Gaia Technologies Plc

Gaia Moodle Platform

The Moodle platform is a free--and open source--course management system (CMS) that was originally developed by Moodle. The Moodle platform is used all over the world to host learning management systems for schools and universities' classes and training modules.

Features

  • Modern, easy to use interface
  • Collaborative tools and activities
  • Convenient file management
  • Learner Progress Tracking and Notification
  • Customisable site design and layout
  • Secure authentication and mass enrolment

Benefits

  • Multilingual capability
  • Supports open standards
  • Manage user roles and permissions
  • Bulk course creation and easy backup
  • Simple plugin management
  • High interoperability
  • Detailed reporting and logs

Pricing

£4000 per unit

  • Education pricing available
  • Free trial available

Service documents

G-Cloud 10

913444216697700

Gaia Technologies Plc

Ayad Mawla

01248675800

ayad@gaia-tech.com

Service scope

Service scope
Software add-on or extension No
Cloud deployment model Public cloud
Service constraints N/a
System requirements Internet Browser

User support

User support
Email or online ticketing support Email or online ticketing
Support response times P1: Critical - Response Time: 2hr
P2: Major - Response Time: 4hr
P3: Important - Response Time: 8hr
P4: Minor - Response Time: Varies on request
User can manage status and priority of support tickets Yes
Online ticketing support accessibility None or don’t know
Phone support Yes
Phone support availability 24 hours, 7 days a week
Web chat support Web chat
Web chat support availability 24 hours, 7 days a week
Web chat support accessibility standard WCAG 2.0 AA or EN 301 549 9: Web
Web chat accessibility testing N/a
Onsite support Yes, at extra cost
Support levels 1 - Light:
- Email/Skype (chats) Support.
- Guaranteed Response Time: 8h.
- Guaranteed Resolution Time: up to 48h
- Total Consultancy and Development time of 5h
- Bug fixing if an issue was found in our code
- Website Monitoring and Alarm Notification

2- Standard
- Same as Light but with
- Guaranteed Response Time: 6h
- Guaranteed Resolution Time: 16h - 24h
- Total Consultancy and Development time of 10h

3- Strong
- Same as Standard but with
- Guaranteed Response Time: 4h
- Guaranteed Resolution Time: 8h - 16h
- Total Consultancy and Development time of 15h.

4- VIP
- Same as Strong but with
- Guaranteed Response Time: 2h and 30min*
- Guaranteed Resolution Time: 2h - 8h
- Total Consultancy and Development time of 20h.
- 24x7 emergency response
Support available to third parties Yes

Onboarding and offboarding

Onboarding and offboarding
Getting started Please see https://docs.moodle.org/32/en/Main_page
Service documentation Yes
Documentation formats
  • HTML
  • PDF
  • Other
Other documentation formats Please see https://docs.moodle.org/32/en/Main_page
End-of-contract data extraction At any point user can export data from a Moodle Platform
End-of-contract process All data will be retained in storage containers paid for by the customer on AWS, Azure or Google Cloud. Gaia does will not control customer

Using the service

Using the service
Web browser interface Yes
Supported browsers
  • Internet Explorer 7
  • Internet Explorer 8
  • Internet Explorer 9
  • Internet Explorer 10
  • Internet Explorer 11
  • Microsoft Edge
  • Firefox
  • Chrome
  • Safari 9+
  • Opera
Application to install No
Designed for use on mobile devices Yes
Differences between the mobile and desktop service Moodle allows access and functionality to be provided via mobile devices with via a web browser or mobile application. The solution supports a model that only requires configuration to be carried once regardless of how the solution is accessed.
Accessibility standards WCAG 2.0 AA or EN 301 549
Accessibility testing N/a
API Yes
What users can and can't do using the API 1 Most-used General APIs
1.1 Access API (access)
1.2 Data manipulation API (dml)
1.3 File API (files)
1.4 Form API (form)
1.5 Logging API (log)
1.6 Navigation API (navigation)
1.7 Page API (page)
1.8 Output API (output)
1.9 String API (string)
1.10 Upgrade API (upgrade)
1.11 Moodlelib API (core)

2 Other General APIs
2.1 Admin settings (admin)
2.2 Availability (availability)
2.3 Backup API (backup)
2.4 Cache API (cache)
2.5 Calendar API (calendar)
2.6 Comment API (comment)
2.7 Competency API (competency)
2.8 Data definition API (ddl)
2.9 Enrolment API (enrol)
2.10 Events API (event)
2.11 External functions API (external)
2.12 Lock API (lock)
2.13 Message API (message)
2.14 Media API (media)
2.15 My profile API
2.16 OAuth 2 API
2.17 Preference API (preference)
2.18 Portfolio API (portfolio)
2.19 Rating API (rating)
2.20 RSS API (rss)
2.21 Search API (search)
2.22 Tag API (tag)
2.23 Task API (task)
2.24 Time API (time)
2.25 Testing API (test)
2.26 User-related APIs (user)
2.27 Web services API (webservice)
2.28 Badges API (OpenBadges)

