Everbridge Mass Notification

Discovery and Planning: The implementation process often begins with a discovery phase, during which Everbridge collaborates with the organization to understand their communication needs, infrastructure, and existing processes. This phase may involve gathering information about key stakeholders, communication channels, contact lists, and emergency response procedures.

Customization and Configuration: Based on the information gathered during the discovery phase, Everbridge customizes and configures the Mass Notification software to meet the specific needs of the organization. This may include setting up user accounts, configuring notification templates, defining message recipients and groups, and integrating with existing systems or software.

Data Integration and Testing: If the organization is transitioning from legacy systems or spreadsheets, Everbridge assists with integrating existing data into the Mass Notification platform. This may involve importing contact lists, organizational hierarchies, and other relevant information. Additionally, Everbridge conducts thorough testing to ensure that the system is functioning as expected and that messages are delivered accurately and promptly.

Training and Onboarding: Everbridge provides comprehensive training and onboarding to ensure that administrators and users are proficient in using the Mass Notification software. Training sessions may be conducted onsite or remotely and can be tailored to different user roles and levels of proficiency.

Pilot Testing: Before full deployment, the organization may conduct pilot testing with a select group of users to validate the functionality of the Mass Notification platform and identify any issues or areas for improvement.

Deployment and Go-Live: Once testing is complete and any necessary adjustments have been made, Everbridge assists with the deployment of the Mass Notification platform across the entire organization. This involves finalizing configurations, ensuring data integrity, and coordinating the launch of the platform.

Geo-targeting and Device Targeting: Everbridge allows for geo-targeting, which enables messages to be sent to specific locations, enhancing the relevance and effectiveness of communication. Additionally, the system supports device targeting, ensuring that messages reach the appropriate devices based on the user's preferences and requirements

Customizable Templates and Contact Management: The software offers customizable templates which can be tailored to meet the specific communication needs of a business. This feature simplifies the process of sending out notifications by using pre-set formats that can be adjusted as needed. Moreover, Everbridge provides robust contact management capabilities, allowing organizations to effectively manage and segment their contact lists for targeted communications

Integration Capabilities: Everbridge Mass Notification integrates with common HR and Business Continuity Planning systems. This integration capability allows for seamless synchronization of data across platforms, ensuring that the notification system is always up-to-date with the latest employee information and organizational protocols

Customized Dashboards and Real-Time Monitoring: The platform includes features for creating both preconfigured and custom dashboards that monitor critical events in real-time. This allows organizations to tailor the dashboard views to meet their specific monitoring and response needs, ensuring that all activities can be audited and analyzed effectively

Role-Based Access and User Management: Everbridge allows for the definition of role-based access controls. This feature helps in managing user permissions and ensuring that access to the system and its data is controlled and aligned with organizational policies and roles

Everbridge University: This is a self-service, online training resource available 24x7x365, offering role-based training and certifications. It includes over 250+ interactive self-service resources, online courses, product information, and best-practice webinars. This platform is designed to help both new and experienced team members improve their skills in using the Everbridge system

Online Video Training Courses: Everbridge provides online video training courses through Everbridge University, which are accessible to users looking to learn at their own pace. These courses cover various aspects of the Everbridge platform, ensuring users are well-versed in its functionalities

Live and Recorded Webinars: Everbridge hosts regular webinars that are both live and recorded, allowing users to engage with experts and learn about specific features and best practices. These webinars are part of the ongoing support and learning enhancement for users

Support Center: The Everbridge Support Center offers additional resources where users can manage support cases, post questions to the Everbridge user community, and access ongoing, upcoming, and completed service advisory announcements. This center is a crucial resource for troubleshooting and expert advice

Certification Programs: Everbridge offers certification programs that enable users to demonstrate their proficiency in using the platform. These programs are designed to ensure users can effectively manage communications during critical events

Technical Support: For immediate technical support, Everbridge provides options to contact their support team via a dedicated support portal where users can submit and manage their cases. This ensures that any issues can be addressed promptly by Everbridge technical experts

Customer data is encrypted at rest using AES 256-bit encryption, with encryption keys managed internally by Everbridge

Connections to the Everbridge platform are encrypted using TLS v1.2 or higher over HTTPS, and SFTP protocol ensures encrypted automated file uploads

Everbridge has achieved ISO 27001 certification, demonstrating compliance with the international standard for information security management systems

Everbridge is FedRAMP authorized, adhering to the rigorous 325 security controls required for federal cloud services

Everbridge publishes SOC 2 Type II and SOC 3 reports, verifying its internal controls for security, availability, processing integrity, confidentiality, and privacy

Everbridge employs role-based access controls, allowing clients to manage user permissions and access to their data

All aspects of the Everbridge platform are actively monitored for intrusions, with network and host-based intrusion detection systems generating alerts for suspicious activities

Everbridge has a strict vulnerability management program, regularly scanning for and promptly addressing potential vulnerabilities across its infrastructure

Everbridge maintains a detailed Incident Response Plan and provides timely breach notifications to impacted customers

