e18 Innovation

Intelligent Automation / RPA Software (SS&C Blue Prism Chorus BPM)

Chorus comprehensively covers the needs of running a global operation, supporting human workflow, AI Workflow, work distribution, API integration, data automation, content management, case management, rules engine, omni-channel intake (scan, email, data, fax), outbound customer messaging (email, text), analytics, plus out-of-the box user interfaces for case managers, associates, and managers

Features

• Low-code Application Design
• Omni-Channel Intake & Content Management
• Document Automation
• Process Orchestration
• Integration
• Multi-experience Communication
• Decisions & Rules Management
• Operational Analytics
• Role-based Workspaces
• AI and RPA Integration

Benefits

• Enables business users to build processes without IT
• Channel intakes: web-forms, SMS, faxes, emails, documents and APIs
• Uses ML to identify, digitize, extract and validate data
• Improve interaction within your organization and interaction with clients
• Support for integrating with other systems via APIs (SOAP/REST)
• Includes a web-based communication tool, integrated with Microsoft Word
• Allows definition and maintenance of the complexity of a decision
• Provides real time breakdown of your organization’s work and people
• Delivers work through a web browser
• Ability to integrate with AI, AI Agents, LLMs and RPA

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at finance@e18-consulting.com. Tell them what format you need. It will help if you say what assistive technology you use.

Framework

G-Cloud 15

Service ID

190269640711267

Contact

Louise Wall
07979597396
finance@e18-consulting.com

About the service

• Service categories:

  Application Development and Deployment

  Application development

  • Business rules management
• Multi cloud support: No

Service scope

• Software add-on or extension: Yes, but can also be used as a standalone service
• What software services is the service an extension to: To the other SS&C Blue Prism products, such as SS&C Blue Prism Cloud, SS&C Blue Prism Enterprise, SS&C Blue Prism Process Intelligence, SS&C Blue Prism WorkHQ
• Cloud deployment model:
  • Public cloud
  • Private cloud
• Service constraints: Can be hosted on AWS, on-premise (requires Professional Services to install) or SS&C Private Cloud hosted in the UK
• System requirements:
  • Site to Site VPN Termination device
  • Active Directory services / DNS and DHCP services
  • File services
  • Application services
  • User Accounts, Groups, GPOs, and associated rights/permissions
  • Chorus supports HTML5 and CSS on Chrome or Edge
  • Two optional components utilize Microsoft Office

User support

• Email or online ticketing support: Yes
• Support response times: P1 Issue Response 1hr P2 Issue Response 4hrs Mon-Fri only Enhanced (Business Critical) support with improved SLAs is available at extra cost
• User can manage status and priority of support tickets: Yes
• Online ticketing support accessibility: WCAG 2.2 A
• Phone support: Yes
• Phone support availability: 9 to 5 (UK time), Monday to Friday
• Web chat support: No
• Onsite support: No
• Support levels: For Chorus product support, SS&C Blue Prism Chorus Customer Care provides a response based upon the level of the issue. The following table describes the standard response for each severity level. The table assumes that the initial contact to Customer Care is via the telephone, however, the response is similar if a question/issue is raised online or by email. 1- Critical - During normal business hours Customer Care team will be notified immediately and respond within 30 minutes 2- High - During normal business hours Customer Care team will attempt a resolution on the first call with an initial response within 1 hour 3 - Medium - During normal business hours Customer Care team will attempt a resolution on the first call with an initial response within 1 day 4 - Low - - During normal business hours Customer Care team will attempt a resolution on the first call with an initial response
• Support available to third parties: No

Onboarding and offboarding

• Getting started: SS&C Blue Prism Chorus offers enhanced, customizable training as a service to our clients to ensure year-over-year success before, during, and after implementation
• Service documentation: Yes
• Documentation formats: HTML
• End-of-contract data extraction: Through the export or by running a script
• End-of-contract process: The service stops - if needed users should export their log files
• Documentation accessibility standard: WCAG 2.2 A

Using the service

• Web browser interface: Yes
• Supported browsers:
  • Microsoft Edge
  • Chrome
• Application to install: No
• Designed for use on mobile devices: No
• Service interface: Yes
• User support accessibility: WCAG 2.2 A
• Description of service interface: Web-based using Edge or Chrome
• Accessibility standards: WCAG 2.2 A
• Accessibility testing: The web-based service interface has been tested to WCAG 2.2 A accessibility standard
• API: Yes
• What users can and can't do using the API: Chorus Data and Image Delete API 2.0 (or DI Delete API) is an API-based application that complies with OpenAPI Specification 3.0. It enables you to delete records from the Chorus database to address compliance or internal data retention policies using API endpoints. The main purpose is to remove client data from the Chorus database and any associated source images from AWD File Transfer (AFT) storage devices
• API documentation: Yes
• API documentation formats:
  • Open API (also known as Swagger)
  • HTML
• API sandbox or test environment: Yes
• Customisation available: Yes
• Description of customisation: SS&C Blue Prism supports and encourages clients to become self-sufficient in creating and maintaining processes, rules and integration and automation components in SS&C Blue Prism Chorus. The platform has been designed to make it as easy as possible to create processes without the need for development skills, and SS&C Blue Prism offers training and knowledge transfer to enable your own teams to acquire the necessary process configuration skills. Our aim is to help our clients become self-sufficient. Full training and accreditation, as well as ongoing support is offered to ensure you can be as effective as possible, as quickly as possible

