Forfront Limited


e-shot™ is an intuitive, powerful email marketing system. The platform offers a range tools for successful email marketing; API integration, several creation methods, easy contact handling, a/b split testing, best-in-class detailed reporting, advanced engagement analytics, automation and Google analytics tagging. The platform also has a fully integrated SMS marketing facility.


  • Single, Recurrent, Automated or Advanced Campaign options
  • Creation Controls: Drag and Drop, Template Wizard and HTML
  • Contact Database controls: Importing, Personalisation, Segmentation and Opt-in/Out
  • Advanced reporting: Detailed contact history, campaign breakdowns, via PDF/CSV
  • Role based administrative controls to set user permissions
  • Control the send and reply address
  • Additional controls: Inbox preview, Survey options and event bookings
  • Integration to APIs, Google Analytics and CANDDI Analytics
  • Deliverability through Custom Domains, Virtual Sending groups & Dedicated IPs
  • SMS, integrated into e-shot™ with detailed reporting of contact engagement.


  • Free, dedicated account manager
  • Free Training resources
  • Free Telephone and Online support
  • Flexible pricing options
  • Comprehensive reporting tools
  • Mobile-friendly designs
  • Easy email creation methods
  • Bespoke integration to CRMs and other systems for optimal performance


£20.00 per licence per month

  • Free trial available

Service documents

G-Cloud 9


Forfront Limited

Ron Kellermann

020 3320 8777

Service scope

Service scope
Software add-on or extension No
Cloud deployment model Private cloud
Service constraints We always proactively inform our customers of any scheduled maintenance or if there is an issue affecting the services either by e-mail or on the e-shot™ dashboard. In the case of peak time traffic overload, we apply contingency in the form of intelligent delivery procedures in order to protect the reputation of our customers’ domains and IPs.
System requirements Requires internet access

User support

User support
Email or online ticketing support Email or online ticketing
Support response times Every case will have its priority set as Low, Normal, High or Urgent based on which we will apply the appropriate escalation procedure. Issues that require immediate attention because they affect all users of the system or the service is not available at all will be responded to within 1 hour during business hours and within 2 hours out of hours.
User can manage status and priority of support tickets Yes
Online ticketing support accessibility None or don’t know
Phone support Yes
Phone support availability 9 to 5 (UK time), Monday to Friday
Web chat support Web chat
Web chat support availability 9 to 5 (UK time), Monday to Friday
Web chat support accessibility standard None or don’t know
How the web chat support is accessible N/A
Web chat accessibility testing N/A
Onsite support Onsite support
Support levels Forfront will provide support subject to an up-to-date valid
subscription and/or maintenance contract. Forfront makes no guarantee that it will complete support service requests within any given time period. It will make reasonable efforts to address operational emergencies and start work within the defined Response Times. All maintenance work is to be requested through the Forfront Support System and should clearly state the authorising person. Emergency situations should also be followed up with a telephone call. No work will be undertaken unless a request is received in writing.
Support available to third parties Yes

Onboarding and offboarding

Onboarding and offboarding
Getting started - Personal training via screen share and telephone.
- Additional online resources available with training videos and documentation.
- Ongoing account manager on hand to provide the personal touch, all included.
- Dedicated support to help you get set efficiently complete with web-chat support.
Service documentation Yes
Documentation formats PDF
End-of-contract data extraction Platform caters for all data export via user interface. You can export all contact data via csv files or use the API to export all data.
End-of-contract process All data, reports and templates are available for extraction up until the date of leaving without charge. Once the deadline has been reached, the account is closed and archived. After this period the account will be deleted from the system and only an archived back up copy will be kept for the period required by data protection guidelines;

Using the service

Using the service
Web browser interface Yes
Supported browsers
  • Internet Explorer 8
  • Internet Explorer 9
  • Internet Explorer 10+
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari 9+
  • Opera
Application to install No
Designed for use on mobile devices Yes
Differences between the mobile and desktop service We have a mobile app for reporting purposes only. Creation of email campaign is via desktop.
Accessibility standards None or don’t know
Description of accessibility N/A
Accessibility testing N/A
What users can and can't do using the API Our SOAP API interacts with e-shot™. Everyday tasks accessible within the e-shot™ dashboard can be automated via the API, managing task such as; importing and managing contacts, getting contact and campaign information, creating messages and campaigns and queuing campaign sends.

REST API (in beta) Only available as "read only" right now. Full documentation to be available soon.
API documentation Yes
API documentation formats PDF
API sandbox or test environment Yes
Customisation available Yes
Description of customisation You add your own branding to the e-shot™ system pages, making your email, website and subscription links completely uniform. Manage multiple users under one login, with customisable profiles and while labelling at brand and user level.