Everbridge has implemented privacy controls aligned with GDPR, CCPA, and other data protection regulations

Performance Improvements: Everbridge has made significant investments in the core technology of its platforms, resulting in substantial performance enhancements. For instance, a major update released on March 14, 2017, delivered a 300% performance increase

Dynamic Features: Updates often include new features like "Incident Zones," which provide instant alerts to people entering a specified geographical area. This feature is part of Everbridge's effort to dynamically send alerts based on proximity to critical events

Scalability and Redundancy: The updates also focus on improving scalability and redundancy. This includes enhancements to the Communication Engine, which increases the elasticity of the system, allowing it to expand globally as demand requires. Additionally, the use of multiple SMS aggregators helps improve performance and ensures failover capabilities

Scheduled Maintenance: Everbridge maintains a structured approach to implementing updates, which includes planned maintenance windows. Major maintenance activities are typically scheduled and communicated to customers at least five business days in advance, occurring during standard maintenance windows on Wednesdays between 6:00 PM and 11:59 PM Pacific Time. Minor maintenance, which has little to no anticipated risk of user impact, may be conducted anytime Monday through Thursday without prior notification

Upon termination of the customer relationship, all customer data is deleted within 30 days

Elastic Infrastructure: Everbridge leverages an elastic infrastructure to accommodate a high volume of calls using multiple redundant telephony providers and dynamic call routing algorithms. This infrastructure ensures that the system can scale up efficiently to handle increased demand without the need for organizations to purchase dedicated lines or ports

Unlimited Administrators and Nested Groups: The system allows for unlimited administrators for both the web-based portal and the ManageBridge application. It also supports the creation of unlimited nested static and dynamic groups, which facilitates scaling up as the organization grows and needs to manage more complex group structures

Customizable Role-Based Access Controls: Everbridge provides flexible role-based access controls that can be customized to manage user permissions effectively. This feature is crucial for organizations that need to scale up or down, as it allows them to adjust access rights and responsibilities in line with changing organizational structures and needs

Data Store Location Options: Organizations can choose to store their contact data in one of several locations (US, UK, Canada, or Germany), providing flexibility in data management and compliance with local regulations as they scale internationally

Everbridge does not allow for commitments under 12 months. For longer contracts, such as those with the State of Michigan, if the state desires to renew its agreement, it must extend the contract through specific dates, as detailed in the quote. For example, if the Department of Natural Resources (DNR) wishes to renew after February 21, 2023, they must extend the contract through December 31, 2024. Similarly, for the Department of Corrections (DOC), renewal terms are set from June 1, 2023, through December 31, 2024

Specific details on the process for contract cancellation are not provided in the sources. However, it is indicated that Everbridge maintains a structured contract with defined renewal periods, suggesting that cancellation terms would likely be aligned with these periods or require negotiation as part of the contract terms

The Master Service Agreement (MSA) governs the overall terms and conditions between Everbridge and its clients. Clients are advised to read and agree to the MSA before executing any quote, which binds them to the agreement

The System Inclusion Sheet and other contractual documents may be updated by Everbridge with at least thirty (30) days prior written notice to the client via the Everbridge Client Portal, indicating that terms, including those for renewal and cancellation, can be subject to changes with advance notice

ISO/IEC 27001:2013: Everbridge's information security management system is certified under ISO/IEC 27001:2013, which is a globally recognized standard that specifies the requirements for establishing, implementing, maintaining, and continually improving an information security management system (ISMS)

General Data Protection Regulation (GDPR): Everbridge complies with GDPR, which includes rigorous data protection requirements such as data subject rights, data integrity, and the obligation to implement technical and organizational measures to ensure data protection by design and by default

EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield: Everbridge adheres to the EU-U.S. and Swiss-U.S. Privacy Shield frameworks, which provide mechanisms for the legal transfer of data from the EU and Switzerland to the U.S., ensuring compliance with data protection requirements as per these frameworks

FedRAMP Authorization: Everbridge has achieved FedRAMP authorization, which is a government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services. This compliance is crucial for U.S. federal agencies using cloud services

SAFETY Act Designation by the U.S. Department of Homeland Security: This designation provides legal liability protections for technologies that could act as anti-terrorism measures. Everbridge's inclusion in the SAFETY Act's "Approved Technologies List" underscores its compliance with stringent security standards

BSI Cloud Computing Compliance Control Catalog (C5): Everbridge has undergone third-party audits to ensure compliance with the C5 standard, which is backed by the German government and includes specific security requirements for cloud services

SSAE-18 SOC 3: Everbridge publishes a Service Organization Controls 3 (SOC 3) report, which is a publicly available summary of the more detailed SOC 2 report and includes the auditor’s statement on Everbridge’s achievement of all trust services criteria

ISO 27701: This is the first global privacy standard that focuses on the protection of personally identifiable information (PII) and extends the requirements of ISO 27001 to include data privacy. Everbridge’s Privacy Information Management System (PIMS) is certified under ISO 27701