This G-Cloud 12 service is no longer available to buy.

The G-Cloud 12 framework expired on Monday 28 November 2022. Any existing contracts with QUADIENT UK LIMITED are still valid.
QUADIENT UK LIMITED

Output Management Software: Impress

Impress (Output Management Software) is a customer communication management solution that helps organisations facilitate and streamline the consolidation and delivery of outgoing customer communications.

Impress is especially suited to automate and speed up the handling of structured and adhoc document communications, physical and digital (letters, appointments, billing, applications etc)

Features

  • Insert barcodes so documents can be read by inserters
  • Support most standard input and output document formats
  • Automate production
  • Send documents over multiple channels, both electronic and paper
  • Merge multiple documents into a communication for a single recipient
  • Sort documents in a communication in a desired order
  • Validate and clean address data automatically during production
  • Modify and enhance documents during production
  • Enforce business rules on input, document, communication and production workflow
  • Automate the adding of enclosures

Benefits

  • Automation and reusability minimises manual document handling and reduces labour
  • Barcodes ensure security and integrity of customer data and communications
  • Shared media, library and templates ensures customers receive consistent messages
  • Centralization increases control over communications, archiving and document storage
  • Ease of use and integration maximises solution benefits

Pricing

£4,695 to £16,910 an instance a year

  • Education pricing available
  • Free trial available

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at a.detka@quadient.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 12

Service ID

7 5 6 2 0 3 8 9 7 7 9 6 6 9 0

Contact

QUADIENT UK LIMITED Aga Detka
Telephone: 01708746000
Email: a.detka@quadient.com

Service scope

Software add-on or extension
Yes, but can also be used as a standalone service
What software services is the service an extension to
OMS-500 can integrate to and ingest documents and data from most mission-critical systems such as Accounting, ERP, HR and CRM.
Cloud deployment model
  • Public cloud
  • Private cloud
Service constraints
No service constraints
System requirements
  • Supported browsers - Chrome, Firefox, Edge 38, Explorer 11
  • Hardware: 4 Core 3+GHz CPU, 4GB RAM, screen 1280×800
  • Aggregator requires Windows 10 or Server 2012 or above

User support

Email or online ticketing support
Email or online ticketing
Support response times
The response is same day, and cover is provided during normal office hours.
User can manage status and priority of support tickets
No
Phone support
Yes
Phone support availability
9 to 5 (UK time), Monday to Friday
Web chat support
Web chat
Web chat support availability
9 to 5 (UK time), Monday to Friday
Web chat support accessibility standard
WCAG 2.1 A
Web chat accessibility testing
Accessibility Testing done by supplier of web chat software using a professional testing agency.
Onsite support
Yes, at extra cost
Support levels
The annual subscription to OMS-500 Cloud entitles the customer to the support cover afforded by a standard neoCare Service Plan, which is described below.

Installation
--------------------
Upon purchase of your software, we will contact you to arrange a convenient time for the software to be installed and commissioned within your business environment.

Telephone Support
---------------------------------
Provides access to our Contact Centre, where immediate assistance may be obtained from our Service Agents.
A request for Product Technical Support will be placed and a Specialist will contact you within the agreed response timescale.

Telephone Response Time
---------------------------------------------
We will target to provide remote support (based on customer providing remote access) within 8 hours.
Support available to third parties
No

Onboarding and offboarding

Getting started
The service includes built-in, context-sensitive help.
The application has documentation such as a Getting Started guide, and a User Guide, Inserter Schemes and a guide for building custom plug-ins.
Service documentation
Yes
Documentation formats
  • HTML
  • PDF
End-of-contract data extraction
A user can download his documents at contract end.
You can export selected objects from an existing workflow on one OMS-500 server so that you can integrate them
into a workflow on another OMS-500 server. Export generates a file with the EXPORT file extension which contains the
selected objects and their configuration. The EXPORT file is encrypted and cannot be read.
Production log files can be downloaded.
OMS-500 uses customer data in the production of documents, and it does not retain these data afterwards.
End-of-contract process
If the customer wishes to terminate the subscription, he must give at least 30 days notice prior to the end of a subscription period, assuming the minimum term has passed.
The customer is responsible for extracting any documents and data that he wishes to save from his account. He also guarantees to uninstall the Aggregator.
Neopost will destroy the customer's Cloud account free of charge.

Using the service

Web browser interface
Yes
Supported browsers
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
Application to install
Yes
Compatible operating systems
Windows
Designed for use on mobile devices
Yes
Differences between the mobile and desktop service
The user interface is responsive. This means that a user can access the user interface from a mobile. However, the application offers a large number of features and it is easier to access and control them from a PC.
Service interface
No
API
Yes
What users can and can't do using the API
The API allows remote applications to submit documents for processing using a HTTP PUT.

Custom plug-ins extend the following OMS-500 functionalities:
● Address cleansing (or address validation)
● Attribute management
● E-mail service
● PDF digital signature
● PDF timestamp service
● Sorting
API documentation
Yes
API documentation formats
  • HTML
  • PDF
API sandbox or test environment
Yes
Customisation available
No

Scaling

Independence of resources
OMS-500 Cloud makes use of Microsoft Azure's Service Fabric, which provides comprehensive runtime and lifecycle management capabilities to applications that are composed of microservices. It hosts microservices inside containers that are deployed and activated across the Service Fabric cluster.

Analytics

Service usage metrics
Yes
Metrics types
Dashboards display a pending production run's timetable, production statistics and license statistics. They include
● Submitted Input Files
● System Health
● Transactions Volume Analysis
● Production Log
● Output Type Usage
● Pending Production
● Plug-in Usage Analysis

OMS-500 produces Sorting and Manifest reports.