Independence of resources 1. Each customer has their own isolated database
2. Sends can be isolated by IP (MTA)
3. Bandwidth and usage are consistently monitored and adjusted to cope with demand.
4. The architecture lends its self to scale both in terms of sends and space.


Service usage metrics Yes
Metrics types System usage metrics are available by downloading standard reports
Reporting types
  • Real-time dashboards
  • Regular reports
  • Reports on request


Supplier type Not a reseller

Staff security

Staff security
Staff security clearance Other security clearance
Government security clearance None

Asset protection

Asset protection
Knowledge of data storage and processing locations Yes
Data storage and processing locations United Kingdom
User control over data storage and processing locations No
Datacentre security standards Supplier-defined controls
Penetration testing frequency Less than once a year
Penetration testing approach In-house
Protecting data at rest Physical access control, complying with another standard
Data sanitisation process Yes
Data sanitisation type Deleted data can’t be directly accessed
Equipment disposal approach In-house destruction process

Data importing and exporting

Data importing and exporting
Data export approach Via user interface.
Data export formats CSV
Data import formats
  • CSV
  • Other
Other data import formats
  • Excel
  • API

Data-in-transit protection

Data-in-transit protection
Data protection between buyer and supplier networks
  • Private network or public sector network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway
  • Legacy SSL and TLS (under version 1.2)

Availability and resilience

Availability and resilience
Guaranteed availability Forfront will immediately inform customers if there is an issue affecting the services or products via e-mail or in the e-shot™ dashboard. If it is a high or crisis priority issue, the customers will be periodically updated with the status. All the time frames above are based on the working hours schedule 09:00 – 18:00 Monday to Friday excluding Public Holidays. Please refer to Forfront Service Level Agreement.pdf for full details
Approach to resilience Available on request
Outage reporting Via email alerts and via the platform dashboard

Identity and authentication

Identity and authentication
User authentication needed Yes
User authentication Username or password
Access restrictions in management interfaces and support channels Username and password
Access restriction testing frequency At least every 6 months
Management access authentication Username or password

Audit information for users

Audit information for users
Access to user activity audit information Users contact the support team to get audit information
How long user audit data is stored for User-defined
Access to supplier activity audit information Users contact the support team to get audit information
How long supplier audit data is stored for User-defined
How long system logs are stored for Between 1 month and 6 months

Standards and certifications

Standards and certifications
ISO/IEC 27001 certification No
ISO 28000:2007 certification No
CSA STAR certification No
PCI certification No
Other security accreditations No

Security governance

Security governance
Named board-level person responsible for service security Yes
Security governance accreditation No
Security governance approach The Operations Manager manages all access and software delivery to the Data center and Forfront’s equipment. Only the Technical Director and Managing Director can access in his absence
This maintains a single conduit for the responsibility of all of the production equipment.
Information security policies and processes The Operations manager is responsible for maintaining security across Forfront’s Production environments both physical equipment and software deployed.

Only the Technical Director and Managing Director can access in his absence.

Operational security

Operational security
Configuration and change management standard Supplier-defined controls
Configuration and change management approach Ges requested to a system are written up into a UAC driven change request specification document, with supplied estimates for delivery. This takes into consideration standards agreed with the client; e.g. OWASP.

The deliverable components of a specification are created as tasks in our issue tracking system and assigned to a SPRINT delivery. Code changes are checked-in against a task to provide an audit that will be reviewed and tested.

Only the release management team can promote software to public facing environments. This is carried out using an automated delivery platform.
Vulnerability management type Supplier-defined controls
Vulnerability management approach System logs and a wide range of internet sites are monitored daily for vulnerabilities releases and attacks.
Maintenance windows are provided weekly for patch management for minor issues but major vulnerabilities can be released on an ad-hoc basis depending on the severity.
Protective monitoring type Supplier-defined controls
Protective monitoring approach Firewall logs and application notifications are monitored and Forfront can respond quickly to any incidents.
Incident management type Supplier-defined controls
Incident management approach To report an issue, a new case has to be created using the Forfront Support System. We can also be contacted
on our Live Support System, Support Line (020 3320 8750) or by e-mail to
For out-of-hours and public holidays’ support we monitor our Support System and our emergency email at To ensure the quickest response time please provide us with your account reference
number and a clear description of the issue including the feature affected and if possible the steps we can take
to recreate the issue.

Secure development

Secure development
Approach to secure software development best practice Conforms to a recognised standard, but self-assessed

Public sector networks

Public sector networks
Connection to public sector networks No


Price £20.00 per licence per month
Discount for educational organisations No
Free trial available Yes
Description of free trial Demo, access to a dummy account.
Cannot send for security/reputation risk.
Limited to one week


Pricing document View uploaded document
Service definition document View uploaded document
Terms and conditions document View uploaded document
Return to top ↑