001 certification Yes
Who accredited the ISO/IEC 27001 EY Certify Point for Amazon Web Services (AWS)
ISO/IEC 27001 accreditation date 11/12/2011
What the ISO/IEC 27001 doesn’t cover The ISO/IEC 227001 certification only applies to Amazon Web Services (AWS) upon which the BOXARR Cloud Global operates. BOXARR does not carry ISO/IEC 227001 certification itself.
ISO 28000:2007 certification No
CSA STAR certification No
PCI certification No
Other security certifications Yes
Any other security certifications
  • Cyber Essentials Plus (CEP-CCS-00008)
  • SC certified personnel.

Security governance

Security governance
Named board-level person responsible for service security Yes
Security governance certified Yes
Security governance standards Other
Other security governance standards BOXARR Cloud Global: Cyber Essential Plus (CEP-CCS-00008)
Information security policies and processes BOXARR is certified for Cyber Essentials Plus (CEP-CCS-00008).

Operational security

Operational security
Configuration and change management standard Supplier-defined controls
Configuration and change management approach Application: BOXARR operates its configuration and change management in line with its internal best-practice policy and CyberEssentialsPlus. All patches and upgrades undergo a testing process prior to general release.
Vulnerability management type Supplier-defined controls
Vulnerability management approach Application: BOXARR employs best practice methodologies in software development and CyberEssentiasPlus to minimise vulnerability. Assigned personnel have responsibility for regularly reviewing technical forums and specialist groups to identify/evaluate any emerging threats requiring attention.
Protective monitoring type Supplier-defined controls
Protective monitoring approach Application: BOXARR is consistently testing for vulnerability in line with best-practice and CyberEssentialsPlus for its ongoing development. Non-critical patches are incorporated in planned releases. Critical patches are deployed in coordination with Customers.
Incident management type Supplier-defined controls
Incident management approach Application: BOXARR operates incident management in accordance with Cyber Essentials Plus (CEP-CCS-00008) and its internal incident management policy. Incidents are reported to a central ticketing system which ensures that each is promptly assigned to an appropriate resource, and its progress tracked (and escalated, as required) to resolution.

Secure development

Secure development
Approach to secure software development best practice Conforms to a recognised standard, but self-assessed

Public sector networks

Public sector networks
Connection to public sector networks Yes
Connected networks Other
Other public sector networks
  • Users can access the service via open Internet connection.
  • User can create connectivity to AWS (at own additional cost)


Price £30 per person per month
Discount for educational organisations Yes
Free trial available Yes
Description of free trial Free Trials are available for a maximum of 30 (thirty) Days.

Service documents

Return to top ↑