Scaling

• Independence of resources: The Service is not shared with other users

Analytics

• Service usage metrics: Yes
• Metrics types: Operational Analytics 3.0 is a web-based business performance monitor, and it is accessed through the Analytics workspace. It features customizable business analytics to help you monitor near real-time work volumes and associate performance to make informed decisions regarding your processing environment. The Analytics workspace was built to work within the ibi™ WebFOCUS® business intelligence platform. Although the interface and menus stem from WebFOCUS, the workspace pages and portals are unique to Chorus
• Reporting types:
  • API access
  • Real-time dashboards
  • Regular reports
  • Reports on request
• Resource tagging: Yes
• FOCUS resource tagging: No

Supplier type

• Supplier type: Reseller providing extra support
• Organisation whose services are being resold: Blue Prism

Staff security

• Staff security clearance: Other security clearance
• Government security clearance: Security Clearance (SC)

Asset protection

• Knowledge of data storage and processing locations: Yes
• Data storage and processing locations: United Kingdom
• User control over data storage and processing locations: Yes
• Datacentre security standards: Complies with a recognised standard (for example CSA CCM version 4.0)
• Penetration testing frequency: At least once a year
• Penetration testing approach: Another external penetration testing organisation
• Protecting data at rest: Encryption of all physical media
• Data sanitisation process: No
• Equipment disposal approach: Complying with a recognised standard, for example CSA CCM v4.0, CAS (Sanitisation) or ISO/IEC 27001

Data importing and exporting

• Data export approach: Using the export facilities or by running a script
• Data export formats: CSV
• Data import formats:
  • CSV
  • ODF
  • Other
• Other data import formats: BPMN

Data-in-transit protection

• Data protection between buyer and supplier networks:
  • Private network or public sector network
  • TLS (version 1.2 or above)
• Data protection within supplier network: TLS (version 1.2 or above)

Availability and resilience

• Guaranteed availability: When deployed in high resilience mode the SS&C Blue Prism Chorus managed installation is configured as an active/active hot deployment across multiple data centres with automated failover and low to zero RTO/RPO. When deployed in low resilience configuration, for smaller low cost deployments, the application infrastructure is multi-data centre capable and will auto failover to cold infrastructure. All data is replicated multi-site for both high and low resilience configurations. • Typical RTO/RPO is zero for the high resilience configuration (multi node clusters) • Typical RTO of 15 minutes and zero RPO for a low resilience configuration (single node clusters.) Automated failover is in-region to alternate data centres (3 per region). A non-exhaustive list of failover scenarios that are taken into account include: Server failure (Web, App, MI), network failure, load balancer failure, database failure, data corruption, malicious DDoS attack, entire data centre failure, viral contamination, malicious human intervention, loss of connectivity etc
• Approach to resilience: SS&C Blue Prism Chorus backups for production are daily, weekly and monthly. The managed service utilises AWS Backup which is PCI and ISO compliant as well as HIPAA eligible. AWS Backups are encrypted with AES-256 and stored in a high resilience data store in separate sites with a durability of 99.999999999% (11 nines.)
• Outage reporting: Public Dashboard, but the client can also connect to any number of other services, ITSM solutions or email alerts

Identity and authentication

• User authentication needed: Yes
• User authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Username or password
• Access restrictions in management interfaces and support channels: The platform allows for Role Based Access Control (RBAC)
• Access restriction testing frequency: At least once a year
• Management access authentication:
  • Multi-Factor Authentication (MFA)
  • Public key authentication (including by TLS client certificate)
  • Username or password

Audit information for users

• Access to user activity audit information: Users have access to real-time audit information
• How long user audit data is stored for: User-defined
• Access to supplier activity audit information: Users have access to real-time audit information
• How long supplier audit data is stored for: User-defined
• How long system logs are stored for: User-defined

Security governance

• Named board-level person responsible for service security: Yes
• Security governance certified: Yes
• Security governance standards: ISO/IEC 27001
• Information security policies and processes: SS&C Blue Prism operate an Information Security Management System as part of our ISO27001 certification
• Software Security Code of Practice: Yes