OMS also has a production log, which records events related to configuration and production and their details. The logged
events include changes to the objects made by users, and processing of input files. It can be exported in CSV format.
Reporting types
  • API access
  • Real-time dashboards

Resellers

Supplier type
Not a reseller

Staff security

Staff security clearance
Other security clearance
Government security clearance
Up to Baseline Personnel Security Standard (BPSS)

Asset protection

Knowledge of data storage and processing locations
Yes
Data storage and processing locations
European Economic Area (EEA)
User control over data storage and processing locations
No
Datacentre security standards
Managed by a third party
Penetration testing frequency
At least once a year
Penetration testing approach
Another external penetration testing organisation
Protecting data at rest
Physical access control, complying with CSA CCM v3.0
Data sanitisation process
Yes
Data sanitisation type
Deleted data can’t be directly accessed
Equipment disposal approach
Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data export approach
A user can download his documents manually from the user interface or automatically using the Aggregator.
A user can export selected objects from an existing workflow on one OMS-500 server so that you can integrate them into a workflow on another OMS-500 server. Export generates a file with the EXPORT file extension which contains the selected objects and their configuration. The EXPORT file is encrypted and cannot be read. Production log files can be downloaded. OMS-500 uses customer data in the production of documents, and it does not retain these data afterwards.
Data export formats
  • CSV
  • Other
Other data export formats
PDF
Data import formats
  • CSV
  • Other
Other data import formats
  • PDF
  • XML
  • PS
  • PCL

Data-in-transit protection

Data protection between buyer and supplier networks
Legacy SSL and TLS (under version 1.2)
Data protection within supplier network
Legacy SSL and TLS (under version 1.2)

Availability and resilience

Guaranteed availability
OMS-500 Cloud service offers 99.5% availability. Currently there is no systematic mechanism for refunding customers if the availability target is not met.
Approach to resilience
The application makes use of Azure Service Fabric from Microsoft to deploy microservices across a cluster of machines. The primary data centre in Amsterdam has a realtime geo-redundant back-up in a secondary data centre in Dublin.
Outage reporting
Outages alerts are sent by e-mail to the local administrators or local adminstration groups, whose details are captured when they subscribe to the service.

Identity and authentication

User authentication needed
Yes
User authentication
Username or password
Access restrictions in management interfaces and support channels
The management interfaces can only be accessed by the local administrator. He can activate and deactivate an account for Neopost 2nd-level support and PSO team.
Access restriction testing frequency
At least once a year
Management access authentication
Username or password

Audit information for users

Access to user activity audit information
Users have access to real-time audit information
How long user audit data is stored for
Between 1 month and 6 months
Access to supplier activity audit information
Users contact the support team to get audit information
How long supplier audit data is stored for
Between 1 month and 6 months
How long system logs are stored for
Between 1 month and 6 months

Standards and certifications

ISO/IEC 27001 certification
Yes
Who accredited the ISO/IEC 27001
DNV GL Business Assurance UK Limited
ISO/IEC 27001 accreditation date
28/12/2017
What the ISO/IEC 27001 doesn’t cover
Not applicable
ISO 28000:2007 certification
No
CSA STAR certification
No
PCI certification
No
Other security certifications
No

Security governance

Named board-level person responsible for service security
Yes
Security governance certified
Yes
Security governance standards
ISO/IEC 27001
Information security policies and processes
The UK Professional Services Team (PSO) follows the Cyber Essentials standard. Their compliance to the standard is monitored by Neopost UK's internal audit team. Members of PSO are only able to access a customer system when the customer activates an administration account for them. PSO reports to the Head of Group Professional Service, who reports to the Group Exec.

The Development and DevOps teams follow ISO27001. They are in a separate reporting line from PSO. The heads of these teams report to the Head of Development, who in turn reports into a Group board. DevOps, which monitors the platform and handles third-line is the only team allowed to access customer data. DevOps is a small specialist team, and it is tightly audited and vetted.

Operational security

Configuration and change management standard
Supplier-defined controls
Configuration and change management approach
The Development and DevOps Teams use the Agile/Scrum development methodology to develop OMS-500. This methodology does not proscribe processes around configuration and change management. Developers upload their code at the end of each day into a version control system. Automated Testing processes test the code overnight and report to the developers the next day.
Vulnerability management type
Supplier-defined controls
Vulnerability management approach
Product Management commission periodic full penetration testing against the service to identify platform and application vulnerabilities. The DevOps Team actions the list of identified vulnerabilities.
There are tight processes around access to the platform in order to prevent the deployment of malware.
Protective monitoring type
Supplier-defined controls
Protective monitoring approach
The DevOps Team uses monitoring tools in the Azure platform and logs in the application to identify signs of possible attacks. This team takes responsibility for responding to attacks and protecting the application or alerting Microsoft.
Incident management type
Supplier-defined controls
Incident management approach
The Dev Ops Team monitors the platform and application using Azure and third-party tools. They are responsible to analyse unusual behaviour and respond to it if required. They have contacts at Microsoft for flagging platform and security issues.
The UK PSO handle second-line customer calls. They contact the OMS Dev Ops Team when they suspect an attack.

Secure development

Approach to secure software development best practice
Conforms to a recognised standard, but self-assessed

Public sector networks

Connection to public sector networks
No

Pricing

Price
£4,695 to £16,910 an instance a year
Discount for educational organisations
Yes
Free trial available
Yes
Description of free trial
A trial plan gives 30 days use of the software at full production quality. The number of A4 pages and functional add-ons in the trial vary on the production plan that the customer is considering. Professional Services are provided free for a limited installation and set-up.
Link to free trial
Trial site set up for a customer on request after discussion with a Neopost Account Manager.

Service documents

Request an accessible format
If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at a.detka@quadient.com. Tell them what format you need. It will help if you say what assistive technology you use.