3 Activity module APIs
3.1 Activity completion API (completion)
3.2 Advanced grading API (grading)
3.3 Conditional activities API (condition)
3.4 Groups API
3.5 Gradebook API
3.6 Plagiarism API
3.7 Question API
API documentation Yes
API documentation formats
  • HTML
  • PDF
API sandbox or test environment No
Customisation available Yes
Description of customisation Please see https://docs.moodle.org/32/en/Main_page

Scaling

Scaling
Independence of resources Gaia can deploy the service in AWS, Azure or Google Cloud where the service operates multiple scale groups in each data centre and automatically provisions new customers into a scale group. The architecture of scale groups is designed to meet the many needs of operating a service at scale, including security, scalability, performance, tenant isolation, serviceability, and monitoring. Each customer has their own individual database, separate from other customers’ databases. Data processing is logically segregated through capabilities specifically developed to help build, manage, and secure multitenant environments.

Analytics

Analytics
Service usage metrics Yes
Metrics types Please see https://docs.moodle.org/dev/Learning_Analytics_Specification
Reporting types
  • API access
  • Real-time dashboards

Resellers

Resellers
Supplier type Reseller providing extra features and support
Organisation whose services are being resold Moodle Platform

Staff security

Staff security
Staff security clearance Other security clearance
Government security clearance Up to Developed Vetting (DV)

Asset protection

Asset protection
Knowledge of data storage and processing locations Yes
Data storage and processing locations
  • United Kingdom
  • European Economic Area (EEA)
User control over data storage and processing locations Yes
Datacentre security standards Complies with a recognised standard (for example CSA CCM version 3.0)
Penetration testing frequency At least once a year
Penetration testing approach ‘IT Health Check’ performed by a Tigerscheme qualified provider or a CREST-approved service provider
Protecting data at rest
  • Physical access control, complying with CSA CCM v3.0
  • Physical access control, complying with SSAE-16 / ISAE 3402
  • Other
Other data at rest protection approach The above refers to data hosting on Public Cloud providers such as Microsoft Azure, AWS, or Google Cloud. where your organization’s files are distributed across multiple Azure Storage containers, each with separate credentials, rather than storing them in a single database.
Data sanitisation process Yes
Data sanitisation type Deleted data can’t be directly accessed
Equipment disposal approach Complying with a recognised standard, for example CSA CCM v.30, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

Data importing and exporting
Data export approach Please see https://docs.moodle.org/32/en/Main_page
Data export formats
  • CSV
  • ODF
Data import formats
  • CSV
  • Other
Other data import formats
  • SCORM
  • Tincan API
  • Documents (Excel, Word, JPG, HTML5, etc)

Data-in-transit protection

Data-in-transit protection
Data protection between buyer and supplier networks TLS (version 1.2 or above)
Data protection within supplier network
  • TLS (version 1.2 or above)
  • IPsec or TLS VPN gateway

Availability and resilience

Availability and resilience
Guaranteed availability The services is hosted on AWS, Google or Azure Cloud and directly benefit from their availability and resilience.
Approach to resilience Please see https://docs.microsoft.com/en-us/azure/architecture/resiliency/ for resilience on Azure network
Outage reporting Microsoft Azure reports outages via the service status portal

https://azure.microsoft.com/en-gb/status/

Alert or Mobile Application

Identity and authentication

Identity and authentication
User authentication needed Yes
User authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password
  • Other
Other user authentication Modern authentication Modern authentication brings Active Directory Authentication Library (ADAL)-based sign-in to Office client apps across platforms, enabling sign-in features such as Multi-Factor Authentication (MFA), SAML-based third-party identity providers with Office client applications, and smart card and certificate-based authentication.

Cloud identity authentication - Users with cloud identities are authenticated using traditional challenge/response.

Federated identity authentication - Users with federated identities are authenticated using Active Directory Federation Services 2.0 or other Security Token Services.