Operational security

• Configuration and change management standard: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Configuration and change management approach: New SS&C Blue Prism Chorus product issues are referred to the Chorus Development team for review and to decide upon the next steps. During the review each issue is prioritised based upon the business impact to the client and complexity to resolve. The outcome of the review includes: • A temporary/permanent workaround • Further information is required • A code or documentation change is required. • The issue's resolution is added to the product backlog • No further action is required as the code is either 'working as designed'
• Vulnerability management type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Vulnerability management approach: Clients choose to host SS&C Blue Prism Chorus in the secure SS&C private cloud, or in a public cloud or on-premise. When choosing deployment in a cloud environment, the following configuration is utilized: • A hyper-converged infrastructure • Red Hat Enterprise Linux as the operating system in a virtualized environment • Oracle as the database layer • Apache Tomcat as the application server layer connected to the Oracle database using Oracle JDBC drivers- Apache HTTP Server as the web server layer • Open source libraries include Jersey (REST services integration), AXIS2 (SOAP services integration), Apache Commons, jQuery, Angular, and Backbone
• Protective monitoring type: Complies with a recognised standard, for example CSA CCM v4.0 or SSAE-18 / ISAE 3402
• Protective monitoring approach: Security, privacy, and compliance are at the core of our development ethos. Our intelligent automation platform was designed using the latest in security standards and protocols, and we continue to enhance our methods and processes to keep you safe from the latest threats. The list of latest security updates can be found here https://portal.blueprism.com/security-updates
• Incident management type: Undisclosed
• Incident management approach: Security, privacy, and compliance are at the core of our development ethos. Our intelligent automation platform was designed using the latest in security standards and protocols, and we continue to enhance our methods and processes to keep you safe from the latest threats. The list of latest security updates can be found here https://portal.blueprism.com/security-updates
• Post-quantum cryptography secure: No

Secure development

• Approach to secure software development best practice: Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)

Public sector networks

• Connection to public sector networks: Yes
• Connected networks:
  • Public Services Network (PSN)
  • Police National Network (PNN)
  • Joint Academic Network (JANET)
  • Scottish Wide Area Network (SWAN)
  • Health and Social Care Network (HSCN)
  • Other
• Other public sector networks: Any network given the correct permissions

Pricing

• Discount for educational organisations: No
• Free trial available: No

Discount percentage by annual call-off contract value (excluding VAT)

• Less than £250,000: 0%
• Between £250,000 and £500,000: 0%
• Between £500,001 and £1,000,000: 0%
• Between £1,000,001 and £2,500,000: 0%
• Between £2,500,001 and £5,000,000: 0%
• Over £5,000,001: 0%

Standards and certifications

• ISO/IEC 27001 certification: Yes
• ISO/IEC 27001 accredited by: Kiwa Sertifiointi Oy
• ISO/IEC 27001 accreditation date: Monday 23 June 2025
• What the ISO/IEC 27001 doesn’t cover: We hold the ISO/IEC 27001 certification for our Information Security Management System, with the scope defined and audited in accordance with the standard. The certification covers all information security controls assessed as applicable within that scope, as documented in the Statement of Applicability. An area of exclusion relates to our internal R&D AI project team - this is mostly excluded.
• ISO 28000:2022 certification: No
• ISO 9001 certification: No
• Quality management systems (QMS): Yes
• CSA STAR certification: No
• PCI certification: No
• Cyber essentials: No
• Cyber Essentials Alternative: In relation to the services you do not have a current and valid Cyber Essentials certificate which has been awarded by one of the government approved Cyber Essentials accreditation bodies but you are working towards gaining it, and will be in a position to confirm that you have been awarded a current and valid Cyber Essentials certificate by one of the government approved accreditation bodies within 12 months of the date of award.
• Cyber essentials plus: No
• Cyber Essentials Alternative: None of the criteria
• Other security certifications: No

Social value

• Mission: Build an NHS fit for the future:

  That is there when people need it; with fewer lives lost to the biggest killers; in a fairer Britain, where everyone lives well for longer.

  Policy Outcome 8: Increasing productivity through physical and mental wellbeing: In the supply chain and communities in the relevant area.

  • Understanding of issues relating to health and wellbeing, including physical and mental health, in the contract workforce
  • Understanding barriers to access to health and social care services or employment opportunities e.g. digital inclusion
  • Inclusive and accessible recruitment practices, development practices and retention policies that support-focused activities including those provided in the Guide for line managers on recruiting, managing and developing which support people with a disability or health condition
  • Actions to invest in the physical and mental health and wellbeing of the contract workforce

Service documents

• Pricing document

  PDF

• Service definition document

  PDF

• Terms and conditions

  PDF

Request an accessible format

If you use assistive technology (such as a screen reader) and need versions of these documents in a more accessible format, email the supplier at finance@e18-consulting.com. Tell them what format you need. It will help if you say what assistive technology you use.