MFA for Office 365 - users are required to acknowledge a phone call, text, or an app notification on their smartphone after correctly entering their password.

https://technet.microsoft.com/en-us/library/office-365-user-account-management.aspx
Access restrictions in management interfaces and support channels The service comes with a set of administrator roles that you can assign to users in your organization. Each admin role maps to common business functions, and gives those people permissions to do specific tasks the the service admin center.

https://support.office.com/en-gb/article/About-Office-365-admin-roles-da585eea-f576-4f55-a1e0-87090b6aaa9d?ui=en-US&rs=en-GB&ad=GB

https://support.office.com/en-gb/article/Assign-admin-roles-in-Office-365-eac4d046-1afd-4f1a-85fc-8219c79e1504?ui=en-US&rs=en-GB&ad=GB
Access restriction testing frequency At least once a year
Management access authentication
  • 2-factor authentication
  • Identity federation with existing provider (for example Google Apps)
  • Username or password

Audit information for users

Audit information for users
Access to user activity audit information Users have access to real-time audit information
How long user audit data is stored for Between 6 months and 12 months
Access to supplier activity audit information Users receive audit information on a regular basis
How long supplier audit data is stored for Between 6 months and 12 months
How long system logs are stored for Between 6 months and 12 months

Standards and certifications

Standards and certifications
ISO/IEC 27001 certification Yes
Who accredited the ISO/IEC 27001 BSI
ISO/IEC 27001 accreditation date 11/09/2016
What the ISO/IEC 27001 doesn’t cover None
ISO 28000:2007 certification No
CSA STAR certification Yes
CSA STAR accreditation date 29/4/2016
CSA STAR certification level Level 1: CSA STAR Self-Assessment
What the CSA STAR doesn’t cover None
PCI certification No
Other security certifications Yes
Any other security certifications
  • HIPAA/HITECH,
  • EU Model Clauses,
  • EU-U.S. Privacy Shield,
  • ISO 27001,
  • ISO 27018,
  • SOC 1, SOC 2
  • FIPS 140-2,

Security governance

Security governance
Named board-level person responsible for service security Yes
Security governance certified Yes
Security governance standards
  • ISO/IEC 27001
  • Other
Other security governance standards Above and below refer to Microsoft Azure.

FISMA/FedRamp,
EU Model Clauses,
HIPAA/HITECH,
ISB 1596,
ISO 27018,
SASE16 SOC1 & SOC 2
Information security policies and processes The Microsoft Cloud Security Policy is available via the Service Trust Platform aka.ms/stp

Operational security

Operational security
Configuration and change management standard Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Configuration and change management approach The service employs sophisticated software-defined service instrumentation and monitoring that integrates at the component or server level, the datacenter edge, our network backbone, Internet exchange sites, and at the real or simulated user level, providing visibility when a service disruption is occurring and pinpointing its cause.

Proactive monitoring continuously measures the performance of key subsystems of the the service services platform against the established boundaries for acceptable service performance and availability. When a threshold is reached or an irregular event occurs, the monitoring system generates warnings so that operations staff can address the threshold or event.
Vulnerability management type Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Vulnerability management approach In support of the Information Security Policy, the service runs multiple layers of antivirus software to ensure protection from common malicious software. Servers within the the service environment run anti-virus software that scans files uploaded and downloaded from the service for viruses or other malware. Additionally, all mails coming into the service run through the Exchange Online Protection engine, which uses multiple antivirus and antispam engines to capture known and new threats against the system. Microsoft has its own Security Response Center (MSRC) that also supplies information to all our customers covering the whole range Microsoft products.
Protective monitoring type Conforms to a recognised standard, for example CSA CCM v3.0 or SSAE-16 / ISAE 3402
Protective monitoring approach The service employs sophisticated software-defined service instrumentation and monitoring that integrates at the component or server level, the datacenter edge, our network backbone, Internet exchange sites, and at the real or simulated user level, providing visibility when a service disruption is occurring and pinpointing its cause.

Proactive monitoring continuously measures the performance of key subsystems of the the service services platform against the established boundaries for acceptable service performance and availability. When a threshold is reached or an irregular event occurs, the monitoring system generates warnings so that operations staff can address the threshold or event.
Incident management type Conforms to a recognised standard, for example, CSA CCM v3.0 or ISO/IEC 27035:2011 or SSAE-16 / ISAE 3402
Incident management approach Please see http://aka.ms/Office365SIM

Secure development

Secure development
Approach to secure software development best practice Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v3.0)

Public sector networks

Public sector networks
Connection to public sector networks No

Pricing

Pricing
Price £4000 per unit
Discount for educational organisations Yes
Free trial available Yes
Description of free trial 30 Day Trial of the Service for 10 users

Documents

Documents
Pricing document View uploaded document
Skills Framework for the Information Age rate card View uploaded document
Service definition document View uploaded document
Terms and conditions document View uploaded document
Return to top ↑